Skip to main content

Questions tagged [ssl]

SSL/TLS is a cryptographic protocol designed to provide communications security over a computer network. It is the S in HTTPS, IMAPS, SMTPS, etc.

Filter by
Sorted by
Tagged with
0 votes
1 answer
16 views

Postfix TLS Anonymous and Untrusted

We use Postfix on a RHEL server to distribute email to our opted-in users each morning. We recently enabled smtp (outbound) TLS. The majority of our email is delivered on Trusted TLS Connections. ...
Greg Sims's user avatar
  • 191
0 votes
1 answer
37 views

How can I grant read permission for HTTPS certificates?

I'm enabling Gitea HTTPS access. On my server I got certificates using Certbot. The certificates are installed into: Certificate Path: /etc/letsencrypt/live/mydomain/fullchain.pem Private Key Path: /...
Mark's user avatar
  • 733
1 vote
1 answer
44 views

What tools are available to obtain SSL certs from a CA for an isolated/airgapped system?

In the past, I have been able to leave the peculiarities of SSL certs to others, an mostly depend on self-signed certificates. That day has come to a close. I need to step up and configure a secured ...
pojo-guy's user avatar
  • 113
0 votes
0 answers
18 views

Freeradius how to block EAP-MD5 when not used with EAP-TTLS?

I'm new in freeradius and I'm trying to block the MD5 authentification when it is not used in the TLS tunnel from eap-ttls. I still want to enable the MD5 authentification as a inner method with TTLS. ...
rad's user avatar
  • 1
0 votes
2 answers
18 views

OpenSSL: Create CAfile

I have a X.509 certificate mycert.pem and a private-key mykey.pem for it. Furthermore the certificate has a root-certificate and a intermediate-certificate to build a complete chain. I had to add both ...
chris01's user avatar
  • 595
1 vote
0 answers
15 views

ldapsearch with mTLS (and selective curves)

I have to request a LDAP-server. It is strictly mutual-TLS secured. If I try TLS with openssl it works. But I have to provide -cert, -key and -curves to openssl s_client to make it work. Without ...
chris01's user avatar
  • 595
3 votes
2 answers
104 views

How do I verify ssl / tls connection with openssl non-interactively (from a script)?

When I execute: openssl s_client -connect google.com:443 openssl s_client -connect government.ru:443 This gives me valuable output, but I would like openssl to close the connection and exit returning ...
John Smith's user avatar
0 votes
1 answer
44 views

Problem When Compiling with Slackbuild Script

I have done a full install of slackware 15.0. Previously, I had no problem compiling & installing software using sboui or directly from the Slackbuild script. Lately I have been getting errors. ...
Garnet's user avatar
  • 398
0 votes
1 answer
37 views

ECDHE key exchange in OpenSSL going wrong (Outlook vs Cyrus imapd) - how to solve?

I am trying to connect Outlook 2019 to a Cyrus imapd server, using an SSL connection on port 993, and using ECDHE for key agreement. Whatever I do, this does not work although the imap server is set ...
Binarus's user avatar
  • 3,390
0 votes
0 answers
129 views

Ubuntu, failed to join an AD over TLS/SSL with realmd

actualy I tried to establish a connection between a Ubuntu-Host and an Active Directory, with the goal to authentification my Linux-Host over the AD. For this, I use SSSD and Realmd, but not ADSys. We ...
Alphabeit's user avatar
0 votes
0 answers
87 views

Apple iPad cannot access IMAP via Dovecot -- SSL unsupported protocol

I have a mail server that has been running for quite some time. Most of my clients use non-Apple devices or are okay with web-clients. I am only now running into this roadblock, because a new client ...
pollyPaul's user avatar
0 votes
1 answer
18 views

redirect to SSL works but get variables don't work

I have nginx and in server section and port 80 I redirect my host to port 443 such as: server { location / { return 307 https://$host$request_uri/?lang=fa } } It's work and redirect to ...
PersianGulf's user avatar
  • 10.9k
0 votes
1 answer
163 views

