Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ssl]

SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

0
votes
1answer
14 views

Do I need to purchase a Positive SSL while buying a domain?

I am new to creating and hosting websites and want to clear a few things about buying domain names and SSL certificates. I created my website using Hugo Academic and now I want to deploy it. In their ...
1
vote
1answer
14 views

Self-signing SSL certificate to secure web traffic on ClearOS on LINUX

I am very much a beginner when it comes to SSL certificate for securing website traffic. I am currently running a Linux version of ClearOS web server. Everything works as it should, but now I want to ...
1
vote
0answers
11 views

libcurl not upgrading POST requests to HTTP/2 on OpenWrt

When I compile an OpenWrt image with make menuconfig, I am checking the libcurl box and then checking the box to add HTTP/2 support, and making sure that the nghttp2 library is also checked. In my ...
0
votes
1answer
34 views

Jira Server Rest API does not work Properly with SSL

I have a Jira instance running on a debian server which I want to access from a Cloud Application called HockeyApp. The Problem happens when HockeyApp tries to access the Project List of Jira (fails ...
0
votes
0answers
30 views

Setting up trustworthy local SSL certificate for Nginx [duplicate]

I have a local deployment of Nginx to dev-test a website with self-signed certificate and I am constantly getting into Chrome's: Your connection is not private NET::ERR_CERT_AUTHORITY_INVALID ...
0
votes
0answers
18 views

Strange certification verification error on https://go.microsoft.com/

I am currently re-installing my Visual Studio 2017. But the installer alerts my that it cannot download package from https://go.microsoft.com/fwlink/?linkid=94001. And then I try to access this url ...
0
votes
0answers
9 views

Anyway to set DefaultSecureProtocols for WinHTTP registry key without rebooting the system?

This is about instructions to Windows update KB3140245 on Windows machines. Microsoft released an update (a very long time ago) that "allows users to change system-wide default protocols for WinHTTP ...
0
votes
1answer
69 views

Yesterday, Firefox stopped loading gmail. SSL cert is fine

Corrupted Content Error The site at https://mail.google.com/mail/u/0/ has experienced a network protocol violation that cannot be repaired. The page you are trying to view cannot be shown because an ...
1
vote
1answer
22 views

How to forward a SSL session?

Suppose I have two local machines A and B, and there is also a remote server C. Originally if I want to visit some resources on C, I can use: https://domain_of_C/some_resources Now the requirement is ...
0
votes
0answers
18 views

nginx/nextcloud settings https problems

I have a question concerning the setup of nginx/nextcloud on my cubietruck ARM-SOC. I originally posted the question on the nextcloud board but did not get a reply there. So I am hoping for help from ...
-1
votes
2answers
132 views

How do I fix 'the SSL server certificate authority is not trusted' message in browser?

It started a few weeks ago. One of sites gives me a message NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM You attempted to reach some_web_site.org, but the server presented a certificate signed using a ...
14
votes
2answers
2k views

Self-signed wildcard certificate

I've got pihole set up at home, so I want to be able to handle requests for any website with my own server, to show a "this site has been blocked" page. I'm attempting to do this by creating a self-...
0
votes
0answers
20 views

Wordpress Multisite (bitnami) using SSL and CloudFront on AWS gives error 502

I have recently built a website on AWS by using a bitnami wordpress multisite instance, in order to speed things up, I have decided to use it with CloudFront and for security, with SSL, I have setup ...
1
vote
0answers
75 views

GIT For Windows - Failed to receive handshake, SSL/TLS connection failed

There have been many questions asked on this subject but none of them have a definitive answer. I am developing in Visual Studio 2017 (v15.8.5) on a company network, behind proxy with my Git ...
1
vote
1answer
37 views

Accessing Router via HTTPS

I was trying to access my router's web interface (DD-WRT) page and couldn't get the page to load. Previously, the page loaded with no isue. I've tried all browsers, and I am only able to access it ...
0
votes
2answers
25 views

Given self signed CRT and KEY files, can I install these into a Windows Active Directory intranet setup for all machines to pick up?

