Questions tagged [ssl]

SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

Filter by
Sorted by
Tagged with
0 votes
1 answer
31 views

Debian: how to resolve "unable to get local issuer certificate" and "unable to verify the first certificate"?

I have a problem with curl downloading an image from a webserver. curl: (60) SSL certificate problem: unable to get local issuer certificate So I tried to investigate with openssl $ openssl s_client -...
realtebo's user avatar
  • 590
0 votes
0 answers
39 views

Client Side Cannot Find Client Cert in TLS Mutual Authentication

This is a windows .NET application. Am working on the client side. Increased SSChannel logging and discovered ... . Creating a TLS client credential. The remote server has requested TLS client ...
Cobbler Dev's user avatar
0 votes
2 answers
39 views

Make a site hosted in IIS server use https and access it within the intranet

I have a site hosted on my IIS server and I can access it on http:localhost. I made a self-signed certificate and added it to the site and can access it via https:\\localhost. I want the site to be ...
Suman jha's user avatar
0 votes
0 answers
19 views

Finding CA Cert from a Synology NAS to use it with curl --cacert

My Synology uses self-signed certificate, so I need to include it with curl --cacert /path/to/cert.pem to connect safely from a terminal to NAS using https. How can I find this certificate on my ...
Async's user avatar
  • 1
0 votes
1 answer
22 views

Does Chrome support OID Filters in the TLS handshake

Cite from rfc8446 The "oid_filters" extension allows servers to provide a set of OID/value pairs which it would like the client's certificate to match. This extension, if provided by the ...
Desperado's user avatar
  • 101
1 vote
1 answer
24 views

Failed to generate a Let's Encrypt certificate on Asustor NAS with error Ref. 5402

While trying to generate a Let's Encrypt certificate for my Asustor NAS through Settings -> Certificate Manager (following the instructions), the process repeatedly failed with error Ref. 5402. ...
Nicolas Holthaus's user avatar
0 votes
0 answers
71 views

Inconsistent SSL connection error when using wget

I'm trying to download some .nc files from a secure online database. It seems like for roughly every other attempted file download, I get an 'Unable to establish SSL connection' message, and then wget ...
user avatar
1 vote
0 answers
41 views

Chrome network requests stall for exactly 10 seconds when using custom local SSL hostnames and certificates

I develop websites locally with mkcert tool to create SSL certificates for my domain (eg project.local). Then I point project.local to 127.0.0.1 in my hosts file (/private/etc/hosts for me on Mac). I ...
Brad's user avatar
  • 141
0 votes
1 answer
77 views

openssl s_client -connect errorno=111

Hi I got problem with openssl connection. I have java application which connects from server1 to server2 I made clone of server2 and upgraded it from Debian 9.7 to Debian11. The connection to ...
Yawa86's user avatar
  • 1
0 votes
1 answer
22 views

Need advice regarding setting up SSL on my webserver

I just acquired an SSL Cert for our domain tspack.us - so I am assuming that the Cert is ONLY good for that exact name correct? I technically can't use www.tspack.us because it won't match exactly ...
Mike Anderson's user avatar
0 votes
1 answer
58 views

Use NGINX to serve as both webhost + direct subdomain request to dockerserver:port

First, I struggled hard with the title. I've been trying back and forth, googling like mad and the resources I find are most likely way to complicated for me. But I find it so unbelievable that it's ...
Plankt0n's user avatar
2 votes
4 answers
2k views

Nginx without public certificate

Is there any way that we can configure an Nginx without a public certificate? The objective here is, I want to publish an API on public internet, but all the API client (whitelisted clients) should ...
Rick Brian's user avatar
1 vote
0 answers
32 views

What is the proper way to host multiple websites from the same machine and same ip address? [closed]

I have two Flask websites running on an ubuntu machine running on my home server. Both of them are running as a service with Gunicorn, one is on port 9000, the other is on 9001. I have registered a ...
Daniel's user avatar
  • 11
0 votes
0 answers
89 views

Website loading difficulties after TLD change from .com to .promo

We recently changed the URL of our website from eyevertising.com to bold.promo, and we now hear from a few random customers that they can't access the new website! The only thing we really did, was ...
sfaber's user avatar
  • 1
0 votes
0 answers
64 views

Selective TLS connection fail

I have a VB.NET application that connects to a remote server, which I have no authority whatsoever, via a username/password, retrieves some data and populates a local database. Lately the application ...
user10191234's user avatar
0 votes
0 answers
27 views

TLS termination of NLB

Objective: I would like to achieve the following with AWS and understand how to configure it: AWS Configuration: ACM certificate (associated with NLB listener). NLB (in a public subnet, accepting TLS ...
T Takeshi's user avatar
0 votes
0 answers
375 views

Error with SSL and TLS on Windows server 2019

After I updated the windows server 2019, it is not possible to connect to the server using remote desktop connection. Also the sites which are hosted on https on this server can't be opened and the ...
user avatar
1 vote
1 answer
166 views

Initial connection takes too long only on a specific browser/network

I'm having a frustrating issue that I have no idea why it happens or how to fix it. My initial connection (the "SSL handshake") is taking a minute to some websites only on Chrome browser (...
user1727876's user avatar
0 votes
0 answers
13 views

How do I refresh an page automatically every time an net::(ANY ERROR) is detected on the inspect console on Chrome?