Postfix TLS error message

I have a strange message in my Postfix server (on Debian 12) and only when receiving a message from Outlook: postfix/smtpd[1621610]: connect from mail-vi1eur02olkn2098.outbound.protection.outlook.com[...
john75's user avatar
  • 1
2 votes
3 answers
430 views

Deploying private CA certs to debian devices

We have a private certificate authority (CA) which is only used on sites in our intranet. I can get the certificate easily: openssl s_client -showcerts -connect atlas.sim.local:8443 </dev/null 2>...
Stewart's user avatar
  • 14.1k
0 votes
1 answer
101 views

How do I verify a TLS certificate with a self-signed CA?

I generate TLS certificates and sign them using a self-signed CA. There are numerous small errors that can happen in this process and cause the certificate to get rejected. Browser seem to serve very ...
Bagalaw's user avatar
  • 945
0 votes
0 answers
941 views

Disable TLSv1.0 and TLSv1.1 using httpd CentOS7

I'm trying to disable TLS 1.0/1.1 for PCI Compliance, but having problems. Running CentOS 7 / Apache 2.4.6 The Server is setup with multiple hosts. All the documentation I've found is similar but ...
TexasTim's user avatar
0 votes
1 answer
794 views

Obtain a Wordpress Website with a Proxmox container available from outside with https (ssl encryption)

My prelimanary actions: setting up a ddns hostname with noip service (ok) configured to automatically keep alive the association on my home router(ok) installed a proxmox server v8 (ok) create a lxc ...
Alessandro's user avatar
0 votes
1 answer
33 views

How to identify on console for a remote server what TLS it is providing on an HTTPS endpoint

I would like to find a way, to identify what type of TLS a remote HTTPS endpoint is providing, using only "standard" Linux command-line tools. I would like to know, what type of TLS the ...
PaulEdison's user avatar
1 vote
1 answer
954 views

How do I resolve a TLS Error associated with smtpd?

I found the following in the logs: sssd_kcm[425899]: Starting up postfix/submission/smtpd[425910]: initializing the server-side TLS engine postfix/submission/smtpd[425910]: connect from unknown[::1] ...
twohot's user avatar
  • 11
0 votes
0 answers
645 views

Curl error SSL3_CHECK_CERT_AND_ALGORITHM: dh key too small

When I run a get request from Curl to a web service I get the error SSL3_CHECK_CERT_AND_ALGORITHM: dh key too small. Server is on CentOS 6.6 and web service is a Java application (OpenJDK 1.7) running ...
supmethods's user avatar
0 votes
1 answer
114 views

Unbound dns over tls

I have unbound installed and it works just fine (debian testing). I also have a domain at duckdns.org. I would like to set DoT on my Android phone as xxxxx.duckdns.org, so i can make all requests go ...
murkom's user avatar
  • 1
0 votes
2 answers
704 views

Enable TLS on BIND9

I am trying to enable TLS on my BIND server (9.19.16) which is otherwise working fine. When I add the following code to enable TLS, then my BIND server does not start. named.conf: tls local-tls { ...
M9A's user avatar
  • 101
0 votes
0 answers
172 views

Why does tshark display "TLSv1" despite curl showing TLSv1.3 in the "Client Hello"?

The output from curl indicates TLSv1.3 (OUT), TLS handshake, Client hello (1). Use --tlsv1.3 to force it to use TLSv1.3: $ curl -6 --tlsv1.3 --tls13-ciphers TLS_AES_256_GCM_SHA384 -vL https://...
林果皞's user avatar
  • 5,176
0 votes
1 answer
3k views

wget error: certificate owner does not match hostname

wget command fails to download a file with error "The certificate's owner does not match hostname" Full command output is show below: wget https://server.example.com/dist/software-1.0.rpm ...
Amol's user avatar
  • 109
0 votes
0 answers
929 views

Peer certificate cannot be authenticated with given CA certificates

Running on Alma Linux 8.8 but can't install the package. I get Peer certificate cannot be authenticated with given CA certificates. I have updated all packages with dnf update but the error is still ...
supmethods's user avatar
0 votes
1 answer
107 views

SSL cert recognized by OpenSSL but not geventhttpclient

I have an instance of an NVIDIA Triton Inference Server. Then, there is the Python's client which uses geventhttp Python's package to perform the requests. This is all deployed as microservices, so in ...
albertoperdomo2's user avatar
0 votes
1 answer
38 views

How should I modify the Qt5 source code if I want to add back SSLv3 support in the libqt5network5 module?

