Questions tagged [tls]

Questions about Transport Layer Security (TLS) protocol, which allows client-server apps to communicate across a network in a way designed to try and prevent eavesdropping and tampering.

Filter by
Sorted by
Tagged with
2
votes
0answers
196 views

Enable TLS 1.0 and TLS 1.1 on Ubuntu 20.04

I have recently reinstalled my server to Ubuntu 20.04. A support call came in and after a few days, I managed to notice that TLS v1.0 and v1.1 were not being provided by my web server, nginx. The ...
2
votes
0answers
79 views

gpg2 --refresh-keys general error

unfortunately I experience the following error when running $ gpg2 --refresh-keys gpg: refreshing 18 keys from hkps://keys.openpgp.org gpg: keyserver refresh failed: General error As you can gather ...
0
votes
0answers
38 views

Configure SSSD Package against Microsoft Patch (inforce LDAPS/tls)

I'm looking at altering some config of some Ubuntu machines that are using the SSSD package to bind to AD. As far as I understand, all ldap queries should be going through TSL from the config below. ...
0
votes
2answers
194 views

Can’t get TLSv1.3 to work with nginx 1.14.0 and OpenSSL 1.1.1 on Ubuntu 18.04.4

I’m going nuts here to trying to figure out how to enable TLSv1.3 on my nginx server. Based on my research, my setup should support it: # lsb_release -a No LSB modules are available. Distributor ID: ...
1
vote
1answer
138 views

OpenLDAP Trouble Setting TLS Cipher List

My institution wants to configure one of our Ubuntu servers with OpenLDAP in order to interface with our SSO provider, Okta, using a server-side agent they have for provisioning users from their cloud ...
0
votes
0answers
57 views

Connection sharing Ubuntu 18.04.4 LTS keep crashing on the second machine

So here's my situation: I don't have an ethernet plug in my office, to connect to the internet from my desktop pc (ubuntu 18.04.4) So I'm sharing my wifi connection from my laptop(ubuntu 18.04.4) to ...
1
vote
1answer
95 views

Get internet working on newly installed ubuntu

I live in kashmir valley where we were under communication blackout since Aug 5. The govt has recently restored phone networks and access to 301 whitelisted websites like travel, education, and other ...
1
vote
1answer
361 views

Cannot retrieve directory listing from vsftpd after enabling TLS

I set up vsftpd on an Ubuntu 16.04 server. I added a user, and gave him FTP access via a userlist and chrooted him to his home directory. It worked fine. To make the file transfer more secure I wanted ...
0
votes
0answers
12 views

How to make Evolution automatically reject invalid certificates?

When connecting to some wifi networks, HTTP(S) traffic is blocked by serving a terms-of-use page under every domain. To accomplish this, some gateways serve invalid TLS certificates for every domain. ...
0
votes
0answers
446 views

How to use OpenConnect without blocking port 443?

I've migrated a Windows 10 machine to Ubuntu. On Windows 10 I connected to a Cisco VPN through the Cisco AnyConnect client. It worked fine and allowed me to use port 443 while connected to the VPN (...
1
vote
0answers
460 views

FTP server with TLS does not work in windows file explorer and browsers

When I finish configuring my TLS, I try to connect from the Windows file explorer and from browsers with ftps:// ftpes:// sftp:// and user:password@server:port and also as a network unit but nothing ...
1
vote
0answers
166 views

MSMTP using TLS/SSL

I ty to send emails using MSMTP. I want to use TLS/SSL encryption for it. Now I had to turn on the encryption in this lines:   # Enable or disable TLS/SSL encryption. tls on tls_starttls on ...
-1
votes
2answers
373 views

Not able to enable ktls while build OpenSSL3.0.0 on Ubuntu 16.04.1

I am trying to build Openssl-3.0.0 from master branch to use ktls feature on Ubuntu 16, but the build is skipping the ktls feature even though i am using Ubuntu 16.04.1 (Kernel version: 4.15) ...
2
votes
1answer
434 views

Will Ubuntu 18.04 get an nginx version compiled with OpenSSL 1.1.1?

I run multiple servers with Ubuntu 18.04 and nginx. Updating to 18.10/19.04 is not an option. I'd like to activate TLS 1.3 support for my webserver. I know I need an nginx version built with OpenSSL ...
1
vote
0answers
1k views

Ubuntu 19.04 Screen Sharing Issues

I just did a fresh install of Ubuntu 19.04 on a new computer today. I need to be able to use VNC (Remmina) to remotly connect to this new computer regularly. I logged on, ran sudo apt install vino ...
1
vote
0answers
220 views

Does Ubuntu support a CA chain?

