Questions tagged [ssl]

SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

Filter by
Sorted by
Tagged with
0
votes
0answers
19 views

Connection reset by [my-public-ip] port 22

SSH installed on Windows Server 2012 Not cooperating. I've read every article I can find on this (more than once) I've triple checked every possible scenario based on docs and similar posts, ...
-1
votes
1answer
50 views

Decrypting plain text. PEM certificate

I have a text that is supposedly base64 encoded. But when I try to decipher it, an incomprehensible text comes out. But in principle, Latin letters are read. Perhaps this is a public certificate. How ...
0
votes
1answer
25 views

openVPN for macOS, can I change the tunnel to wireGuard or IpSec?

I've got .ovpn file that configured to connect my openVPN client running on macOS to remote openVPN server for tunneling my network tranffic over there. I was wondering why does my openVPN doesn't ...
0
votes
0answers
27 views

The request was aborted: Could not create SSL/TLS secure channel in Visual Studio 2013 for Windows Desktop

I am facing a small problem .. unintentionally uninstalled the NuGet Package tool from my Visual Studio 2013 where I use it to install frameworks, libraries, among others .. however when trying to ...
0
votes
1answer
30 views

How is the certificate encrypted?

I want to get an Apple CA certificate from the link https://setup.icloud.com/setup/qualify/cert?ver=P1.10.1 but I get an unclear file. How is it encrypted? Or how can you open it? i tried to save it ...
0
votes
1answer
22 views

packet retransmission when using scp/ssl over wireGuard interface

I've created wireGuard based network interface on my macOS. and according to the protocol description, WireGuard is working over UDP. So I was wondering which layer handle the packets retransmission (...
0
votes
1answer
19 views

Is a Public key from a certificate always valid?

Okay so i have a .cer file which has a certificate key like -----BEGIN CERTIFICATE----- .....A1NuUYdviJSQOLhkL8WgtEpocv1u2mv9DQcMJWoA -----END CERTIFICATE----- I am using this public key to verify a ...
1
vote
1answer
30 views

Redirection fail on Apache2 for SSL subdomain configuration

On my Apache2 server I've enabled this 3 subdomain sites. database.example.com <VirtualHost *:80> ServerName database.example.com ServerAlias www.database.example.com DocumentRoot /usr/...
2
votes
1answer
14 views

Should I use the same values for database, serial and crlnumber in the config for a Root-CA and its Sub-CA?

Should I use the same files for database, serial and crlnumber in the ca_default-section of my config file for both the Root CA and the subordinate CA? Or is it better to use different sets of files? ...
1
vote
1answer
30 views

NodeJS + Nginx 403 Forbidden but URL:PORT is working

I have a NODEJS website on production and I can't access to : https://mydomain1.com => 403 Forbidden https://mydomain1.com:443 => 403 Forbidden But everything is working when I add port &...
0
votes
2answers
33 views

wget cannot verify GitHub.com's certificate

I am using macOS 10.15.7. I have installed wget via homebrew. My goal is to install orpie via opam. opam uses wget. My installation of wget cannot find the certificates it needs. How can I resolve ...
0
votes
1answer
12 views

cURL error 60 in Symfonycasts tutorial

In Symfonycasts "API Platform: Serious RESTful APIs" Chapter 6 there is the cURL command curl -X GET "https://localhost:8000/api" -H "accept: application/ld+json". ...
0
votes
1answer
15 views

In Debian buster TLS 1.0 has been disabled, is it possible to enable TLS 1.0 for certain domains/ips only?

I'm using the python:3.8-slim-buster docker image. Debian buster only allows TLS 1.2 or greater. I need to make request for certain websites those only support TLS1.0, I want to be able to configure ...
0
votes
2answers
26 views

How do I use the openssl command to decode a public key .PEM file?

I have my localhost TSL/SSL certificate from Chrome stored to a .PEM file. Was wondering how do I use the oppenssl command to decode it into a list of human-readable fields. Googling this only ...
0
votes
0answers
20 views

OPENLDAP - ldapwhoami not working binding securely, but other applications does

I tried adding TLS hard in slapd.conf but it says unknown directive inside backend database definition. Tying by CLI the command ldapwhoami.exe -H ldap://myldap.company.com -v -D "uid=dds,ou=...
0
votes
1answer
32 views

SSL Error with wifi card on Windows 10

I just got a new Omen 15 without OS, I installed windows 10 but the wifi doesn't quite work. It connects to the wifi correctly, but most websites won't load, with the inspector console showing ...
0
votes
2answers
39 views

SSL certificate authentication on Outlook 365 (cloud)

We can send emails using an Office 365 account from third-party devices using STARTTLS encryption on a SMTP server (port 587). The device I am using does not support STARTTLS, only plain vanilla SMTP (...
0
votes
1answer
19 views

Is there anything like certbot (auto-renewal) for paid SSL certs? [closed]

For maximumum compatibility, I want to use simple DV PositiveSSL certs, similar to what Let's Encrypt does. But the biggest pain in the neck is that I can't find anything which renews automatically ...
0
votes
0answers
27 views

Should I continue to use Let's Encrypt after September 2021?

