Questions tagged [ssl]
SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.
1,800
questions
0
votes
0
answers
103
views
Is there a way to install certificates to LocalMachine store without logging into windows?
As a part of some dev work I was doing, I was trying to identify and document only the essential certificates required to run an app locally. Since I had a bunch of certs in my LocalMachine store, I ...
0
votes
2
answers
171
views
How to differentiate between certificates issued by the same CA
I have a certificate which is signed by an external Certificate Authority (CA). If I understand correctly that Certificate Authority can also sign other certificates that I'm not aware of. My question ...
1
vote
2
answers
389
views
Why does my Squid proxy setup keep triggering spam bot protection like Cloudflare's CAPTCHA?
I am running at home a proxy server setup designed to limit access to certain websites that I find produce a drag on my mental health (for very complex personal reasons totally off topic here), which ...
0
votes
0
answers
1k
views
Encrypted browser-proxy (Squid) connection
I'm trying to set up an encrypted communication between the browser and our proxy (squid)
theoretically, it must work out of the box with modern browsers as mentioned in squid official doc :
https://...
0
votes
0
answers
47
views
Save HTTPS response together with SSL signature
I'm building an app that should download file from a given url and store it locally, like a cache.
Now, I would like to be able to prove that the content was indeed downloaded from this url, and not ...
1
vote
1
answer
241
views
Thunderbird refuses CalDAV server certificate although the name matches
After upgrading to Thunderbird 102 (from whatever the previous version on the Ubuntu 20.04 repos was), I can no longer connect to the CalDAV server I run. Thunderbird refuses the certificate, claiming ...
0
votes
1
answer
619
views
How can I generate self-signed certificate with these standards?
I tried creating a certificate using this command:
New-SelfSignedCertificate -DnsName "WDACSigning" -CertStoreLocation Cert:\CurrentUser\My\ -Type Codesigning
but it causes boot failures ...
0
votes
0
answers
1k
views
Docker pull on Synology fails when DNS Server is enabled
I enabled the DNS server on my Synology. Therefore when I am using the Synology DNS (192.168.1.20) instead of the Google DNS (8.8.8.8), I get this error:
me@synology $ sudo docker pull linuxserver/...
1
vote
0
answers
834
views
Decrypting TLSv1.3 data using SSLKEYLOGFILE from native app
I am trying to decrypt TLSv1.3 packets using Wireshark. I have succeeded in doing so using this tutorial: https://blog.didierstevens.com/2020/12/28/decrypting-tls-streams-with-wireshark-part-2/
This ...
0
votes
1
answer
175
views
Cannot connect using wldap32 and apacheds over TLS (LDAPS)
I am using a dynamic language that via FFI it wraps the wldap32 dll. I am using ApacheDS and I can perfectly connect to it from my client using normal LDAP. However, I cannot connect to it when using ...
0
votes
1
answer
105
views
Invalid certificate with Dynamic Domain
What I tried to do:
Set up a Dynamic domain to connect with my Nextcloud(Self data storing) which is hosted on my home server.
What has been done:
Bought domain at domain.google.com
Setted up Dynamic ...
2
votes
0
answers
6k
views
Error with SSL routines:: unsafe legacy renegotiation disabled
I have been trying to do a webscraping from this site.
When I use the browser to acess, the website opens normal.
But when I try to use R or Python, I have a few errors like: Error in open.connection(...
1
vote
1
answer
1k
views
HTTP Error 404. The requested resource is not found. - Only when no "https://" is entered. Windows IIS with Wordpress. - Any ideas?
I am running Windows Server 2012 R2 with IIS. I have added a website at the following address: https://List4Less.com
It worked fine up until recently. I added a wildcard SSL certificate and it ...
0
votes
1
answer
429
views
Can't connect to OpenVPN server, but only on Linux
I'm using PiVPN on my Xubuntu server to create a VPN. I'm aware that PiVPN was designed especially for Raspberry Pis, however it's very easy to setup and work with so I decided to use it on my Xubuntu ...
0
votes
0
answers
115
views
Windows forgets self-signed certificate after reboot
I have a self-signed website certificate. When using it I have two Windows 10 machines that forget the self-signed certificate every time after windows reboot. It only happens in those two machines. I ...
2
votes
2
answers
388
views
How to teach git to trust github on linux?
Recently on my linux system i have run into an issue of not being able to commit to my own github repository. When i try to do it, that's what i get:
my prompt: > git push --verbose
Pushing to ...
0
votes
1
answer
81
views
What is a Application/Service Certificate compliant with FIPS 140-2
I have enabled FIPS on my AWS EC2s and updated the prefix's as shown here: https://aws.amazon.com/compliance/fips/
All of this is working in the AMI Build & Pipeline, however, at the application ...
