Questions tagged [ssl]
SSL questions refer to either the Secure Sockets Layer communications protocol or interacting with signed certificates issued by trusted signing authorities.
660
questions
158
votes
4
answers
209k
views
How do I patch/workaround SSLv3 POODLE vulnerability (CVE-2014-3566)?
After the BEAST attack and Heartbleed bug, now I've heard about a new vulnerability in SSL/TLS called POODLE. How do I protect myself against being exploited?
Are only servers or also clients ...
107
votes
19
answers
381k
views
apt-get update failed because certificate verification failed because handshake failed on nodesource
Running sudo apt-get update on my AWS EC2 Ubuntu 18.04.01 LTS instance fails:
Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown
when trying to access ...
99
votes
2
answers
127k
views
What is the purpose of the ssl-cert-snakeoil.key
Right now I installed ubuntu 12.04.3 server which I want to access via ssh. For that reason I created a private key which I moved to
/etc/ssl/private/
I'm just wondering why there already is ...
75
votes
3
answers
99k
views
How do I create a self-signed SSL certificate?
I've set up SSL on my webserver, now I need two files:
a certificate
a certificate Key
How do I create a self-signed certificate for testing purposes?
69
votes
5
answers
177k
views
Ubuntu 20.04 - how to set lower SSL security level?
I'd like to ask if there's a way to lower SSL security level to 1 on Ubuntu 20.04, since I'm receiving:
141A318A:SSL routines:tls_process_ske_dhe:dh key too small
when trying to curl the website.
...
37
votes
6
answers
121k
views
How to verify the SSL fingerprint by command line? (wget, curl, ...)
Using a command line website downloader, such as wget, curl or any other one... In a script...
I have the SHA-1 and the SHA-256 certficate fingerprint of a website. Due to security concerns (1) (2), ...
26
votes
7
answers
40k
views
Enabling SSL in MySQL
I'm running Ubuntu Server 12.04, and I want to enable SSL connections to MySQL.
I've generated the following keys/certs files with OpenSSL:
ca-cert.pem
server-cert.pem
server-key.pem
I stored these ...
26
votes
8
answers
40k
views
Force Pidgin to acept an invalid certificate
I am getting the following error on Pidgin 2.10.10-3.fc20 (libpurple 2.10.10).
How can I force it to accept an invalid certificate?
(According to this bug report it should be capable).
Here's what ...
25
votes
7
answers
63k
views
Python HTTPS requests (urllib2) to some sites fail on Ubuntu 12.04 without proxy
I have an little app I wrote in Python and it used to work... until yesterday, when it suddenly started giving me an error in a HTTPS connection. I don't remember if there was an update, but both ...
24
votes
3
answers
95k
views
Where are PEM files stored for validating SSL certificates?
I'm writing a SOAP client application on Ubuntu using OpenSSL and C++. I am having trouble getting my code to validate the server certificate even though I know has a valid certificate.
Just to make ...
21
votes
3
answers
222k
views
How can I disable and enable SSL in Apache (without a command if possible)?
I have Apache running in Ubuntu 14.04. How do I disable and enable the SSL mode without a command? What about with a command?
17
votes
4
answers
99k
views
nagios- nrpe installation error(configure: error: Cannot find ssl libraries)
i have installed nagios and i want to install nrpe. While installing NRPE, when i execute (/home/abc/nrpe/configure)
./configure
it stops after reaching the following line
...
checking for type ...
17
votes
4
answers
13k
views
Citrix receiver 13.10 on Ubuntu 18.04.1
I am trying to get Citrix receiver to work on my Ubuntu laptop. I've installed the Citrix receiver, however when I try to open the .ica file that my company provides when I login to my organisation's ...
17
votes
6
answers
55k
views
How to fix CA cert issues with Curl in Ubuntu 14.04?
I am using Ubuntu 14.04. When I use curl, I get the following error:
curl: (77) error setting certificate verify locations: CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath:
From what I gather from ...
17
votes
1
answer
53k
views
Can I run nginx and apache at the same time?
Here is my scenario:
Apache is running perfectly with SSL enabled and certs installed on port 443.
I would like to install nginx as well on the same machine. Both as a functional reverse proxy and a ...
17
votes
1
answer
9k
views
List and remove unofficially installed CA certificates
This article expose how around 18% of HTTPS connections are being detected as intercepted by MITM proxies. As the great related paper states:
To circumvent this validation, local software injects a ...
16
votes
2
answers
43k
views
Disable SSL certificate validation in Ubuntu totally
I am new to Linux and learning Linux on Ubuntu 18.0401 LTS installed on oracle virtualbox on company system. Company has private proxy network. So all the websites I browse on ubuntu pass through ...