I am very curious about what the community thinks. After Sept 2021, they will no longer be co-signed by DST Root CA X3, and basically any platform from 2016 or older will not validate their ...
0
votes
0answers
43 views

SSL certificate error on all browsers, for all HTTPS sites, only one one profile (Windows 7)

Wondering if any of you guys might have some advice; I'm trying to help fix my mom's computer over the phone, and looking for ideas. Context: my mom bought a laptop second-hand. The laptop is running ...
1
vote
0answers
33 views

FileZilla and IIS: GnuTLS error -110: The TLS connection was non-properly terminated

I'm trying to connect to a VPS running Windows Server 2019 using Filezilla Client, but get the error GnuTLS error -110: The TLS connection was non-properly terminated. My Let's Encrypt certificate ...
0
votes
1answer
11 views

Certbot fails to start nginx

I am using kernel 3.10 on CentOS 7. I have successfully installed CertBot 1.10.1 using alternative installation instructions as certbot-auto. I have manually added certbot-auto to autorun via systemd ...
1
vote
1answer
172 views

Homebrew cannot download from homebrew.bintray.com, gives a curl error: “no alternative certificate subject name matches target host name”

When I try to install or upgrade any package hosted on homebrew.bintray.com, I get the following error: curl: (60) SSL: no alternative certificate subject name matches target host name 'homebrew....
0
votes
2answers
39 views

SSL Certificate automagically fails after an hour?

Heyya, We're currently trying to work on a website in a testing/staging environment, and as such have been setting up SelfSigned certificates to get as close to the real deal as possible, before ...
0
votes
1answer
150 views

SSL certificate: EE certificate key too weak

$ curl -s https://goolge.ca | wc 0 0 0 $ curl -vs https://goolge.ca . . . * successfully set certificate verify locations: * CAfile: none CApath: /etc/ssl/certs * TLSv1.3 (OUT),...
1
vote
0answers
101 views

OCSP not working consistently with NGINX

Host: Ubuntu 20.04.2 (5.4.0-67-generic) x64 Server: NGINX 1.18.0 (Ubuntu) CA: Let's Encrypt Having a really hard time getting OCSP to work consistently. Any help would be appreciated. Thanks in ...
0
votes
0answers
21 views

Why aren't my websites configured in IIS using the correct certificates?

My sites are similarly named: hi.api.domain.tld hi.test.domain.tld The .api domain is my api and .test is the webapp that consumes the api. I've got a certificate for each one but they don't seem to ...
0
votes
3answers
45 views

Export SSL & TLS Registry Keys to XLSX

I'm currently looking to find out all SSL and TLS Registry value information on the system. I need help writing a script for powershell to look at a list of hosts that are on a csv/txt file then ...
1
vote
1answer
50 views

Export SSL & TLS Registry Keys to CSV

I'm currently looking to find out all SSL and TLS Registry value information on the system. I need help writing a script for powershell to look at a list of hosts that are on a csv/txt file then ...
1
vote
1answer
28 views

trying to reinstall ca-certs on centos

I am trying to connect to a web service and i get an error: cURL error 77: ......... I have read all over the web, that i can fix it by: yum reinstall -y ca-certificates but when i do that, i get: # ...
1
vote
1answer
17 views

Chrome, static PKP sets, and TLS inspect without warning

I'm using chrome in an environment that is employing transparent TLS inspect. There is a private CA that issues the certificates and is available in the trusted authorities store. When I visit mail....
0
votes
0answers
11 views

Windows 2012R2 IIS8.5: How to change the Key Exchange being used

I have a server using: Key Exchange: ECDHE_RSA (0xae06) 256bits I would like to change this to : Key Exchange: RsaKeyX 2048bits Is this something that can be done at the server level or is this set in ...
2
votes
0answers
21 views

Highlight sites using ZScaler root certificate

Is there an extension to Edge, Chrome or Firefox that easily lets me know that the site is using the ZScaler root certificate for the TLS connection? It is good to know which sites could be vulnerable ...
0
votes
1answer
135 views

How do I fix ERR_CERT_AUTHORITY_INVALID in Chrome?

