Questions tagged [tls]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
13 views

How can I add secure DNS (DoH) to Windows settings before Windows makes any connections to the Internet during installation?

Is there a way I can add DNS over HTTPS details to Windows settings before it makes the first connection to the Internet during installation? I'm using the latest version of Windows 11. Either by ...
  • 23
7 votes
1 answer
2k views

Prevent users from ignoring certificate warnings

Is it possible to prevent users to bypass a certificate warning showed in their browser, and if so, how? Assuming we have no control on the remote server, and total control on the client computer. The ...
0 votes
0 answers
34 views

uefi shell - download a file via https

I am experimenting with uefi shell from and I wish to implement the following scenario : boot into uefi shell download a a startup.nsh script from https remote resource run the downloaded startup.nsh ...
  • 1
0 votes
1 answer
76 views

Registry key "protocols" empty

Im checking a windows 2019 server and the key "protocols" is empty Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols On my Windows 10 also is ...
  • 3
0 votes
0 answers
50 views

Keycloak V19.1.0 TLS configuration JKS Keystore Password and Key Password

i want to update an installation of Keycloak 16 to Keycloak 19 for my company. The Problem i got now is based on the keystore. The Documentation shows that i can set the keystore password, which works....
0 votes
1 answer
89 views

"This server does not support FTP over TLS" warning in vsftp. Why does it appear?

I've got a small VM set up, which runs Debian. In my vsftpd.conf file, there are the following lines: listen=YES listen_ipv6=NO connect_from_port_20=NO anonymous_enable=NO local_enable=YES ...
0 votes
1 answer
56 views

How does the Browser know that HTTPS is wanted?

Say I request a website (example.com). Via DNS, an IP is returned and the request is sent there. Does the browser always first try port 443 (HTTPS), given an IP address? TLS is started from the client ...
  • 143
0 votes
1 answer
197 views

How to enable TLS 1.2 and disable TLS1.0 and TLS1.1 with IIS on Windows server

TLS 1.0 and 1.1 have been deprecated by the Internet Engineering Task Force (IETF) as of March 25, 2021. How to enable TLS 1.2 and disable TLS1.0 and TLS1.1 with an old Windows server(2008/2012~) on ...
  • 798
1 vote
1 answer
485 views

Whether can TLS client send `Encrypted Alert` to server?

I often see TLS server -> client: Encrypted Alert package for closing the TCP connection. whether can TLS client send Encrypted Alert to server?
  • 495
0 votes
0 answers
1k views

"failed to receive handshake, SSL/TLS connection failed" only when trying to access T-Mobile.com

I have 2 phones, 2 tablets, and 2 laptops can log into my account at T-Mobile with no issues. My main PC, (Alienware R11 running Win11) cannot access my T-Mobile account. It gets an error when trying ...
3 votes
1 answer
147 views

How do I disable SSL/TLS certificate verification in ffmpeg?

I was going to write out a long drawn-out question with tons of details about my circumstance, but figured even though questions are usually much more detailed on here, this one is pretty simple (...
0 votes
0 answers
229 views

Apache Server 2.4.53 with Custom Built OpenSSL

I am trying to launch an Apache server on Ubuntu 20.04 running a custom built OpenSSL, but I don't want to install it on my machine, instead, I want to show the server where it can find all libraries ...
0 votes
0 answers
25 views

Intermittently unable to load pages when browsing on Windows VPN

I'm using Chrome (latest version) and Windows 10 (latest version), alongside Bria for softphones via a SIP. As the title advises my issue is that when connecting to my work's VPN I sometimes have to ...
0 votes
2 answers
134 views

Could in-place upgrade of Server 2012 to 2019 affect firewall rules or IIS sites?

An application I support has been installed on Windows Server 2012. The server is to be upgraded to Server 2019 in an in-place upgrade. This is to be done without being tested first. The application ...
0 votes
0 answers
44 views

ProxyPassMatch redirect to the same request uri

I am doing a reverse proxy with apache to redirect https traffic filtering by the uri request. Right now I have the next ProxyPassMatch "^/thisisthepath$" "https:192.168.1.40/...
user avatar
0 votes
0 answers
29 views

Defining cipher suite has no effect

I have a windows 7 machine on which I made the necessary steps to enable the use TLS1.2 in order to be able to connect to azure and nuget mainly. here is some of the ressources I used: https://...
  • 111
0 votes
0 answers
44 views

Windows 10 - Mandatory installation of server's certificate on the client computer

