Questions tagged [ssl]
SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.
1,806
questions
0
votes
0
answers
5
views
nginx traffic redirect based on subdomain
I am currently attempting to setup my VPS to host multiple different docker containers.
My domain name is hosted on Cloudflare (which has a limited amount of available ports).
After doing research, to ...
0
votes
1
answer
19
views
rootless podman container needs access to host's SSL cert and key - what's the correct thing to do here?
As the title says, I need a rootless podman container to have access to SSL keys (created with certbot, of course) from the host (Fedora CoreOS, SELinux active) machine, since the main server on the ...
- 141
0
votes
1
answer
27
views
How do I set up HTTPS across my entire server?
I am running a few different websites on my server.
a general webpage using Apache (port 80)
Cockpit Web Console (port 9090)
Home Assistant (port 8123)
an open-source database system called Teable (...
1
vote
1
answer
20
views
Windows SSL cert file (.crt, .cer, .pfx, etc.) association with Crypto Shell Extensions is broken
When right-clicking an SSL certificate file in Windows Explorer, you would normally see the option to Install Certificate in the context menu, and you could also view the cert by double clicking the ...
- 21
0
votes
0
answers
18
views
Where to put cacert.pem certificate file so that ddev composer will use it? Getting "self signed certificate in certificate chain" error
I am using WSL2 with Ubuntu, following the procedure here: https://ddev.readthedocs.io/en/stable/users/quickstart/#__tabbed_2_2
When I get to the line ddev composer create "drupal/recommended-...
- 97
0
votes
0
answers
24
views
k3s/kubernetes add additional IP to cluster TLS/SSL certificate
I setup a k3s/kubernetes cluster with 3 nodes.
All node have the roles control-plane,etcd,master.
So far so good, and everything works like expected.
For testing/playing around, i installed on all 3 ...
- 351
1
vote
0
answers
48
views
Unable to cURL on some platforms, in particular DigitalOcean VPS
I am on Ubuntu 23.10 (GNU/Linux 6.5.0-27-generic x86_64) is not working, curl is 8.2.1 suspect is there is something on the machine.
I have two Virtual Private Servers (VPS) based on Digital Ocean ...
- 175
0
votes
0
answers
93
views
Windows 11 network connection error. I think something with ssl/tls
I came across with the network problem on Windows Home 23H2. One day, my Outlook 2010 has break to receive letters. In the log, I got the message error 0x8004210A.
I tried all the methods pointed here,...
1
vote
0
answers
34
views
I've tried preventing TLSv1.0 and TLS1.1 in Apache, but the protocols are still active
I have a web site (one of a few) on a server. I'm trying to up the score of my domain in https://www.ssllabs.com/ssltest - but it doesn't seem to be working.
Contents of:
/etc/apache2/sites-available/&...
- 201
0
votes
1
answer
22
views
Connect to a device on another subnet using 3rd device as a proxy
I have a device with a HTTPS web portal that only has an ethernet port. However I am unable to get an ethernet cable to the where the device lives, it is however able to receive WiFi.
I was planing on ...
- 303
0
votes
1
answer
326
views
Debian: how to resolve "unable to get local issuer certificate" and "unable to verify the first certificate"?
I have a problem with curl downloading an image from a webserver.
curl: (60) SSL certificate problem: unable to get local issuer certificate
So I tried to investigate with openssl
$ openssl s_client -...
- 590
0
votes
0
answers
62
views
Client Side Cannot Find Client Cert in TLS Mutual Authentication
This is a windows .NET application. Am working on the client side. Increased SSChannel logging and discovered ... .
Creating a TLS client credential.
The remote server has requested TLS client ...
0
votes
2
answers
89
views
Make a site hosted in IIS server use https and access it within the intranet
I have a site hosted on my IIS server and I can access it on http:localhost. I made a self-signed certificate and added it to the site and can access it via https:\\localhost. I want the site to be ...
0
votes
0
answers
38
views
Finding CA Cert from a Synology NAS to use it with curl --cacert
My Synology uses self-signed certificate, so I need to include it with curl --cacert /path/to/cert.pem to connect safely from a terminal to NAS using https. How can I find this certificate on my ...
- 1
0
votes
1
answer
25
views
Does Chrome support OID Filters in the TLS handshake
Cite from rfc8446
The "oid_filters" extension allows servers to provide a set of
OID/value pairs which it would like the client's certificate to
match. This extension, if provided by the ...
- 101
1
vote
1
answer
41
views
Failed to generate a Let's Encrypt certificate on Asustor NAS with error Ref. 5402
While trying to generate a Let's Encrypt certificate for my Asustor NAS through Settings -> Certificate Manager (following the instructions), the process repeatedly failed with error Ref. 5402. ...
