Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [gnutls]

The tag has no usage guidance.

0
votes
1answer
31 views

Is it possible to make OpenSSL work with gnutls?

I have libvirt, one client and one server. Libvirt uses gnutls implementation of tls. I want to use mitmproxy and put in the middle between client and remote server. But mitmproxy uses different ...
0
votes
1answer
50 views

Known built-in commands that work differently in Linux vs Mac

when developing Bash scripts, sometimes I'll run it in a Docker container, or on a VM to test it, but the ideal place for me to build out scripts is just on my local MacOS workstation. When it comes ...
3
votes
2answers
1k views

Configure OpenLDAP using GnuTLS with TLS=required

We have an openldap server and don't want to allow unencrypted communication, so acceptable is either tls over port 389 (starttls) or ssl over 636 (ldaps). As we use slapd.conf for configuration, ...
3
votes
1answer
2k views

TLS: Error while reading file

I'm setting up a new server with Debian 8. Exim4 is preinstalled and I'm trying to get TLS working. I have copied the snakeoil key and cert into the /etc/exim4 folder and set the correct permissions ...
2
votes
1answer
686 views

vsftpd LIST causes GnuTLS error -15

I have an Arch Linux system running vsftpd which has been functioning with FTPES for the past year now. Within the past two days, I have noticed that all of my FTP clients fail to connect over FTPES. ...
0
votes
2answers
692 views

rsyslog TLS on AIX

I am trying to forward logs with rsyslog (8.4.2) on AIX 7.1 and I need to encrypt with TLS. However it seems I need rsyslog-gnutls package. I can't seem to find this package anywhere for AIX. Best I ...
1
vote
1answer
243 views

Configure Apache2 webserver using mod gnutls error

The apache2 mod_gnutls https service actually manages to successfully run but keeps returning this error when trying to read private key from pkcs11 URL: [Wed Jan 20 13:26:25.268236 2016] [gnutls:...
2
votes
1answer
6k views

Download an SSL certificate from a remote website through a proxy

I want a script checking my server's certificate. There are very good answers around here how to get this with openssl s_client or gnutls-cli, which works fine.... but NOT if you are behind a proxy! ...
0
votes
0answers
362 views

Apache / GnuTLS error connecting from Apache-Host

We got an Apache webserver which is configured to use SNI with GnuTLS. Everything works and the server delivers the correct cert to clients. Except for when connecting directly from the Apache-host. ...
5
votes
3answers
3k views

Configure exim4 to use Microsoft Exchange as smarthost

My company has set recently set up an Active Directory driven Microsoft Exchange environment to consolidate outgoing mails. We do have a set of staging servers which should now use our MSEXCHG as ...
-3
votes
3answers
2k views

Apache fails to start, ssl issue

For some reason Apache does not start. I tried rebooting the server but to no avail. It's about 2am and my brain is fried. Here is the apache log. I did not touch any configs, certs, or keys to cause ...
2
votes
1answer
1k views

exim4 gnu_tls cipher configuration for incoming connections to gmail

On the Debian 7 / exim4 / gnutls mailserver I'm running, since about 1-2 weeks, mails from gmail don't arrive any more with the following typical error message in the log file: 2015-02-14 17:32:07 ...
1
vote
1answer
619 views

gnutls-cli hangs when testing an ssl connection

I'm running the command gnutls-cli -s facebook.com -p 443 --x509cafile /etc/ssl/certs/ca-certificates.crt -d 999 and the output is |<2>| p11: loaded provider 'p11-kit-trust' |<2>| p11: ...
2
votes
1answer
1k views

Is it possible to configure ECDHE-ECDSA with mod_gnutls and Apache 2?

