Questions tagged [tls]
The tls tag has no usage guidance.
376
questions
0
votes
0
answers
13
views
Miktrotik: disconnect TCP connection
I am working on a mobile device project. I have the mobile device connected on a local USB Wifi hotspot on an Ubuntu PC and I can WireShark the TLS connections which the mobile device creates towards ...
1
vote
1
answer
38
views
How to disable CBC ciphers in Firefox
The ssllabs.com browser check shows a list of cipher suites supported by my browser. Some are labeled as WEAK, I think because they do not support perfect forward secrecy.
I can disable some of them ...
- 143
0
votes
1
answer
24
views
During SSL tunneling what IP address is seen by the destination server?
If I setup a SSL tunnel via a HTTPS proxy, what IP address will the destinations server see? Would it be the IP address of the client or the IP address of the proxy? Is there any point (e.g. during ...
0
votes
0
answers
35
views
I am trying to mimic the connection of my softether vpn to setup a openvpn with TLS 1.2 instead of SSL
I am trying to setup a openvpn with tls 1.2 instead of ssl with tcp, as in this screenshot:
How can I mimic the connection like the softether (on the left) in order to setup openvpn (on the right)?
0
votes
0
answers
12
views
TLS connectivity log on MacOS
Looking to enable TLS connectivity logging, mainly to identify the protocol version that is being used (TLSv1/2/3). OSLog (the new logging platform) does not log any TLS activity, unless directed by ...
- 1
0
votes
2
answers
153
views
SSL Certificate Issuer History for particular domain or website
Is it possible to find out the history of issuers of SSL certificates for a particular website? For example if a website had a cert issued from one company A originally, then the website had a new ...
- 103
1
vote
2
answers
164
views
Pop3 using SSL/TLS fails since yesterday
I have several email accounts with a specific provider. Since yesterday both POP3 and SMTP fail silently on all accounts and all email readers (Thunderbird on Linux, K9 on Android).
Thunderbird's ...
- 210
0
votes
1
answer
36
views
How to disable individual TLS Extensions client side on Windows and Mac?
I am trying to test different TLS 1.2/1.3 extensions support by turning them on and off on client side. I failed to find any way to do that in chrome://flags (or any other browser).
Is there a way to ...
- 183
0
votes
0
answers
840
views
How to temporarily disable TLS1.3 in Chrome?
I need to temporarily disable the TLS 1.3 protocol leaving only TLS 1.2 for some testing purpose.
I found some procedures on Google but they didn't not work. Please give me the guidance.
0
votes
0
answers
124
views
"scoop" package manager can't install anything (or I think something's wrong with making secure connections)
I usually use scoop to manage my various packages on Windows. I haven't updated in a while but I recently tried to install an application via scoop and it gave me the following error:
Unable to read ...
- 615
0
votes
0
answers
76
views
Network Access Points providing cert on connection, how?
How is it connection providers in public locations are able to send a certificate on connection?
I seem to recall there is a protocol they use, but I read that many years ago.
Or is it as simple as on ...
- 1
0
votes
0
answers
138
views
TLS Error: TLS key negotiation failed to occur withing 60 seconds
I'm working remotely using my laptop by connecting to the office VPN server (in India), if I connect from UAE, the connection works immediately fine... But now when I try to connect from Egypt (using ...
- 1
2
votes
1
answer
367
views
Browsing HTTPS and TLS 1.3 websites in old browsers [closed]
Nowadays, browsing any website with obsolete browsers such as IE5 or Firefox 2 from emulated environments is an impossible mission due to unsupported TLS versions as shown here:
Due to the prevailing ...
- 121
0
votes
0
answers
95
views
What cause client not to sent [ChangeCipherSpec] package
I face a problem. i have a device when doing TLS handshake, Client fail to send [ChangeCipherSpec], currently all https website is failed but http is working.
i check it from wireshark, it show as ...
- 1
0
votes
2
answers
136
views
tls wrapper over plaintext tcp
is there any tool I can make tls forwarder over raw tcp?
I have a server which has no encryptions, purely plaintext tcp comunications.
I wanna connect to it over tls but cannot change the server code.
...
- 13
0
votes
1
answer
54
views
Disabling an IP based access to my Nginx site
I do not want people to be able to access my Nginx site, unless it is through the domain name. I have a Flash instance running that controls the requests. Anyways I have used this command,
server {
...
Justin Battaglia
1
vote
1
answer
4k
views
How to tell curl to use one client cert from the Windows Cert Store?
Disclaimer: I am new to curl.
When I go to https://server.cryptomix.com/secure/ with Chrome, I am asked by Chrome to choose one client cert among the few ones I currently have in my Windows Cert Store....
