Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ssl]

SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

3
votes
2answers
256 views

Firefox refusing to connecto pbs.twimg.com and other major sites

All of a sudden, Firefox (62.0.3) is failing to load CSS and other content forfrom Twitter related web sites. For example, connecting to Twitter with the "Network" panel open, I see that it is ...
0
votes
0answers
20 views

Cannot send SMTP E-mail through terminal after installing SSL

I had setup the mail client to send E-mail via terminal on my ubuntu 14.4, which was working fine until I decided to enable ssl. Now whenever I try to send using the command echo "Test mail body" | ...
0
votes
1answer
62 views

Why is 'https://www' intermittently hidden in Chrome 69?

Whilst browsing the net I have noticed that the URL prefix is mostly always displayed: https://www However I have noticed one just one occasion where this has not appeared, i.e. the omnibox has ...
-1
votes
0answers
24 views

Unable to use SSL certificate for my domain

I use sslforfree.com to generate SSL certificate. I set www.example.com and example.com and generate certificate. I set certificate on cPanel. After that I see following error message and domain is ...
3
votes
2answers
98 views

Corrupted downloads when retrieving files directly via ISP connection but things clear up when using a VPN

I'm facing SSL errors when accessing websites (on computer and mobile same network) the error shows up randomly (only some times I got the error) but lately I noticed that most of my downloads are ...
0
votes
0answers
22 views

Configure Apache with Passenger to serve FLASK with Lets Encrypt Certificate (certbot)

I was not able to find proper up to date instructions on this topic. I had Flask running with passenger on Apache for a while and wanted to switch to https now, with no success... I tried to follow ...
0
votes
0answers
12 views

How to make my python program bypass Linux openssl and use my compiled one

I am running an experiment program in python using python3.6.5 and Openssl. I use Ubuntu 18 which comes shipped with OpenSSL 1.1.0g: openssl version -a OpenSSL 1.1.0g 2 Nov 2017 built on: ...
0
votes
1answer
34 views

SBS 2011 What SSL certificate should I get to make connections to the server valid [closed]

I have a SBS 2011 server that is running a Microsoft Exchange 2010. The issue I'm facing is based around self signed certificates. The first issue is that Outlook won't work unless you install the ...
0
votes
1answer
19 views

SSH tunnel bind to domain

I have a working SSH tunnel that redirects my local calls from localhost:8080 to my remote machine on port 8080. Since I have a certificate for *.example.com, I am wondering if I could set up my ...
0
votes
0answers
48 views

Download Self Signed Cert in Chrome 69 OS X 10.13

I'm trying to download a self signed cert in chrome so I can trust it in Keychain Access so it stops annoying me. But all the guides that say how to do it don't work. Some say to just click on it ...
0
votes
0answers
41 views

Setup Proxifier(or alternative program)

So they installed an internet service in my university and now we can go to a class connect the ethernet cable and connect to the internet. Problem is, in order to access the web we need to connect to ...
0
votes
0answers
12 views

Adressbar not readable in IE11 when tls security when using non-trusted tls cert

When targeting a site with self signed tls cert, my adressbar has a red background and the adress itself is shown in light gray, so that it's very hard to read the url or its parameters: Background ...
2
votes
1answer
125 views

Trust self signed Cert in Chrome macOS 10.13

I'm trying to always trust a self signed certificate but I'm having issues. For one, when I try to drag the certificate to a folder or desktop, it just doesn't do anything. I can do the same from ...
1
vote
1answer
18 views

How can telnetd-ssl be set up on an Ubuntu server as a backup to SSH?

An error arising in /etc/ssh/sshd_config can potentially lock users or administrators out of a server that is accessible only via SSH. Telnet SSL is a backup way of accessing the server in such a ...
1
vote
2answers
106 views

OpenVPN TLS failing and keeps disconnecting me

Yesterday I installed Debian 9 and OpenVPN on a server at home and everything was working flawlessly (I followed this guide). However, this morning, OpenVPN was working (client side) and suddenly ...
-1
votes
0answers
24 views

Cisco RV180W has an invalid certificate; cannot access with Firefox or Google Chrome, how do I fix this? [closed]

I need to perform a very simple task on a RV180W router, but the new "security" features prevent me front either login (with Firefox) or view the user interface (Google Chrome) because the ...
0
votes
1answer
21 views

Newly added web wildcard certificate shows as expired

I have a web wildcard certificate on our web server that runs on IIS 7.5 using Windows 2008 R2. The CMS is Drupal Acquia 7. The certificate expired last month, so we imported the new .PFX file ...
0
votes
1answer
33 views

Apache2 Web Server always serves HTTP even though I only have SSL set up

I am trying to host an SSL Apache2 web server on Ubuntu 16.04 on the domain mturk.bitasy.me but I have reason to believe the server is lying to me, somewhere at least. I have created two files in the ...
1
vote
0answers
20 views

What is the “TLS_GREASE_BA” cypher in TLS?