I am on an Intel x86_64 CPU architecture platform running a Debian Bullseye Linux distro. On that platform runs a custom application. This application is a 32-bit software running as a systemd service ...
Chris Haddad's user avatar
0 votes
0 answers
9 views

TLS conneciton is droped on google compute when call is intiated from docker container

I am using Google cloud compute with docker installed on it and I am trying to connect between 2 nodes with secured connection from the container. When call is performed directly form HOST VM, both ...
swist's user avatar
  • 101
0 votes
1 answer
165 views

LAN drivers causing Layer 4 corruption

I'm relatively sure that my drivers are causing some level 4 packet corruption on my system. I'd like to know how to solve this.. Diagnostics: any form of git clone on large repos will invariably ...
tuskiomi's user avatar
  • 127
0 votes
0 answers
240 views

Fetchmail disconnecting on SSL mismatch

My fetchmail (v6.4.24) is connecting to an MTA that holds mail for many domains, and it has certs for each domain. The MTA (running dovecot) expects the client to use TLS SNI to present the right ...
TSG's user avatar
  • 1,748
0 votes
1 answer
43 views

Firefox does not recognize the sustom SSL via my own CA whereas other browsers do?

I made a script that generates a CA file and a SSL signed by the CA: #/usr/bin/env bash # Absolute path to this script, e.g. /home/user/bin/foo.sh SCRIPT=$(readlink -f "${BASH_SOURCE}") # ...
Dimitrios Desyllas's user avatar
1 vote
1 answer
56 views

Why does Debian require a restart for login to self hosted Docker Repo after new SSL and Ubuntu does NOT x509: certificate signed by unknown authority

I have two servers, one Debian Buster (Debian 4.19.208-1) and the other is Ubuntu 18 (Ubuntu 18.04.6). I recently updated the SSL on a self hosted Docker Image Repo and noticed that on the Ubuntu ...
FreeSoftwareServers's user avatar
0 votes
1 answer
181 views

Adding SSL certificates to HAProxy with certbot

I am trying to configure my Nginx server to act as my primary load balancer. I have done the necessary package installation with certbot but the problem comes in when I try to configure my haproxy.cfg ...
Santagotthejuice's user avatar
0 votes
0 answers
39 views

Can I move the sitename-le-ssl.conf contents into sitename.conf and delete the sitename-le-ssl.conf in my Virtual Host setup on Ubuntu / Apache?

I have this free SSL certificate from Let'sEncrypt and it works just fine. But there's quite many files inside my /etc/apache2/sites-available/ directory and I'd like to delete / merge some of them, ...
michal roesler's user avatar
0 votes
0 answers
80 views

haproxy SSL termination not working for login-page to nginx backend

I have nginx pods running inside K8 on port:18080 exposed on nodePort:32070 Next I have an HAPROXY sitting between nginx and public network. I want to configure SSL termination at haproxy level Below ...
Sollosa's user avatar
  • 1,941
0 votes
0 answers
3k views

Failed to start The Apache HTTP Server

I'm having a problem with an SSL Certificate. I was using a Let's Encrypt certificate and everything was fine. I'm trying to switch to a certificate issued from DigiCert, and can't seem to get it ...
TexasTim's user avatar
0 votes
1 answer
235 views

HAProxy over Tomcat returns Error 403

I have an old server which runs a Tomcat service on port 8080. For various reasons (including securing the access from clients) I had to set up a HAProxy server in front of it, secured with a SSL ...
dr_'s user avatar
  • 30k
0 votes
1 answer
251 views

Attempt to connect to ExpressVPN Server fails

for several months, if not weeks, I have had a fully functional connection to an ExpressVPN server via the "NetworkManager" on OpenSuse, but now, suddenly, it reports "failed to ...
Cane's user avatar
  • 13
0 votes
0 answers
854 views

How to configure Privoxy HTTPS inspection?

