Questions tagged [tls]

Questions about Transport Layer Security (TLS) protocol, which allows client-server apps to communicate across a network in a way designed to try and prevent eavesdropping and tampering.

Filter by
Sorted by
Tagged with
5 votes
2 answers
89 views

Is it possible to disable a Certificate Authority system-wide or at least on Firefox?

I want to disable CAs that are under control of a country that's waging war against mine, how can I do it? I see one right away. The question still stands even if you are convinced there are none, it'...
user avatar
  • 8,070
1 vote
0 answers
36 views

My ubuntu system suddenly got somehow reset

One day when I boot up on ubuntu after entering the password (I only have one user) suddenly the display went off for a sec and then everything was like reset to a fresh install! All new sudo commands ...
user avatar
0 votes
0 answers
77 views

TLS handshake failed

Good day, I am new here. I have installed an openvpn server and when I am trying to connect I am getting a :TLS handshake failed" error. What can be the possible problems?
user avatar
0 votes
0 answers
234 views

Error: Lost connection to MySQL server at 'reading initial communication packet', system error: 104

I installed lamp server on 20.04 and it worked. But then suddenly I get Error: Lost connection to MySQL server at 'reading initial communication packet', system error: 104 no more mysql working, not ...
user avatar
  • 133
0 votes
1 answer
648 views

SSSD - Unable to Authenticate Against Google LDAP After 20.04 Upgrade - Could not start TLS encryption. unknown error

I'm trying to authenticate against Google LDAP (G Suite/Google Admin) to allow my clients to log in using their Google credentials. I have no visibility on the LDAP side of things I can only generate ...
user avatar
  • 1
0 votes
0 answers
63 views

Connection problems with Atlas MongoDB Cloud Security related

Folks, I had a strange problem here. I'm running Kubuntu 20.04 focal fossa in my dual boot T430 notebook. I can't connect to my MongoDB atlas cloud through my Linux machine directly with no param. Nor ...
user avatar
  • 11
0 votes
0 answers
918 views

How to configure curl (openssl) in order to make it work with custom engine and TLSv1.0

I've successfully added a custom engine to my OpenSSL configuration like this: openssl_conf = openssl_def # at the beginning of the config file [openssl_def] # at the end engines = engine_section [...
user avatar
0 votes
0 answers
294 views

Python's test_ssl fails starting from Ubuntu 20.04. I need to find a person at Canonical responsible for openssl configuration

Please take a look at https://bugs.python.org/issue41561. Developers who work on Python think that the issue is due to a change in Ubuntu 20.04 that is best described by https://bugs.python.org/...
user avatar
3 votes
2 answers
3k views

What is the correct way to use specific DNS servers if using DHCP in a no-desktop Ubuntu 20.04 install, and can you use DNS over TLS?

I am running a local server using Ubuntu 20.04, and had a need to do one thing that should be simple - tell it to resolve DNS using something other than the ISP's DNS server. However for reasons I ...
user avatar
9 votes
2 answers
19k views

When I try to CURL a website I get SSL error

I installed Ubuntu 20 on my VPS. This is why I'm trying to do: curl -v https://imenik.tportal.hr/show?action=pretraga&type=bijeleStranice [1] 438975 root@vps:/var/www/html/tportal# * Trying 195....
user avatar
0 votes
1 answer
2k views

Thunderbird, TLS and ubuntu 20.04

I have ubuntu 20.04. After some uncertain updates (but nothing big), my thunderbird stop working. I have several IMAP servers, but on all I am getting same error: The base socket has problems ...
user avatar
  • 101
18 votes
2 answers
13k views

