Questions tagged [ssl]

SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

Filter by
Sorted by
Tagged with
-2 votes
0 answers
29 views

Circumvent ISP Blocked HTTPS Port 443 [closed]

My Situation I am currently hosting a webapp on my server rig but I can only accept traffic on port 80, my ISP blocks port 443. I want to implement SSL, and I understand that SSL can be done on any ...
user avatar
0 votes
0 answers
10 views

Unable to bring kube-api server back to life after kubeadm certificate renewal

I have a self hosted Kubernetes Cluster running on 4 Openstack VMs. There is 1 master and 3 nodes. Kubernetes Version: v1.21 The certificates on the master were outdated. I used kubeadm certs renew ...
user avatar
  • 1
0 votes
0 answers
32 views

Why unable to verify local issuer certificate? (https calls for google)

I am using docker desktop to run a simple node:16-alpine through mac. Which I added a ca-certificates, curl and openssl. RUN apk add --no-cache --repository http://dl-cdn.alpinelinux.org/alpine/v3.15/...
user avatar
0 votes
0 answers
30 views

installing SSL on 2 exchange servers

I have 2 exchange servers run for one email service, and I need to renew the SSL certificate. Do I need to issue 2 SSL, or one is enough? If one is enough how can I replicate it between them?
user avatar
0 votes
1 answer
34 views

Updating SSL Certs with PKCS12 or PEM via Bash Script

I currently have my pi-hole setup to request an SSL cert from ZeroSSL using Acme.sh, this works quite well. I then have to cat the two cert and key files into one, and then relaunch the lighttpd ...
user avatar
0 votes
0 answers
32 views

Unifi guest hotspot: "Redirect using Hostname" but no DNS?

I have a Unifi UAP-AC-LR access point and wanted to setup the guest portal for friends. It sort-of-worked on my phone, but didn't work on my laptop. I think it had to do with the self-signed cert/...
user avatar
0 votes
0 answers
19 views

Apache 2.4 Reverse Proxy setup

I have an older installation of a website at a VM that is running via http, served by an apache 2.2. Now I plan to set up a Reverse Proxy (apache 2.4) in front of it. The RP should deliver a https ...
user avatar
0 votes
1 answer
16 views

SSL for different servers behind single ADSL Router

I would be glad to find out the ideas how/if one could make two self-hosted servers available online (with SSL) behind a single DSL router. Setup: Registered domain, by one of the cloud providers ...
user avatar
  • 1
0 votes
1 answer
21 views

No CRL in certificates nowadays?

Recently, I knew about the CRL and also for that is a traditional way. I tried to see what it is, install fetch-crl from ubuntu package and run, but only an error in result: ERROR No trust anchor ...
user avatar
  • 101
0 votes
1 answer
34 views

SSL certificate error when trying to access any of my self hosted domains on my home network

I have a home server running Nextcloud and Bitwarden. To host the domains I use SWAG, which uses Let's Encrypt as an auto SSL cert provider. These domains work perfectly outside of my home network. ...
user avatar
2 votes
0 answers
34 views

Suddenly SEC_ERROR_REVOKED_CERTIFICATE error in Firefox 99.0.1, but not in other browsers nor a different profile in same FF Version

Out of the blue (presumably with the last update to 99.0.1), a website I use a lot doesn't open anymore but shows An error occurred during a connection to $fqdn. Peer’s Certificate has been revoked. ...
user avatar
  • 141
1 vote
0 answers
23 views

SSL verification doesn't happen with curl cacert option

This is my understanding of curl --cacert option : We can make curl perform SSL verification against a custom truststore by providing a PEM file path to this option. It is mostly used when we are ...
user avatar
0 votes
0 answers
33 views

Safebrowse.io warning - Some users on home network can only connect to website after removing the "s" from https and proceed

A company website I occasionally assist with is giving the following an error and it is only showing itself on home networks. Upon visiting the site, a user may experience the following error The Site ...
user avatar
0 votes
0 answers
35 views

Unable To Renew Subdomain's SSL Certificate via LetsEncrypt & Certbot

Really appreciate any help with this. I have a DO droplet (running on OpenLiteSpeed Server with Ubunto 20.04) that is hosting the main domain + 2 subdomains. In that droplet, there are 3 separate ...
user avatar
0 votes
1 answer
44 views

Why play.google.com make handshake only with SNI = google.com

Can't open https://play.google.com on my mac (safari and chrome) get ERR_TIMED_OUT, but can open on other laptops. Looks like the server doesn't reply on ClientHello then SNI is same as host. $> ...
user avatar
0 votes
0 answers
28 views

Windows 10 - Mandatory installation of server's certificate on the client computer

There are 2 parts to my question, both related to SSL sites: I want to configure my Windows OS to disallow browsing to any SSL sites whose server authentication certificate is not installed on my ...
user avatar
0 votes
1 answer
27 views

Has the FTP server's certificate been improperly configured if a popular trusted FTP client raises an error that its certificate is unknown?