- 191
0
votes
0
answers
103
views
Inconsistent SSL connection error when using wget
I'm trying to download some .nc files from a secure online database.
It seems like for roughly every other attempted file download, I get an 'Unable to establish SSL connection' message, and then wget ...
TML
1
vote
0
answers
109
views
Chrome network requests stall for exactly 10 seconds when using custom local SSL hostnames and certificates
I develop websites locally with mkcert tool to create SSL certificates for my domain (eg project.local). Then I point project.local to 127.0.0.1 in my hosts file (/private/etc/hosts for me on Mac). I ...
- 141
0
votes
1
answer
263
views
openssl s_client -connect errorno=111
Hi I got problem with openssl connection. I have java application which connects from server1 to server2 I made clone of server2 and upgraded it from Debian 9.7 to Debian11. The connection to ...
- 1
0
votes
1
answer
23
views
Need advice regarding setting up SSL on my webserver
I just acquired an SSL Cert for our domain tspack.us - so I am assuming that the Cert is ONLY good for that exact name correct? I technically can't use www.tspack.us because it won't match exactly ...
0
votes
1
answer
82
views
Use NGINX to serve as both webhost + direct subdomain request to dockerserver:port
First, I struggled hard with the title. I've been trying back and forth, googling like mad and the resources I find are most likely way to complicated for me.
But I find it so unbelievable that it's ...
- 1
2
votes
4
answers
3k
views
Nginx without public certificate
Is there any way that we can configure an Nginx without a public certificate?
The objective here is, I want to publish an API on public internet, but all the API client (whitelisted clients) should ...
- 41
1
vote
0
answers
34
views
What is the proper way to host multiple websites from the same machine and same ip address? [closed]
I have two Flask websites running on an ubuntu machine running on my home server. Both of them are running as a service with Gunicorn, one is on port 9000, the other is on 9001. I have registered a ...
- 11
0
votes
0
answers
91
views
Website loading difficulties after TLD change from .com to .promo
We recently changed the URL of our website from eyevertising.com to bold.promo, and we now hear from a few random customers that they can't access the new website!
The only thing we really did, was ...
- 1
0
votes
0
answers
66
views
Selective TLS connection fail
I have a VB.NET application that connects to a remote server, which I have no authority whatsoever, via a username/password, retrieves some data and populates a local database.
Lately the application ...
- 481
0
votes
0
answers
40
views
TLS termination of NLB
Objective:
I would like to achieve the following with AWS and understand how to configure it:
AWS Configuration:
ACM certificate (associated with NLB listener).
NLB (in a public subnet, accepting TLS ...
0
votes
0
answers
481
views
Error with SSL and TLS on Windows server 2019
After I updated the windows server 2019, it is not possible to connect to the server using remote desktop connection. Also the sites which are hosted on https on this server can't be opened and the ...
Dadkhah
1
vote
1
answer
262
views
Initial connection takes too long only on a specific browser/network
I'm having a frustrating issue that I have no idea why it happens or how to fix it.
My initial connection (the "SSL handshake") is taking a minute to some websites only on Chrome browser (...
- 113
0
votes
0
answers
14
views
How do I refresh an page automatically every time an net::(ANY ERROR) is detected on the inspect console on Chrome?
So I have an question. The most annoying error I have in Chrome is the net::ERR_SSL_PROTOCOL_ERROR, which occurs for broken images. I used Codepal to help me make this script, but it does not work. I ...
0
votes
1
answer
880
views
Certificate is valid, but website shown as not secure on some browsers
So I'm currently trying to set up a website over https. I have a webserver running Ubuntu and Apache2, and DNS records are set to direct example.com and www.example.com traffic. I have a valid ...
- 115
0
votes
0
answers
56
views
Home Network, How to install SSL XAMPP Self-Hosted Website
I use laptop IP Lan 192.168.88.248.
I opened port 80 on this IP. Hairpin NAT in LAN.
I registered the domain abc.mooo.com at freedns.afraid.org and assigned it to my WAN IP.
I install default XAMPP (C:...
- 76
0
votes
0
answers
7k
views
FortiClient VPN stuck at 48% with error code -7200 - Credential or SSL VPN connection issue
I've been facing an issue with my FortiClient VPN connection, and despite trying several troubleshooting steps, I'm still unable to resolve it. The problem is that the connection consistently gets ...
- 1
1
vote
2
answers
127
views
Invalid SSL certificate for Wikimedia, only on my PC and only on LAN; resolves correctly on Wi-Fi
Since yesterday I'm having trouble with anything related to the https://upload.wikimedia.org/ URLs, they all give an ERR_CERT_COMMON_NAME_INVALID error.
