Questions tagged [gnutls]
The gnutls tag has no usage guidance.
33
questions
0
votes
2
answers
1k
views
gnutls-cli hangs when testing an ssl connection
I'm running the command
gnutls-cli -s facebook.com -p 443 --x509cafile /etc/ssl/certs/ca-certificates.crt -d 999
and the output is
|<2>| p11: loaded provider 'p11-kit-trust'
|<2>| p11: ...
1
vote
2
answers
5k
views
How do I debug error 'GnuTLS: Handshake Failed (-87) 'No supported cipher suites have been found.' after Ubuntu 20.04 upgrade?
After upgrading a (working) Ubuntu 18.04 webserver to 20.04, I get the following error in the log when making a simple curl request:
[Fri Nov 06 14:46:38.344069 2020] [gnutls:info] [pid xxx] [client &...
1
vote
1
answer
808
views
Make gnutls-cli print local root certificate as well as server-provided certificates
I'm diagnosing a TLS certificate verification problem in Ubuntu Xenial that resulted from the recent Let's Encrypt root certificate expiration. The problem happens in cURL which uses GnuTLS under the ...
0
votes
0
answers
139
views
gnutls_handshake() failed: An unexpected TLS packet was received [duplicate]
I am facing this issue when triggering curl to a target application hosted in ubuntu 20.
curl: (35) gnutls_handshake() failed: An unexpected TLS packet was received,Below is the curl version in source....
3
votes
1
answer
1k
views
Cannot Connect to Surry to get Php8
My system is Debian Buster:
~# lsb_release -a
No LSB modules are available.
Distributor ID: Debian
Description: Debian GNU/Linux 10 (buster)
Release: 10
Codename: buster
I have run ...
6
votes
3
answers
7k
views
TLS: Error while reading file
I'm setting up a new server with Debian 8.
Exim4 is preinstalled and I'm trying to get TLS working.
I have copied the snakeoil key and cert into the /etc/exim4 folder and set the correct permissions ...
2
votes
1
answer
2k
views
Is it possible to make OpenSSL work with gnutls?
I have libvirt, one client and one server. Libvirt uses gnutls implementation of tls. I want to use mitmproxy and put in the middle between client and remote server. But mitmproxy uses different ...
0
votes
1
answer
193
views
Known built-in commands that work differently in Linux vs Mac
when developing Bash scripts, sometimes I'll run it in a Docker container, or on a VM to test it, but the ideal place for me to build out scripts is just on my local MacOS workstation.
When it comes ...
-2
votes
3
answers
7k
views
Apache fails to start, ssl issue
For some reason Apache does not start. I tried rebooting the server but to no avail. It's about 2am and my brain is fried. Here is the apache log. I did not touch any configs, certs, or keys to cause ...
2
votes
1
answer
801
views
Configure Apache2 webserver using mod gnutls error
The apache2 mod_gnutls https service actually manages to successfully run but keeps returning this error when trying to read private key from pkcs11 URL:
[Wed Jan 20 13:26:25.268236 2016] [gnutls:...
2
votes
1
answer
9k
views
Download an SSL certificate from a remote website through a proxy
I want a script checking my server's certificate. There are very good answers around here how to get this with openssl s_client or gnutls-cli, which works fine.... but NOT if you are behind a proxy! ...
3
votes
2
answers
4k
views
Configure OpenLDAP using GnuTLS with TLS=required
We have an openldap server and don't want to allow unencrypted communication, so acceptable is either tls over port 389 (starttls) or ssl over 636 (ldaps).
As we use slapd.conf for configuration, ...
0
votes
2
answers
917
views
Ubuntu server 10.10 OpenLDAP 2.4.23 gnutls 2.8.6 keep getting "TLS init def ctx failed: -1"
So I've read about the Debian/Ubuntu distros migrated to gnutls implementation for TLS/SSL. Fine with me, but I've spent the last week trying to configure OpanLDAP with TLS/SSL without success, keep ...
2
votes
1
answer
3k
views
vsftpd LIST causes GnuTLS error -15
I have an Arch Linux system running vsftpd which has been functioning with FTPES for the past year now. Within the past two days, I have noticed that all of my FTP clients fail to connect over FTPES. ...
0
votes
2
answers
1k
views
rsyslog TLS on AIX
I am trying to forward logs with rsyslog (8.4.2) on AIX 7.1 and I need to encrypt with TLS. However it seems I need rsyslog-gnutls package. I can't seem to find this package anywhere for AIX. Best I ...
2
votes
1
answer
9k
views
Apache/GnuTLS: can't get multiple TLS-enabled virtual hosts to work
A while ago, I set up an SSL certificate authority for our intranet, generated a bunch of certificates and ran a number of sites with them, all on the same physical host with one single Apache2 ...
