Skip to main content
The 2024 Developer Survey results are live! See the results

Questions tagged [tls]

Questions about Transport Layer Security (TLS) protocol, which allows client-server apps to communicate across a network in a way designed to try and prevent eavesdropping and tampering.

Filter by
Sorted by
Tagged with
0 votes
0 answers
47 views

openssl for testing existing site for specific tls version

I'd like to use openssl s_client in order to see if a site supports a specific TLS version. In this case, I'd like to test for the deprecated TLS 1.1 (to make sure it's not active). After reading the ...
Luis Abreu's user avatar
0 votes
0 answers
300 views

Force docker build to not verify TLS certs (WSL)

Running docker in WSL2 ubuntu image. I want to disable TLS verification for my docker build for testing purposes. How can I accomplish this? I tried the following: Adjust /etc/docker/dameon.json, ...
Dave's user avatar
  • 213
0 votes
0 answers
72 views

How to enable TLS1.3 for wifi connection in ubantu

I am using Ubuntu 22.04.4 LTS (jammy), I want to connect access point of wifi network where authentication method is TLS enable. By default connection handsake initiated with EAP_TLS1.2, I want to ...
Khushbu's user avatar
0 votes
0 answers
524 views

Why do I have TLS verification failure when trying to send mail via msmtp?

I am trying to send mail via smtp (using msmtp). The aim is to simply send via a yahoo mail account. I have configured it correctly (see bottom) so that if I run with the option --tls-certcheck=off, ...
Thomas Stokes's user avatar
0 votes
1 answer
59 views

Is the process for SSL/TLS server key generation different on VMs?

For 3 of our company's servers, Bitsight is reporting that our Diffie-Hellman prime is very commonly used and is not safe. We've followed the directions here: https://weakdh.org/sysadmin.html several ...
Kevin Foster's user avatar
2 votes
1 answer
2k views

Running Certbot to add new domains to an existing installation

I just finished running Certbot instructions located at: Ubuntu Certbot Instructions Certbot automatically detected my domain and installed the certificate, everything worked perfectly. What I need to ...
user1643244's user avatar
-1 votes
1 answer
553 views

Samba ad port 636 and 3269 disable tls 1.0 and 1.1

Samba ad port 636 and port 3269 by default enabled with tls 1.0 and tls 1.1. Need help to disable tls 1.0 and tls 1.1, keep only 1.2
Manjunath G's user avatar
0 votes
0 answers
366 views

Getting HTTP/0.0 307 Temporary Redirect in connecting to my vps without typing https://

I ran a graphical version of v2ray(X-UI) on one of my VPS on Hetzner, I also add an A record to bind the IP of this VPS to a DNS on my Cloudflare account. Well with the below commands, I tried to get ...
Javad's user avatar
  • 101
1 vote
1 answer
685 views

TLS Negotiation fails from Multipass VM but succeeds from host machine (or other machines on network)

Summary Running curl -sfL https://github.com/k3s-io/k3s/releases/download/v1.25.4+k3s1/sha256sum-amd64.txt from a Multipass VM appears to result in a hung TLS negotiation, as there is no (IN), TLS ...
scubbo's user avatar
  • 133
1 vote
0 answers
564 views

Peer failed to perform TLS handshake when adding Google account to online accounts

I have Ubuntu 22.04.1 LTS. When I try to connect the Google account to the online account, I encounter the following error: Peer failed to perform TLS handshake: The TLS connection was non-properly ...
Reza Zarei's user avatar
0 votes
2 answers
3k views

ubuntu 22.04 sqlcmd can not connect to ms sql server 2016

I have spent several days on google search to find a solution, but no right one. so I post it here. I have 3 VM machines. VM 1: windows server 2012 R2 sp1, 192.168.1.10 sql server 2016, port 1432 sql ...
wenny0501's user avatar
0 votes
0 answers
187 views

Testing application with self signed cert - works with ubuntu 20.04 but not 18.04

Using the below conf file to generate a self signed cert for testing purposes. I added the generated cert and pem as a tls certificate in the ingress and everything works perfectly with ubuntu 20.04 ...
bjamin's user avatar
  • 1
2 votes
0 answers
635 views