So I have an question. The most annoying error I have in Chrome is the net::ERR_SSL_PROTOCOL_ERROR, which occurs for broken images. I used Codepal to help me make this script, but it does not work. I ...
Noah Walters's user avatar
0 votes
1 answer
603 views

Certificate is valid, but website shown as not secure on some browsers

So I'm currently trying to set up a website over https. I have a webserver running Ubuntu and Apache2, and DNS records are set to direct example.com and www.example.com traffic. I have a valid ...
guninvalid's user avatar
0 votes
0 answers
49 views

Home Network, How to install SSL XAMPP Self-Hosted Website

I use laptop IP Lan 192.168.88.248. I opened port 80 on this IP. Hairpin NAT in LAN. I registered the domain abc.mooo.com at freedns.afraid.org and assigned it to my WAN IP. I install default XAMPP (C:...
Rick Horn's user avatar
0 votes
0 answers
6k views

FortiClient VPN stuck at 48% with error code -7200 - Credential or SSL VPN connection issue

I've been facing an issue with my FortiClient VPN connection, and despite trying several troubleshooting steps, I'm still unable to resolve it. The problem is that the connection consistently gets ...
SYT's user avatar
  • 1
1 vote
2 answers
110 views

Invalid SSL certificate for Wikimedia, only on my PC and only on LAN; resolves correctly on Wi-Fi

Since yesterday I'm having trouble with anything related to the https://upload.wikimedia.org/ URLs, they all give an ERR_CERT_COMMON_NAME_INVALID error. I tried some troubleshooting and I noticed that ...
bimbo1989's user avatar
  • 111
0 votes
0 answers
90 views

Certificate Authority works in Linux but fails in MacOS

I want to create a self-signed root certificate authority, such that the certificates signed by this CA are trusted by the OS which trusts the CA. After following a couple different guides, I managed ...
David's user avatar
  • 101
0 votes
1 answer
856 views

How to disable SSL checking on Nginx?

I have some QA server for my website. A year ago I've tried to make SSL connection to my production website so I've implemented it on the QA by nginx too. Now it's expired and I don't want to renew it ...
lingar's user avatar
  • 121
0 votes
2 answers
678 views

https url not found on ubuntu apache2

Trying the configure SSL on Apache2 on Ubuntu server installed Apache sudo apt install apache2 Opened ufw firewall sudo ufw allow 'Apache' ufw allow https Installed SSL files in /root/cert chmod ...
vrao's user avatar
  • 61
1 vote
0 answers
54 views

Forcing Firefox to validate SSL certificates from Sophos

A network I'm often connected to uses a Sophos network block on many sites. I would like to try to get around this. I looked at the solution from how to make firefox ignore all ssl certification ...
silvanathecat's user avatar
1 vote
1 answer
51 views

Intermittent connection issues to a particular website

I am facing connection issues with a website. All of them seem to be connected: The website host name: napi.kotaksecurities.com (using https) telnet napi.kotaksecurities.com 443: fails sometimes, ...
ztart14578's user avatar
1 vote
1 answer
795 views

Disable TLS 1.3 over TCP

After you create a website in Internet Information Services (IIS) Manager, in the config file in the path below, C:\Windows\System32\inetsrv\config\applicationHost.config You can modify the following ...
Codename K's user avatar
0 votes
1 answer
115 views

PolarProxy doesnt write packets to the pcap file

Im trying to use PolarProxy on windows to capture some packets but when i test it out it doesnt write anything to the pcap file I tried using --autoflush 1 which is meant to write it to pcap file ...
Bob's user avatar
  • 1
0 votes
0 answers
43 views

SSL Connection to mysql database using OCI Data integration REQUIRE X509 flag

I have a data integration requirement to connect and retrieve data from mysql database using SSL,the user am using to connect is created is with REQUIRE X509 flag so in the connection i need to ...
Talal Omer Hassan's user avatar
0 votes
1 answer
38 views

Adding a mail server to existing network

I'm adding a VM mailer and would like support on the new layout on my network. I currently have a firewall that forwards connections to a VM nginx that deals with HTTP/HTTPS requests, forwarding to ...
rd1218's user avatar
  • 101
0 votes
0 answers
61 views

NGINX fails to connect to Nextcloud instance

I have a server running proxmox with 3 VMs: NGINX, Bitwarden and Nextcloud. Bitwarden works fine which proves that NGINX is working ok, however when NGINX tries to connect to Nextcloud it will result ...
verumIgnis's user avatar
0 votes
0 answers
182 views

In docker-compose, Error adding SSL Certificate to reverse proxy to consume websocket?

Deploying docker in windows 11 and working with docker-composer, I am trying to enable the ssl certificate for my setup where I want to enable nginx as a reverse proxy to allow secure websockets wss://...
Francisco Nuñez IA Lover's user avatar
-1 votes
1 answer
746 views

Can AD CA certificates for internally facing sites be inherently trusted?

