Questions tagged [ssl]
SSL and its successor, TLS, are encryption and authentication protocols that encrypt the full contents of a TCP connection, as well as potentially verifying the identities of the devices making the connection.
6,951
questions
-1
votes
1
answer
34
views
Cloudflare error 526: Invalid SSL Certificate with LetsEncrypt Cert
My website is winions.gg and I have just today run into a 526 error through cloudflare (it's been working the past 2 or 3 days and today only it stopped working).
I have a letsencrypt SSL installed ...
0
votes
0
answers
8
views
LDAPS with openvpn doesn't work but ldapsearch is running
I have some problem with comfiguring authentication openvpn to Active Directory with LDAPS.
I don´t know, where shoud be problem, because if I use ldapsearch (with ldaps://addr_to_my_AD), evertyhing ...
- 13
0
votes
1
answer
105
views
SSL error "unexpected eof while reading" on same server as the originating request
First, I'm aware of the SSL Library Error: error:0A000126:SSL routines::unexpected eof while reading error stemming from OpenSSL 3 reintroducing a feature to prevent truncation attacks.
The question I ...
- 537
0
votes
2
answers
50
views
nginx as a web proxy with ssl
I have installed proxmox and am running a simple ubuntu server where I have installed nginx. How and where do I setup ssl? I only want to use nginx to forward location to another web server. Can I set ...
- 215
0
votes
1
answer
28
views
Getting not secure warning for www domain
I installed lets encrypt using certbot when I go to the www.domain.com I get this site is not secure error
Found the following certs:
Certificate Name: example.com
Domains: example.com
...
- 1,319
0
votes
1
answer
20
views
Domain name pointing to an A record with valid certificate prompts an err_cert_common_name_invalid
So we wanted to have one of our domains in godaddy to point on another hosted service on another godaddy account. The site already has SSL in it and the other domain didn't we installed the ...
- 103
0
votes
0
answers
31
views
Nextcloud Web App hosted on Nginx has incredible slow TLS handshake
I’m self-hosting a Nextcloud instance. I updated this for years and was always very happy with it. I don’t use docker but hosting bare metal on a Debian 11 Bullseye system. For SSL, I use Let’s ...
- 365
-1
votes
0
answers
14
views
Self signed certificates for non standard TLD failing
I've created my own CA and got the cert onto my servers, I can generate self signed certs that are trusted for TLDs that exist. .com, .net, what have you. I am unable to generate certs for ones that ...
0
votes
0
answers
18
views
How to get RTSPtoWeb to work with with https
We have installed RTSPtoWeb on a spare server on our network, just to see if it works, and it does. It captures the stream from our cameras nicely. I then used the webrtc stream option to successfully ...
0
votes
0
answers
13
views
Gmail application won't sent emails when on WiFi [migrated]
I've noticed that on my Android phones (two of them) the out going emails in Gmail app will not be sent when I'm connected to my home WiFi. When the phones are using the GSM data, then there is no ...
- 1
-2
votes
1
answer
48
views
How to discover HTTPS servers on local network with certificate for particular hostname
I am making a network-connected device (using Raspberry Pi 4 inside), and I would like a way for these devices to discover each other (when on the same local subnet). I am vaguely aware of protocols ...
- 132
1
vote
0
answers
30
views
Certificate only works from client side, how do I debug something like this? (graylog/filebeat/JVM keystore)
I created 2 key-certificate pairs with the exact same method. However, while trying to setup TLS on my graylog server to a remote filebeat node, it does not successfully connect when trying to connect ...
- 23
0
votes
0
answers
13
views
OpenLDAP Client hangs indefinitely on SSL_connect
I'm using the C/C++ OpenLDAP client library. I specified a NETWORK_TIMEOUT and TIMEOUT of 3 seconds in my openldap.cfg. However, when the OpenLDAP client library issues SSL_connect, it hangs ...
- 1
-1
votes
0
answers
10
views
Virtualmin: How to install multiple SSLs on a same virtual server?
SYSTEM INFORMATION
OS type and version
UBUNTU20
Webmin version
2.001
Virtualmin version
7.2-1
I have two domains that point to the same server, the first one A record and the second one CNAME to ...
- 197
0
votes
1
answer
34
views
Adding SSL certs to Samba from CA
I have a wildcard SSL cert from A CA that I am trying to get to work on my samba ADDC. Samba will fail on Samba restart when smb.conf looks like this:
tls enabled = yes
tls keyfile = tls/...
1
vote
2
answers
84
views
How can I make SSL Lets Encrypt certificate auto renew on Ubuntu
How can I make this certificate to auto new every time so I don't have to renew it manual or it will auto renew itself?
ssl_certificate /etc/letsencrypt/live/www.vgopromo.com/fullchain.pem; # managed ...