Let's Encrypt certificates refused by GnuTLS

On one machine with an up-to-date Ubuntu 20.04, certificates issued by Let's Encrypt are rejected by GnuTLS and only GnuTLS. They fail with applications that are linked with GnuTLS, such as Git and ...
Gilles 'SO- stop being evil''s user avatar
3 votes
3 answers
5k views

How do I fix Postfix Submission TLS Error - unexpected eof while reading:../ssl/record/rec_layer_s3.c:308:

I have a brand new Ubuntu 22.04 install with mail system setup broadly as per: https://www.linuxbabe.com/mail-server/setup-basic-postfix-mail-sever-ubuntu and I get the following errors: Jun 1 08:07:...
Kevin W's user avatar
  • 163
6 votes
2 answers
1k views

Is it possible to disable a Certificate Authority system-wide or at least on Firefox?

I want to disable CAs that are under control of a country that's waging war against mine, how can I do it? I see one right away. The question still stands even if you are convinced there are none, it'...
int_ua's user avatar
  • 8,704
1 vote
0 answers
64 views

My ubuntu system suddenly got somehow reset

One day when I boot up on ubuntu after entering the password (I only have one user) suddenly the display went off for a sec and then everything was like reset to a fresh install! All new sudo commands ...
Adjective's user avatar
0 votes
1 answer
2k views

SSSD - Unable to Authenticate Against Google LDAP After 20.04 Upgrade - Could not start TLS encryption. unknown error

I'm trying to authenticate against Google LDAP (G Suite/Google Admin) to allow my clients to log in using their Google credentials. I have no visibility on the LDAP side of things I can only generate ...
A V's user avatar
  • 1
1 vote
1 answer
3k views

How to configure curl (openssl) in order to make it work with custom engine and TLSv1.0

I've successfully added a custom engine to my OpenSSL configuration like this: openssl_conf = openssl_def # at the beginning of the config file [openssl_def] # at the end engines = engine_section [...
Violet Wagner's user avatar
0 votes
0 answers
375 views

Python's test_ssl fails starting from Ubuntu 20.04. I need to find a person at Canonical responsible for openssl configuration

Please take a look at https://bugs.python.org/issue41561. Developers who work on Python think that the issue is due to a change in Ubuntu 20.04 that is best described by https://bugs.python.org/...
Bug Reporter's user avatar
3 votes
2 answers
7k views

What is the correct way to use specific DNS servers if using DHCP in a no-desktop Ubuntu 20.04 install, and can you use DNS over TLS?

I am running a local server using Ubuntu 20.04, and had a need to do one thing that should be simple - tell it to resolve DNS using something other than the ISP's DNS server. However for reasons I ...
UbuntuUser's user avatar
10 votes
2 answers
39k views

When I try to CURL a website I get SSL error

I installed Ubuntu 20 on my VPS. This is why I'm trying to do: curl -v https://imenik.tportal.hr/show?action=pretraga&type=bijeleStranice [1] 438975 root@vps:/var/www/html/tportal# * Trying 195....
Misko Mali's user avatar
0 votes
1 answer
2k views

Thunderbird, TLS and ubuntu 20.04

I have ubuntu 20.04. After some uncertain updates (but nothing big), my thunderbird stop working. I have several IMAP servers, but on all I am getting same error: The base socket has problems ...
Rado Dr.'s user avatar
  • 101
18 votes
2 answers
30k views

Enable TLS 1.0 and TLS 1.1 on Ubuntu 20.04

I have recently reinstalled my server to Ubuntu 20.04. A support call came in and after a few days, I managed to notice that TLS v1.0 and v1.1 were not being provided by my web server, nginx. The ...
reivilibre's user avatar
7 votes
1 answer
4k views

gpg2 --refresh-keys general error

unfortunately I experience the following error when running $ gpg2 --refresh-keys gpg: refreshing 18 keys from hkps://keys.openpgp.org gpg: keyserver refresh failed: General error As you can gather ...
apitsch's user avatar
  • 342
0 votes
1 answer
183 views