I'm looking into setting up the Zulip chat server on a local Active Directory intranet. The chat server requires an SSL certificate which I'm able to generate CRT and KEY files from OpenSSL. However ...
0
votes
0answers
38 views

ERR_CERT_WEAK_SIGNATURE_ALGORITHM Error

Many websites I try going to, I get the following error message: I tried doing the following things: Delete history, cookies, etc. Clear SSL State ipconfig /flushdns ipconfig /renew I get the ...
0
votes
1answer
43 views

From PFX and CRT to Pub and Private key in DER format

So I read that this command openssl x509 -pubkey -outform der -in 1.crt > 1_pubkey.der Should give me the public key in der format, but it says than the > is an unknown parameter.. Then I tried ...
0
votes
0answers
41 views

How to install a valid certificate for CUPS HTTPS admin server

I am running ClearOS release 7.5.0 (Final). I have installed the cups print server. It provides a web interface to control it at https://192.168.1.1:631/. But when I put this address into Chrome, it ...
0
votes
0answers
50 views

How to make sure the client supports tls version only >= 1.2?

Here is the the client hello message packet intercepted from the client side. It supports TLS version from 1.0 to 1.2. How to configure it correctly in client side to support TLS version >= 1.2 so ...
0
votes
0answers
37 views

SSTP client stopped working with certificate expired error

I have an SSTP VPN server set up on Windows Server 2008. I was connecting with my Windows 7 PC to it, by simply creating a new VPN connection where I type in VPN server's DNS name, and my VPN ...
1
vote
1answer
55 views

CWWKE0018E: An exception occurred while launching the runtime environment: java.lang.NoClassDefFoundError: com.ibm.crypto.hdwrCCA.provider.IBMJCECCA

I am starting a Zowe 0.9.1 instance on z/OS 2.3; z/OSMF is already up and running. During the initialization of the Explorer Server (ZOWESVR) the following message is being issued in the stdout: ...
0
votes
1answer
17 views

Comodo SSL not working Internally

So I've set up a Comodo SSL certificate which is working fine:- https://infinityfinance.net/ This was configured on the Windows 10 machine using IIS. This works perfect and I can see it's secure but ...
1
vote
1answer
77 views

WeeChat only connects to IRC server with SSL if “ssl_verify” option is switched off

Using WeeChat through the terminal (on Arch Linux), I can connect to Freenode's server with SSL. No problem there. But if I try to connect to some IRC servers using SSL (e.g. ircs.overthewire.org), ...
0
votes
1answer
34 views

Connection failure after setting SSL on nginx

Im trying to set up https for a client on nginx and failing miserably After uploading the certificate files and setting it up in the server config, I get a "Secure Connection Failed" (FF) when trying ...
0
votes
1answer
39 views

Security, recovery etc of Letsencrypt certificates

I'm looking for a description how to property secure, backup, restore etc Letsencrypt certificates, and how to recover if a server containing such certificates was hacked. Does such a description ...
0
votes
2answers
130 views

Why does Chrome say “Your connection to this site is not secure” even if the certificate is valid?

My site has a valid certificate, but Chrome marks it as insecure. I tried my site using Brave and Firefox, and both mark it as secure. I also ran this online test, and everything looks fine: https:/...
3
votes
2answers
375 views

Firefox refusing to connecto pbs.twimg.com and other major sites

All of a sudden, Firefox (62.0.3) is failing to load CSS and other content forfrom Twitter related web sites. For example, connecting to Twitter with the "Network" panel open, I see that it is ...
0
votes
0answers
21 views

Cannot send SMTP E-mail through terminal after installing SSL

I had setup the mail client to send E-mail via terminal on my ubuntu 14.4, which was working fine until I decided to enable ssl. Now whenever I try to send using the command echo "Test mail body" | ...
0
votes
1answer
63 views

Why is 'https://www' intermittently hidden in Chrome 69?

Whilst browsing the net I have noticed that the URL prefix is mostly always displayed: https://www However I have noticed one just one occasion where this has not appeared, i.e. the omnibox has ...
0
votes
0answers
38 views

Unable to use SSL certificate for my domain

I use sslforfree.com to generate SSL certificate. I set www.example.com and example.com and generate certificate. I set certificate on cPanel. After that I see following error message and domain is ...
3
votes
2answers
121 views

Corrupted downloads when retrieving files directly via ISP connection but things clear up when using a VPN

I'm facing SSL errors when accessing websites (on computer and mobile same network) the error shows up randomly (only some times I got the error) but lately I noticed that most of my downloads are ...
0
votes
0answers
53 views

Configure Apache with Passenger to serve FLASK with Lets Encrypt Certificate (certbot)

I was not able to find proper up to date instructions on this topic. I had Flask running with passenger on Apache for a while and wanted to switch to https now, with no success... I tried to follow ...
0
votes
0answers
20 views

