Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

Questions tagged [ssl]

SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

0
votes
0answers
18 views

SSL3_READ_BYTES:sslv3 alert handshake failure / alert number 40

Using OpenSSL 1.0.2p on MacOS openssl s_client -connect XXX.XXX.com:443 -CAfile server.pem -debug Results in 140735528117192:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake ...
0
votes
0answers
6 views

How to auto renew OpenVPN client certificates using easyRSA

I have embedded devices that are located in different cites and connected to my OpenVPN server. I initialize my devices before deploying them and put the certificate/key pair through local network. ...
0
votes
1answer
17 views

HTTPS Proxy CONNECT Method [on hold]

I am coding an HTTP proxy in python. I must use this for various reasons so please don't suggest some alternative software package or solution I could use. I have also read the relevant RFCs and so ...
-1
votes
0answers
22 views

SSL Certificate Errors on Routers [on hold]

I have a weird problem. I have gone through 3 different routers at my home and all of them create SSL Certificate errors that hinders my internet. If this isn't weird already, whenever I try these ...
0
votes
1answer
18 views

Wondering about something regarding intermediate certificates and Weechat

I have a private server at home that runs a node.js instance and weechat. I also have my own domain, which I registered at EuroDNS, as well as an AlphaSSL certificate, also from EuroDNS. Both Weechat'...
0
votes
1answer
19 views

Can .pem certificates have an encrypted certificate and an encrypted RSA key?

Can .pem certificate file have an encrypted certificate and an encrypted private key? e.g. Bag Attributes -----BEGIN ENCRYPTED CERTIFICATE----- -----END ENCRYPTED CERTIFICATE----- -----BEGIN ...
0
votes
0answers
34 views

Decrypt SSL traffic with the openssl command line tool 7

Generating the master secret/key I followed the steps outlined in my shell script. I validated that I am passing data correctly to it by manually entering these steps several times (entering $key ...
0
votes
1answer
78 views

Gmail pop3 ssl can't fetch mail server

Suddenly gmail can't fetch anymore mails from my mail server (postfix, dovecot), with the below message: Unable to establish secure SSL connection to mail.domain.com Server returned error: "SSL error:...
0
votes
0answers
12 views

How to map drive to WebDAV server using self-signed certificate?

I have an ownCloud WebDAV server with a self-signed SSL certificate, running on a public IP address, no domain name. In Windows 10 Pro, when I try to map a network drive using SSL, I get error: "...
2
votes
0answers
67 views

Web browser hangs up on “Performing TLS handshake” message on one website in my desktop PC. why?

I've been trying to resolve this before and did not succeed. So I have to start again. Let me explain the issue: When I'm trying to connect to the website of this small local bank from my desktop ...
0
votes
0answers
13 views

All https sites are redirected to mysite which is hosted on a computer on my network

I am hosting my website on a computer on my home network. The computer uses Debian Stretch as an operating system. I use dynu.com to post my IP. A while ago I made my website HTTPS using letsencrypt....
1
vote
1answer
29 views

Facebook and Instagram images are broken in some browsers

On my main computer (Windows 10, 1803, 17134.165) no images or videos on Facebook or Instagram are displayed when using most browsers. All of the images and videos (from both sites) are being served ...
-2
votes
0answers
19 views

Can't make Openssl

I just downloaded the source of openssl. I use Ubuntu 18. I need to compile it. But I get error. Can you point to me what is missing? :~/openssl-1.1.0g$ make /usr/bin/perl "-I." -Mconfigdata "util/...
2
votes
1answer
12 views

How to link python to the manually compiled OpenSSL rather than the system's one

I need to manually compile OpenSSL from source. I use Ubuntu 18. The OpenSSL shipped with Ubuntu 18 does not support specific cipher I need. But it can be enabled if I compile OpenSSL manually. I ...
0
votes
0answers
881 views

Intermittently cannot push/pull from GitHub. Getting SSL errors

I'm having trouble pushing and pulling from GitHub. I checked status.github.com and they are not having problems. Occasionally I get this error: fatal: unable to access 'https://github.com/x/x.git/'...
0
votes
0answers
17 views

SetHandler “proxy:unix:/run/php/php5.6-fpm.sock|fcgi://localhost/” ON <VirtualHost *:443>

I have a server under apache2 with multiple php versions. I can use the proxy for but not for I put <FilesMatch \ .php $> # Apache 2.4.10+ can proxy to unix socket SetHandler "proxy:...
2
votes
1answer
42 views

How to download all advertised SSL certificates of a domain via openssl binary?