Configure SSSD Package against Microsoft Patch (inforce LDAPS/tls)

I'm looking at altering some config of some Ubuntu machines that are using the SSSD package to bind to AD. As far as I understand, all ldap queries should be going through TSL from the config below. ...
jamboNum5's user avatar
  • 140
0 votes
2 answers
3k views

Can’t get TLSv1.3 to work with nginx 1.14.0 and OpenSSL 1.1.1 on Ubuntu 18.04.4

I’m going nuts here to trying to figure out how to enable TLSv1.3 on my nginx server. Based on my research, my setup should support it: # lsb_release -a No LSB modules are available. Distributor ID: ...
Greelan's user avatar
  • 21
1 vote
1 answer
4k views

OpenLDAP Trouble Setting TLS Cipher List

My institution wants to configure one of our Ubuntu servers with OpenLDAP in order to interface with our SSO provider, Okta, using a server-side agent they have for provisioning users from their cloud ...
lilylily's user avatar
1 vote
1 answer
118 views

Get internet working on newly installed ubuntu

I live in kashmir valley where we were under communication blackout since Aug 5. The govt has recently restored phone networks and access to 301 whitelisted websites like travel, education, and other ...
SaqibMir's user avatar
1 vote
1 answer
4k views

Cannot retrieve directory listing from vsftpd after enabling TLS

I set up vsftpd on an Ubuntu 16.04 server. I added a user, and gave him FTP access via a userlist and chrooted him to his home directory. It worked fine. To make the file transfer more secure I wanted ...
Marzii's user avatar
  • 23
0 votes
0 answers
2k views

How to use OpenConnect without blocking port 443?

I've migrated a Windows 10 machine to Ubuntu. On Windows 10 I connected to a Cisco VPN through the Cisco AnyConnect client. It worked fine and allowed me to use port 443 while connected to the VPN (...
Andrea Ligios's user avatar
2 votes
1 answer
3k views

FTP server with TLS does not work in windows file explorer and browsers

When I finish configuring my TLS, I try to connect from the Windows file explorer and from browsers with ftps:// ftpes:// sftp:// and user:password@server:port and also as a network unit but nothing ...
Saori Ken's user avatar
  • 106
2 votes
0 answers
1k views

MSMTP using TLS/SSL

I ty to send emails using MSMTP. I want to use TLS/SSL encryption for it. Now I had to turn on the encryption in this lines:   # Enable or disable TLS/SSL encryption. tls on tls_starttls on ...
fteinz's user avatar
  • 121
-1 votes
2 answers
2k views

Not able to enable ktls while build OpenSSL3.0.0 on Ubuntu 16.04.1

I am trying to build Openssl-3.0.0 from master branch to use ktls feature on Ubuntu 16, but the build is skipping the ktls feature even though i am using Ubuntu 16.04.1 (Kernel version: 4.15) ...
sanat's user avatar
  • 7
2 votes
1 answer
893 views

Will Ubuntu 18.04 get an nginx version compiled with OpenSSL 1.1.1?

I run multiple servers with Ubuntu 18.04 and nginx. Updating to 18.10/19.04 is not an option. I'd like to activate TLS 1.3 support for my webserver. I know I need an nginx version built with OpenSSL ...
cis's user avatar
  • 228
2 votes
0 answers
1k views

Ubuntu 19.04 Screen Sharing Issues

I just did a fresh install of Ubuntu 19.04 on a new computer today. I need to be able to use VNC (Remmina) to remotly connect to this new computer regularly. I logged on, ran sudo apt install vino ...
Jordan Ketterer's user avatar
2 votes
0 answers
1k views

Does Ubuntu support a CA chain?