I'm trying to configure my Debian box with mod_gnutls implementation (for sake of SNI), to achieve best possible results in TLSv1.0/1.1/1.2 (disregarding both SSL2 and SSL3) However it seems to me, ...
0
votes
1answer
517 views

Exim says “The request is invalid” during gnutls_handshake

I have Debian wheezy and setup Exim to listen to port 587, where users can authenticate using TLS. I'm testing it with Thunderbird 31.1.2. When I try to send a message, Thunderbird displays this: ...
0
votes
3answers
3k views

Exim after Thunderbird update: “Could not negotiate a supported cipher suite” [closed]

Recently, after I installed updates on my Kubuntu 14.04. system and a new version of thunderbird was installed, I could not send emails any more. It prompts: Sending of message failed. The message ...
2
votes
1answer
8k views

Apache/GnuTLS: can't get multiple TLS-enabled virtual hosts to work

A while ago, I set up an SSL certificate authority for our intranet, generated a bunch of certificates and ran a number of sites with them, all on the same physical host with one single Apache2 ...
1
vote
0answers
240 views

apache/mod_gnutls ssl certificate based authentication

I'm using apache with gnutls. I've configured both to request authentication from the client. When providing the certificate it works. But it works also if I provide another that the correct ...
-2
votes
1answer
2k views

Why openssl s_client and gnutls-cli deliver different certificates (own server)

on my server i have multiple virtual hosts with apache2. Some with domain *.example-one.org and some whith *.example-two.org. Each domain has it's own wildcard certificate. When I fetch the ...
3
votes
2answers
4k views

How do I force my Debian system to update GnuTLS?

After the news broke that GnuTLS is broken hacker news | arstechnica I would like to know how to find out if my system(s) Debian 7.1 Stable & Debian 7.1 Testing are safe and more specifically ...
3
votes
1answer
709 views

GNUTLSClientVerify does not block unrecognized CAs

I have installed Apache on Ubuntu, installed GNUTLS module and everything worked fine: root@ilnwad15:~# apache2 -v Server version: Apache/2.2.22 (Ubuntu) Server built: Jul 12 2013 13:37:15 Now, I ...
4
votes
2answers
7k views

exim4 is showing a TLS error on connection… (gnutls_handshake)

My exim server is showing the following error: TLS error on connection from xxxx.xxxx.xxxx. ([127.0.0.1]) [xxx.xxx.xxx.xxx] (gnutls_handshake): A TLS fatal alert has been received. I'm using the ...
1
vote
1answer
2k views

gnutls vs openssl with openldap, debian and centos

I have a Debian 6.0.5 server running openldap. It appears to be compiled against gnutls. I used gnutls' certtool to generate a self-signed certificate and I have used it on a few debian client ...
2
votes
2answers
700 views

FTPS using Vsftp woes

I have some problems with Vstpd, and I don't know whether they are related or not. One problem is that FireFTP can't get past the directory listing phase - it just stucks there forever, no error ...
1
vote
2answers
2k views

Windows client can't connect to vsftpd server

I've a problem about vsftpd server. I've created an vsftpd server with implicit ssl. It works perfectly with filezilla client on ubuntu 10.04, but when I run with filezilla client on windows, it got ...
0
votes
1answer
642 views

Can't find gnutls ibrary when executing rpmbuild under non-root

I am trying to build ntgs from the latest source, using the .spec from rpmforge - as non-root via rpmbuild. During the compile, it fails at this step: checking for GNUTLS... no configure: error: ...
7
votes
4answers
17k views

How to change libcurl SSL backend from gnutls to openssl on Ubuntu server

I am getting gnutls specific errors in my Tornado webserver while processing Google OpenID SSL responses. One of the suggestions I got from Tornado mailing list is to try OpenSSL backend instead of ...
1
vote
1answer
233 views

FTPS failing on LIST command with error;

The machine in question is running CentOS 5.7 and vsftpd-2.0.5-21.el5.x86_64. My client can connect to the server and interact with it normally over standard FTP. It can also connect via FTPS and ...
0
votes
2answers
774 views

Ubuntu server 10.10 OpenLDAP 2.4.23 gnutls 2.8.6 keep getting “TLS init def ctx failed: -1”

So I've read about the Debian/Ubuntu distros migrated to gnutls implementation for TLS/SSL. Fine with me, but I've spent the last week trying to configure OpanLDAP with TLS/SSL without success, keep ...