The Problem Lets say, I would like to download every ssl certificate for a specific website to be able to do certificate pinning later on. How can I query the webserver with openssl, to download all ...
0
votes
0answers
33 views

Invisible vmware certificate makes troubles accessing sites using HSTS

When I try to make a search in Firefox or Chrome using Google (or in fact use any Google service) then google server displays nagging overlay "A privacy reminder from Google" requesting acceptance of ...
0
votes
0answers
17 views

SSL PHP and curl

good day, thanks for read my post. We have a problem with my website with ssl certificates... We have Debian 9, PHP 7 and Apache 2.4.25... And when we run a script php with curl process we receive in ...
0
votes
1answer
24 views

How to set OPENSSLDIR on Windows and what is its meaning?

I am using Windows 10 Pro x64, openssl-0.9.8k_X64 I run command openssl version -a I received result openssl version -a OpenSSL 0.9.8k 25 Mar 2009 built on: Thu Jul 23 09:35:27 2009 platform: VC-...
1
vote
2answers
66 views

SSL Certificate: Displays correctly for some and not others

Is it possible anyone can check out this site: https://www.goweryarns.co.uk/ For me and 80% of my customers, it works, fine. Yet for some 20% they see this error: NET:: ERR_CERT_COMMON_NAME_INVALID ...
2
votes
1answer
27 views

Unable to disable TLSv1/TLSv1.1 in Apache 2.4.18

A client has requested that I disable TLSv1 and TLSv1.1 on a web server. The server is running Apache 2.4.8. and OpenSSL 1.0.2g. I have added the directive to /etc/apache2/mods-enabled/ssl.conf: ...
0
votes
0answers
15 views

Installing Lets Encrypt Certificates on ubuntu 16.4/Nginx and iRedMal

I am having trouble with site mailtest.example.com, ubuntu 16.4 installed fresh, in hosts hostname is set to mailtest.example.cm, iRedmail installed with nginx, DNS pointed to IP address and it ...
2
votes
1answer
329 views

534 Local policy on server does not allow TLS secure connections

I am trying to configure a test FTP site via IIS 6.2 on a Windows Server 2012 R2 I created a site and configure the FTP SSL settings. I selected my certificate and choose custom. If I don't have the ...
0
votes
1answer
107 views

Dovecot gmail SSL error

I'm trying to import all my emails into gmail via POP3, which used to work fine. All of a sudden, I keep getting the following error: SSL error: No path found from the leaf certificate to any root. ...
2
votes
1answer
286 views

pip cannot fetch URL because of an error with the SSL certificate

All of a sudden pip, Python's package manager, could no longer install new modules. The problem is fetching the URL and the cause seems to be the SSL certificate. I sort of understand what this means, ...
0
votes
0answers
39 views

SSL on ElasticBeanstalk without Custom Domain

I have a simple REST endpoint on ElasticBeanstalk. I have a need to enable HTTPS, and was hoping I could just "tick a box" to enable HTTPS, and that Amazon would have an ElasticBeanstalk.com wildcard ...
2
votes
2answers
163 views

Setup home network with multiple SSL devices on one IP

Is it possible in some way to use multiple SSL devices (Raspberry PI and Synology) behind a router with only one incoming IP? My wish is to use it with subdomains. I can point both subdomains to the ...
0
votes
1answer
23 views

HTTPS communication without requesting certificate

Is there a hack or the architecture of SSL/TLS allows communication with a Server without requesting it's certificate may be by pre downloading the certificate and installing it,The reason I'm asking ...
0
votes
0answers
107 views

Vagrant: SSL verification error behind corporate proxy

My company uses a proxy. I am using a Windows 10 notebook, 64 bit. Vagrant version 2.1.1. When trying to install a Vagrant plugin, e.g. vagrant plugin install vagrant-proxyconf I see the following ...
2
votes
1answer
107 views

Tomcat SSL error after setting up certificate

After generating certificate and key pem file using openssl on ubuntu 16.04 I configured tomcat connector in server.xml file as given below but, when I start tomcat I get an error. In the browser ...
2
votes
0answers
90 views

How to change the default openssl version on Apache

I'm currently facing an issue with my openssl configuration. Indeed, in order to enable tls 1.3 on my apache server, i downloaded the beta opensslv1.1.1-pre7 following the path /usr/local/openssl2 (i ...
0
votes
1answer
38 views

Chrome cert not importing

I have a cert with SAN that I want to use for my localhost projects so I can stop getting warnings from Chrome. When I go to Settings => Advanced => Manage Certs => Personal => Import, I can import ...
0
votes
0answers
31 views

