Questions tagged [tls]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
53 views

Debugging HTTP 403 Forbidden when using cURL for mutual authentication SSL (mTLS)

I'm a beginner in security but I am trying to send a request to a server through mutual authentication. I was given CA pem file client cert pem file private key pem file Right now, I'm trying to ...
0
votes
0answers
44 views

Decrypt TLS traffic from robot vacuum machine (Cecotec Conga 4690)

So recently I bought a Conga 4690 robot vacuum machine, which works perfectly fine. Since I'm a Home Assistant enthusiast, I want to connect the vacuum to Home Assistant. Unfortunately, this specific ...
0
votes
0answers
7 views

Stunnel session reuse

any reason my stunnel would not reuse sessions? 2021.09.09 13:14:00 LOG7[9]: TLS state (connect): before SSL initialization 2021.09.09 13:14:00 LOG6[8]: writesocket: Socket is closed 2021.09.09 13:14:...
0
votes
0answers
15 views

i am trying to access an endpoint from a host and getting "curl: (35) SSL received error" , test from another host is successful

i am trying to access an endpoint from two diff hosts , one gives me unknown protocol error and other is successful. both the hosts have same set of ciphers( checked with openssl) what could be the ...
0
votes
0answers
19 views

Verifying Diffie-Hellman groups used with vsftpd

We're using vsftp as an FTPS server using TLS 1.2 encryption and I would like to: Confirm what Diffie-Hellman group is currently being used Confirm that vsftpd 3.0.3 supports secp256r1 & ...
1
vote
1answer
9 views

Determine if there's a justified reason to block/cancel an HTTPS request (but not HTTP)

I've recently found out that a microservice I've been using (worldtimeapi.org) isn't accessible via https (but is via http) on networks other than my home network (I've tried a university's public ...
-1
votes
1answer
33 views

TLS inspection with proxy

How can I install a proxy in my network to be able decrypt any traffic that passes through my network? I own all devices, and if there is a need I can provide the private keys and certificates for the ...
0
votes
1answer
37 views

How to generate HTTP ca .cert?

If I use to generate a certificate + private key pair, with the following command on Linux: openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 This will generate two files (...
0
votes
2answers
51 views

Why is OpenSSL 1.1.1 (Linux client) sending application data before Change Cipher Spec?

We use an in-house compiled OpenSSL 1.1.1i for Windows and Linux. Our client in Windows connects succesfully with an Nginx server (which I don't know the version). The Linux client fails with the &...
0
votes
0answers
34 views

Unable to decrypt TLS data with wireshark

I have recorded some TLS encrypted data with tcpdump. Now, when I open this in Wireshark, I mostly only see gibberish data and I would like to decrypt it, to see what's going on. I have both, public ...
0
votes
0answers
20 views

Why does OpenSSL error with this cipherlist that consists of ciphers it knows?

I’m carefully choosing ciphers for my NGINX. And I’ve just encountered this: 1001@e60e88819788:/app$ openssl ciphers 'ALL:!eNULL:!aNULL' | sed -e 's/:/\n/g' | grep TLS TLS_AES_256_GCM_SHA384 ...
1
vote
1answer
28 views

Store private key in self signed certificate?

I'm a bit confused by this command for generating a self-signed certificate from an otherwise clear tutorial on OpenSSL: openssl req \ -x509 -nodes -days 365 -sha256 \ -newkey rsa:2048 -keyout ...
0
votes
1answer
48 views

How to create a own CA bundle for import in FireFox using Ansible

I am trying to create certificates for my own CA. After importing the CA certificate ca-mydomain.com.crt into FireFox my website doesn't work but displays message Secure Connection Failed An error ...
3
votes
1answer
149 views

In Wireshark where can I find the TLS Server's Certificate

I'm looking at a TLS v1.3 headers in Wireshark and I'm not sure where I would find the server certificate that is used to confirm that the server is who they claim to be. The Client Sends Hello then ...
0
votes
0answers
152 views

The request was aborted: Could not create SSL/TLS secure channel in Visual Studio 2013 for Windows Desktop

I am facing a small problem .. unintentionally uninstalled the NuGet Package tool from my Visual Studio 2013 where I use it to install frameworks, libraries, among others .. however when trying to ...
0
votes
2answers
388 views

How do I use the openssl command to decode a public key .PEM file?