1
vote
1
answer
65
views
Configure apache ssl with load balancer (DigitalOcean)
I'm probably missing something really basic, but I've been trying for some time now to configure an apache server (which serves a wordpress site) for ssl with a DigitalOcean Load balancer.
The load ...
- 11
0
votes
0
answers
7
views
Trouble figuring out how to configure Nessus Scanner version 10.x to use two way TLS to scan Database
I have a MySQL 5.7 database that requires two-way SSL/TLS for any clients attempting to connect to it. I have the requisite keys and certs for the connection, however I do not know how to configure ...
0
votes
1
answer
60
views
nginx fail SSL after upgrade ubuntu 22.04 from 20.04
I wonder if someone has encountered this issue with nginx after upgrade ubuntu from 20.04 to 22.04.
In nginx log file this appears. Seems to be something wrong with SSL.
2023/03/01 08:42:31 [emerg] ...
1
vote
0
answers
19
views
Memcached error for apache httpd 2.4
I created an EC2 instance with Apache HTTPD 2.4 with mod_ssl version 2.4.34. I've created a Memcached cluster on AWS ElastiCache version 1.6.17 with encryption in transit.
The goal is to have HTTPD ...
- 111
0
votes
0
answers
29
views
This connection is not secure. Logins entered here could be compromised
This is on Geoserver which uses Jetty/Java. I followed this article on a Debian machine and then added SSL with Certbot (my padlock is fine). The message comes up when I click the user/password input ...
- 1
0
votes
0
answers
29
views
SSL handshake error - log domain name with Nginx
Is it possible to extend SSL handshake error log to determine which domain was requested? Now I get log in the following format without any information about domain:
2023/02/27 12:27:58 [info] 60011#...
- 276
0
votes
0
answers
37
views
Windows Server Essentials 2016 SSL on IIS trashed - how do I fix it?
I have completely trashed my certificate settings for IIS and now can't connect new machines using the http://servername/connect function. I am able to access the site using https://servername, but ...
0
votes
1
answer
51
views
Setting up SSL in Apache2 with backend docker app
I'm running Ubuntu server (18.04) on an Azure VM, with Apache2 (2.4.29). I have a backend app running in docker on the same host that is called by my site. This works easy enough without SSL. I added ...
- 1
1
vote
2
answers
62
views
Linux netfilter NAT based on SNI?
I am trying to do SNI proxying to a subnet on a router while keeping the src IP.
Background: I have a router doing DNAT to do port-forwarding for many application ports, and it is connected to a ...
- 13
0
votes
1
answer
180
views
How to support TLS 1 and TLS 1.1 with haproxy 2.4 and OpenSSL 3?
I am trying to support TLSv1.0 and TLSv1.1 with haproxy 2.4.18 (and OpenSSL 3.0.2) on Ubuntu 22.04.
I have followed Mozilla SSL Configuration Generator, "Old" configuration, slightly ...
- 101
0
votes
0
answers
62
views
K8s : nginx-ingress: SSL_do_handshake() failed (SSL: error:191CF08C:SSL routines:tls_parse_ctos_key_share:bad key share)
As we found out that the nginx ingress as well as the cert-manager were outdated and not compatible with the Kubernetes version of 1.22 anymore.
I upgrade the two components: nginx-ingress from 0.26.1 ...
- 29
-1
votes
0
answers
20
views
What cause client not to sent [ChangeCipherSpec] package
I face a problem. i have a device when doing TLS handshake, Client fail to send [ChangeCipherSpec], currently all https website is failed but http is working.
i check it from wireshark, it show as ...
- 1
1
vote
1
answer
57
views
Redis Sentinel with TLS - how to get node FQDN rather than IP?
This may be a Serverfault or a Stack Overflow question, I'm not sure yet:
I've set up a simple three node Redis system with a master and two replica nodes, managing failover with Redis Sentinel. Redis ...
- 4,991
0
votes
1
answer
21
views
Should Ssl renegotiate messages be encrypted?
In RFC5246 it is not mentioned that Ssl renegotiate messages should be encrypted.
But when using Windows Schannel API I see that the renegotiate messages are encrypted.
I tried to send a crafted "...
- 101
0
votes
1
answer
41
views
Can Firefox or Chromium (as of 2023) be tricked to accept SSLv3 for a specified local IP (an old iRMC)?
I'm fiddling around with an older Fujitsu server running iRMC S3.
The integrated webserver does only allow SSLv3 to be enabled due to it's age and can of course not be updated beyond it's current ...
- 103
0
votes
1
answer
81
views
server SSL Certificate validation
This may seem rather trivial, but Im' not good with tls.
I have an openvpn server that does mutual tls auth.
my vpn client has a ca.crt file of:
root CA
intermediate CA
issuing CA
my server has a ...
- 123
0
votes
1
answer
113
views
How can I stop WSUS server from reverting back to default IIS WSUS Administration SSL settings?