Claws Mail warns that gmail certificate changed on every connection

Since recently, my Claws Mail client pops up a message "SSL/TSL certificate changed" every time it tries to connect to my gmail account (at pop.gmail.com), with two options: "Cancel connection" and "...
0
votes
0answers
121 views

Firefox ESR 52.8.0 Secure Connection Failed

I've recently installed Debian Stretch from netinst with GNOME desktop. Clicking around on Github soon produces a "Secure Connection Failed. The connection to the server was reset while the page was ...
0
votes
0answers
33 views

pfSense WebConfigurator conflict with web server cert

I recently set up pfSense in my house as my main router/firewall. One issue I have been experiencing is whenever I try to access my web server locally, I'll frequently get an SSL error and see that ...
0
votes
0answers
41 views

Unable to get updated SSL certificate for a single website on OSX

I'm unable to get a new SSL certificate for a website a use for work, on a specific OSX machine. On other computers I get the certificate which is valid and not expired, on my laptop with OSX High ...
1
vote
0answers
20 views

Is this usage of the nginx if-directive safe?

According to their own documentation, if is Evil. They gave several examples that certain configurations will not work if an if directive is used. They don't go into detail as to why it behaves wrong ...
0
votes
0answers
40 views

How to redirect in nginx based on location?

What I would like to do I have a domain example.com, for which I require a SSL client certificate to access. This is done easily with the ssl_verify_client on; directive. Some ressources however, ...
0
votes
0answers
65 views

How to use a non-443 port with https?

I can't get https to work on port 3000. Here's my specific situation: I have my own VPS running Centos6/Apache. I am using botkit-starter-slack to run a bot from my server. I have SSL certs that pass ...
0
votes
1answer
197 views

Your connection is not private github.com NET::ERR_CERT_INVALID + DigiCert High Assurance EV Root CA certificate is valid

I know this has been discussed elsewhere but none of the solutions worked... When accessing github.com since yesterday I got Your connection is not private github.com NET::ERR_CERT_INVALID When ...
0
votes
1answer
64 views

local server with Let's Encrypt SSL certificate

I'm running a Confluence server in my local domain that I want to access from the outside using OpenVPN. Since I want to use the Confluence app, I need to enable SSL and use a cert which is stored ...
0
votes
0answers
57 views

Removing certificate and re-running update-ca-certificates leaves lingering symlinks

I have removed a (root) certicate, and re-run update-ca-certificates: $ sudo rm /usr/local/share/ca-certificates/mine.root-ca.crt ls -l /usr/local/share/ca-certificates/ total 4 -rw-r--r-- 1 root ...
0
votes
0answers
17 views

Where SHA256 Hashing Fits into TLS Handshake Steps

I know that during a TLS Handshake ... "A digital signature performs a hashing algorithm on the information to be encrypted, the outcome of this is a fixed sized output file called a message ...
1
vote
1answer
95 views

IRC Client to Bitlbee - end-to-end encryption?

I'm a newbie to Bitlbee, using it with libpurple to aggregate all my messaging. It's very cool, but I have some security concerns, which I'd like to clarify. When connecting from an IRC Client (I'm ...
0
votes
0answers
153 views

SSL operation failed with code 1 | Self signed certificate in certificate chain

Specification: Windows 10 | Wamp | PHP 7.1.9 Trying to Install Laravel 5.5 using the documentation they provided online. Each time I run "composer global require "laravel/installer"" I get the below ...
0
votes
1answer
141 views

git ls-remote throws fatal: HTTP request failed

when jenkins tries this command: git ls-remote --tags --heads https://github.com/angular/bower-angular-resource.git it fails and breaks the build, trying the same command in the console got the ...
0
votes
0answers
16 views

nginx ssl setup servernotfound and error.log file empty

## myapp backend ## upstream myapp { server 127.0.0.1:8069; } ## https site## server { listen 443 default; server_name myapp.xyz; root /usr/share/nginx/html; index ...
0
votes
1answer
53 views

Atlassian Stash SSL certificate renewal issue

So we have a self-hosted version of Atlassian BitBucket running on Ubuntu server which holds the code repository. We use a SSL certificate from DigiCert . Every year we renew the certificate which has ...
2
votes
1answer
51 views

Thunderbird: How to edit server connection settings of already existing accounts?

How can I change the server connection settings for already existing accounts from previous STARTTLS to desired SSL/TLS? Of course, even for existing accounts in menue Account Settings -> Server ...