1
vote
0
answers
382
views
Cloudflare Nginx SSL Not Trusted/400 bad request (No required ssl certificate was sent)
Similar to this the error I am receiving from this thread (https://community.cloudflare.com/t/getting-400-bad-request-no-required-ssl-certificate-was-sent-using-nginx-and-cloudflare-authenticated-...
0
votes
0
answers
372
views
Difficulty hosting subdomain with multiple dots
I am attempting to host the S3 replacement service MinIO. When I use a subdomain with a dot in it (console.s3.example.com instead of console.example.com) I receive an SSL error ...
1
vote
1
answer
646
views
Replacing SSL certificate via SSH with local files
I need to replace a ssl certificate on an Ubuntu webserver which expires soon. My client sent me some certificate files:
server.key
server.csr
intermedio.pem
CSR_trustico.pem
Certificato.crt.txt
How ...
1
vote
1
answer
3k
views
"This server does not support FTP over TLS" warning in vsftp. Why does it appear?
I've got a small VM set up, which runs Debian.
In my vsftpd.conf file, there are the following lines:
listen=YES
listen_ipv6=NO
connect_from_port_20=NO
anonymous_enable=NO
local_enable=YES
...
0
votes
0
answers
225
views
Renew a self-signed certificate
Let's say I have a self-signed X.509 certificate:
file some.bin
some.bin: Certificate, Version=3, Serial=00ea5db390c4cc0de3, Issuer=Some Certificate, not-valid-before=2022-08-02 06:51:44 GMT, not-...
0
votes
1
answer
2k
views
aria2c fails: certificate expired
I used aria2 for many years to download, but now it ends with this error:
2022-07-28 17:36:05.765460 [ERROR] [AbstractCommand.cc:351] CUID#7 - Download aborted. URI=http://www.reversebeacon.net/...
0
votes
0
answers
4k
views
How do you automatically renew certs in pfSense?
I have an internal certificate authority configured in pfSense that issues a certificate for webConfigurator. The certficate can be renewed from the certificate manager interface. How can the renewal ...
1
vote
1
answer
616
views
Cert's altnames are totally unexpected resulting in SSL verification failure
I keep getting SSL verification failures when trying to connect to a REST API at esi.evetech.net. It appears that the cert's altnames are totally different from what I would expect.
From Postman, with ...
0
votes
1
answer
29
views
securing client/server communication
I have special environment which requires that I think security a bit out of the box.
Components involved:
A web service which requests data from a gateway, processes it and sends it to web clients.
A ...
1
vote
3
answers
14k
views
Unable to get local issuer certificate error with unusual certificate chain
I've encountered a frustrating issue with my SSL implementation due to what may be related to Let's Encrypts CA-X3 certificate expiration.
Forewarned that I am a developer with limited understanding ...
0
votes
1
answer
2k
views
certificate verify failed: unable to get local issuer certificate . Why?
Ran the following commands.
PS C:\Users\anups\Desktop\Cloud_AntiScalant> mkcert -install
Created a new local CA 💥
The local CA is now installed in the system trust store! ⚡️
PS C:\Users\anups\...
0
votes
1
answer
2k
views
Why does the website gets "This site has requested that you identify yourself with a certificate" popup?
Recently I added a SSL certificate I received to a newly migrated website. Since no issues can be identified on most of the machines , some users complained of getting a 403 forbidden error. When ...
0
votes
0
answers
161
views
Switch from Internet Explorer to Edge Chromium / Chrome
I'm working on a legacy application created with HTML 4 and PHP 5, my purpose is to run the application on Edge chromium, the style of the application is good on internet explorer but when I tried to ...
0
votes
0
answers
2k
views
How do I deal with NET:ERR_CERT_AUTHORITY_INVALID in Edge?
I'm working on a legacy application with invalid ssl certificat. I want to run the application on Edge, I get the error NET::ERR_CERT_AUTHORITY_INVALID, but I can run it on google chrome.
I know I ...
1
vote
0
answers
6k
views
"failed to receive handshake, SSL/TLS connection failed" only when trying to access T-Mobile.com
I have 2 phones, 2 tablets, and 2 laptops can log into my account at T-Mobile with no issues.
My main PC, (Alienware R11 running Win11) cannot access my T-Mobile account. It gets an error when trying ...
0
votes
2
answers
725
views
Trouble getting the Chrome browser on a Mac to connect securely over SSL/TLS to Apache 2.4 on Centos
We operate multiple sites that run the Leaf webapp. Our configuration runs on Centos 7.9, with a .NET Web API and Apache 2.4.
The system is used only by staff who access our Intranet. It uses a self-...