I've just ran a client test on SSL Labs Client Tester and my client reports as the favourite cipher suite a cypher named TLS_GREASE_BA with a null key length. What is this cipher suite supposed to do?...
1
vote
1answer
38 views

Does OS/browser treat CNAME certificate based on the destination?

I have a web site example.com, and www.example.com is simply a CNAME to example.com. example.com has a certificate issued by Lets Encrypt for example.com only. On the web server (Nginx), I have http:...
4
votes
2answers
273 views

TLS Handshake resets for some web sites when using OpenWRT router

Currently I'm facing a very strange issue with my router. I have TP-Link TL-WDR4300 rev. 1.7 running OpenWRT 18.06.1. The problem originally started 1-2 months ago, when I had OpenWRT 15.05, and the ...
2
votes
1answer
184 views

Disable TLSv1.0 - TLSv1.2 in Chrome to connect to downlevel server

I need to connect to an HP iLO, and I get an error SSL_ERROR_BAD_MAC_ALERT when I try to connect. The solution seems to be to disable SSL v1 and only allow v2 and v3. How can I do that on Chrome or ...
1
vote
0answers
61 views

Automate Install of Certification Authorities in Windows 7/8/10, Google Chrome, MS Edge and Firefox

I work as an IT guy for a public federal university in Brazil. Government agencies and institutions have to deal with a lot of outdate applications and a mix of browsers to make them work. For ...
0
votes
0answers
99 views

Error creating new authz :: DNS name does not have enough labels

When I try to generate a new certificate then its throwing error. Please check the following: sudo certbot --apache Saving debug log to /var/log/letsencrypt/letsencrypt.log Which names would you ...
0
votes
1answer
18 views

cacerts java on fedora 28

Minecraft fails to join a server because of (The Auth servers are down) Except they are not. It's becasue it doesn't have the certificate. But on other linux distros I don't need to get the ...
0
votes
0answers
55 views

SSL connection errors happen consistantly in the afternoon

Every day in the early afternoon there is a period where websites return this error message in Firefox: Secure Connection Failed The connection to stackoverflow.com was interrupted while the ...
1
vote
1answer
84 views

SSL does not work on Windows 10 against rutracker.org via PPTP, but works with L2TP

I have a Windows 10 laptop with a peculiar problem that no browser can open https://rutracker.org/ It goes like that (in developer tools mode): for a long time browser does not acknowledge that it ...
0
votes
0answers
287 views

SSL3_READ_BYTES:sslv3 alert handshake failure / alert number 40

Using OpenSSL 1.0.2p on MacOS openssl s_client -connect XXX.XXX.com:443 -CAfile server.pem -debug Results in 140735528117192:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake ...
0
votes
0answers
37 views

How to auto renew OpenVPN client certificates using easyRSA

I have embedded devices that are located in different cites and connected to my OpenVPN server. I initialize my devices before deploying them and put the certificate/key pair through local network. ...
0
votes
1answer
25 views

Wondering about something regarding intermediate certificates and Weechat

I have a private server at home that runs a node.js instance and weechat. I also have my own domain, which I registered at EuroDNS, as well as an AlphaSSL certificate, also from EuroDNS. Both Weechat'...
0
votes
1answer
23 views

Can .pem certificates have an encrypted certificate and an encrypted RSA key?

Can .pem certificate file have an encrypted certificate and an encrypted private key? e.g. Bag Attributes -----BEGIN ENCRYPTED CERTIFICATE----- -----END ENCRYPTED CERTIFICATE----- -----BEGIN ...
0
votes
0answers
35 views

Decrypt SSL traffic with the openssl command line tool 7

Generating the master secret/key I followed the steps outlined in my shell script. I validated that I am passing data correctly to it by manually entering these steps several times (entering $key ...
1
vote
1answer
221 views

Gmail pop3 ssl can't fetch mail server

Suddenly gmail can't fetch anymore mails from my mail server (postfix, dovecot), with the below message: Unable to establish secure SSL connection to mail.domain.com Server returned error: "SSL error:...
0
votes
0answers
119 views

How to map drive to WebDAV server using self-signed certificate?

