Questions tagged [ssl]
SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.
1,799
questions
0
votes
1
answer
31
views
Debian: how to resolve "unable to get local issuer certificate" and "unable to verify the first certificate"?
I have a problem with curl downloading an image from a webserver.
curl: (60) SSL certificate problem: unable to get local issuer certificate
So I tried to investigate with openssl
$ openssl s_client -...
0
votes
0
answers
39
views
Client Side Cannot Find Client Cert in TLS Mutual Authentication
This is a windows .NET application. Am working on the client side. Increased SSChannel logging and discovered ... .
Creating a TLS client credential.
The remote server has requested TLS client ...
0
votes
2
answers
39
views
Make a site hosted in IIS server use https and access it within the intranet
I have a site hosted on my IIS server and I can access it on http:localhost. I made a self-signed certificate and added it to the site and can access it via https:\\localhost. I want the site to be ...
0
votes
0
answers
19
views
Finding CA Cert from a Synology NAS to use it with curl --cacert
My Synology uses self-signed certificate, so I need to include it with curl --cacert /path/to/cert.pem to connect safely from a terminal to NAS using https. How can I find this certificate on my ...
0
votes
1
answer
22
views
Does Chrome support OID Filters in the TLS handshake
Cite from rfc8446
The "oid_filters" extension allows servers to provide a set of
OID/value pairs which it would like the client's certificate to
match. This extension, if provided by the ...
1
vote
1
answer
24
views
Failed to generate a Let's Encrypt certificate on Asustor NAS with error Ref. 5402
While trying to generate a Let's Encrypt certificate for my Asustor NAS through Settings -> Certificate Manager (following the instructions), the process repeatedly failed with error Ref. 5402. ...
0
votes
0
answers
71
views
Inconsistent SSL connection error when using wget
I'm trying to download some .nc files from a secure online database.
It seems like for roughly every other attempted file download, I get an 'Unable to establish SSL connection' message, and then wget ...
1
vote
0
answers
41
views
Chrome network requests stall for exactly 10 seconds when using custom local SSL hostnames and certificates
I develop websites locally with mkcert tool to create SSL certificates for my domain (eg project.local). Then I point project.local to 127.0.0.1 in my hosts file (/private/etc/hosts for me on Mac). I ...
0
votes
1
answer
77
views
openssl s_client -connect errorno=111
Hi I got problem with openssl connection. I have java application which connects from server1 to server2 I made clone of server2 and upgraded it from Debian 9.7 to Debian11. The connection to ...
0
votes
1
answer
22
views
Need advice regarding setting up SSL on my webserver
I just acquired an SSL Cert for our domain tspack.us - so I am assuming that the Cert is ONLY good for that exact name correct? I technically can't use www.tspack.us because it won't match exactly ...
0
votes
1
answer
58
views
Use NGINX to serve as both webhost + direct subdomain request to dockerserver:port
First, I struggled hard with the title. I've been trying back and forth, googling like mad and the resources I find are most likely way to complicated for me.
But I find it so unbelievable that it's ...
2
votes
4
answers
2k
views
Nginx without public certificate
Is there any way that we can configure an Nginx without a public certificate?
The objective here is, I want to publish an API on public internet, but all the API client (whitelisted clients) should ...
1
vote
0
answers
32
views
What is the proper way to host multiple websites from the same machine and same ip address? [closed]
I have two Flask websites running on an ubuntu machine running on my home server. Both of them are running as a service with Gunicorn, one is on port 9000, the other is on 9001. I have registered a ...
0
votes
0
answers
89
views
Website loading difficulties after TLD change from .com to .promo
We recently changed the URL of our website from eyevertising.com to bold.promo, and we now hear from a few random customers that they can't access the new website!
The only thing we really did, was ...
0
votes
0
answers
64
views
Selective TLS connection fail
I have a VB.NET application that connects to a remote server, which I have no authority whatsoever, via a username/password, retrieves some data and populates a local database.
Lately the application ...
0
votes
0
answers
27
views
TLS termination of NLB
Objective:
I would like to achieve the following with AWS and understand how to configure it:
AWS Configuration:
ACM certificate (associated with NLB listener).
NLB (in a public subnet, accepting TLS ...
0
votes
0
answers
375
views
Error with SSL and TLS on Windows server 2019
After I updated the windows server 2019, it is not possible to connect to the server using remote desktop connection. Also the sites which are hosted on https on this server can't be opened and the ...