There are 2 parts to my question, both related to SSL sites: I want to configure my Windows OS to disallow browsing to any SSL sites whose server authentication certificate is not installed on my ...
1 vote
2 answers
1k views

Make Thunderbird request certificate on port 993, not 443

I am trying to create a certificate exception in Thunderbird, for a specific server <servername> (I am specifically asking not to be lectured about how it would be better to have an acceptable ...
0 votes
0 answers
12 views

Postfix use distinct client certificate for upstream server

I have tried to read through the documentation of Postfix TLS support http://www.postfix.org/TLS_README.html here. There is a large amount of flexibility in the smtp_tls setup especially with ...
  • 1
1 vote
1 answer
271 views

Allow specific weak cipher in Chrome

I have to connect to a system that uses a weak TLS cipher : TLS_RSA_WITH_AES_256_CBC_SHA. This is an embedded web server in a physical appliance and there is no firmware available to change that ...
  • 11
1 vote
1 answer
125 views

How to manually connect to my web server and send a TLS handshake with a hostname, followed by the HTTP request headers with a different hostname

My Apache web server logs suffer from the dreaded error: [ssl:error] AH02032: Hostname www.example.com provided via SNI and hostname example.com provided via HTTP are different I know what it means ...
  • 430
0 votes
0 answers
91 views

Any openssl command to list all TLS connections in a system?

Is there any openssl or linux system commands or any scripts available to which list all the open/established TLS connections in a system. Similar to netstat , which can be used to display all the TCP/...
  • 181
0 votes
1 answer
82 views

Receiving incorrect TLS certificate from website

This is a strange issue that (so far) is specific only to plex.tv website. I am seeing this same problem from various devices on my network. Ultimately, simply trying to access https://plex.tv in my ...
0 votes
1 answer
156 views

Server hello is not returned without SNI

I've setup a proxy server (squid) with https_port enabled. When I send requests to this server using a url like domain.com or even using a host alias (i.e. manually written in /etc/hosts), there's no ...
0 votes
0 answers
52 views

Mariadb use HSM instead of private key files for server side ssl/tls

There seems to be 0 support for instructing the mariadb server to use a pkcs11 interface instead of using a private key file. I'd like to have mariadb talk to an HSM to establish incoming secure ...
0 votes
0 answers
22 views

OPEN VPN ssl/tls

Hello. I have a problem when I try to connect to NOMACHINE and opne vpn, I can't connect. When trying to analyze the logs, it was found that the error probably concerns which of the certificates. ...
0 votes
1 answer
431 views

TLS1.2 still used despite forcing use of TLS1.0

I have a customer who is trying to connect to my company's FTP server and we have asked him to force the use of TLS1.0, which he has done through a curl request (curl version : 7.29.0). However, ...
0 votes
0 answers
230 views

ffmpeg tls verify rtsps

I'm trying to connect to a RTSP stream using tls and I would like to know how to validate the server certificate. I tried to use tls_verify=1 parameter without any luck. It's not validating the ...
  • 1
1 vote
0 answers
464 views

Lets Encypt, Firefox, Peer’s Certificate issuer is not recognized

I recently moved my TLS termination back to my reverse proxy from the backend server, and I have run into this very specific problem. When connecting to my nextcloud site firefox says ...
  • 25
0 votes
2 answers
1k views

How can one check whether my Windows 7 supports TLS 1.2?

I read on https://helpx.adobe.com/x-productkb/multi/eol-tls-support.html#win7 (mirror 1, mirror 2): Your operating system and application frameworks must also support TLS 1.2. If How can I check ...
-2 votes
1 answer
1k views

Forcing TLS 1.2 on Windows 7

The question is about forcing Win7 to use TLS 1.2 only. (Yes, I know that Win7 gets no more patches, nevermind that.) The underlying issue is that Ubisoft Connect does not work properly. The logs ...
  • 97
0 votes
0 answers
29 views

The handshake operation timed out

I've mbedtls nonRTOS server device. I'm trying to communicate with PLC Client. But before the using PLC, I'm trying to use python tls client. I've a problem with when I use below cert and key file ...
  • 101
0 votes
1 answer
168 views

How to configure Google to only search for SSL/TLS-encrypted websites?

