Questions tagged [ssl]
SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.
1,758
questions
0
votes
0
answers
24
views
Pop3 using SSL/TLS fails since yesterday
I have several email accounts with a specific provider. Since yesterday both POP3 and SMTP fail silently on all accounts and all email readers (Thunderbird on Linux, K9 on Android).
Thunderbird's ...
- 190
0
votes
0
answers
4
views
SFTP over HTTPS proxy Python [migrated]
0
I was trying sftp over proxy. I was successfully able to connect to Sftp over HTTP by using the below python code:
client = paramiko.SSHClient()
client.load_system_host_keys()
client....
0
votes
0
answers
19
views
How to fix cURL error 35 when consulting endpoints in Laravel production server?
I have a Laravel project consulting various endpoints via get method, and sometimes in random moment return this error: production.ERROR: GuzzleHttp\Exception\ConnectException: cURL error 35: OpenSSL ...
0
votes
0
answers
28
views
Sometimes cURL unable to get local issuer certificate
I use the curl library for https access. Set the CURLOPT_CAINFO parameter to specify the certificate file. Sometimes normal communication can be achieved,but sometimes cURL raises an error message [...
0
votes
1
answer
17
views
IIS on 2016 certificate generated by microsoft cetrification autortoity on AD not recognized
I generate on windows 2016 where is IIS server certification request, the server is in Active directory domain. Then in domain i have microsoft certification authority ang in this i gnerate the ...
- 101
0
votes
1
answer
66
views
"The configuration registry database is corrupt" when putting in "netsh http show ssl" on administrator command prompt
I've been trying to fix this error:
An error occurred while using SSL configuration for endpoint Type=0 Index=0. The error status code is contained within the returned data. (Event 15021)
From the ...
- 11
0
votes
0
answers
28
views
Links browser "SSL error"
I have macos 10.10 Yosemite on my laptop and i configured links with this command:
./configure --x-includes=/usr/X11/include --x-libraries=/usr/X11/lib/ --with-ssl --enable-graphics
Output was:
...
0
votes
0
answers
35
views
DNS / VPS / SSL
In dire need of help. My head is spinning and my experience limited.
I have a VPS with Hostinger, domains dns with GoDaddy.
Emails were working until I realised gmail was an issue as no reverse DNS, ...
- 1
0
votes
0
answers
206
views
trouble with my first ssl certificate
i'm struggling to get my first ssl certificate to work (but i seem to be at least recieving my certificate).
an example of some output from my docker-compose up is below
ubuntu@ip-172-31-93-63:~/doom ...
- 11
0
votes
0
answers
17
views
Why can't I fill in a password for a WatchGuard SSL VPN in Devolutions' Remote Desktop Manager?
I'm not sure if questions about Remote Desktop Manager from Devolutions can be asked here.
I'm setting my first steps in this tool, and I have managed getting to work with different RDP sessions, some ...
- 1,931
0
votes
1
answer
67
views
Subversion Edge installing certificate on Windows deployment
I'm trying to get HTTPS to work on a new Collab.net Subversion Edge server deployed on a Windows environment. It currently serves the site in HTTPS but is using the default self-signed cert.
I located ...
- 1
0
votes
0
answers
38
views
Network Access Points providing cert on connection, how?
How is it connection providers in public locations are able to send a certificate on connection?
I seem to recall there is a protocol they use, but I read that many years ago.
Or is it as simple as on ...
- 1
0
votes
1
answer
31
views
Where do we install certificates for web APIs?
For static websites, we install certificates in the web server, for example, in Apache or Nginx.
But what about in web APIs or web services? For example, let's say you have a web service that is ...
- 101
0
votes
1
answer
319
views
How to trust a self-signed ssl root CA in Chrome on Debian via terminal?
I am setting up a dedicated machine to automate browser benchmarks of my web application. This needs to use HTTP/2 which requires an SSL connection so I have created a self signed CA and certificate ...
- 225
0
votes
0
answers
50
views
j_spring_security_check when attempting to log into Geoserver
I put my domain in the global settings, checked the box and whitelisted it in /etc/profile (to enable SSL) on Debian. What could be causing this?
- 1
2
votes
1
answer
197
views
Browsing HTTPS and TLS 1.3 websites in old browsers [closed]
Nowadays, browsing any website with obsolete browsers such as IE5 or Firefox 2 from emulated environments is an impossible mission due to unsupported TLS versions as shown here:
Due to the prevailing ...
- 121
0
votes
0
answers
217
views
cert-manager/secret-for-certificate-mapper "msg"="unable to fetch certificate that owns the secret
Cert-manager/secret-for-certificate-mapper "msg"="unable to fetch certificate that owns the secret" "error"="Certificate.cert-manager.io "grafanaps-tls" ...