How to make my python program bypass Linux openssl and use my compiled one

I am running an experiment program in python using python3.6.5 and Openssl. I use Ubuntu 18 which comes shipped with OpenSSL 1.1.0g: openssl version -a OpenSSL 1.1.0g 2 Nov 2017 built on: ...
0
votes
1answer
44 views

SBS 2011 What SSL certificate should I get to make connections to the server valid [closed]

I have a SBS 2011 server that is running a Microsoft Exchange 2010. The issue I'm facing is based around self signed certificates. The first issue is that Outlook won't work unless you install the ...
0
votes
1answer
27 views

SSH tunnel bind to domain

I have a working SSH tunnel that redirects my local calls from localhost:8080 to my remote machine on port 8080. Since I have a certificate for *.example.com, I am wondering if I could set up my ...
0
votes
0answers
86 views

Download Self Signed Cert in Chrome 69 OS X 10.13

I'm trying to download a self signed cert in chrome so I can trust it in Keychain Access so it stops annoying me. But all the guides that say how to do it don't work. Some say to just click on it ...
0
votes
0answers
98 views

Setup Proxifier(or alternative program)

So they installed an internet service in my university and now we can go to a class connect the ethernet cable and connect to the internet. Problem is, in order to access the web we need to connect to ...
2
votes
1answer
233 views

Trust self signed Cert in Chrome macOS 10.13

I'm trying to always trust a self signed certificate but I'm having issues. For one, when I try to drag the certificate to a folder or desktop, it just doesn't do anything. I can do the same from ...
1
vote
1answer
34 views

How can telnetd-ssl be set up on an Ubuntu server as a backup to SSH?

An error arising in /etc/ssh/sshd_config can potentially lock users or administrators out of a server that is accessible only via SSH. Telnet SSL is a backup way of accessing the server in such a ...
1
vote
2answers
162 views

OpenVPN TLS failing and keeps disconnecting me

Yesterday I installed Debian 9 and OpenVPN on a server at home and everything was working flawlessly (I followed this guide). However, this morning, OpenVPN was working (client side) and suddenly ...
0
votes
1answer
22 views

Newly added web wildcard certificate shows as expired

I have a web wildcard certificate on our web server that runs on IIS 7.5 using Windows 2008 R2. The CMS is Drupal Acquia 7. The certificate expired last month, so we imported the new .PFX file ...
0
votes
1answer
34 views

Apache2 Web Server always serves HTTP even though I only have SSL set up

I am trying to host an SSL Apache2 web server on Ubuntu 16.04 on the domain mturk.bitasy.me but I have reason to believe the server is lying to me, somewhere at least. I have created two files in the ...
1
vote
0answers
31 views

What is the “TLS_GREASE_BA” cypher in TLS?

I've just ran a client test on SSL Labs Client Tester and my client reports as the favourite cipher suite a cypher named TLS_GREASE_BA with a null key length. What is this cipher suite supposed to do?...
1
vote
1answer
39 views

Does OS/browser treat CNAME certificate based on the destination?

I have a web site example.com, and www.example.com is simply a CNAME to example.com. example.com has a certificate issued by Lets Encrypt for example.com only. On the web server (Nginx), I have http:...
5
votes
2answers
314 views

TLS Handshake resets for some web sites when using OpenWRT router

Currently I'm facing a very strange issue with my router. I have TP-Link TL-WDR4300 rev. 1.7 running OpenWRT 18.06.1. The problem originally started 1-2 months ago, when I had OpenWRT 15.05, and the ...
2
votes
1answer
257 views

Disable TLSv1.0 - TLSv1.2 in Chrome to connect to downlevel server

I need to connect to an HP iLO, and I get an error SSL_ERROR_BAD_MAC_ALERT when I try to connect. The solution seems to be to disable SSL v1 and only allow v2 and v3. How can I do that on Chrome or ...
1
vote
0answers
82 views

Automate Install of Certification Authorities in Windows 7/8/10, Google Chrome, MS Edge and Firefox

I work as an IT guy for a public federal university in Brazil. Government agencies and institutions have to deal with a lot of outdate applications and a mix of browsers to make them work. For ...
0
votes
0answers
221 views

Error creating new authz :: DNS name does not have enough labels

When I try to generate a new certificate then its throwing error. Please check the following: sudo certbot --apache Saving debug log to /var/log/letsencrypt/letsencrypt.log Which names would you ...
0
votes
1answer
29 views

cacerts java on fedora 28

Minecraft fails to join a server because of (The Auth servers are down) Except they are not. It's becasue it doesn't have the certificate. But on other linux distros I don't need to get the ...