- 63
0
votes
0
answers
151
views
How to setup OpenVPN config with TLS on Windows?
I'm using OpenVPN connection configured with Network Manager on Ubuntu. Now I need to setup the same connection on Windows, but I haven't found the way how to create VPN profile without .ovpn file, ...
- 1
0
votes
1
answer
22
views
Does the http load balancer work for any Port?
I have a Python server on my VM in Google cloud platform. I was wondering if I add an https load balancer to this, is my Python Socket server also secured with that TLS handstand? Or does this only ...
0
votes
0
answers
119
views
Missing folder '/etc/pki/trust/anchors'?
I am trying to create an ssl certificate via openssl, through my virtual machine at google cloud. But one of the last steps is to copy my ca.crt from my root, to the'/etc/pki/trust/anchors' folder.
...
2
votes
1
answer
392
views
Client-side TLS proxy?
Does a client-side proxy exist that would transform my HTTP request into HTTPS before sending it to the server?
Meaning that my software application sends an HTTP request to this client-side proxy, ...
- 141
1
vote
1
answer
78
views
Why no SSL certificate trust store at the user level?
Most OSes have a global trust store (e.g., /usr/local/share/ca-certificates. However, this method requires root to modify, and affects all users.
Most applications have a way to trust certificates at ...
- 215
0
votes
1
answer
890
views
How to disable old TLS versions in Windows?
Using Windows 11, no server or IIS, just want to disable old TLS versions of my personal computer so no connection over those versions can be made, even if that means some connections will fail.
I ...
user1737559
0
votes
1
answer
2k
views
How can I view the TLS 1.2 and 1.3 certificates in Wireshark?
I'm testing a new proxy and monitoring the connection using Wireshark, but I'm not seeing any certificate at all. my goal is to find out exactly what sensitive and identifiable data is leaving my ...
user285140
0
votes
0
answers
32
views
I can't login to external cloud storage SFTP servers on port 22
I am trying to connect to several different external cloud hosting FTP servers using FileZilla on port 22, but all servers are denying me access. Otherwise, when I log in on port 21, only then do the ...
- 1
0
votes
0
answers
331
views
How to decrypt dns over tls data using wireshark
Good afternoon.
I need to know the procedure I need to follow or any clues on how to decrypt DoT traffic in wireshark using pre-master keys shared. Another alternative would be to create a dns server ...
- 1
0
votes
1
answer
2k
views
Is it possible to use AdGuard Home with DNSSEC to DNS over TLS but with a Bind9 internal DNS Server downstream of AdGuard?
In the diagram I threw together the left hand side shows my current LAN's DNS query path, I would like to have it as shown on the right hand side with AdGuard and DNSSEC or DNS over TLS if possible I ...
7
votes
1
answer
2k
views
Prevent users from ignoring certificate warnings
Is it possible to prevent users to bypass a certificate warning showed in their browser, and if so, how?
Assuming we have no control on the remote server, and total control on the client computer.
The ...
- 73
0
votes
1
answer
502
views
uefi shell - download a file via https
I am experimenting with uefi shell from and I wish to implement the following scenario :
boot into uefi shell
download a a startup.nsh script from https remote resource
run the downloaded startup.nsh ...
- 1
0
votes
1
answer
3k
views
Registry key "protocols" empty
Im checking a windows 2019 server and the key "protocols" is empty
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols
On my Windows 10 also is ...
- 43
1
vote
1
answer
2k
views
"This server does not support FTP over TLS" warning in vsftp. Why does it appear?
I've got a small VM set up, which runs Debian.
In my vsftpd.conf file, there are the following lines:
listen=YES
listen_ipv6=NO
connect_from_port_20=NO
anonymous_enable=NO
local_enable=YES
...
- 13
0
votes
1
answer
59
views
How does the Browser know that HTTPS is wanted?
Say I request a website (example.com). Via DNS, an IP is returned and the request is sent there. Does the browser always first try port 443 (HTTPS), given an IP address? TLS is started from the client ...
- 197
0
votes
1
answer
3k
views
How to enable TLS 1.2 and disable TLS1.0 and TLS1.1 with IIS on Windows server
TLS 1.0 and 1.1 have been deprecated by the Internet Engineering Task Force (IETF) as of March 25, 2021.
How to enable TLS 1.2 and disable TLS1.0 and TLS1.1 with an old Windows server(2008/2012~) on ...
- 948
1
vote
1
answer
9k
views
Whether can TLS client send `Encrypted Alert` to server?
I often see TLS server -> client: Encrypted Alert package for closing the TCP connection.
whether can TLS client send Encrypted Alert to server?