- 29
0
votes
0
answers
30
views
How to obtain a certificate request from an existing certificate
I've got a server where a .p12 is on it that has been converted to a .pem (files: certserver.p12, certserver.pem, certserver.pass for the password).
I now got a request to make a new certificate-...
- 395
0
votes
1
answer
240
views
How to add trusted ca in manjaro?
It should be a pretty simple but i cant do it. What i tried:
cp pets.crt /etc/ca-certificates/trust-source/anchors/
sudo trust extract-compat
sudo update-ca-trust extract
openssl verify pets.crt
I on ...
- 1
0
votes
0
answers
43
views
Code signing certificates
We recently launched a software application built using electron where the app does check a firebase database upon launch of the app and for some reason, it was triggering the Norton Antivirus ...
1
vote
0
answers
69
views
Using OpenSSH config file with -addext and -subj parameters
I'm trying to create a bash script to manage a PKI. I want to use OpenSSL conf file to specify some parameters for the generated and signed certs using my CA.
I specified default parameters as below:
...
- 11
2
votes
0
answers
463
views
What is the difference between libssl.so.3 and libssl3.so?
I've been playing with uprobes to attach to SSL sym, checked the libraries available in my OS (Manjaro kernel v5.15.89) and found both of these library files:
❯ ls -l /lib64/libssl3.so
-rwxr-xr-x 1 ...
- 153
0
votes
1
answer
183
views
Chrome saying certificate is not valid even though it's marked as trusted
I'm running on MacOS Ventura 13.1, Chrome version 109. I remember I downloaded the relevant certificates months ago and it used to work fine, but - and I'm not sure it was after I upgraded the OS, I ...
1
vote
2
answers
127
views
https from Internet to a private server
I finished a local install of Nextcloud on an old pc I run as a server connected to my LAN.
I can access it directly using the private IP address of the server in my local network.
My question is ...
- 11
0
votes
2
answers
64
views
tls wrapper over plaintext tcp
is there any tool I can make tls forwarder over raw tcp?
I have a server which has no encryptions, purely plaintext tcp comunications.
I wanna connect to it over tls but cannot change the server code.
...
- 13
1
vote
0
answers
49
views
SSL expired web root certificate for one client, on some computers but not others
I'm a non-network pro who has a situation with one of our largest clients. They get the red Certificate Invalid icon, because of an outdated, expired root certificate. However, our certificate is up ...
- 111
0
votes
1
answer
108
views
Exchange Server 2019 CU12 and Outlook certificate warnings for GoDaddy mail cert
I just upgraded 2003 Small business server to Exchange Server 2019 CU12 on Windows Server 2022. I've had a GoDaddy mail certificate for a few years now and I rekeyed it for the new server.
Some ...
- 115
0
votes
0
answers
1k
views
WARNING: pip is configured with locations that require TLS/SSL, however the ssl module in Python is not available. [ Raspberry Pi Python 3.10.9 ]
I am using a raspberry pi and trying to update from Python3.9 to Python3.10.9
I use the following commands:
sudo apt install build-essential zlib1g-dev libncurses5-dev libgdbm-dev libnss3-dev
...
- 35
0
votes
1
answer
21
views
SSL authentication, how to get the certificate information returned by the server
I am working on a program to monitor whether the server certificate is expired. How should the client initiate a request to the server in order to obtain the certificate returned by the server to the ...
0
votes
0
answers
23
views
Intermittent "Err_Connection_Refusued" error on a WordPress website
I have been troubleshooting an intermittent issue with users accessing a locally hosted WordPress website and getting Err_Connection_Refused.
This issue has been very intermittent. There seems to be ...
1
vote
0
answers
163
views
How to download a specific CA (certificate authority) which a website is using and add it to linux?
I need to connect to a URL from Linux terminal but seemingly Ubuntu doesn't have the https certificate to connect to them. I open the website in my browser whit no problem. Is clicking on the lock ...
- 11
0
votes
0
answers
186
views
Fix your connection is not private (ERR_CERT_AUTHORITY_INVALID error) on chrome
I have been getting the ERR_CERT_AUTHORITY_INVALID error on chrome for some websites. It doesn't happen with every single website but happens on a majority of them.
Here are a few things I have ...
1
vote
1
answer
85
views
getting an expired ssl certificate when browsing using a different IP
Recently my office having an issue on remotes site,
their ip are getting an expired ssl certificates when browsing this website
help.cambridgeinternational.org.
If your are successful to browse to ...
