The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [tls]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
26 views

BER decode SubjectAltName and CHOICE?

I'm having trouble working out the syntax when decoding a SubjectAltName in a TLS self-signed certificate. I believe the certificate is well formed. The trouble is, I don't understand how to decode ...
0
votes
1answer
21 views

How to install TLS certificate on tomcat that way so it is able to connect to two-way-ssl application

I'm trying to integrate with webservice that uses two-way ssl. And I need to install the TLS certificate on my tomcat. Tomcat version is 8.5. TLS certificate is in .p12 format.
0
votes
1answer
86 views

How to decrypt Outlook traffic in Wireshark?

I have to follow Comparitech's SSL Decryption Guide: How to Decrypt SSL with Wireshark.  But it is not working for Outlook - Office 365 mail traffic.  I'm seeing traffic on port 443 only and it's SSL-...
0
votes
0answers
45 views

docker-compose gives SSL verification

TLS based docker daemon is running on EC2 host. docker client local to the docker daemon works fine, but docker-compose gives below error: $ export DOCKER_HOST=tcp://172.31.3.2:2376 ...
1
vote
1answer
143 views

Kubernetes net/http: TLS handshake timeout

We have created a self managed kubernetes cluster using the kubeadm approach. It is a 3 node cluster hosted on AWS EC2 instances (1-Master and 2-Slaves). We have created a separate NGINX server to ...
1
vote
0answers
54 views

Where to get libcurl for Windows with --compressed option enabled?

So, I'm copying some curl commands from developer tools on Firefox and they often include the flag --compressed and even if removing it often makes command execute succesfully, my aim is to be able to ...
-3
votes
1answer
49 views

What is the error in my tls certificate? [closed]

Certificate installed on this site - https://seeklay.icu
0
votes
1answer
26 views

What is the mistake in creating a SAN

I issued a TLS certificate and indicated the name of the SAN file using ext, but when I go to the chrome site it gives an error, what did I do wrong? Site - https://seeklay.icu Ext - ...
1
vote
1answer
61 views

Seeking explanation of occurences during Wireshark SSL/TLS decryption

Currently using: OS: Official Kali Linux 2019.4 Browser: Chromium Version 76.0.3809.100 (Developer Build) built on Debian bullseye/sid, running on Debian kali-rolling (64-bit) Wireshark 2.6.10 (Git ...
0
votes
0answers
27 views

How to compare 2 SSL Certs

I'm having a problem, which I'm trying to fix from last few days. We have a production server, which has a cert and it supports TLS1, TSL1.1, TLS1.2. We also have a staging server, which is used for ...
0
votes
0answers
12 views

How to change the stream encryption method in NGinx

My configuration: (No work) (openssl 1.1.1) server{ listen 443 ssl http2; ssl on; root /var/www/; index index.php index.htm index.html; server_name explame.com; ssl_certificate /etc/nginx/ssl/cert....
1
vote
0answers
32 views

Connect Intellij to Docker Daemon - TLS Settings Failed

I am trying to connect Intellij to Docker Daemon on Windows 10. I don't want to expose Daemon without TLS, so I have been looking for a way to setup TLS. I have looked through some documents, ...
0
votes
1answer
46 views

lftp behind firewall – what ports need to be opened?

I need to setup a secure file transfer from Linux client to z/OS ftp server using TLS 1.2 secure protocol. I am trying to use the lftp client for this purpose. My Linux server is behind a firewall. I ...
0
votes
0answers
8 views

Install SSL for a site in IIS 8 when you have a certificate.txt file and private key file

I have two files. File whose contents start with -----BEGIN CERTIFICATE REQUEST----- File whose contents start with -----BEGIN PRIVATE KEY----- How do I use these two files to create a SSL for a ...
0
votes
0answers
27 views

Select certificate for routed connection based on TLS ClientHello

This is a weird goal but I need to be able to route connections to the same server and domain name but under different certificate. For some very specific devices that have the certificate of the ...
0
votes
0answers
7 views

Openssl using the cipher parameter result in handhsake failure

When i use Openssl to connect to facebook.com I see 'ECDHE-ECDSA-AES128-GCM-SHA256' ciphersuite used. openssl s_client -connect www.facebook.com:443 SSL handshake has read 3280 bytes and written 373 ...
0
votes
1answer
103 views