1
vote
1
answer
166
views
Initial connection takes too long only on a specific browser/network
I'm having a frustrating issue that I have no idea why it happens or how to fix it.
My initial connection (the "SSL handshake") is taking a minute to some websites only on Chrome browser (...
0
votes
0
answers
13
views
How do I refresh an page automatically every time an net::(ANY ERROR) is detected on the inspect console on Chrome?
So I have an question. The most annoying error I have in Chrome is the net::ERR_SSL_PROTOCOL_ERROR, which occurs for broken images. I used Codepal to help me make this script, but it does not work. I ...
0
votes
1
answer
603
views
Certificate is valid, but website shown as not secure on some browsers
So I'm currently trying to set up a website over https. I have a webserver running Ubuntu and Apache2, and DNS records are set to direct example.com and www.example.com traffic. I have a valid ...
0
votes
0
answers
49
views
Home Network, How to install SSL XAMPP Self-Hosted Website
I use laptop IP Lan 192.168.88.248.
I opened port 80 on this IP. Hairpin NAT in LAN.
I registered the domain abc.mooo.com at freedns.afraid.org and assigned it to my WAN IP.
I install default XAMPP (C:...
0
votes
0
answers
6k
views
FortiClient VPN stuck at 48% with error code -7200 - Credential or SSL VPN connection issue
I've been facing an issue with my FortiClient VPN connection, and despite trying several troubleshooting steps, I'm still unable to resolve it. The problem is that the connection consistently gets ...
1
vote
2
answers
110
views
Invalid SSL certificate for Wikimedia, only on my PC and only on LAN; resolves correctly on Wi-Fi
Since yesterday I'm having trouble with anything related to the https://upload.wikimedia.org/ URLs, they all give an ERR_CERT_COMMON_NAME_INVALID error.
I tried some troubleshooting and I noticed that ...
0
votes
0
answers
90
views
Certificate Authority works in Linux but fails in MacOS
I want to create a self-signed root certificate authority, such that the certificates signed by this CA are trusted by the OS which trusts the CA.
After following a couple different guides, I managed ...
0
votes
1
answer
856
views
How to disable SSL checking on Nginx?
I have some QA server for my website.
A year ago I've tried to make SSL connection to my production website so I've implemented it on the QA by nginx too.
Now it's expired and I don't want to renew it ...
0
votes
2
answers
678
views
https url not found on ubuntu apache2
Trying the configure SSL on Apache2 on Ubuntu server installed Apache
sudo apt install apache2
Opened ufw firewall
sudo ufw allow 'Apache'
ufw allow https
Installed SSL files in /root/cert
chmod ...
1
vote
0
answers
54
views
Forcing Firefox to validate SSL certificates from Sophos
A network I'm often connected to uses a Sophos network block on many sites. I would like to try to get around this. I looked at the solution from how to make firefox ignore all ssl certification ...
1
vote
1
answer
51
views
Intermittent connection issues to a particular website
I am facing connection issues with a website. All of them seem to be connected:
The website host name: napi.kotaksecurities.com (using https)
telnet napi.kotaksecurities.com 443: fails sometimes, ...
1
vote
1
answer
795
views
Disable TLS 1.3 over TCP
After you create a website in Internet Information Services (IIS) Manager, in the config file in the path below,
C:\Windows\System32\inetsrv\config\applicationHost.config
You can modify the following ...
0
votes
1
answer
115
views
PolarProxy doesnt write packets to the pcap file
Im trying to use PolarProxy on windows to capture some packets but when i test it out it doesnt write anything to the pcap file
I tried using --autoflush 1 which is meant to write it to pcap file ...
0
votes
0
answers
43
views
SSL Connection to mysql database using OCI Data integration REQUIRE X509 flag
I have a data integration requirement to connect and retrieve data from mysql database using SSL,the user am using to connect is created is with REQUIRE X509 flag so in the connection i need to ...
0
votes
1
answer
38
views
Adding a mail server to existing network
I'm adding a VM mailer and would like support on the new layout on my network.
I currently have a firewall that forwards connections to a VM nginx that deals with HTTP/HTTPS requests, forwarding to ...
0
votes
0
answers
61
views
NGINX fails to connect to Nextcloud instance
I have a server running proxmox with 3 VMs: NGINX, Bitwarden and Nextcloud. Bitwarden works fine which proves that NGINX is working ok, however when NGINX tries to connect to Nextcloud it will result ...
0
votes
0
answers
182
views
In docker-compose, Error adding SSL Certificate to reverse proxy to consume websocket?