0
votes
1
answer
101
views
I can't open 443 port
I'm trying to make public an https server with valid SSL. I can access my sites locally from the server's browser. So, it's ok. The page get loaded and SSL appear to be valid. But when I access from ...
- 1
1
vote
0
answers
410
views
Windows Event Viewer ID for when certificate is installed
Is there any where in Windows Event Viewer that can show when a new certificate is installed on user or machine certificate stores?
All I found is this:
https://social.technet.microsoft.com/wiki/...
user1752038
0
votes
0
answers
32
views
OpenLDAP + IIS + SSL + PHP = Error 500
I try to contact the OpenLDAP server on port 636 via my PHP application but I get:
500 - Internal server error. There is a problem with the resource you are looking for, and it cannot be displayed.
...
- 111
0
votes
1
answer
154
views
Test that mysql shell with --ssl-mode=REQUIRED to given --host REALLY works without first providing username, password, database-name?
I'm looking for a possibility in the mysql client to only test whether the --ssl-mode=REQUIRED directive to a given --host is 100% ensured, without potentially spoiling username, password and database ...
- 327
1
vote
0
answers
133
views
How to properly redirect HTTPS to local HTTP connected via WireGuard tunnel when the app itself is not using SSL?
I have an domain that is setup with an SSL certificate via Let's Encrypt so it only works via https://example.com/
This domain is connected via WireGuard tunnel to my home PC which serves a Laravel ...
- 111
1
vote
1
answer
130
views
Unable to ping while nslookup works
I know this question has already been discussed several times.
But my case is quite different than others.
Context :
PC : Windows 11, running shell commands with "Git Bash"
Hostinger VPS (...
- 111
0
votes
1
answer
12k
views
SSL error: Wrong version number
I get the following error when trying the connection to github:
curl -vLk https://api.github.com/rate_limit
* Trying 140.82.121.6:443...
* Connected to api.github.com (140.82.121.6) port 443 (#0)
* ...
- 115
0
votes
1
answer
212
views
What's a simple way to create a transparent proxy over SSH?
I have a remote computer that I connect to via SSH that I want to proxy certain domains through the connecting client's network.
I figured setting up a simple proxy (like nginx) on the client and ...
- 225
0
votes
0
answers
126
views
File downloads over HTTPS keep failing no matter what program I use
So this is originally started when I attempted to download a file over HTTPS through google chrome. I was unable to do so. Everytime I tried downloading the file, the download would randomly stop ...
- 3
1
vote
1
answer
65
views
Why no SSL certificate trust store at the user level?
Most OSes have a global trust store (e.g., /usr/local/share/ca-certificates. However, this method requires root to modify, and affects all users.
Most applications have a way to trust certificates at ...
- 215
0
votes
1
answer
480
views
How to disable old TLS versions in Windows?
Using Windows 11, no server or IIS, just want to disable old TLS versions of my personal computer so no connection over those versions can be made, even if that means some connections will fail.
I ...
user1737559
0
votes
1
answer
269
views
How to check which ciphers are included in "HIGH" ciphers constant
From the documentation I found
HIGH
"High" encryption cipher suites. This currently means those with key lengths larger than 128 bits, and some cipher suites with 128-bit keys.
The ...
- 111
4
votes
2
answers
4k
views
Chrome 107 - marks self-signed certificate Not Secure despite cert is installed
I'm running create-react-app with self-signed HTTPS certificate locally.
The certificate is installed in User's Trusted Root CA
Despite that Chrome still marks the website as Not Secure what for ...
- 143
0
votes
1
answer
87
views
NET ERR CERT COMMON NAME INVALID on subdomain, Let's Encrypt
I'm working on new website and use HTTPS. From my personal desktop computer and iPhone everything is working fine, but my friend from another country experiencing the following issue:
NET ERR CERT ...
- 163
0
votes
1
answer
26
views
What security risk does a missing SSL connection pose when using the program 'barrier'?
I'm a beginner regarding networks but I would like to understand the subject more deeply.
The program 'barrier' allows me to use mouse and keyboard from one laptop to work on another when the cursor ...
- 35
0
votes
0
answers
28
views
Is there a way to install certificates to LocalMachine store without logging into windows?
As a part of some dev work I was doing, I was trying to identify and document only the essential certificates required to run an app locally. Since I had a bunch of certs in my LocalMachine store, I ...
- 148
0
votes
2
answers
31
views
How to differentiate between certificates issued by the same CA
I have a certificate which is signed by an external Certificate Authority (CA). If I understand correctly that Certificate Authority can also sign other certificates that I'm not aware of. My question ...