I have my localhost TSL/SSL certificate from Chrome stored to a .PEM file. Was wondering how do I use the oppenssl command to decode it into a list of human-readable fields. Googling this only ...
0
votes
0answers
67 views

OPENLDAP - ldapwhoami not working binding securely, but other applications does

I tried adding TLS hard in slapd.conf but it says unknown directive inside backend database definition. Tying by CLI the command ldapwhoami.exe -H ldap://myldap.company.com -v -D "uid=dds,ou=...
3
votes
2answers
1k views

What is the purpose of chain.pem files?

A general question about chaim.pem files; I used a csr obtained from my host, and used the Certbot from LetsEncrypt to generate a https cert; I used the following command $ certbot certonly --manual -...
1
vote
1answer
336 views

why am I getting an error when trying to generate rsa 128

For Educational purpose, I'm trying to create RSA 128 key pair using Openssl. when trying the following command I get an error with "key size too small" $ openssl genrsa 128 Generating RSA ...
0
votes
0answers
16 views

Disabled TLS 1.1, Win 7 Remote Desktop cannot connect (even though edited Registry for 1.2)

We have just disabled TLS 1.1 from our server. Suddenly my Windows 7 Remote Desktop Connection can no-longer connect. I created a key for TLS 1.2 in the Registry as per this article: https://manage....
0
votes
3answers
81 views

Export SSL & TLS Registry Keys to XLSX

I'm currently looking to find out all SSL and TLS Registry value information on the system. I need help writing a script for powershell to look at a list of hosts that are on a csv/txt file then ...
1
vote
1answer
283 views

Export SSL & TLS Registry Keys to CSV

I'm currently looking to find out all SSL and TLS Registry value information on the system. I need help writing a script for powershell to look at a list of hosts that are on a csv/txt file then ...
2
votes
0answers
25 views

Highlight sites using ZScaler root certificate

Is there an extension to Edge, Chrome or Firefox that easily lets me know that the site is using the ZScaler root certificate for the TLS connection? It is good to know which sites could be vulnerable ...
0
votes
0answers
13 views

What's a quick way to check if a TLS handshake is possible with twitter.com?

I need a performant way to test if I have my VPN enabled or not; To do this, I need to check if I can accomplish a TLS handshake with a blocked website such as twitter.com. I used to rely on ! ping -q ...
1
vote
0answers
62 views

NGINX as TLS-transparent (secure TCP) and a TLS-terminating (TLS offload) reverse-proxy based on sub-domain name

I host a few services from my home network to the internet and I learned recently about reverse-proxy concepts using NGINX. Some of my services (like Home Assistant) have the built-in ability to ...
1
vote
0answers
15 views

IE 11 - TLS Error for only the one user login in a Windows 10 profile, that works fine with my own email

I have reviewed other IE11 TLS fixes and not had any success, perhaps I've missed something from them... When we are in IE 11 and launching our Sharepoint website, it leads as usual to our Office 365 ...
0
votes
1answer
45 views

Nightmare creating a self-signed SSL certificate that works

I have an intranet server that I need to install a SSL. This is the openssl.cnf [ req ] default_md = sha256 distinguished_name = req_distinguished_name attributes = ...
1
vote
1answer
128 views

Checkmate about TLS certificates on local networks, self-signed certificates and CA

I know barely anything regarding SSL and TLS certificates. Sorry about that. This is what my company asked me: They need to put a server on the local network that will be accessible through VPN to ...
0
votes
1answer
124 views

PR_CONNECT_RESET_ERROR upon visiting addons.mozilla.org

Mozilla Firefox 84.0.2, Windows 10 No add-ons/extensions. Also happens on Microsoft Edge. Output of curl -vvvvv https://addons.mozilla.org/ : * Trying 44.239.254.46... * TCP_NODELAY set * Connected ...
0
votes
0answers
46 views

xubuntu using hostapd and freeradius log

I want to show the log file of freeradius with good pass and bad pass when user is trying to connect.I found this: https://www.techonia.com/5767/log-authentication-requests-freeradius I use auth=yes ...
3
votes
2answers
1k views

How does the Client Hello message choose the Record Layer version?

I have two Client Hello messages from the same client to different servers, my client supports TLS 1.2 and TLS 1.3 as seen in the client hello supported versions. In the first message the client ...
1
vote
1answer
845 views

How should I generate a self signed SSL for an intranet server, following these specific requisites?