1
vote
1
answer
683
views
FTPS failing on LIST command with error;
The machine in question is running CentOS 5.7 and vsftpd-2.0.5-21.el5.x86_64.
My client can connect to the server and interact with it normally over standard FTP. It can also connect via FTPS and ...
2
votes
2
answers
892
views
FTPS using Vsftp woes
I have some problems with Vstpd, and I don't know whether they are related or not.
One problem is that FireFTP can't get past the directory listing phase - it just stucks there forever, no error ...
-2
votes
1
answer
3k
views
Why openssl s_client and gnutls-cli deliver different certificates (own server)
on my server i have multiple virtual hosts with apache2. Some with domain *.example-one.org and some whith *.example-two.org. Each domain has it's own wildcard certificate.
When I fetch the ...
8
votes
4
answers
24k
views
How to change libcurl SSL backend from gnutls to openssl on Ubuntu server
I am getting gnutls specific errors in my Tornado webserver while processing Google OpenID SSL responses. One of the suggestions I got from Tornado mailing list is to try OpenSSL backend instead of ...
5
votes
3
answers
5k
views
Configure exim4 to use Microsoft Exchange as smarthost
My company has set recently set up an Active Directory driven Microsoft Exchange environment to consolidate outgoing mails. We do have a set of staging servers which should now use our MSEXCHG as ...
1
vote
0
answers
921
views
Apache / GnuTLS error connecting from Apache-Host
We got an Apache webserver which is configured to use SNI with GnuTLS.
Everything works and the server delivers the correct cert to clients.
Except for when connecting directly from the Apache-host.
...
3
votes
1
answer
2k
views
exim4 gnu_tls cipher configuration for incoming connections to gmail
On the Debian 7 / exim4 / gnutls mailserver I'm running, since about 1-2 weeks, mails from gmail don't arrive any more with the following typical error message in the log file:
2015-02-14 17:32:07 ...
5
votes
2
answers
16k
views
exim4 is showing a TLS error on connection... (gnutls_handshake)
My exim server is showing the following error:
TLS error on connection from xxxx.xxxx.xxxx. ([127.0.0.1]) [xxx.xxx.xxx.xxx] (gnutls_handshake): A TLS fatal alert has been received.
I'm using the ...
3
votes
1
answer
1k
views
Is it possible to configure ECDHE-ECDSA with mod_gnutls and Apache 2?
I'm trying to configure my Debian box with mod_gnutls implementation (for sake of SNI), to achieve best possible results in TLSv1.0/1.1/1.2 (disregarding both SSL2 and SSL3)
However it seems to me, ...
0
votes
1
answer
975
views
Exim says "The request is invalid" during gnutls_handshake
I have Debian wheezy and setup Exim to listen to port 587, where users can authenticate using TLS. I'm testing it with Thunderbird 31.1.2. When I try to send a message, Thunderbird displays this:
...
1
vote
3
answers
4k
views
Exim after Thunderbird update: "Could not negotiate a supported cipher suite" [closed]
Recently, after I installed updates on my Kubuntu 14.04. system and a new version of thunderbird was installed, I could not send emails any more. It prompts:
Sending of message failed. The message ...
1
vote
0
answers
266
views
apache/mod_gnutls ssl certificate based authentication
I'm using apache with gnutls. I've configured both to request authentication from the client.
When providing the certificate it works. But it works also if I provide another that the correct ...
4
votes
2
answers
7k
views
How do I force my Debian system to update GnuTLS?
After the news broke that GnuTLS is broken
hacker news | arstechnica
I would like to know how to find out if my system(s) Debian 7.1 Stable & Debian 7.1 Testing are safe and more specifically ...
3
votes
1
answer
781
views
GNUTLSClientVerify does not block unrecognized CAs
I have installed Apache on Ubuntu, installed GNUTLS module and everything worked fine:
root@ilnwad15:~# apache2 -v
Server version: Apache/2.2.22 (Ubuntu)
Server built: Jul 12 2013 13:37:15
Now, I ...
2
votes
2
answers
5k
views
Windows client can't connect to vsftpd server
I've a problem about vsftpd server. I've created an vsftpd server with implicit ssl. It works perfectly with filezilla client on ubuntu 10.04, but when I run with filezilla client on windows, it got ...
2
votes
1
answer
3k
views
gnutls vs openssl with openldap, debian and centos
I have a Debian 6.0.5 server running openldap. It appears to be compiled against gnutls. I used gnutls' certtool to generate a self-signed certificate and I have used it on a few debian client ...
0
votes
1
answer
805
views
Can't find gnutls ibrary when executing rpmbuild under non-root
I am trying to build ntgs from the latest source, using the .spec from rpmforge - as non-root via rpmbuild. During the compile, it fails at this step:
checking for GNUTLS... no
configure: error: ...