I tried some troubleshooting and I noticed that ...
- 111
0
votes
0
answers
112
views
Certificate Authority works in Linux but fails in MacOS
I want to create a self-signed root certificate authority, such that the certificates signed by this CA are trusted by the OS which trusts the CA.
After following a couple different guides, I managed ...
- 101
0
votes
1
answer
1k
views
How to disable SSL checking on Nginx?
I have some QA server for my website.
A year ago I've tried to make SSL connection to my production website so I've implemented it on the QA by nginx too.
Now it's expired and I don't want to renew it ...
- 121
0
votes
2
answers
808
views
https url not found on ubuntu apache2
Trying the configure SSL on Apache2 on Ubuntu server installed Apache
sudo apt install apache2
Opened ufw firewall
sudo ufw allow 'Apache'
ufw allow https
Installed SSL files in /root/cert
chmod ...
- 61
1
vote
0
answers
59
views
Forcing Firefox to validate SSL certificates from Sophos
A network I'm often connected to uses a Sophos network block on many sites. I would like to try to get around this. I looked at the solution from how to make firefox ignore all ssl certification ...
1
vote
1
answer
57
views
Intermittent connection issues to a particular website
I am facing connection issues with a website. All of them seem to be connected:
The website host name: napi.kotaksecurities.com (using https)
telnet napi.kotaksecurities.com 443: fails sometimes, ...
- 11
1
vote
1
answer
899
views
Disable TLS 1.3 over TCP
After you create a website in Internet Information Services (IIS) Manager, in the config file in the path below,
C:\Windows\System32\inetsrv\config\applicationHost.config
You can modify the following ...
- 151
0
votes
1
answer
140
views
PolarProxy doesnt write packets to the pcap file
Im trying to use PolarProxy on windows to capture some packets but when i test it out it doesnt write anything to the pcap file
I tried using --autoflush 1 which is meant to write it to pcap file ...
- 1
0
votes
0
answers
44
views
SSL Connection to mysql database using OCI Data integration REQUIRE X509 flag
I have a data integration requirement to connect and retrieve data from mysql database using SSL,the user am using to connect is created is with REQUIRE X509 flag so in the connection i need to ...
0
votes
1
answer
40
views
Adding a mail server to existing network
I'm adding a VM mailer and would like support on the new layout on my network.
I currently have a firewall that forwards connections to a VM nginx that deals with HTTP/HTTPS requests, forwarding to ...
- 101
0
votes
0
answers
64
views
NGINX fails to connect to Nextcloud instance
I have a server running proxmox with 3 VMs: NGINX, Bitwarden and Nextcloud. Bitwarden works fine which proves that NGINX is working ok, however when NGINX tries to connect to Nextcloud it will result ...
- 64
0
votes
0
answers
194
views
In docker-compose, Error adding SSL Certificate to reverse proxy to consume websocket?
Deploying docker in windows 11 and working with docker-composer, I am trying to enable the ssl certificate for my setup where I want to enable nginx as a reverse proxy to allow secure websockets wss://...
-1
votes
1
answer
864
views
Can AD CA certificates for internally facing sites be inherently trusted?
Is AD CA (AD Certificate Services properly configured) all that's needed for (SSL certs on) internally facing sites to be trusted w/o any additional configuration on domain-joined clients?
Say:
...
- 276
0
votes
0
answers
111
views
In Docker, how to integrate WebSocket into LAMP Service with an intermediary reverse proxy?
Good morning friends, I have the following docker-compose.yml file with which I install a reverse proxy and a LAMP stack with the phpmyadmin service.
Note: I have practically created it from scratch ...
1
vote
0
answers
137
views
OpenVPN traffic through TLS-enabled TCP connection
I have to obfuscate OpenVPN traffic. So I created a TLS-enabled TCP tunnel with socat, and I want to pass OpenVPN traffic through this tunnel.
Server:
sudo socat openssl-listen:443,cert=/home/ubuntu/...
- 121
0
votes
0
answers
999
views
nginx server can't read pem key provided by Ionos
-----BEGIN CERTIFICATE-----
contents
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
contents
-----END RSA PRIVATE KEY-----
but I still get the following error in the logs ...
- 671
0
votes
0
answers
45
views
Client fails TLS handshake
A client is trying to connect to my website using a client certificate. However, they get a 400 error. They gave me their public certificates excluding root CA in a .crt file.
This is the access log:
...
0
votes
1
answer
43
views
Website refuses to load, but works fine everywhere else. SSL Certificate related
I have a computer which has stopped connecting to a website.
Normally this computer would just get rebuilt with the standard image we have for the computer, but there's a lot of bespoke software which ...
- 3,508