Enable TLS 1.0 and TLS 1.1 on Ubuntu 20.04

I have recently reinstalled my server to Ubuntu 20.04. A support call came in and after a few days, I managed to notice that TLS v1.0 and v1.1 were not being provided by my web server, nginx. The ...
user avatar
7 votes
1 answer
3k views

gpg2 --refresh-keys general error

unfortunately I experience the following error when running $ gpg2 --refresh-keys gpg: refreshing 18 keys from hkps://keys.openpgp.org gpg: keyserver refresh failed: General error As you can gather ...
user avatar
  • 322
0 votes
1 answer
133 views

Configure SSSD Package against Microsoft Patch (inforce LDAPS/tls)

I'm looking at altering some config of some Ubuntu machines that are using the SSSD package to bind to AD. As far as I understand, all ldap queries should be going through TSL from the config below. ...
user avatar
  • 121
0 votes
2 answers
2k views

Can’t get TLSv1.3 to work with nginx 1.14.0 and OpenSSL 1.1.1 on Ubuntu 18.04.4

I’m going nuts here to trying to figure out how to enable TLSv1.3 on my nginx server. Based on my research, my setup should support it: # lsb_release -a No LSB modules are available. Distributor ID: ...
user avatar
  • 21
1 vote
1 answer
2k views

OpenLDAP Trouble Setting TLS Cipher List

My institution wants to configure one of our Ubuntu servers with OpenLDAP in order to interface with our SSO provider, Okta, using a server-side agent they have for provisioning users from their cloud ...
user avatar
1 vote
1 answer
105 views

Get internet working on newly installed ubuntu

I live in kashmir valley where we were under communication blackout since Aug 5. The govt has recently restored phone networks and access to 301 whitelisted websites like travel, education, and other ...
user avatar
1 vote
1 answer
2k views

Cannot retrieve directory listing from vsftpd after enabling TLS

I set up vsftpd on an Ubuntu 16.04 server. I added a user, and gave him FTP access via a userlist and chrooted him to his home directory. It worked fine. To make the file transfer more secure I wanted ...
user avatar
  • 23
0 votes
0 answers
1k views

How to use OpenConnect without blocking port 443?

I've migrated a Windows 10 machine to Ubuntu. On Windows 10 I connected to a Cisco VPN through the Cisco AnyConnect client. It worked fine and allowed me to use port 443 while connected to the VPN (...
user avatar
1 vote
1 answer
1k views

FTP server with TLS does not work in windows file explorer and browsers

When I finish configuring my TLS, I try to connect from the Windows file explorer and from browsers with ftps:// ftpes:// sftp:// and user:password@server:port and also as a network unit but nothing ...
user avatar
2 votes
0 answers
525 views

MSMTP using TLS/SSL

I ty to send emails using MSMTP. I want to use TLS/SSL encryption for it. Now I had to turn on the encryption in this lines:   # Enable or disable TLS/SSL encryption. tls on tls_starttls on ...
user avatar
  • 121
-1 votes
2 answers
983 views

Not able to enable ktls while build OpenSSL3.0.0 on Ubuntu 16.04.1

I am trying to build Openssl-3.0.0 from master branch to use ktls feature on Ubuntu 16, but the build is skipping the ktls feature even though i am using Ubuntu 16.04.1 (Kernel version: 4.15) ...
user avatar
  • 7
2 votes
1 answer
664 views

Will Ubuntu 18.04 get an nginx version compiled with OpenSSL 1.1.1?

I run multiple servers with Ubuntu 18.04 and nginx. Updating to 18.10/19.04 is not an option. I'd like to activate TLS 1.3 support for my webserver. I know I need an nginx version built with OpenSSL ...
user avatar
  • 173
1 vote
0 answers
1k views

Ubuntu 19.04 Screen Sharing Issues

I just did a fresh install of Ubuntu 19.04 on a new computer today. I need to be able to use VNC (Remmina) to remotly connect to this new computer regularly. I logged on, ran sudo apt install vino ...
user avatar
1 vote
0 answers
640 views

Does Ubuntu support a CA chain?