- 555
1
vote
0
answers
5k
views
"failed to receive handshake, SSL/TLS connection failed" only when trying to access T-Mobile.com
I have 2 phones, 2 tablets, and 2 laptops can log into my account at T-Mobile with no issues.
My main PC, (Alienware R11 running Win11) cannot access my T-Mobile account. It gets an error when trying ...
- 11
3
votes
1
answer
1k
views
How do I disable SSL/TLS certificate verification in ffmpeg?
I was going to write out a long drawn-out question with tons of details about my circumstance, but figured even though questions are usually much more detailed on here, this one is pretty simple (...
- 33
0
votes
2
answers
980
views
Could in-place upgrade of Server 2012 to 2019 affect firewall rules or IIS sites?
An application I support has been installed on Windows Server 2012. The server is to be upgraded to Server 2019 in an in-place upgrade. This is to be done without being tested first.
The application ...
- 133
0
votes
0
answers
65
views
Windows 10 - Mandatory installation of server's certificate on the client computer
There are 2 parts to my question, both related to SSL sites:
I want to configure my Windows OS to disallow browsing to any SSL sites whose server authentication certificate is not installed on my ...
- 376
3
votes
3
answers
3k
views
Make Thunderbird request certificate on port 993, not 443
I am trying to create a certificate exception in Thunderbird, for a specific server <servername> (I am specifically asking not to be lectured about how it would be better to have an acceptable ...
- 93
1
vote
0
answers
1k
views
Allow specific weak cipher in Chrome
I have to connect to a system that uses a weak TLS cipher :
TLS_RSA_WITH_AES_256_CBC_SHA.
This is an embedded web server in a physical appliance and there is no firmware available to change that ...
- 11
1
vote
1
answer
310
views
How to manually connect to my web server and send a TLS handshake with a hostname, followed by the HTTP request headers with a different hostname
My Apache web server logs suffer from the dreaded error:
[ssl:error] AH02032: Hostname www.example.com provided via SNI and
hostname example.com provided via HTTP are different
I know what it means ...
- 544
0
votes
1
answer
123
views
Receiving incorrect TLS certificate from website
This is a strange issue that (so far) is specific only to plex.tv website. I am seeing this same problem from various devices on my network. Ultimately, simply trying to access https://plex.tv in my ...
0
votes
1
answer
408
views
Server hello is not returned without SNI
I've setup a proxy server (squid) with https_port enabled. When I send requests to this server using a url like domain.com or even using a host alias (i.e. manually written in /etc/hosts), there's no ...
- 117
0
votes
1
answer
2k
views
TLS1.2 still used despite forcing use of TLS1.0
I have a customer who is trying to connect to my company's FTP server and we have asked him to force the use of TLS1.0, which he has done through a curl request (curl version : 7.29.0). However, ...
1
vote
0
answers
963
views
Lets Encypt, Firefox, Peer’s Certificate issuer is not recognized
I recently moved my TLS termination back to my reverse proxy from the backend server, and I have run into this very specific problem.
When connecting to my nextcloud site firefox says ...
user1239807
0
votes
2
answers
4k
views
How can one check whether my Windows 7 supports TLS 1.2?
I read on https://helpx.adobe.com/x-productkb/multi/eol-tls-support.html#win7 (mirror 1, mirror 2):
Your operating system and application frameworks must also support TLS 1.2. If
How can I check ...
- 20.4k
-1
votes
1
answer
2k
views
Forcing TLS 1.2 on Windows 7
The question is about forcing Win7 to use TLS 1.2 only. (Yes, I know that Win7 gets no more patches, nevermind that.)
The underlying issue is that Ubisoft Connect does not work properly. The logs ...
- 119
0
votes
1
answer
296
views
How to configure Google to only search for SSL/TLS-encrypted websites?
Is there a way to configure the Google Search Engine to only search for SSL/TLS-encrypted websites?
What I mean by that is that when I google something, only websites with a valid HTTPS certificate ...
- 103
1
vote
1
answer
2k
views
Disable "TLS Certificate revocation checks on" in Java for all users
Apologies if this has been asked and I am a bit of newbie to Java.
We are currently running JRE 8 Update 211 32 bit (I know this is not the latest version) running in Windows 10.
I am currently ...
- 15
0
votes
0
answers
2k
views
Debugging HTTP 403 Forbidden when using cURL for mutual authentication SSL (mTLS)
I'm a beginner in security but I am trying to send a request to a server through mutual authentication.
I was given
CA pem file
client cert pem file
private key pem file
Right now, I'm trying to ...
RedFlipBull