Questions tagged [ssl]

SSL refers to Secure Sockets Layer, a security protocol that has been replaced by Transport Layer Security (TLS). TLS is still commonly referred to as SSL.

Filter by
Sorted by
Tagged with
0 votes
0 answers
103 views

Is there a way to install certificates to LocalMachine store without logging into windows?

As a part of some dev work I was doing, I was trying to identify and document only the essential certificates required to run an app locally. Since I had a bunch of certs in my LocalMachine store, I ...
haku's user avatar
  • 148
0 votes
2 answers
171 views

How to differentiate between certificates issued by the same CA

I have a certificate which is signed by an external Certificate Authority (CA). If I understand correctly that Certificate Authority can also sign other certificates that I'm not aware of. My question ...
Jhon Gaido's user avatar
1 vote
2 answers
389 views

Why does my Squid proxy setup keep triggering spam bot protection like Cloudflare's CAPTCHA?

I am running at home a proxy server setup designed to limit access to certain websites that I find produce a drag on my mental health (for very complex personal reasons totally off topic here), which ...
The_Sympathizer's user avatar
0 votes
0 answers
1k views

Encrypted browser-proxy (Squid) connection

I'm trying to set up an encrypted communication between the browser and our proxy (squid) theoretically, it must work out of the box with modern browsers as mentioned in squid official doc : https://...
Wad's user avatar
  • 1
0 votes
0 answers
47 views

Save HTTPS response together with SSL signature

I'm building an app that should download file from a given url and store it locally, like a cache. Now, I would like to be able to prove that the content was indeed downloaded from this url, and not ...
lobanovadik's user avatar
1 vote
1 answer
241 views

Thunderbird refuses CalDAV server certificate although the name matches

After upgrading to Thunderbird 102 (from whatever the previous version on the Ubuntu 20.04 repos was), I can no longer connect to the CalDAV server I run. Thunderbird refuses the certificate, claiming ...
user149408's user avatar
  • 1,100
0 votes
1 answer
619 views

How can I generate self-signed certificate with these standards?

I tried creating a certificate using this command: New-SelfSignedCertificate -DnsName "WDACSigning" -CertStoreLocation Cert:\CurrentUser\My\ -Type Codesigning but it causes boot failures ...
user avatar
0 votes
0 answers
1k views

Docker pull on Synology fails when DNS Server is enabled

I enabled the DNS server on my Synology. Therefore when I am using the Synology DNS (192.168.1.20) instead of the Google DNS (8.8.8.8), I get this error: me@synology $ sudo docker pull linuxserver/...
nowox's user avatar
  • 2,849
1 vote
0 answers
834 views

Decrypting TLSv1.3 data using SSLKEYLOGFILE from native app

I am trying to decrypt TLSv1.3 packets using Wireshark. I have succeeded in doing so using this tutorial: https://blog.didierstevens.com/2020/12/28/decrypting-tls-streams-with-wireshark-part-2/ This ...
tomvis1984's user avatar
0 votes
1 answer
175 views

Cannot connect using wldap32 and apacheds over TLS (LDAPS)

I am using a dynamic language that via FFI it wraps the wldap32 dll. I am using ApacheDS and I can perfectly connect to it from my client using normal LDAP. However, I cannot connect to it when using ...
Mariano Martinez Peck's user avatar
0 votes
1 answer
105 views

Invalid certificate with Dynamic Domain

What I tried to do: Set up a Dynamic domain to connect with my Nextcloud(Self data storing) which is hosted on my home server. What has been done: Bought domain at domain.google.com Setted up Dynamic ...
user7954302's user avatar
2 votes
0 answers
6k views

Error with SSL routines:: unsafe legacy renegotiation disabled

I have been trying to do a webscraping from this site. When I use the browser to acess, the website opens normal. But when I try to use R or Python, I have a few errors like: Error in open.connection(...
rtheodoro's user avatar
  • 121
1 vote
1 answer
1k views

HTTP Error 404. The requested resource is not found. - Only when no "https://" is entered. Windows IIS with Wordpress. - Any ideas?