Is there a way to install a CA certificate where the file is a certificate chain? I don't want to have certain files for each step so I want to use a PEM file with a certification chain e.g.: -----...
user avatar
  • 115
0 votes
1 answer
1k views

Docker: unable to connect through https

I'm trying to get a docker container of Onlyoffice up and running. I'm following the instructions provided on GitHub, but get a connection refused error. This is my docker command: docker run -i -...
user avatar
  • 1,113
0 votes
1 answer
4k views

How to clean my OpenSSL installation

I use Ubuntu 18.04. It was shipped with OpenSSL 1.1.0g . I tried to link manually compiled Python to a manually compiled OpenSSL1.1.1a but things does not seem to work well. When I now run Python it ...
user avatar
2 votes
1 answer
7k views

curl: (35) error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version /home/mohan/mesg

When I am running the following command: bash <(curl -fsSL https://mesg.com/install) , I am getting this error: curl: (35) error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol ...
user avatar
9 votes
5 answers
27k views

How to disable TLS 1.0, TLS 1.1 on Apache

I have enabled TLS 1.2 in my web server. But the http://ssllabs.com indicates that, I have enabled TLS 1.0 and 1.1 versions along with the TLS1.2 in my server. I modified my configurations files to ...
user avatar
3 votes
0 answers
694 views

Very slow TLS handshake on certain sites across different browsers

I am running Ubuntu 16.04 and have been experiencing a very particular issue with a certain set of webpages. The first visit of some pages (see list below) within a certain timeframe (~5min) is very ...
user avatar
  • 31
2 votes
1 answer
2k views

16.04 SERVER USING vsftpd using tls getting ECONNREFUSED

I have 16.04 on a hosted server with a static IP. I have the ufw off for the moment to get ftp working. I configured vsftp, then I added the chroot capability. It was working fine-sign in with a ...
user avatar
0 votes
1 answer
1k views

TLS Downgrade error on Opera or Firefox but not on Chrome

When I try to browse some secure websites on Firefox or Opera, I often get the error "ERR_TLS13_DOWNGRADE_DETECTED", while the page loads properly on Chrome. This occurs with a lot of websites, but ...
user avatar
  • 73
1 vote
0 answers
4k views

How to solve TLS handshake failed error? [duplicate]

I was trying to install sublime text on my ubuntu 18.04. The method I tried to install Sublime Text is to follow this link Linux Package Manager Repositories but it throws below error when I issue the ...
user avatar
  • 1,319
5 votes
2 answers
6k views

How to send TLS syslog message via logger command

I am working on ubuntu 16.04. Is there any way to send TLS syslog message by logger command?
user avatar
2 votes
1 answer
2k views

How to disable TLSv1 in Apache

I have installed Apache on an Ubuntu server, and have SSL installed through "Let's Encrypt". The SSL certificate is valid, but when running the URL of the website thought https://whynopadlock.com, it ...
user avatar
  • 121
1 vote
1 answer
508 views

Internet error hanging on TLS handshake and TB at connected to pop3

Since yesterday I have a problem with my wired internet connection only on Ubuntu, Win7 works fine (dual boot), Thunderbird hangs at connected to pop3 and receives no e-mails and various websites hang ...
user avatar
2 votes
0 answers
2k views

SSL routines:ssl3_read_bytes:tlsv1 alert access denied connect to bitbucket

I have trouble, my ubuntu don't connect to bitbucket.org by https. I install newsletter openssl version kodix@n-kdx-30:~/tmp$ openssl version OpenSSL 1.1.1 11 Sep 2018 but error don't desappear. If ...
user avatar
  • 121
6 votes
1 answer
21k views

Ubuntu 16.04 openssl s_client write:errno=104

I'm getting the following error when trying to connect to github.com, google.com, dropbox.com via https, but stackoverflow.com, askubuntu.com and the majority of https websites work. Relevant details:...
user avatar
  • 565
0 votes
1 answer
1k views