After following through the docs at www.privoxy.org, I have created a cert and key with openssl, placed them into the CA directory at /usr/local/etc/privoxy/CA/, and given permissions to the privoxy (...
ManSoMean's user avatar
3 votes
1 answer
2k views

Why curl running from a container complains about local issuer certificate when all the certificates are supposedly present?

Here is my docker command line: mark@L-R910LPKW:~$ docker run -v /etc/ssl:/etc/ssl -v /usr/local/share/ca-certificates:/usr/local/share/ca-certificates -v /usr/share/ca-certificates:/usr/share/ca-...
mark's user avatar
  • 387
0 votes
0 answers
154 views

How should a docker container obtain a reference/path to a file which exists outside of the docker container

I have a service running in a docker container which needs to load an SSL certificate that is generated by cerbot. Certbot always puts the files in a directory like /etc/letsencrypt/live/example.com/...
WSC's user avatar
  • 103
0 votes
0 answers
114 views

telnet localhost 25 vs telnet localhost 587

I install a postfix with the following postconf -n:(however I changed my domain to example.com) alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no ...
PersianGulf's user avatar
  • 10.9k
0 votes
1 answer
148 views

Curl Error 60 After Accidentally Deleting known_hosts file

I have a couple of Raspberry Pies that upload webcam images to a web host using a bash shell script. This is the upload code, which is identical on each Pi: curl -s -S -u myname: \ --...
Buadhai's user avatar
  • 237
0 votes
0 answers
58 views

Need to be able to specify IP address of IMAP server on local network

I have an IMAP server that can be accessed from a public address that is behind a firewall. It has correct SSL certificates for the public name. It is easy to test this server from the private ...
EdHorton's user avatar
1 vote
2 answers
359 views

Is my connection to my Postfix server encrypted?

I would like to use my Thunderbird client to send mails trough my Postfix server running on port 25 (SMTP). I would like an authenticated and encrypted connection. I followed these documentations: ...
YuGiOhJCJ's user avatar
  • 113
0 votes
1 answer
646 views

How to see details of TLS telnet?

Debian (and other distro if you recompile the source) can use a ssl version of telnetd. telnet-ssl -z cacert=/etc/ssl/certs/mydomain.crt -z cert=/etc/ssl/certs/client.mydomain.crt -z key=/etc/ssl/...
elbarna's user avatar
  • 12.8k
0 votes
0 answers
138 views

Newly created SSL certificate will not update

I have a self-hosted website and recently my SSL certificate expired. Tried creating a new one with the command sudo certbot certonly -d 'example.com,*.example.com' --manual --preferred-challenges dns....
leevii's user avatar
  • 1
1 vote
1 answer
260 views

NOQUEUE: reject: Helo command rejected: need fully-qualified hostname

I am running 3 x Win11 and 1 x Win10 all with Office 365 Outlook. 3 of the Outlook clients connect to a postfix/dovecot server just fine on my home NAT, and can tunnel through my router from the ...
Deepstop's user avatar
  • 111
0 votes
1 answer
254 views

Dovecot is showing the wrong expiration date for the imap certificate

I am running dovecot dovecot-2.3.8-9.el8.x86_64 on CentOS Linux release 8.5.2111 I have nagios checks warning me if the imap certificate in about to expire. Recently I got just such an alert. However, ...
Aditya K's user avatar
  • 2,110
0 votes
1 answer
137 views

laravel not execute after adding SSL

I'm trying to run laravel on EC2(AWS linux 2) and apache server. And I recently bought a domain from Namecheap And I installed laravel to var/www/html folder. My /etc/httpd/conf/httpd.conf has those ...
vimuth's user avatar
  • 101

1
2 3 4 5
14