I am running Windows Server 2012 R2 with IIS. I have added a website at the following address: https://List4Less.com It worked fine up until recently. I added a wildcard SSL certificate and it ...
J. Yonan's user avatar
0 votes
1 answer
429 views

Can't connect to OpenVPN server, but only on Linux

I'm using PiVPN on my Xubuntu server to create a VPN. I'm aware that PiVPN was designed especially for Raspberry Pis, however it's very easy to setup and work with so I decided to use it on my Xubuntu ...
tai's user avatar
  • 177
0 votes
0 answers
115 views

Windows forgets self-signed certificate after reboot

I have a self-signed website certificate. When using it I have two Windows 10 machines that forget the self-signed certificate every time after windows reboot. It only happens in those two machines. I ...
andres's user avatar
  • 1
2 votes
2 answers
388 views

How to teach git to trust github on linux?

Recently on my linux system i have run into an issue of not being able to commit to my own github repository. When i try to do it, that's what i get: my prompt: > git push --verbose Pushing to ...
Srv19's user avatar
  • 331
0 votes
1 answer
81 views

What is a Application/Service Certificate compliant with FIPS 140-2

I have enabled FIPS on my AWS EC2s and updated the prefix's as shown here: https://aws.amazon.com/compliance/fips/ All of this is working in the AMI Build & Pipeline, however, at the application ...
ianhalfpenny's user avatar
1 vote
0 answers
382 views

Cloudflare Nginx SSL Not Trusted/400 bad request (No required ssl certificate was sent)

Similar to this the error I am receiving from this thread (https://community.cloudflare.com/t/getting-400-bad-request-no-required-ssl-certificate-was-sent-using-nginx-and-cloudflare-authenticated-...
Jason Chan's user avatar
0 votes
0 answers
372 views

Difficulty hosting subdomain with multiple dots

I am attempting to host the S3 replacement service MinIO. When I use a subdomain with a dot in it (console.s3.example.com instead of console.example.com) I receive an SSL error ...
Fishy's user avatar
  • 1
1 vote
1 answer
646 views

Replacing SSL certificate via SSH with local files

I need to replace a ssl certificate on an Ubuntu webserver which expires soon. My client sent me some certificate files: server.key server.csr intermedio.pem CSR_trustico.pem Certificato.crt.txt How ...
Vueer's user avatar
  • 123
1 vote
1 answer
3k views

"This server does not support FTP over TLS" warning in vsftp. Why does it appear?

I've got a small VM set up, which runs Debian. In my vsftpd.conf file, there are the following lines: listen=YES listen_ipv6=NO connect_from_port_20=NO anonymous_enable=NO local_enable=YES ...
Kostas M's user avatar
0 votes
0 answers
225 views

Renew a self-signed certificate

Let's say I have a self-signed X.509 certificate: file some.bin some.bin: Certificate, Version=3, Serial=00ea5db390c4cc0de3, Issuer=Some Certificate, not-valid-before=2022-08-02 06:51:44 GMT, not-...
JohnnyFromBF's user avatar
  • 4,938
0 votes
1 answer
2k views

aria2c fails: certificate expired

I used aria2 for many years to download, but now it ends with this error: 2022-07-28 17:36:05.765460 [ERROR] [AbstractCommand.cc:351] CUID#7 - Download aborted. URI=http://www.reversebeacon.net/...
Andre's user avatar
  • 1
0 votes
0 answers
4k views

How do you automatically renew certs in pfSense?