When a popular FTP client reports an "unknown certificate" error does that mean that the certificate has not been set up properly on the server? Is the FTP client supposed to follow the ...
user avatar
  • 549
-1 votes
1 answer
51 views

How to find the file location of a website's ssl certificate

I am trying to access the SSL certificate for a certain website (textnow.com) but I can't find where it is stored on my computer, even in the certificate manager. Also, when I click on the lock next ...
user avatar
0 votes
0 answers
28 views

SSL one-way decryption in transparent proxy

I'm looking for an SSL decryption proxy that is transparent at layers 3 and 4. E.g. the client will be sending an HTTPS request to the server, but the proxy will decrypt it and forward the decrypted ...
user avatar
0 votes
0 answers
181 views

SSL connection error to mysql

Since a couple days I cannot connect to several mysql instances when using SSL. I am quite sure it's a problem on my machine, since colleagues and production servers don't have this issue. In both my ...
user avatar
  • 101
1 vote
0 answers
24 views

Dropbox.com works in VM host but not guest, all other sites work in guest

Dropbox.com works in VM host but not guest, all other sites work in guest. Host: MacOS 11 VM: VMWare Fusion 12 Guest: Arch Linux, VM NAT networking No iptables rules in VM. ca-certificates (20210603-1)...
user avatar
1 vote
0 answers
66 views

PolarProxy ERR_PROXY_CONNECTION_FAILED

My environment is Linux Kali in virtual marchine and I am trying to decrypt the SSL/TLS from an ELF program. For that I am using PolarProxy, I download the application for linux and configured the ...
user avatar
0 votes
0 answers
415 views

OpenConnect certificate failed verfication: signer not found

On Arch Linux. School requiring use of a VPN. Installed OpenConnect, running it as openconnect vpn.xyz.edu I get the following output POST https://vpn.xyz.edu/ Attempting to connect to server xxx.xxx....
user avatar
0 votes
0 answers
14 views

can't see locally hosted website on same subnet

I have a small IIS webserver running in my office for academic purposes. It is on the same subnet as the rest of my network. 192.168.7.x I have a domain running on that server (e.g. mydomain.com). I ...
user avatar
  • 386
0 votes
0 answers
30 views

Website warns about unsafe browsing

On MacOS High Sierra, a website claims unsafe browsing. In both Chrome and Safari. This website has a full valid SSL certificate which works on all browsers across Windows, Linux and Android browsers ...
user avatar
  • 253
0 votes
0 answers
62 views

Unable to installed RVM into WSL running Ubuntu 18.04: “self signed certificate in certificate chain.”

I'm a beginner and english is not my first language so apologize me if there is something wrong. I'm trying to install RVM on my WSL running Ubuntu 18.04. I tried to install using the following ...
user avatar
  • 1
0 votes
0 answers
47 views

Trust self signed Cert in Chrome macOS 10.15

Two days were spent on following guides but none have solved this problem. This is the scenario. I have apache running on an old 2009 MBP with El Capitan (from now on MBP2009). It is under my local ...
user avatar
  • 1
0 votes
0 answers
24 views

How do I use Domain Name to Dynamic DNS to Home Server using SSL

**Looking for tips here since I have not had success using SSL. I have had success using non-SSL (ie port 80). I want to use a sub-domain name of a domain I own. I can use A or CNAME or URL forwarding ...
user avatar
0 votes
1 answer
28 views

How do I make apache to use the domain ssl certificate?

I've registered a domain and my hosting provider includes an ssl certificate for me. I've set up the A dns redirection to the IP where I have a linux ubuntu VPS with an Apache server installed on it. ...
user avatar
0 votes
0 answers
40 views

Automating keystore with keytool and openssl

I have this script: PASSWORD=password123 openssl genrsa -out client2.key 2048 openssl req -new -key client2.key -out client2.csr -subj "/C=/ST=/L=/O=/OU=/CN=/emailAddress=" -passin pass:$...
user avatar
0 votes
1 answer
339 views

Apache Web Server port 443 and Tomcat port 8080, redirect not working

I have a Java web application on CentOS on Google Cloud. I can access my web app with http://mydomain:8080. I wish https://mydomain (without 8080 in URL) to lead to application, but instead, I just ...
user avatar
0 votes
0 answers
23 views

SSL error from certain browsers/networks using Letsencrypt and apache2

Can someone help me figure out why there is a SSL error on my website? I'm using Letsencrypt for the SSL certificate. I'll do my best to explain. Certain people have told me that mysite is ...
user avatar
1 vote
1 answer
242 views

What is "Added Security" in the Microsoft Edge address bar?