OpenSsl and self-signed certificates - verifying a chain

I have a chain.pem -----BEGIN CERTIFICATE----- // My server cert signed by intemediate CA -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- // My intermediate cert signed by root CA -----END ...
0
votes
1answer
23 views

apache forces ssl redirect folder to end of url

I have set up a host and an ssl certificate for a local website using xampp. When I visit for example http://test.com I get redirected to https://test.com. However when I visit http://test.com/test/ I ...
0
votes
0answers
19 views

apache2: Exclude SSLVerifyClient for Intranet

I use apache2 to host a repository. I would like it to deactivate client authentication from within Intranet. Therefore I added the following to my virtual host: <If "-R '172.16.0.0/...
1
vote
0answers
40 views

How to set https proxy written in Golang system wide?

I have a proxy app written in Golang. For now the proxy requires no authentication. I can deploy it with or without tls certificates. At first I deployed it with tls certs. I tried connecting with ...
0
votes
0answers
36 views

What does QuickBooks do when it enables TLS on Windows?

I'm running Windows 10 Version 1903 with the latest updates. QuickBooks Pro 2016 pops up a "Warning" dialog saying: This version of QuickBooks requires TLS 1.2 for secure communication. It has a ...
0
votes
2answers
45 views

How to get actual network traffic of an application?

Firstly, sorry for bad English. I have an application that runs on Citrix Workspace and generally I runs application from .ica extension file format. So I can access the database using this ...
1
vote
0answers
31 views

SMTP protocol synchronization error in Exim4 when connecting from Gmail

I have a Exim 4.92 server running on a Debian machine, everything works fine. Now I want to send mails from Gmail through that Exim server, since Gmail needs an STMP server for alias addresses. ...
0
votes
1answer
26 views

proftpd no directory listing after activating TLS

I'm running proftpd on Ubuntu 18.x and activated TLS. Ports range for passive mode are open by ufw. Still, when TLS is activated in the proftpd config, directory listing fails. What could be the ...
0
votes
1answer
25 views

How to add the storage for a private Docker registry on a minikube VM?

I am running minikube kubernetes cluster and used the script here: https://github.com/ContainerSolutions/registry-tooling To secure a registry pod. The readme says "It will not currently configure a ...
0
votes
0answers
6 views

TSL warnings after changing hoster

It seems like having changed the hosting company and getting new SSL certificates some of our site visitors are having issues connecting to our website on the new server. They get the follwing TLS ...
0
votes
0answers
7 views

Are there Windows logs or perf counters to capture TLS versions of web-server traffic?

I have a web-server, running Windows Server, that takes incoming and outgoing traffic. I want to identify which callers are using TLS versions prior to 1.2. Are there Windows logs or perf counters I ...
0
votes
0answers
9 views

Need SSLciphersuit value

I am on a centos 7 box with apache and openssl. My server is currently configured to use only TLSv1.2. i want to include TLSv 1.1 & TLSv1 to accommodate more older clients access. i have changed ...
0
votes
0answers
24 views

Openssl command output results only in CONNECTED output

When trying to debug using open SSL, results only in a single output line CONNECTED(00000003) and nothing after that. Tried both TLS 1.2 and 1.1 openssl s_client -connect nnn.nn.nnn.nn:443 -tls1_2 ...
3
votes
0answers
53 views

Can we disable stateful ftp inspection just for one program?

Right now I have a program which generates ftp requests to a remote server. The connection is passive mode. The problem is that the connection is encrypted with TLS and windows firewall on the client ...
0
votes
1answer
99 views

How to generate trusted SSL certificate for secure MQTT?

I am a beginner with information security and everything about SSL just goes over my head. Currently I'm trying to get an IoT device(ESP32) to connect to an MQTT broker, broker.losant.com:8883 in ...
0
votes
0answers
266 views

OpenVPN TLS Error: TLS Handshake failed

I currently have a problem with setting up an OpenVPN server on my Raspberry Pi. When I try to connect from my client to the server I get the Mon Jul 15 13:18:18 2019 TLS Error: TLS handshake failed ...
0
votes
0answers
23 views

TLS connections to selected hosts fail on Norwegian flights

I fly often with Norwegian, which offers a free internet connection. While airborne, some https websites work, while others don't. Websites that work: https://meneame.net , https://google.com ...
1
vote
0answers
33 views

voyager-ingress in kubernetes - tls config

I have a config yaml for voyager-ingress in kubernetes like this: apiVersion: voyager.appscode.com/v1beta1 kind: Ingress metadata: name: ingress annotations: ingress.appscode.com/type: ...
0
votes
1answer
35 views

Why is mutual auth working on openssl 1.1.0g but not openssl 1.1.1?