I am trying to visit gimp.org using Chrome 89 on Windows 7. I get the ERR_CERT_AUTHORITY_INVALID error. I have looked at various stackexchange answers as well as several other resources and here is a ...
1
vote
1answer
55 views

Why do browsers use or display expired SSL certificates? [closed]

The SSL certificate (of Let's Encrypt) of one of our websites (https://edu.electrosuisse.ch) expired yesterday morning. It has renewed itself using the services of Let's Encrypt several days ago. Yet ...
0
votes
0answers
24 views

Enable cipher suite TLS_DH_anon_WITH_AES_128_CBC_SHA

I need to connect to an old device, which doesn't support any modern cipher suites, currently, I get the error: iwr : The request was aborted: Could not create SSL/TLS secure channel. nmap's ssl ...
2
votes
0answers
1k views

Can't install with pip: SSL error

I'm new to coding and have recently started learning Python. Whenever I enter pip install django (for example), I get these error messages: WARNING: Retrying (Retry(total=0, connect=None, read=None, ...
1
vote
1answer
20 views

SSL inspection (man-in-the-middle) on lessor used and/or insecure sites

I am looking into how SSL inspection works. I have some general ideas how it works but I could not figure out a couple of issues. When SSL inspection is used on client accessing some non-mainstream ...
1
vote
0answers
36 views

NGINX as TLS-transparent (secure TCP) and a TLS-terminating (TLS offload) reverse-proxy based on sub-domain name

I host a few services from my home network to the internet and I learned recently about reverse-proxy concepts using NGINX. Some of my services (like Home Assistant) have the built-in ability to ...
0
votes
0answers
27 views

how to specify the hostname to the Java “keytool -printcert” command for HTTPS servers with SNI

Does keytool has any option to specify the hostname in order to print the SSL certificate chain? In my case, my apache server is configured to show different SSL certificates according to the hostname....
0
votes
0answers
40 views

Invalid certificate for one specific website

When trying to navigate to a specific website (amazon.com in my case) I always get the "NET::ERR_CERT_COMMON_NAME_INVALID" error in Chrome (and equivalent errors in Safari/other browsers). ...
0
votes
1answer
61 views

Does openssl s_client behave differently when connecting to a server where a client certificate is required vs optional?

I making an SSL connection to a server where client certificate authentication is supported but not required. In a browser, I can authenticate with a token, or I can cancel the prompt to present a ...
1
vote
1answer
36 views

SSL Certificate not updating in Mac Mail

I have a Let's Encrypt daemon running which updates the domain ssl certificates on a regular basis. I've set up my mail address and it worked happily for a long time but now Mac Mail is not updating ...
0
votes
2answers
160 views

Chrome showing “Not Secure” but certificate is valid

I am using a valid certificate but still chrome is showing me “Not Secure” when browsing to my site. This are the steps I have made: I have installed a self signed certificate in my testing server (...
0
votes
0answers
14 views

How to download Certificate of a website that requires SNI

I am currently using keystore explorer software to download/export certificates of website using the "Examine SSL" button But this is not working if the website expects "SNI" I can ...
0
votes
0answers
22 views

Is it possible to use SSL client certificate authentication with client programs that do not specifically accommodate them?

I have set up a webserver with several self-hosted apps for my personal use. In order to make sure that I am the only person who can connect to my server, I have generated client authentication ...
0
votes
1answer
36 views

Nightmare creating a self-signed SSL certificate that works

I have an intranet server that I need to install a SSL. This is the openssl.cnf [ req ] default_md = sha256 distinguished_name = req_distinguished_name attributes = ...
1
vote
1answer
58 views

Checkmate about TLS certificates on local networks, self-signed certificates and CA

I know barely anything regarding SSL and TLS certificates. Sorry about that. This is what my company asked me: They need to put a server on the local network that will be accessible through VPN to ...
1
vote
1answer
18 views

Easy switching between multiple sets of ca certificates?

My new job requires company's custom CA certificate to be installed. It is ok until I'm working, but I don't want this CA certificate to be active during non-working time. Are there any ways ...
1
vote
1answer
23 views

Hosting several applications from home

I'm hosting several applications from home. My current "dirty" solution is, to forward multiple ports in my router. Downside is, I have to remember which ports serve which application. Plus, ...

1
2 3 4 5
32