Is AD CA (AD Certificate Services properly configured) all that's needed for (SSL certs on) internally facing sites to be trusted w/o any additional configuration on domain-joined clients? Say: ...
kindzmarauli's user avatar
0 votes
0 answers
102 views

In Docker, how to integrate WebSocket into LAMP Service with an intermediary reverse proxy?

Good morning friends, I have the following docker-compose.yml file with which I install a reverse proxy and a LAMP stack with the phpmyadmin service. Note: I have practically created it from scratch ...
Francisco Nuñez IA Lover's user avatar
1 vote
0 answers
129 views

OpenVPN traffic through TLS-enabled TCP connection

I have to obfuscate OpenVPN traffic. So I created a TLS-enabled TCP tunnel with socat, and I want to pass OpenVPN traffic through this tunnel. Server: sudo socat openssl-listen:443,cert=/home/ubuntu/...
Mustafa Chelik's user avatar
0 votes
0 answers
77 views

Unable to get into admin board of NPM

Recently I resetted my proxmox home server to fully redo everything properly. Today i re-installed Nginx Proxy Manager. but i am stuck in a loop if i want to acces port 443, my chromium browser sends ...
Gijs Kruize's user avatar
0 votes
0 answers
839 views

nginx server can't read pem key provided by Ionos

-----BEGIN CERTIFICATE----- contents -----END CERTIFICATE----- -----BEGIN RSA PRIVATE KEY----- contents -----END RSA PRIVATE KEY----- but I still get the following error in the logs ...
ageis23's user avatar
  • 671
0 votes
0 answers
42 views

Client fails TLS handshake

A client is trying to connect to my website using a client certificate. However, they get a 400 error. They gave me their public certificates excluding root CA in a .crt file. This is the access log: ...
A. Abassi's user avatar
0 votes
1 answer
41 views

Website refuses to load, but works fine everywhere else. SSL Certificate related

I have a computer which has stopped connecting to a website. Normally this computer would just get rebuilt with the standard image we have for the computer, but there's a lot of bespoke software which ...
JohnnyVegas's user avatar
  • 3,508
-1 votes
1 answer
66 views

Getting SSL/TLS certificates for SSL enabled services

I need to run RabbitMQ and Mosquitto brokers in SSL mode. I assume that I need CA certificate to generate server key and certificate. How can I obtain this? I need trusted one - not self signed. I ...
Kal800's user avatar
  • 9
0 votes
0 answers
49 views

Nextcloudcmd SSL issues

I'm encountering issues with nextcloudcmd on my Linux instance, more precisely SSL errors /usr/bin/nextcloudcmd --trust -u {USER_NAME} -p {PASSWORD} {SOURCE_DIR} {URL} output: 08-28 17:17:14:180 [ ...
THEoneANDonly's user avatar
1 vote
1 answer
101 views

What comes first - Certbot or nginx?

I am trying to set up nginx to act as a reverse proxy on a small personal server; however, I am encountering some circular logic when I ask certbot to generate SSL certificates. From what I can tell, ...
henley's user avatar
  • 21
0 votes
0 answers
355 views

error making a custom CSR on windows 10. "One or more of the object's properties are missing or invalid"

I am trying to generate a custom CSR using mmc & certificates snap in. The cert will be a mTLS client cert using ECC. I go through the following steps: load certificates snap in for current ...
hkc's user avatar
  • 21
0 votes
1 answer
59 views

During SSL tunneling what IP address is seen by the destination server?

If I setup a SSL tunnel via a HTTPS proxy, what IP address will the destinations server see? Would it be the IP address of the client or the IP address of the proxy? Is there any point (e.g. during ...
chukky arinze's user avatar
0 votes
0 answers
356 views

Update openssl to 3.1.1 from 1.0.2n in Nodejs

I am working on an old node.js project which is using the Openssl version 1.0.2n. I found only a dll (libeay32.dll) using in this project and in that that dll openssl version is 1.0.2n. Since Openssl ...
mhhabib's user avatar
  • 101
0 votes
2 answers
40 views

Get business details from SSL certificate

I recently got scammed by a site posing to belong to a legitimate company. The business showed up on the HK exchange as being legitimate, and I checked several other sources for a legitimacy, and the ...
MagicLAMP's user avatar
  • 101
0 votes
0 answers
62 views

I am trying to mimic the connection of my softether vpn to setup a openvpn with TLS 1.2 instead of SSL

I am trying to setup a openvpn with tls 1.2 instead of ssl with tcp, as in this screenshot: How can I mimic the connection like the softether (on the left) in order to setup openvpn (on the right)?
rogcontract's user avatar
2 votes
2 answers
3k views

SSL Certificate Issuer History for particular domain or website

Is it possible to find out the history of issuers of SSL certificates for a particular website? For example if a website had a cert issued from one company A originally, then the website had a new ...
Brian's user avatar
  • 123

1
2 3 4 5
36