16
votes
4
answers
104k
views
How can I open port 443?
I'm trying to host a small node application on a digital ocean droplet running ubuntu 14.04. In local development the site works fine over https, however on the server the site doesn't get displayed ...
16
votes
1
answer
2k
views
Are the DigiNotar certificates supposed to be present in Firefox in a clean install?
Just installed Ubuntu 18.04 LTS, and noticed in Mozilla Firefox 70.0.1 (64-bit), two strange certificates that rang a bell for some reason. Not wanting to trust anywhere on the web for information in ...
16
votes
1
answer
18k
views
Update-ca-certificates: 0 added; 0 removed - how come?
I am following the instructions here to install a root certificate for Charles Proxy.
I followed every step exactly as it was outlined, and made sure to set the permissions correctly. However, when ...
15
votes
4
answers
31k
views
Minecraft with OpenJDK 7, I get "the trustAnchors parameter must be non-empty"
Im using Ubuntu 15.04 and OpenJDK 7, trying to run Minecraft. This is what I get.
EDIT: Minecraft is working now when I use sudo java -jar Minecraft.jar but doesn't work without super user, how would ...
15
votes
1
answer
20k
views
Open source FortiGate (Forti SSL VPN) client support in Ubuntu
Does anyone work on adding support for open source FortiGate SSL VPN NetworkManager client to Ubuntu?
According to this blog post there is initial support for open source FortiGate client.
Frontend: ...
14
votes
9
answers
37k
views
Setting up barrier to run on startup
Barrier is a free popular KVM software that enables mouse/keyboard sharing across several devices.
I've been fiddling with it for a few hours and I can't seem to get it right.
I have a barrier ...
14
votes
4
answers
36k
views
Cannot start XAMPP on Ubuntu 11.10
When I try to start XAMPP with sudo /opt/lampp/lampp start command it gives me a message like this.
Starting XAMPP for Linux 1.7.7...
XAMPP: Another web server daemon with SSL is already running.
...
14
votes
3
answers
39k
views
Java can't find cacerts
I've been trying to setup a java dev environment with no luck. I installed openjdk-8-jdk but I keep getting java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-...
13
votes
1
answer
15k
views
viewer for X.509 certificate
Previously X.509 certificates would open properly. I do not know what changed but currently they are opening as text files and shown in gedit. How can I revert to the original behaviour?
Edit: I was ...
13
votes
2
answers
32k
views
/etc/pki/tls/certs/ca-bundle.crt not found
I am using curl -L https://get.rvm.io | bash -s stable to install RVM. I get an error saying
CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
I searched a bit on the Internet and found that ...
13
votes
4
answers
77k
views
Unable to locate package libssl1.1
I am trying to install this dependency but keep getting this error message:
This is what I put in the terminal:
sudo apt install libssl1.1
Reading package lists... Done
Building dependency tree... ...
13
votes
2
answers
10k
views
What is the difference between libcurl3 and libcurl4
I was setting up an Ubuntu 14.04 development environment and went to install libcurl but noticed that there are two different version in my aptitude caches. What are the main differences between the ...
13
votes
1
answer
16k
views
How to install latest ca-certificates on Ubuntu 14 [closed]
I have an Ubuntu 14.04.5 LTS installation. It just recently became unable to verify modern Let's Encrypt certificates. The current version of ca-certificates is 20160104ubuntu0.14.04.1. apt search ca-...
13
votes
5
answers
47k
views
Can't connect to certain HTTPS sites
I've just moved to a new apartment and with internet connection via a router and I'm finding that I can't connect to quite a few sites that use SSL.
For example trying to connect to PayPal:
curl -v ...
12
votes
3
answers
40k
views
How can I connect to a forticlient ssl-vpn via Terminal?
I need to connect my machine to a forticlient getaway but I don't know how to do it via terminal I don't mean the command to open the GUI, but the commands tho connect and disconnect assuming that I ...
11
votes
3
answers
25k
views
Why MySQL Workbench 8.x errors out with an SSL connection error, choose client version unsupported protocol
I have a local developer environment running MySQL server 5.7.27. I used MySQL Workbench 6.3.10 (this is the latest version AFAIK before 8.0 appeared) without any problem. However when I upgrade to ...
11
votes
5
answers
33k
views
How to disable TLS 1.0, TLS 1.1 on Apache
I have enabled TLS 1.2 in my web server. But the http://ssllabs.com indicates that, I have enabled TLS 1.0 and 1.1 versions along with the TLS1.2 in my server. I modified my configurations files to ...
11
votes
1
answer
41k
views
How to fix Microsoft ODBC Driver 17 for SQL Server : SSL Provider ssl_choose_client_version:unsupported protocol
I have installed Sql Server 2019 Developer Edition and mssql-tools on my Ubuntu 20.04 minimal.