Is there a way to install a CA certificate where the file is a certificate chain? I don't want to have certain files for each step so I want to use a PEM file with a certification chain e.g.: -----...
0
votes
1answer
473 views

Docker: unable to connect through https

I'm trying to get a docker container of Onlyoffice up and running. I'm following the instructions provided on GitHub, but get a connection refused error. This is my docker command: docker run -i -...
0
votes
1answer
983 views

How to clean my OpenSSL installation

I use Ubuntu 18.04. It was shipped with OpenSSL 1.1.0g . I tried to link manually compiled Python to a manually compiled OpenSSL1.1.1a but things does not seem to work well. When I now run Python it ...
1
vote
1answer
5k views

curl: (35) error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version /home/mohan/mesg

When I am running the following command: bash <(curl -fsSL https://mesg.com/install) , I am getting this error: curl: (35) error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol ...
7
votes
2answers
11k views

How to disable TLS 1.0, TLS 1.1 on Apache

I have enabled TLS 1.2 in my web server. But the http://ssllabs.com indicates that, I have enabled TLS 1.0 and 1.1 versions along with the TLS1.2 in my server. I modified my configurations files to ...
3
votes
0answers
536 views

Very slow TLS handshake on certain sites across different browsers

I am running Ubuntu 16.04 and have been experiencing a very particular issue with a certain set of webpages. The first visit of some pages (see list below) within a certain timeframe (~5min) is very ...
0
votes
1answer
1k views

16.04 SERVER USING vsftpd using tls getting ECONNREFUSED

I have 16.04 on a hosted server with a static IP. I have the ufw off for the moment to get ftp working. I configured vsftp, then I added the chroot capability. It was working fine-sign in with a ...
0
votes
1answer
760 views

TLS Downgrade error on Opera or Firefox but not on Chrome

When I try to browse some secure websites on Firefox or Opera, I often get the error "ERR_TLS13_DOWNGRADE_DETECTED", while the page loads properly on Chrome. This occurs with a lot of websites, but ...
1
vote
0answers
4k views

How to solve TLS handshake failed error? [duplicate]

I was trying to install sublime text on my ubuntu 18.04. The method I tried to install Sublime Text is to follow this link Linux Package Manager Repositories but it throws below error when I issue the ...
2
votes
1answer
2k views

How to send TLS syslog message via logger command

I'm working on ubuntu 16.0.4. Is there any way to send TLS syslog message by logger command? Thanks in advanced for any suggestion
1
vote
1answer
1k views

How to disable TLSv1 in Apache

I have installed Apache on an Ubuntu server, and have SSL installed through "Let's Encrypt". The SSL certificate is valid, but when running the URL of the website thought https://whynopadlock.com, it ...
1
vote
1answer
371 views

Internet error hanging on TLS handshake and TB at connected to pop3

Since yesterday I have a problem with my wired internet connection only on Ubuntu, Win7 works fine (dual boot), Thunderbird hangs at connected to pop3 and receives no e-mails and various websites hang ...
1
vote
0answers
1k views

SSL routines:ssl3_read_bytes:tlsv1 alert access denied connect to bitbucket

I have trouble, my ubuntu don't connect to bitbucket.org by https. I install newsletter openssl version kodix@n-kdx-30:~/tmp$ openssl version OpenSSL 1.1.1 11 Sep 2018 but error don't desappear. If ...
5
votes
1answer
12k views

Ubuntu 16.04 openssl s_client write:errno=104

I'm getting the following error when trying to connect to github.com, google.com, dropbox.com via https, but stackoverflow.com, askubuntu.com and the majority of https websites work. Relevant details:...
0
votes
1answer
861 views

CA root install issue on Ubuntu 16.04 LTS Server

I am setting up nginx reverse proxy on Ubuntu 16.04 LTS Server for Web-Server. There will three different Services running on Ubuntu. Services will communicate each other using API calls. Similarly ...
0
votes
1answer
2k views

Firefox not creating sslkeylog file after setting SSLKEYLOGFILE variable

I ran this in the terminal: export SSLKEYLOGFILE=/home/user/sslkeylog After opening regular Firefox, the developer version of Firefox and Chromium, "sslkeylog" was never created, even after visiting ...
0
votes
2answers
87 views

Building a file in Linux

I am a Windows user but I need to use a Linux tool. I am using Ubuntu. The tool's website here provided a file named: build-x86-64.sh which I installed it. It then says all what you need is to run: % ....
2
votes
0answers
1k views

TLS not working at all for Ubuntu in WSL

I recently reinstalled my computer and installed Linux Subsystem which I always do. So this is a complete new install. When I wanted to run composer I noticed something strange. It failed because it ...
2
votes
0answers
1k views

How do you connect to VPN with IKEV2 with EAP-TLS authentication on Ubuntu 16.0.4?