Is there a way to install a CA certificate where the file is a certificate chain? I don't want to have certain files for each step so I want to use a PEM file with a certification chain e.g.: -----...
Wie's user avatar
  • 125
0 votes
1 answer
2k views

Docker: unable to connect through https

I'm trying to get a docker container of Onlyoffice up and running. I'm following the instructions provided on GitHub, but get a connection refused error. This is my docker command: docker run -i -...
wouter205's user avatar
  • 1,161
4 votes
1 answer
13k views

How to clean my OpenSSL installation

I use Ubuntu 18.04. It was shipped with OpenSSL 1.1.0g . I tried to link manually compiled Python to a manually compiled OpenSSL1.1.1a but things does not seem to work well. When I now run Python it ...
user9371654's user avatar
2 votes
1 answer
9k views

curl: (35) error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version /home/mohan/mesg

When I am running the following command: bash <(curl -fsSL https://mesg.com/install) , I am getting this error: curl: (35) error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol ...
Eric Easter's user avatar
11 votes
5 answers
34k views

How to disable TLS 1.0, TLS 1.1 on Apache

I have enabled TLS 1.2 in my web server. But the http://ssllabs.com indicates that, I have enabled TLS 1.0 and 1.1 versions along with the TLS1.2 in my server. I modified my configurations files to ...
Eranga Kapukotuwa's user avatar
3 votes
0 answers
876 views

Very slow TLS handshake on certain sites across different browsers

I am running Ubuntu 16.04 and have been experiencing a very particular issue with a certain set of webpages. The first visit of some pages (see list below) within a certain timeframe (~5min) is very ...
Bubblbu's user avatar
  • 31
2 votes
1 answer
4k views

16.04 SERVER USING vsftpd using tls getting ECONNREFUSED

I have 16.04 on a hosted server with a static IP. I have the ufw off for the moment to get ftp working. I configured vsftp, then I added the chroot capability. It was working fine-sign in with a ...
jesuiscafe's user avatar
0 votes
1 answer
1k views

TLS Downgrade error on Opera or Firefox but not on Chrome

When I try to browse some secure websites on Firefox or Opera, I often get the error "ERR_TLS13_DOWNGRADE_DETECTED", while the page loads properly on Chrome. This occurs with a lot of websites, but ...
dounyy's user avatar
  • 73
1 vote
0 answers
4k views

How to solve TLS handshake failed error? [duplicate]

I was trying to install sublime text on my ubuntu 18.04. The method I tried to install Sublime Text is to follow this link Linux Package Manager Repositories but it throws below error when I issue the ...
Raja Simon's user avatar
  • 1,429
5 votes
2 answers
9k views

How to send TLS syslog message via logger command

I am working on ubuntu 16.04. Is there any way to send TLS syslog message by logger command?
Shaghayegh Mobasheri's user avatar
2 votes
2 answers
3k views

How to disable TLSv1 in Apache

I have installed Apache on an Ubuntu server, and have SSL installed through "Let's Encrypt". The SSL certificate is valid, but when running the URL of the website thought https://whynopadlock.com, it ...
crayden's user avatar
  • 121
1 vote
1 answer
598 views

Internet error hanging on TLS handshake and TB at connected to pop3

Since yesterday I have a problem with my wired internet connection only on Ubuntu, Win7 works fine (dual boot), Thunderbird hangs at connected to pop3 and receives no e-mails and various websites hang ...
Rosarium Lane's user avatar
2 votes
0 answers
3k views

SSL routines:ssl3_read_bytes:tlsv1 alert access denied connect to bitbucket

I have trouble, my ubuntu don't connect to bitbucket.org by https. I install newsletter openssl version kodix@n-kdx-30:~/tmp$ openssl version OpenSSL 1.1.1 11 Sep 2018 but error don't desappear. If ...
Naumov's user avatar
  • 121
6 votes
1 answer
27k views

Ubuntu 16.04 openssl s_client write:errno=104

I'm getting the following error when trying to connect to github.com, google.com, dropbox.com via https, but stackoverflow.com, askubuntu.com and the majority of https websites work. Relevant details:...
icc97's user avatar
  • 719
0 votes
1 answer
2k views

CA root install issue on Ubuntu 16.04 LTS Server

I am setting up nginx reverse proxy on Ubuntu 16.04 LTS Server for Web-Server. There will three different Services running on Ubuntu. Services will communicate each other using API calls. Similarly ...
user2488926's user avatar