After, configuring my WSUS to use SSL it either says connection error or reverts back to http. I have a week working on this and I implemented anything that might be the probable solution.
This is the ...
- 3
0
votes
0
answers
49
views
How do I can make mTLS using HttpClient to check the certificate on the server
I want to check the SSL/TLS certificate on the server side, so, on the client, when I do
var webHandler = new WebRequestHandler();
var cert = new X509Certificate2(Path, Pass);
webHandler....
0
votes
0
answers
36
views
How do I get cURL (CLI) to close the connection made to a https server?
cURL doesn't seem to care about closing the connection to a server even when I include the "Connection: close" header?
It respects the header for http, but not for https, seems like?
curl -v ...
- 1
-1
votes
1
answer
40
views
After building a WSUS server in a windows 2016 server I get failed to synchronize error followed by 'System.Net.WebException: The underlying conne...'
So I started with the basic procedure of adding the Windows Sever Update Services (WSUS) roles.
After doing so I created a self-signed certificate and add the domain names where required.
Image of ...
- 3
1
vote
1
answer
46
views
Cannot initialize openLDAP-backed kerberos realm using krb5_ldap_util with startTLS?
I have set up an openLDAP backed MIT Kerberos realm on a server after much iteration, and I am now trying to move it to its own server. When I first set it up on the original server, I created a ...
- 153
0
votes
1
answer
145
views
OpenSSL Does not Create Subject Alternative Name (SAN)
I have been trying to create a self-signed certificate with subject alternative name; however, although the cretifcate was created successfully, SAN was not added to its details.
Here's the command I ...
- 101
0
votes
0
answers
148
views
NGINX server is producing error response code 400 and "Bad Request" message when the server is rapidly requested
The API serves as a proxy for M3U8 videos. While accessed through an HTTP connection at IP:port requests to the API never result in a response code 400. Despite being tested under semi heavy load(10 ...
- 1
1
vote
0
answers
49
views
Google DataStudio (LookerStudio?) Can't connect to RDS MySQL using SSL?
I am attempting to connect to an RDS MySQL instance from Google DataStudio (LookerStudio?). The RDS instance accessible via public internet. I'm able to connect to it successfully using non-ssl ...
google-cloud-platform
0
votes
0
answers
39
views
NGINX: Is it possible to configure mTLS without an ssl_client_certificate?
The system I am working with allows clients to register their public keys for mTLS with an application server. We would like our client's applications to establish an mTLS connection with an NGINX ...
- 101
-1
votes
1
answer
29
views
Solutions to relay (not redirect) incoming HTTP requests to existing HTTPS server? [duplicate]
Looking for a Linux HTTP-listening-app which would relay incoming requests as-is to a remote HTTPS server and relay the (decrypred) responses back.
Basically we have a blackbox https VM for which the ...
- 107
0
votes
0
answers
51
views
apache2 suddenly failing to serve https
apache2 v.2.41 on Ubuntu 20.04.5 LTS (WSL2) is suddenly not connecting over https, in browser or via wget.
It's been working for months, and I haven't changed anything.
I tried restarting Apache; it's ...
- 113
0
votes
1
answer
133
views
OpenVPN setup inexplicably stopped working
After some struggle a couple months ago, I set up an openVPN server and client to remotely connect to my first PC build. Everything is running Ubuntu 20. It worked fine until now, allowing me to ...
0
votes
1
answer
27
views
nginx multiple certificate types
I have a single server block that I want to offer two kinds of certificate for: one ECC and one RSA. The ECC cert is because for certain of the clients ECDSA is the only viable option in TLS 1.2 (and ...
- 103
0
votes
0
answers
58
views
Nginx reverse proxy SSL using different domain on each side
I need a little tip on how to solve a setup I came across where client wants to access an HTTPs API hosted on api.foo.com (our domain, with *.foo.com certificate) using api.bar.com (client's domain ...
- 1
0
votes
1
answer
50
views
How do I setup a SSL certificate for an express.js server behind a load balancer?
I'm restructuring my server structure by splitting them up instead of running everything from one server.
I looked here but that just specifies what I were already doing in the original setup with ...
- 101
0
votes
1
answer
27
views
Apache2 Default HTTPS 443 Vhost
I'm currently trying to make a default vhost for HTTPS to block traffic from unauthorized domains. However, when I define a default 443 vhost, ALL other HTTPS vhosts inherit this as well and prevents ...
1
vote
1
answer
81
views
Cross-signed (Let's Encrypt) SSL chain validation
Note: I spent like 30 minutes writing/formulating this question, and it turned out into a rubber ducking session. Realised what I was doing wrong, but posting this anyway as it might by useful for ...
- 201
1
vote
1
answer
104
views
SSL alternative names mismatch
Santander want to use our website, however when trying to access it they receive the following error:
'Network Error: Your request contacted a host which presented a certificate signed by an untrusted ...
- 11