I've recently received three files called: vpn-host-certificate.cer company-ca-certificate.cer me.p12 My work environment is Ubuntu 16.0.4. It has been requested that I connect to a VPN that is ...
0
votes
1answer
394 views

FTP sync over SSL/TLS started by command line

I have webspace and develop locally. When I have finised, I want to synchronize using FTP with SSL/TLS (I do not mean openssh's sftp/scp) with my webhoster (with no ssh access so also no rsync or ...
-1
votes
1answer
1k views

Ubuntu 16.04 apache tls settings wont affect [duplicate]

My setup is fresh Ubuntu 16.04 server installation with Apache 2.4.18 and Openssl 1.0.2g. I have made ssl configs to /etc/apache2/mods-available/ssl.conf and checked that there are no same configs in ...
1
vote
1answer
434 views

Caldav (and carddav) compatible client with support for TLS Client certificate authentication

I am in search of a Caldav (and carddav) compatible client with support for TLS Client certificate authentication? The solution with Thunderbird + Lightning + SoGO connector I suggested in my answer ...
0
votes
1answer
466 views

StartTLS fail with LDAP mechanism in saslauthd

I upgraded my mail server from Ubuntu 14.04 to 16.04 and now StartTLS does not work anymore with LDAP mechanism in saslauthd. % sudo testsaslauthd -u clement -p bar 0: NO "authentication failed" ...
2
votes
1answer
1k views

Ubuntu 16.04 Firefox not creating SSLKEYLOGFILE to be used by wireshark

One should be able create an SSL Pre-Master-Secret key log file from firefox by creating the environment variable export SSLKEYLOGFILE=~/path/to/sslkeylog.log so external programs, i.e. Wireshark, are ...
4
votes
4answers
12k views

OpenLDAP error configuring StartTLS: ldap_modify: Other (e.g., implementation specific) error (80)

Configuring StartTLS for OpenLDAP. Ubuntu server 16.04 Slapd 2.4.42+dfsg-2ubuntu3.2 I have my own internal Certificate authority that is providing certificates. I have set up certificates and key: ...
3
votes
3answers
3k views

To have php 5.3.2 + Openssl 1.0.1 + Ubuntu 16.04

As I had to upgrade to TLS1.2 I had to upgrade to OpenSSL 1.0.1 or higher. To do that, I had to upgrade from Ubuntu 10.04 to Ubuntu 16.04 Ubuntu 10.04 had PHP 5.3.2 MySQL 5.1.66 Apache 2.2....
0
votes
1answer
3k views

TLS - handshake timeout

I got a problem with Ubuntu Server 16.04 on dual stack (IPv4/v6). When I request IPv4 only servers, like Paypal or DockerHub, I got TLS handshake timeout: $ curl -vvv https://paypal.com ...
5
votes
1answer
10k views

The TLS connection was non-properly terminated

I'm a beginner ubuntu user, and probably removed something I should have not to. Now when I want to open in either Chrome, Chromium or Firefox some web pages: I cannot upload photos/any file, the ...
2
votes
0answers
3k views

LDAPS not working: failed to bind to LDAP server (16.04)

LDAP works fine on my machine but LDAPS does not seem to work. Tried /etc/ldap.conf and /etc/ldap/ldap.conf with the Cert names to be specified with TLS_CACERTFILE & TLS_CACERT as mentioned in ...
5
votes
1answer
4k views

Does Ubuntu update its root certificate authority list automatically?

Will the root CA list become outdated if I never restart/upgrade the OS? Or does Ubuntu periodically update the root CA list in the background automatically (without restart/upgrade)?
2
votes
0answers
798 views

Postfix: turning on “smtpd_tls_security_level = encrypt” breaks mailman

I have an Ubuntu installation (16.04) where I run postfix as my mail server, and mailman to host a couple of mailing lists I manage. I recently discovered the postfix commands: smtp_tls_security_level ...
0
votes
1answer
742 views

How is the Ubuntu root CA store created?

I know that the root store is located at /etc/ssl/certs and can be updated with update-ca-certificates. But where does it get it's certificates from? And how do browsers interact with it which have ...
1
vote
0answers
48 views

What encryption algorithms over HTTPS (TLS) are supported by Ubuntu 16.10 trial version?

I am using Ubuntu 16.10 trial version with Firefox, running on a hardware-write-protected USB memory, to do online banking on https sites. My PC has Windows 10 installed on the hard drive but I think ...
3
votes
0answers
5k views

How to enable sslv3 in openssl for ubuntu 16.04

I am researching the attacks against TLS as a part of my Masters topic. But as I am using the ubuntu 16.04 the ssl3 in OpenSSL is permanently disabled here. openssl s_client -connect www.google.com:...
1
vote
1answer
200 views

Installing Ubuntu 16.04 LTS [duplicate]

Paid for and downloaded Ubuntu 16.04 TLS. I have the "ubuntu-16.04.1-desktop-amd64.iso" on a 4gb USB drive. Question How can I install the .iso file? I think I need to convert the .iso file into a ...