CA root install issue on Ubuntu 16.04 LTS Server

I am setting up nginx reverse proxy on Ubuntu 16.04 LTS Server for Web-Server. There will three different Services running on Ubuntu. Services will communicate each other using API calls. Similarly ...
user avatar
0 votes
1 answer
3k views

Firefox not creating sslkeylog file after setting SSLKEYLOGFILE variable

I ran this in the terminal: export SSLKEYLOGFILE=/home/user/sslkeylog After opening regular Firefox, the developer version of Firefox and Chromium, "sslkeylog" was never created, even after visiting ...
user avatar
  • 19
0 votes
2 answers
105 views

Building a file in Linux

I am a Windows user but I need to use a Linux tool. I am using Ubuntu. The tool's website here provided a file named: build-x86-64.sh which I installed it. It then says all what you need is to run: % ....
user avatar
  • 101
2 votes
0 answers
2k views

TLS not working at all for Ubuntu in WSL

I recently reinstalled my computer and installed Linux Subsystem which I always do. So this is a complete new install. When I wanted to run composer I noticed something strange. It failed because it ...
user avatar
  • 146
2 votes
0 answers
2k views

How do you connect to VPN with IKEV2 with EAP-TLS authentication on Ubuntu 16.0.4?

I've recently received three files called: vpn-host-certificate.cer company-ca-certificate.cer me.p12 My work environment is Ubuntu 16.0.4. It has been requested that I connect to a VPN that is ...
user avatar
0 votes
1 answer
707 views

FTP sync over SSL/TLS started by command line

I have webspace and develop locally. When I have finished my local changes, I want to synchronize using FTP with SSL/TLS (I do not mean openssh's sftp/scp) with my webhoster (with no ssh access so ...
user avatar
  • 480
-1 votes
1 answer
1k views

Ubuntu 16.04 apache tls settings wont affect [duplicate]

My setup is fresh Ubuntu 16.04 server installation with Apache 2.4.18 and Openssl 1.0.2g. I have made ssl configs to /etc/apache2/mods-available/ssl.conf and checked that there are no same configs in ...
user avatar
  • 29
1 vote
1 answer
716 views

Caldav (and carddav) compatible client with support for TLS Client certificate authentication

I am in search of a Caldav (and carddav) compatible client with support for TLS Client certificate authentication? The solution with Thunderbird + Lightning + SoGO connector I suggested in my answer ...
user avatar
  • 9,527
0 votes
1 answer
887 views

StartTLS fail with LDAP mechanism in saslauthd

I upgraded my mail server from Ubuntu 14.04 to 16.04 and now StartTLS does not work anymore with LDAP mechanism in saslauthd. % sudo testsaslauthd -u clement -p bar 0: NO "authentication failed" ...
user avatar
  • 176
2 votes
1 answer
2k views

Ubuntu 16.04 Firefox not creating SSLKEYLOGFILE to be used by wireshark

One should be able create an SSL Pre-Master-Secret key log file from firefox by creating the environment variable export SSLKEYLOGFILE=~/path/to/sslkeylog.log so external programs, i.e. Wireshark, are ...
user avatar
9 votes
6 answers
20k views

OpenLDAP error configuring StartTLS: ldap_modify: Other (e.g., implementation specific) error (80)

Configuring StartTLS for OpenLDAP. Ubuntu server 16.04 Slapd 2.4.42+dfsg-2ubuntu3.2 I have my own internal Certificate authority that is providing certificates. I have set up certificates and key: ...
user avatar
  • 111
3 votes
3 answers
4k views

To have php 5.3.2 + Openssl 1.0.1 + Ubuntu 16.04

As I had to upgrade to TLS1.2 I had to upgrade to OpenSSL 1.0.1 or higher. To do that, I had to upgrade from Ubuntu 10.04 to Ubuntu 16.04 Ubuntu 10.04 had PHP 5.3.2 MySQL 5.1.66 Apache 2.2....
user avatar
  • 123