Is there a way to configure the Google Search Engine to only search for SSL/TLS-encrypted websites? What I mean by that is that when I google something, only websites with a valid HTTPS certificate ...
  • 103
0 votes
0 answers
111 views

Unable to connect to Arris router admin screen due to "Secure Connection Failed"

I am using the SBG6700-AC router with the Comcast/Xfiniti provider. At some point the admin screen for the Arris router is no longer working with any browser. Firefox allows you to at least try to ...
1 vote
1 answer
586 views

Disable "TLS Certificate revocation checks on" in Java for all users

Apologies if this has been asked and I am a bit of newbie to Java. We are currently running JRE 8 Update 211 32 bit (I know this is not the latest version) running in Windows 10. I am currently ...
0 votes
0 answers
1k views

Debugging HTTP 403 Forbidden when using cURL for mutual authentication SSL (mTLS)

I'm a beginner in security but I am trying to send a request to a server through mutual authentication. I was given CA pem file client cert pem file private key pem file Right now, I'm trying to ...
user avatar
0 votes
0 answers
412 views

i am trying to access an endpoint from a host and getting "curl: (35) SSL received error" , test from another host is successful

i am trying to access an endpoint from two diff hosts , one gives me unknown protocol error and other is successful. both the hosts have same set of ciphers( checked with openssl) what could be the ...
1 vote
1 answer
16 views

Determine if there's a justified reason to block/cancel an HTTPS request (but not HTTP)

I've recently found out that a microservice I've been using (worldtimeapi.org) isn't accessible via https (but is via http) on networks other than my home network (I've tried a university's public ...
-1 votes
1 answer
120 views

TLS inspection with proxy

How can I install a proxy in my network to be able decrypt any traffic that passes through my network? I own all devices, and if there is a need I can provide the private keys and certificates for the ...
user avatar
0 votes
1 answer
308 views

How to generate HTTP ca .cert?

If I use to generate a certificate + private key pair, with the following command on Linux: openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 This will generate two files (...
  • 169
0 votes
2 answers
140 views

Why is OpenSSL 1.1.1 (Linux client) sending application data before Change Cipher Spec?

We use an in-house compiled OpenSSL 1.1.1i for Windows and Linux. Our client in Windows connects succesfully with an Nginx server (which I don't know the version). The Linux client fails with the &...
  • 224
2 votes
1 answer
66 views

Store private key in self signed certificate?

I'm a bit confused by this command for generating a self-signed certificate from an otherwise clear tutorial on OpenSSL: openssl req \ -x509 -nodes -days 365 -sha256 \ -newkey rsa:2048 -keyout ...
  • 256
0 votes
1 answer
251 views

How to create a own CA bundle for import in FireFox using Ansible

I am trying to create certificates for my own CA. After importing the CA certificate ca-mydomain.com.crt into FireFox my website doesn't work but displays message Secure Connection Failed An error ...
  • 757
6 votes
1 answer
2k views

In Wireshark where can I find the TLS Server's Certificate

I'm looking at a TLS v1.3 headers in Wireshark and I'm not sure where I would find the server certificate that is used to confirm that the server is who they claim to be. The Client Sends Hello then ...
0 votes
0 answers
530 views

The request was aborted: Could not create SSL/TLS secure channel in Visual Studio 2013 for Windows Desktop

I am facing a small problem .. unintentionally uninstalled the NuGet Package tool from my Visual Studio 2013 where I use it to install frameworks, libraries, among others .. however when trying to ...
1 vote
2 answers
14k views

How do I use the openssl command to decode a public key .PEM file?

I have my localhost TSL/SSL certificate from Chrome stored to a .PEM file. Was wondering how do I use the oppenssl command to decode it into a list of human-readable fields. Googling this only ...
0 votes
0 answers
220 views

OPENLDAP - ldapwhoami not working binding securely, but other applications does

I tried adding TLS hard in slapd.conf but it says unknown directive inside backend database definition. Tying by CLI the command ldapwhoami.exe -H ldap://myldap.company.com -v -D "uid=dds,ou=...
  • 671
6 votes
2 answers
8k views

What is the purpose of chain.pem files?

A general question about chaim.pem files; I used a csr obtained from my host, and used the Certbot from LetsEncrypt to generate a https cert; I used the following command $ certbot certonly --manual -...
  • 399
2 votes
1 answer
2k views

why am I getting an error when trying to generate rsa 128

For Educational purpose, I'm trying to create RSA 128 key pair using Openssl. when trying the following command I get an error with "key size too small" $ openssl genrsa 128 Generating RSA ...
0 votes
3 answers
162 views

Export SSL & TLS Registry Keys to XLSX

I'm currently looking to find out all SSL and TLS Registry value information on the system. I need help writing a script for powershell to look at a list of hosts that are on a csv/txt file then ...
  • 33

1
2 3 4 5
8