I have started noticed "Added Security" in the Microsoft Edge address bar. It's giving me flashbacks to EV SSL certificates. I've searched a bunch and can't find what this exactly means. ...
user avatar
  • 197
0 votes
0 answers
20 views

delete subdomain NET::ERR_CERT_COMMON_NAME_INVALID

i want to delete subdomain dev.potatino.com from www.potatino.com using certbot enter image description here my web url : https://www.potatino.com/ NET::ERR_CERT_COMMON_NAME_INVALID it cause this err
user avatar
  • 1
0 votes
0 answers
31 views

mistaccaly created extra ssl certificate generate -> NET::ERR_CERT_COMMON_NAME_INVALID

i am very new to web hosting and you can check my website https://www.potatino.com/, it show error : NET::ERR_CERT_COMMON_NAME_INVALID i am using digital-ocean my certificates currently are: ...
user avatar
  • 1
1 vote
0 answers
38 views

How to use SSL on local non-internet webpages?

For local websites such as localhost which are not connected to the internet I want to use SSL. And as it is not possible to create letsencrypt for sites not connected to the internet, I had to use a ...
user avatar
1 vote
1 answer
48 views

How do I configure RDP host to allow only SSL connection in Windows 10 PRO?

Despite having set in gpedit.msc, Computer Configuration, Administrative Templates, Windows Components, RD Services, RD Session Host, Security:- Require use of specified security layer... set to SSL ...
user avatar
0 votes
2 answers
52 views

Validate if a certificate is installed and trusted on osx through terminal

I can validate if a certificate exists in keychain by using the command security find-certificate -c "Certificate Name" -a But I am trying to see the trust settings of a particular ...
user avatar
  • 101
0 votes
1 answer
95 views

Good practice to access WebDAV over SSL on a local network

I have a relatively simple scenario, where a WebDAV server runs over HTTPS, in a local network. For a test run (and it could end up being the final solution as well) I'm running as server sftpgo on a ...
user avatar
0 votes
0 answers
78 views

Does OpenVPN support HTTP proxy over SSL (HTTPS)

I'm trying to use the HTTP proxy functionality of OpenVPN over HTTPS, but it is not working. If I use HTTP (PlainText) it works, but I prefer to use it over HTTPS, for security reasons. Is this ...
user avatar
  • 1
1 vote
0 answers
616 views

self signed certificate throwing "RSA_padding_check_PKCS1_type_1:invalid padding" error

My domain uses a self signed certificate created like this: $ ISSUER="/C=EN/L=City/O=ORG" $ SUBJECT="/C=EN/L=City/O=ORG/CN=myserver.com" $ SAN="DNS:myserver.com" $ ...
user avatar
  • 111
0 votes
1 answer
59 views

Server hello is not returned without SNI

I've setup a proxy server (squid) with https_port enabled. When I send requests to this server using a url like domain.com or even using a host alias (i.e. manually written in /etc/hosts), there's no ...
user avatar
0 votes
0 answers
25 views

Mariadb use HSM instead of private key files for server side ssl/tls

There seems to be 0 support for instructing the mariadb server to use a pkcs11 interface instead of using a private key file. I'd like to have mariadb talk to an HSM to establish incoming secure ...
user avatar
0 votes
0 answers
95 views

Mac OS [SSL: CERTIFICATE_VERIFY_FAILED] Command Line

I'm trying to display Packages sent by amazon cli by using Fiddler Debugger.When I send this cli command I encounter following ssl error. Command aws quicksight describe-ip-restriction --aws-...
user avatar
  • 1
2 votes
0 answers
27 views

InspIRCd ssl connection fails with Cloudflare certificate

I am trying to implement SSL into my IRC server, I have downloaded and installed the certificate, key, and ca-bundle from Cloudflare. And I can connect successfully without SSL but when I do try to ...
user avatar
2 votes
1 answer
84 views

Bitdefender Encrypted Web Scan blocks Same-Site Api Calls

I have a simple secure same-site, cross-origin setup like: Frontend: https://www.example.com API: https://api.example.com On both domains we use SSL certificates issued by Amazon (AWS ACM) Some of our ...
user avatar
0 votes
0 answers
17 views

OPEN VPN ssl/tls

Hello. I have a problem when I try to connect to NOMACHINE and opne vpn, I can't connect. When trying to analyze the logs, it was found that the error probably concerns which of the certificates. ...
user avatar
0 votes
0 answers
196 views

Certificate authority (CA) in Ubuntu 21.10 is installed but it does not work

I've installed certificates before within Windows and Ubuntu [server] and it works normally, but today I tried to install certificates on Ubuntu Desktop 21.10 over RDP + AD user, and it does not work ...
user avatar
0 votes
0 answers
149 views

Difficulty getting nginx and shadowsocks-libev with v2ray-plugin to work

I've setup a Google Cloud instance, firewall has port 3128 open. Using either Shadowrocket on iOS or Shadowsocks-NG on MacOS, I can't connect. I have nginx on port 3128 forwarding to port 10001 ...
user avatar
0 votes
1 answer
25 views

Serve multiple websites with apache including https redirects

I admit I am quite rusty with these apache server setups. I am in a position where I need to set up 1 html, 1 django, and 1 php server. Individually I have tested all 3 and all 3 work fine on their ...
user avatar
  • 159

1
2 3 4 5
34