Deploying docker in windows 11 and working with docker-composer, I am trying to enable the ssl certificate for my setup where I want to enable nginx as a reverse proxy to allow secure websockets wss://...
-1
votes
1
answer
746
views
Can AD CA certificates for internally facing sites be inherently trusted?
Is AD CA (AD Certificate Services properly configured) all that's needed for (SSL certs on) internally facing sites to be trusted w/o any additional configuration on domain-joined clients?
Say:
...
0
votes
0
answers
102
views
In Docker, how to integrate WebSocket into LAMP Service with an intermediary reverse proxy?
Good morning friends, I have the following docker-compose.yml file with which I install a reverse proxy and a LAMP stack with the phpmyadmin service.
Note: I have practically created it from scratch ...
1
vote
0
answers
129
views
OpenVPN traffic through TLS-enabled TCP connection
I have to obfuscate OpenVPN traffic. So I created a TLS-enabled TCP tunnel with socat, and I want to pass OpenVPN traffic through this tunnel.
Server:
sudo socat openssl-listen:443,cert=/home/ubuntu/...
0
votes
0
answers
77
views
Unable to get into admin board of NPM
Recently I resetted my proxmox home server to fully redo everything properly.
Today i re-installed Nginx Proxy Manager. but i am stuck in a loop
if i want to acces port 443, my chromium browser sends ...
0
votes
0
answers
839
views
nginx server can't read pem key provided by Ionos
-----BEGIN CERTIFICATE-----
contents
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
contents
-----END RSA PRIVATE KEY-----
but I still get the following error in the logs ...
0
votes
0
answers
42
views
Client fails TLS handshake
A client is trying to connect to my website using a client certificate. However, they get a 400 error. They gave me their public certificates excluding root CA in a .crt file.
This is the access log:
...
0
votes
1
answer
41
views
Website refuses to load, but works fine everywhere else. SSL Certificate related
I have a computer which has stopped connecting to a website.
Normally this computer would just get rebuilt with the standard image we have for the computer, but there's a lot of bespoke software which ...
-1
votes
1
answer
66
views
Getting SSL/TLS certificates for SSL enabled services
I need to run RabbitMQ and Mosquitto brokers in SSL mode. I assume that I need CA certificate to generate server key and certificate. How can I obtain this? I need trusted one - not self signed. I ...
0
votes
0
answers
49
views
Nextcloudcmd SSL issues
I'm encountering issues with nextcloudcmd on my Linux instance, more precisely SSL errors
/usr/bin/nextcloudcmd --trust -u {USER_NAME} -p {PASSWORD} {SOURCE_DIR} {URL}
output:
08-28 17:17:14:180 [ ...
1
vote
1
answer
101
views
What comes first - Certbot or nginx?
I am trying to set up nginx to act as a reverse proxy on a small personal server; however, I am encountering some circular logic when I ask certbot to generate SSL certificates.
From what I can tell, ...
0
votes
0
answers
355
views
error making a custom CSR on windows 10. "One or more of the object's properties are missing or invalid"
I am trying to generate a custom CSR using mmc & certificates snap in. The cert will be a mTLS client cert using ECC. I go through the following steps:
load certificates snap in for current ...
0
votes
1
answer
59
views
During SSL tunneling what IP address is seen by the destination server?
If I setup a SSL tunnel via a HTTPS proxy, what IP address will the destinations server see? Would it be the IP address of the client or the IP address of the proxy? Is there any point (e.g. during ...
0
votes
0
answers
356
views
Update openssl to 3.1.1 from 1.0.2n in Nodejs
I am working on an old node.js project which is using the Openssl version 1.0.2n. I found only a dll (libeay32.dll) using in this project and in that that dll openssl version is 1.0.2n. Since Openssl ...
0
votes
2
answers
40
views
Get business details from SSL certificate
I recently got scammed by a site posing to belong to a legitimate company.
The business showed up on the HK exchange as being legitimate, and I checked several other sources for a legitimacy, and the ...
0
votes
0
answers
62
views
I am trying to mimic the connection of my softether vpn to setup a openvpn with TLS 1.2 instead of SSL
I am trying to setup a openvpn with tls 1.2 instead of ssl with tcp, as in this screenshot:
How can I mimic the connection like the softether (on the left) in order to setup openvpn (on the right)?
2
votes
2
answers
3k
views
SSL Certificate Issuer History for particular domain or website
Is it possible to find out the history of issuers of SSL certificates for a particular website? For example if a website had a cert issued from one company A originally, then the website had a new ...