I have an internal certificate authority configured in pfSense that issues a certificate for webConfigurator. The certficate can be renewed from the certificate manager interface. How can the renewal ...
Chris_F's user avatar
  • 271
1 vote
1 answer
616 views

Cert's altnames are totally unexpected resulting in SSL verification failure

I keep getting SSL verification failures when trying to connect to a REST API at esi.evetech.net. It appears that the cert's altnames are totally different from what I would expect. From Postman, with ...
basse's user avatar
  • 111
0 votes
1 answer
29 views

securing client/server communication

I have special environment which requires that I think security a bit out of the box. Components involved: A web service which requests data from a gateway, processes it and sends it to web clients. A ...
Nimral's user avatar
  • 138
1 vote
3 answers
14k views

Unable to get local issuer certificate error with unusual certificate chain

I've encountered a frustrating issue with my SSL implementation due to what may be related to Let's Encrypts CA-X3 certificate expiration. Forewarned that I am a developer with limited understanding ...
foxhill22's user avatar
0 votes
1 answer
2k views

certificate verify failed: unable to get local issuer certificate . Why?

Ran the following commands. PS C:\Users\anups\Desktop\Cloud_AntiScalant> mkcert -install Created a new local CA 💥 The local CA is now installed in the system trust store! ⚡️ PS C:\Users\anups\...
Anup Buchke's user avatar
0 votes
1 answer
2k views

Why does the website gets "This site has requested that you identify yourself with a certificate" popup?

Recently I added a SSL certificate I received to a newly migrated website. Since no issues can be identified on most of the machines , some users complained of getting a 403 forbidden error. When ...
guitarlass's user avatar
0 votes
0 answers
161 views

Switch from Internet Explorer to Edge Chromium / Chrome

I'm working on a legacy application created with HTML 4 and PHP 5, my purpose is to run the application on Edge chromium, the style of the application is good on internet explorer but when I tried to ...
mourad semi's user avatar
0 votes
0 answers
2k views

How do I deal with NET:ERR_CERT_AUTHORITY_INVALID in Edge?

I'm working on a legacy application with invalid ssl certificat. I want to run the application on Edge, I get the error NET::ERR_CERT_AUTHORITY_INVALID, but I can run it on google chrome. I know I ...
mourad semi's user avatar
1 vote
0 answers
6k views

"failed to receive handshake, SSL/TLS connection failed" only when trying to access T-Mobile.com

I have 2 phones, 2 tablets, and 2 laptops can log into my account at T-Mobile with no issues. My main PC, (Alienware R11 running Win11) cannot access my T-Mobile account. It gets an error when trying ...
Encino Stan's user avatar
0 votes
2 answers
725 views

Trouble getting the Chrome browser on a Mac to connect securely over SSL/TLS to Apache 2.4 on Centos

We operate multiple sites that run the Leaf webapp. Our configuration runs on Centos 7.9, with a .NET Web API and Apache 2.4. The system is used only by staff who access our Intranet. It uses a self-...
ArthurG's user avatar
  • 13
0 votes
1 answer
713 views

Google Chrome security warning: Your connection is not private

Consider visiting a website that have a expired SSL certificate. Google Chrome (Version 102.0.5005.115, Windows 10) presents a warning: NET::ERR_CERT_AUTHORITY_INVALID However, I trust the sites as ...
NotStanding with GoGotaHome's user avatar
0 votes
0 answers
199 views

Reverse Proxy Server not forwarding one web site, but ok for others

To set my level, I'm a Raspberry Pi and Linux experimenter, and not an experienced network administrator. To get this far I have used the web and several tutorials. I'm learning, but sometime I ...
RDK45's user avatar
  • 43
1 vote
1 answer
69 views

Stop Chrome from going to a website when the connection is "not private" after using Advanced to circumvent that

I'm creating a secure website that uses HTTPS. When Chrome accessed it, Chrome reported a "Your connection is not private" error. I then used the "Advanced" button to go to the ...
ArthurG's user avatar
  • 13
0 votes
2 answers
180 views

Migrating a hosted Web-Server to a home-based sever (inlcuding Domain Name and SSL)

Up to now I was using a hosted server with a static IP address, and own SSL certificate and an own domain. My server hosting company has provided me with an interface, in which I entered some entries ...
Alex Mi's user avatar
  • 101
3 votes
1 answer
2k views

How do I disable SSL/TLS certificate verification in ffmpeg?