I'm making a HTTPS request using mutual authentication. Testing it with curl 7.58.0 using openssl 1.1.0g, it works fine. Upon upgrading to openssl 1.1.1 with the same curl version, the call stops ...
0
votes
1answer
87 views

TLS 1.3 not working on nginx

I have the following configuration: # SSL certificates ssl_certificate /etc/letsencrypt/live/domain/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/domain/privkey.pem; # Diffie-Hellman ...
1
vote
0answers
45 views

Chrome return with ERR_NOT_IMPLEMENTED

I have a https server which requires mTLS (client certificate authentication). When I try to access the server using Chrome (Version 75.0.3770.100 (Official Build) (64-bit)) on Windows 10 it asks me ...
0
votes
1answer
49 views

Accessing a HTTPS server using old ciphers

I was looking around the EWS of my HP printer and I accidentally set a old cipher and I can't access anymore, I'm always getting ERR_SSL_VERSION_OR_CIPHER_MISMATCH from chrome. Any browser settings I ...
0
votes
1answer
187 views

How to test if a server support TLS 1.2 session resumption, using URL PATH instead of just HOSTNAME?

I have to test if one of our servers supports tls 1.2 session resumption, either via session id or session ticket. I know how to do this for a given host using below command (thanks to https://www....
1
vote
1answer
31 views

Does a cert's filename matter?

Our product is running postfix and nginx as docker services. We initially deploy with a self-signed cert that is named <our-company>.com.cert along with a .pem and .key. These are mounted as a ...
0
votes
0answers
108 views

Ubuntu-based CUPS server gets progressively slower after reboot; Windows XP clients connecting to server

I have 2 Windows XP clients running lab equipment. These are Samba version 4.7.6 clients of Ubuntu 18.94.2 (64 bit) server running CUPS Ver 2.2.7 all has been working for some years and the only ...
0
votes
0answers
15 views

Configure rsyslog to use TLS for only one input

I am pretty new to configuring rsyslog besides the very basics. We have a ton of simple unencrypted UDP listeners already set up, but this new connection that we need apparently requires TLS. So far ...
1
vote
1answer
52 views

Intermittent TLS SecureChannelFailure with client certificates

I have an F5 load-balanced API which calls out to external API's, some of which require mutual ("two way" / client) SSL. For months things work fine, but from time-to-time requests (to the external ...
0
votes
0answers
16 views

Configure SHA512 to SSL Socket Factory in JAVA 8

I looked through JAVA 8 documentation https://docs.oracle.com/javase/8/docs/technotes/guides/security/SunProviders.html, for CIPHER suite with SHA512. There are none specified. How do i configure ...
0
votes
0answers
86 views

Updating PEAP-MS-CHAP v2 certificate to comply to Certificate Transparency

I am a high school student where our school wifi uses PEAP-MS-CHAPv2 based WPA2 Enterprise. On macOS Mojave, the OS mandates certificate transparency (and terminates all TLS connections that tries to ...
1
vote
1answer
34 views

Openssl SSL_CTX_new is successfull but set errno to ENOSYS (Function not implemented)

The SSL_CTX_new() function works fine but something is strange it sets errno to ENOSYS. Documentation doesn't say anything about this : https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_new.html #...
1
vote
0answers
10 views

In IIS, Is there a way I can enforce clients to use certain SSL cipher suites depending on what URL/path they visit?

I have an IIS 11.0 webserver that supports TLS. Lets say my site is called https://www.example.com. There are two different sections to my website. For example, the URL https://www.example.com/partA/...
0
votes
1answer
34 views

Force all outgoing HTTP connections to use TLS

Is there a solution for Linux to force all unencrypted HTTP traffic (client side, I'm already aware of server TLS termination) to go through TLS transparently for the HTTP application?
0
votes
0answers
18 views

Cannot establish ssl/tls conection on some laptops

My company uses CRM system with electronic document & workflow managmenet including document versioning. For document versioning we uses some external plugin for word, which allows me download ...
0
votes
1answer
28 views

SSL / TLS on EC2 load balancer - why does it work?

My boss says to get SSL / TLS working on EC2 servers, just put a load balancer in front of them that uses https. But I can still access the original servers with http. So is this really secure? Doesn'...