I can connect to my localhost with no issue, but when I want to remote to another sql server:
sqlcmd -S &...
10
votes
3
answers
26k
views
How do up upgrade LetsEncrypt certbot to version 0.22 which supports wildcard certificates?
To get a wildcard SSL certificate from LetsEncrypt you need to run certbot version 0.22 or later according to https://community.letsencrypt.org/t/acme-v2-production-environment-wildcards/55578
I've ...
10
votes
2
answers
37k
views
When I try to CURL a website I get SSL error
I installed Ubuntu 20 on my VPS. This is why I'm trying to do:
curl -v https://imenik.tportal.hr/show?action=pretraga&type=bijeleStranice
[1] 438975
root@vps:/var/www/html/tportal# * Trying 195....
10
votes
3
answers
9k
views
How do I verify DDCLIENT is using SSL and if it's not, how do I force it?
I have been following this guide on setting up VPN on my pi. Part of the steps are to set up and configure a dynamic dns service. I have created several accounts across multiple platforms. No Ip and ...
10
votes
3
answers
17k
views
Ubuntu 15.10 - Citrix Receiver - SSL error 61
The following Error occures when trying to use Citrix (access SAP Training via Citrix) on Ubuntu 15.10:
Citrix Receiver
SSL error
Contact your helpdesk with th following inofrmation: You have not ...
10
votes
3
answers
4k
views
Issues checking out code from Google Code
I've recently upgraded to Ubuntu 11.10 and since then, I haven't been able to checkout code from Google Code. I can't get it with either svn or git, but they were both working before the upgrade (so ...
9
votes
4
answers
73k
views
Permission Issues with /etc/ssl/certs/ca-certificates.crt
When trying to curl or git clone something over HTTPS as a regular user, it fails with the error:
fatal: unable to access 'https://github.com/mikemackintosh/xxx/': Problem with the SSL CA cert (path? ...
9
votes
1
answer
23k
views
Fake UserTrust.com Certificates in Chrome?
I was trying to install a SSL certificate, when I digged into Chrome Settings and looked at the installed ones (servers tab).
Those are marked as Not Safe, and they are related to mail.google.com, ...
9
votes
1
answer
2k
views
Is there a modern and clear tutorial on setting up SSL for localhost / testing use?
Let's say I'm developing a script for login.example.com. I have absolutely no access to login.example.com, but that page loads a script on assets.example.com (which I have access to). To test how ...
9
votes
1
answer
55k
views
openssl/curl error: SSL23_GET_SERVER_HELLO:tlsv1 alert internal error
We encounter very strange problems connecting with openssl or curl to one of our servers, from Ubuntu 14.04
Executing:
openssl s_client -connect ms.icometrix.com:443
gives:
CONNECTED(00000003)
...
8
votes
3
answers
42k
views
Ubuntu 16.04 + libssl0.9.8 - has no installation candidate?
I'm on Xubuntu/ Ubuntu 16.04 and I am trying to install libssl0.9.8:
sudo apt-get install libssl0.9.8
Error:
Reading package lists... Done
Building dependency tree
Reading state information.....
8
votes
4
answers
31k
views
How do I disable SSLv3 in tomcat?
Please provide the fix for How do I patch/workaround SSLv3 POODLE vulnerability (CVE-2014-3566)? for Tomcat.
I have tried following below link, however it does not help: tomcat-users mailing list ...
8
votes
2
answers
54k
views
curl: (60) SSL certificate problem: unable to get local issuer certificate
Edit:
I had updated my root CA certificates from curl.haxx.se .
When I try curl -Iv https://yahoo.com I get an error as unable to get local issuer certificate in the result. However if I try curl -Iv ...
8
votes
1
answer
25k
views
"SSL Protocol Error" in Chromium for several Google web sites after installing Ubuntu Security Updates for libnss3
Scenario: Laptop computer running Ubuntu 12.04.5 LTS (64-bit) ("Precise Pangolin")
Issue: In the Chromium web browser - "Version 37.0.2062.120 Ubuntu 12.04 (281580) (64-bit)" - ...
8
votes
1
answer
10k
views
How can I add an SSL client certificate/key globally in Ubuntu?
I have a web server which requires a client certificate to establish an SSL connection (SSLVerifyClient require in apache). In firefox or chrome, I simply import the .p12-file containing my ...
7
votes
3
answers
6k
views
SSL: no alternative certificate subject name matches | New release of CURL(USN-6237-1) brings suffering
Since new release of CURL https://ubuntu.com/security/notices/USN-6237-1 we experianc problem with curl command on Ubuntu:
sudo apt update -y && sudo apt install --no-install-recommends -y ...