I was going to write out a long drawn-out question with tons of details about my circumstance, but figured even though questions are usually much more detailed on here, this one is pretty simple (...
Ryan's user avatar
  • 33
0 votes
2 answers
3k views

How do I auto-renew a manual Certbot cert?

I manually set up a Certbot cert on an EC2 instance so that I could set up a wildcard cert. Specifically, I used the following command (with the real domain, not example.com) to set up the manual ...
HartleySan's user avatar
0 votes
0 answers
341 views

Wildcard certificate key value mismatch on single server

We're updating the wild card cert in all our servers this month, including three nginx proxy servers. Two of those worked right away, the third gets this error: nginx: [emerg] SSL_CTX_use_PrivateKey(&...
mdennis's user avatar
0 votes
1 answer
3k views

How to incorporate multiple .pem certification files to a single .pfx file?

I'm working on IIS on Windows 2019. I have given certificate files; cert.pem, chain.pem, fullchain.pem and privkey.pem. I believe that I have to convert this to .pfx to incorporate it to the IIS. How ...
guitarlass's user avatar
1 vote
0 answers
1k views

Main steps on making XAMPP a "secure" env for production

To start out I know that XAMPP is not ideal for production. But I'm a begginner in using Apache, MySQL and most importantly I'm very new to PHP. I came from a Node.js/Java/Javascript background and so ...
Leonardo Santos's user avatar
1 vote
2 answers
12k views

SSL certificates no longer work with cURL

When running the following command on WSL: curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.1/install.sh I get the following error: curl: (60) SSL certificate problem: unable to get local ...
jhud's user avatar
  • 21
0 votes
0 answers
423 views

How to fix error ERR_SSL_VERSION_OR_CIPHER_MISMATCH

I'm working on a PHP and while the application works in Internet Explorer, within Edge, where I want to run this application, I get error ERR_SSL_VERSION_OR_CIPHER_MISMATCH. How to fix this error?
mourad semi's user avatar
0 votes
0 answers
913 views

how to add self-signed certificates in kubuntu 22?

So our company uses MITM to spy on us, and I need to add their ca certificates into system so that I can for example update the linux system. These are in pem form and if I do: sudo cp cert1.cer cert2....
Martin Mucha's user avatar
0 votes
0 answers
2k views

Why unable to verify local issuer certificate? (https calls for google)

I am using docker desktop to run a simple node:16-alpine through mac. Which I added a ca-certificates, curl and openssl. RUN apk add --no-cache --repository http://dl-cdn.alpinelinux.org/alpine/v3.15/...
Rafael Costa's user avatar
0 votes
0 answers
61 views

installing SSL on 2 exchange servers

I have 2 exchange servers run for one email service, and I need to renew the SSL certificate. Do I need to issue 2 SSL, or one is enough? If one is enough how can I replicate it between them?
Ali Muhanad's user avatar
0 votes
1 answer
866 views

Updating SSL Certs with PKCS12 or PEM via Bash Script

I currently have my pi-hole setup to request an SSL cert from ZeroSSL using Acme.sh, this works quite well. I then have to cat the two cert and key files into one, and then relaunch the lighttpd ...
cengbrecht's user avatar
0 votes
0 answers
1k views

Unifi guest hotspot: "Redirect using Hostname" but no DNS?

I have a Unifi UAP-AC-LR access point and wanted to setup the guest portal for friends. It sort-of-worked on my phone, but didn't work on my laptop. I think it had to do with the self-signed cert/...
Nstevens's user avatar
  • 131
0 votes
1 answer
37 views

SSL for different servers behind single ADSL Router

I would be glad to find out the ideas how/if one could make two self-hosted servers available online (with SSL) behind a single DSL router. Setup: Registered domain, by one of the cloud providers ...
LHA's user avatar
  • 1

1 2
3
4 5
36