I have an ownCloud WebDAV server with a self-signed SSL certificate, running on a public IP address, no domain name. In Windows 10 Pro, when I try to map a network drive using SSL, I get error: "...
2
votes
0answers
163 views

Web browser hangs up on “Performing TLS handshake” message on one website in my desktop PC. why?

I've been trying to resolve this before and did not succeed. So I have to start again. Let me explain the issue: When I'm trying to connect to the website of this small local bank from my desktop ...
0
votes
0answers
45 views

All https sites are redirected to mysite which is hosted on a computer on my network

I am hosting my website on a computer on my home network. The computer uses Debian Stretch as an operating system. I use dynu.com to post my IP. A while ago I made my website HTTPS using letsencrypt....
1
vote
1answer
62 views

Facebook and Instagram images are broken in some browsers

On my main computer (Windows 10, 1803, 17134.165) no images or videos on Facebook or Instagram are displayed when using most browsers. All of the images and videos (from both sites) are being served ...
2
votes
1answer
41 views

How to link python to the manually compiled OpenSSL rather than the system's one

I need to manually compile OpenSSL from source. I use Ubuntu 18. The OpenSSL shipped with Ubuntu 18 does not support specific cipher I need. But it can be enabled if I compile OpenSSL manually. I ...
1
vote
0answers
913 views

Intermittently cannot push/pull from GitHub. Getting SSL errors

I'm having trouble pushing and pulling from GitHub. I checked status.github.com and they are not having problems. Occasionally I get this error: fatal: unable to access 'https://github.com/x/x.git/'...
0
votes
0answers
78 views

SetHandler “proxy:unix:/run/php/php5.6-fpm.sock|fcgi://localhost/” ON <VirtualHost *:443>

I have a server under apache2 with multiple php versions. I can use the proxy for but not for I put <FilesMatch \ .php $> # Apache 2.4.10+ can proxy to unix socket SetHandler "proxy:...
2
votes
1answer
59 views

How to download all advertised SSL certificates of a domain via openssl binary?

The Problem Lets say, I would like to download every ssl certificate for a specific website to be able to do certificate pinning later on. How can I query the webserver with openssl, to download all ...
0
votes
0answers
68 views

Invisible vmware certificate makes troubles accessing sites using HSTS

When I try to make a search in Firefox or Chrome using Google (or in fact use any Google service) then google server displays nagging overlay "A privacy reminder from Google" requesting acceptance of ...
0
votes
0answers
61 views

SSL PHP and curl

good day, thanks for read my post. We have a problem with my website with ssl certificates... We have Debian 9, PHP 7 and Apache 2.4.25... And when we run a script php with curl process we receive in ...
0
votes
1answer
114 views

How to set OPENSSLDIR on Windows and what is its meaning?

I am using Windows 10 Pro x64, openssl-0.9.8k_X64 I run command openssl version -a I received result openssl version -a OpenSSL 0.9.8k 25 Mar 2009 built on: Thu Jul 23 09:35:27 2009 platform: VC-...
1
vote
2answers
79 views

SSL Certificate: Displays correctly for some and not others

Is it possible anyone can check out this site: https://www.goweryarns.co.uk/ For me and 80% of my customers, it works, fine. Yet for some 20% they see this error: NET:: ERR_CERT_COMMON_NAME_INVALID ...
2
votes
1answer
104 views

Unable to disable TLSv1/TLSv1.1 in Apache 2.4.18

A client has requested that I disable TLSv1 and TLSv1.1 on a web server. The server is running Apache 2.4.8. and OpenSSL 1.0.2g. I have added the directive to /etc/apache2/mods-enabled/ssl.conf: ...
0
votes
0answers
21 views

Installing Lets Encrypt Certificates on ubuntu 16.4/Nginx and iRedMal

I am having trouble with site mailtest.example.com, ubuntu 16.4 installed fresh, in hosts hostname is set to mailtest.example.cm, iRedmail installed with nginx, DNS pointed to IP address and it ...
2
votes
1answer
1k views

534 Local policy on server does not allow TLS secure connections

I am trying to configure a test FTP site via IIS 6.2 on a Windows Server 2012 R2 I created a site and configure the FTP SSL settings. I selected my certificate and choose custom. If I don't have the ...
0
votes
1answer
264 views

Dovecot gmail SSL error

I'm trying to import all my emails into gmail via POP3, which used to work fine. All of a sudden, I keep getting the following error: SSL error: No path found from the leaf certificate to any root. ...
2
votes
1answer
949 views

pip cannot fetch URL because of an error with the SSL certificate

All of a sudden pip, Python's package manager, could no longer install new modules. The problem is fetching the URL and the cause seems to be the SSL certificate. I sort of understand what this means, ...