0
votes
1
answer
713
views
Google Chrome security warning: Your connection is not private
Consider visiting a website that have a expired SSL certificate. Google Chrome (Version 102.0.5005.115, Windows 10) presents a warning:
NET::ERR_CERT_AUTHORITY_INVALID
However, I trust the sites as ...
0
votes
0
answers
199
views
Reverse Proxy Server not forwarding one web site, but ok for others
To set my level, I'm a Raspberry Pi and Linux experimenter, and not an experienced network administrator. To get this far I have used the web and several tutorials. I'm learning, but sometime I ...
1
vote
1
answer
69
views
Stop Chrome from going to a website when the connection is "not private" after using Advanced to circumvent that
I'm creating a secure website that uses HTTPS.
When Chrome accessed it, Chrome reported a "Your connection is not private" error.
I then used the "Advanced" button to go to the ...
0
votes
2
answers
180
views
Migrating a hosted Web-Server to a home-based sever (inlcuding Domain Name and SSL)
Up to now I was using a hosted server with a static IP address, and own SSL certificate and an own domain.
My server hosting company has provided me with an interface, in which I entered some entries ...
3
votes
1
answer
2k
views
How do I disable SSL/TLS certificate verification in ffmpeg?
I was going to write out a long drawn-out question with tons of details about my circumstance, but figured even though questions are usually much more detailed on here, this one is pretty simple (...
0
votes
2
answers
3k
views
How do I auto-renew a manual Certbot cert?
I manually set up a Certbot cert on an EC2 instance so that I could set up a wildcard cert.
Specifically, I used the following command (with the real domain, not example.com) to set up the manual ...
0
votes
0
answers
341
views
Wildcard certificate key value mismatch on single server
We're updating the wild card cert in all our servers this month, including three nginx proxy servers. Two of those worked right away, the third gets this error:
nginx: [emerg] SSL_CTX_use_PrivateKey(&...
0
votes
1
answer
3k
views
How to incorporate multiple .pem certification files to a single .pfx file?
I'm working on IIS on Windows 2019. I have given certificate files; cert.pem, chain.pem, fullchain.pem and privkey.pem. I believe that I have to convert this to .pfx to incorporate it to the IIS. How ...
1
vote
0
answers
1k
views
Main steps on making XAMPP a "secure" env for production
To start out I know that XAMPP is not ideal for production. But I'm a begginner in using Apache, MySQL and most importantly I'm very new to PHP. I came from a Node.js/Java/Javascript background and so ...
1
vote
2
answers
12k
views
SSL certificates no longer work with cURL
When running the following command on WSL:
curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.1/install.sh
I get the following error:
curl: (60) SSL certificate problem: unable to get local ...
0
votes
0
answers
423
views
How to fix error ERR_SSL_VERSION_OR_CIPHER_MISMATCH
I'm working on a PHP and while the application works in Internet Explorer, within Edge, where I want to run this application, I get error ERR_SSL_VERSION_OR_CIPHER_MISMATCH.
How to fix this error?
0
votes
0
answers
913
views
how to add self-signed certificates in kubuntu 22?
So our company uses MITM to spy on us, and I need to add their ca certificates into system so that I can for example update the linux system. These are in pem form and if I do:
sudo cp cert1.cer cert2....
0
votes
0
answers
2k
views
Why unable to verify local issuer certificate? (https calls for google)
I am using docker desktop to run a simple node:16-alpine through mac. Which I added a ca-certificates, curl and openssl.
RUN apk add --no-cache --repository http://dl-cdn.alpinelinux.org/alpine/v3.15/...
0
votes
0
answers
61
views
installing SSL on 2 exchange servers
I have 2 exchange servers run for one email service, and I need to renew the SSL certificate. Do I need to issue 2 SSL, or one is enough?
If one is enough how can I replicate it between them?
0
votes
1
answer
866
views
Updating SSL Certs with PKCS12 or PEM via Bash Script
I currently have my pi-hole setup to request an SSL cert from ZeroSSL using Acme.sh, this works quite well.
I then have to cat the two cert and key files into one, and then relaunch the lighttpd ...
0
votes
0
answers
1k
views
Unifi guest hotspot: "Redirect using Hostname" but no DNS?
I have a Unifi UAP-AC-LR access point and wanted to setup the guest portal for friends. It sort-of-worked on my phone, but didn't work on my laptop. I think it had to do with the self-signed cert/...
0
votes
1
answer
37
views
SSL for different servers behind single ADSL Router
I would be glad to find out the ideas how/if one could make two self-hosted servers available online (with SSL) behind a single DSL router.
Setup:
Registered domain, by one of the cloud providers
...