My knowledge about SSL is very basic and I need to generate self-signed SSL certificates for a local server [server.local] so I can use it in a mobile app for SSL pinning. How do I create a self-...
0
votes
0answers
22 views

VPN client fails to connect from a specific network

I have an issue with a VPN client ("Client 1") which doesn't connect to an OpenVPN server I built when connecting from a very specific network ("Network 1"). The error is " ...
0
votes
0answers
18 views

Application crashes with error could not create ssl/tls secure channel

I contacted the customer care and this is what they have to say - kindly make sure that the SSL certificate used for the SMTP service offered by the Microsoft Exchange Server is not expired and the ...
0
votes
0answers
94 views

Disable all but TLS 1.2 on HP JetDirect 635n network card

I have the latest firmware update for the JetDirect 635n (J7961G), which is at v41.16 (2017). Unfortunately, I cannot seem to switch the web interface for this network card over to TLS 1.2. It seems ...
1
vote
2answers
282 views

Is there any use for SANs in client certificate verification?

When a client verifies a server's certificate, it knows the domain name of the server, then it can check whether the domain name exists in the SAN (Subject Alternative Name) field of the server's ...
0
votes
1answer
577 views

openssl command to verify the cipher of the ssl cert

Is it possible to use an openssl command in order to check the cipher of an SSL Certificate on a live website? For example to use something like: openssl s_client -connect example.com:443 -crlf The ...
4
votes
1answer
2k views

Thunderbird: error 'Peer using unsupported version of security protocol.'

I am trying to send emails through thunderbird to our old exchange email server. This was working till I recently updated thunderbird 78. I get the following message Sending of the message failed. ...
0
votes
2answers
326 views

PopTrayU - 'Error connecting with SSL'?

Without having made any changes, starting in July 2020, I got: An error occurred. Error Type: EIdOSSLConnectError Error connecting with SSL. EOF was observed that violates the protocol I have several ...
1
vote
0answers
13 views

How can one disable supported crypto groups in Firefox's TLS support

I know how to enable/disable a particular cryptosuite in Firefox, with the settings like security.ssl3.rsa_des_ede3_sha in about:config. But I can't find how to do that with supported field groups, ...
1
vote
2answers
668 views

Is HTTPS connectionless or connection-oriented?

We all know that HTTP is connectionless. After a request-response, the connection is torn down. It remembers the "state" based on cookies supplied by the browser. Is this the case with HTTPS ...
0
votes
1answer
223 views

Traefik disables TLS 1.2 when using an EC256 certificate

I am running Traefik as a reverse proxy in front of my docker containers, I'm including the config files below. I checked my servers with SSLLabs and I noticed that they do not seem to support TLS 1.2....
0
votes
1answer
1k views

TLS options for curl/wget

Is it possible to configure curl and/or wget to reject a DH key-exchange of less than or equal to 1024 bits. As a functional test, using curl/wget on https://dh1024.badssl.com/ should fail. I was ...
0
votes
1answer
35 views

What kind of file path starts with "\\.\"? [duplicate]

I use Avast Web Shield, and it intercepts TLS traffic from the browser using the env variable: SSLKEYLOGFILE \\.\aswMonFltProxy\FFFFDE812B3DD840 While I don't actually mind that it does this, and I ...
1
vote
1answer
2k views

Will Chrome fully remove TLS 1.0?

As of Chrome 84, support for TLS 1.0/1.1 has been "removed" although you can still bypass the warning: In the error message it states: The connection used to load this site used TLS 1.0 or ...
0
votes
0answers
1k views

IE - Can’t connect securely to this page

I'm a developer wanting to get to a site on a LAN with a self-signed certificate. I want to bypass the warning and go to the site. I have the following IE error message: Can’t connect securely to ...
1
vote
0answers
260 views

Ffmpeg - Playback of HTTPS link via proxy CLI

I want to play a video but I need to connect via a proxy. I noticed that the link is http connection via http_proxy is not a problem but in the case of https you have to use the environment variable ...
0
votes
1answer
151 views

How to select the client certificate?

I am using Chrome and Edge to visit a web site that requires client certificate (mTLS). For the first time, both Chrome and Edge pops up a panel that asks me to select a certificate. There was only ...
0
votes
0answers
16 views

SSL connection not trust

I am new to SSL/TLS and i have a certificate issue: testing connection between client and server(payara server) is ok, "client hello" . back way is refused : handshake_failure javax.net.ssl....
1
vote
0answers
26 views

ProFTP on Centos 7 - 200 Protection set to Private occurs

ProFTP on Centos 7. I have 2 virtualmin virtual servers created with the same server template. Let's say A.com and B.com. Their users can connect to their ftp accounts with TLS Here my global ...

1
2 3 4 5
7