Questions tagged [tls]
Questions about Transport Layer Security (TLS) protocol, which allows client-server apps to communicate across a network in a way designed to try and prevent eavesdropping and tampering.
103
questions
-1
votes
1
answer
145
views
Samba ad port 636 and 3269 disable tls 1.0 and 1.1
Samba ad port 636 and port 3269 by default enabled with tls 1.0 and tls 1.1.
Need help to disable tls 1.0 and tls 1.1, keep only 1.2
- 11
0
votes
0
answers
136
views
Getting HTTP/0.0 307 Temporary Redirect in connecting to my vps without typing https://
I ran a graphical version of v2ray(X-UI) on one of my VPS on Hetzner, I also add an A record to bind the IP of this VPS to a DNS on my Cloudflare account.
Well with the below commands, I tried to get ...
- 101
0
votes
0
answers
23
views
Is there a ‘Config Editor’ file in Sylpheed, like there is in Thunderbird?
Thunderbird has a ‘Config Editor’ page. Is there a similar page in Sylheed?
I need to change ‘security.tls.version.min’ to be set to allow TLS 1.0
- 47
1
vote
1
answer
327
views
TLS Negotiation fails from Multipass VM but succeeds from host machine (or other machines on network)
Summary
Running curl -sfL https://github.com/k3s-io/k3s/releases/download/v1.25.4+k3s1/sha256sum-amd64.txt from a Multipass VM appears to result in a hung TLS negotiation, as there is no (IN), TLS ...
- 133
1
vote
0
answers
338
views
Peer failed to perform TLS handshake when adding Google account to online accounts
I have Ubuntu 22.04.1 LTS. When I try to connect the Google account to the online account, I encounter the following error:
Peer failed to perform TLS handshake: The TLS connection was non-properly ...
- 11
0
votes
2
answers
713
views
ubuntu 22.04 sqlcmd can not connect to ms sql server 2016
I have spent several days on google search to find a solution, but no right one. so I post it here.
I have 3 VM machines.
VM 1:
windows server 2012 R2 sp1, 192.168.1.10
sql server 2016, port 1432
sql ...
0
votes
0
answers
96
views
Testing application with self signed cert - works with ubuntu 20.04 but not 18.04
Using the below conf file to generate a self signed cert for testing purposes. I added the generated cert and pem as a tls certificate in the ingress and everything works perfectly with ubuntu 20.04 ...
- 1
0
votes
0
answers
246
views
Install mbedTLS
Trying to install mbedTLS on Ubuntu.
Command bellow installs library.
sudo apt install libmbedtls-dev
But I what I should install in order to get commands like:
mbedtls_gen_key rsa_keysize=keysize ...
- 4,367
0
votes
0
answers
175
views
Apache Server 2.4.53 with Custom Built OpenSSL
I am trying to launch an Apache server on Ubuntu 20.04 running a custom built OpenSSL, but I don't want to install it on my machine, instead, I want to show the server where it can find all libraries ...
- 343
1
vote
0
answers
432
views
Let's Encrypt certificates refused by GnuTLS
On one machine with an up-to-date Ubuntu 20.04, certificates issued by Let's Encrypt are rejected by GnuTLS and only GnuTLS. They fail with applications that are linked with GnuTLS, such as Git and ...
3
votes
3
answers
3k
views
How do I fix Postfix Submission TLS Error - unexpected eof while reading:../ssl/record/rec_layer_s3.c:308:
I have a brand new Ubuntu 22.04 install with mail system setup broadly as per:
https://www.linuxbabe.com/mail-server/setup-basic-postfix-mail-sever-ubuntu
and I get the following errors:
Jun 1 08:07:...
- 83
5
votes
2
answers
579
views
Is it possible to disable a Certificate Authority system-wide or at least on Firefox?
I want to disable CAs that are under control of a country that's waging war against mine, how can I do it? I see one right away. The question still stands even if you are convinced there are none, it'...
- 8,336
1
vote
0
answers
48
views
My ubuntu system suddenly got somehow reset
One day when I boot up on ubuntu after entering the password (I only have one user) suddenly the display went off for a sec and then everything was like reset to a fresh install! All new sudo commands ...
- 11
0
votes
1
answer
2k
views
SSSD - Unable to Authenticate Against Google LDAP After 20.04 Upgrade - Could not start TLS encryption. unknown error
I'm trying to authenticate against Google LDAP (G Suite/Google Admin) to allow my clients to log in using their Google credentials. I have no visibility on the LDAP side of things I can only generate ...
- 1
0
votes
1
answer
2k
views
How to configure curl (openssl) in order to make it work with custom engine and TLSv1.0
I've successfully added a custom engine to my OpenSSL configuration like this:
openssl_conf = openssl_def # at the beginning of the config file
[openssl_def] # at the end
engines = engine_section
[...
0
votes
0
answers
355
views
Python's test_ssl fails starting from Ubuntu 20.04. I need to find a person at Canonical responsible for openssl configuration
Please take a look at https://bugs.python.org/issue41561. Developers who work on Python think that the issue is due to a change in Ubuntu 20.04 that is best described by https://bugs.python.org/...
3
votes
2
answers
5k
views
What is the correct way to use specific DNS servers if using DHCP in a no-desktop Ubuntu 20.04 install, and can you use DNS over TLS?
I am running a local server using Ubuntu 20.04, and had a need to do one thing that should be simple - tell it to resolve DNS using something other than the ISP's DNS server. However for reasons I ...
- 277
10
votes
2
answers
29k
views
When I try to CURL a website I get SSL error
I installed Ubuntu 20 on my VPS. This is why I'm trying to do:
curl -v https://imenik.tportal.hr/show?action=pretraga&type=bijeleStranice
[1] 438975
root@vps:/var/www/html/tportal# * Trying 195....
- 203
0
votes
1
answer
2k
views
Thunderbird, TLS and ubuntu 20.04
I have ubuntu 20.04. After some uncertain updates (but nothing big), my thunderbird stop working. I have several IMAP servers, but on all I am getting same error:
The base socket has problems ...
- 101
18
votes
2
answers
20k
views
Enable TLS 1.0 and TLS 1.1 on Ubuntu 20.04
I have recently reinstalled my server to Ubuntu 20.04.
A support call came in and after a few days, I managed to notice that TLS v1.0 and v1.1 were not being provided by my web server, nginx. The ...
- 409
7
votes
1
answer
3k
views
gpg2 --refresh-keys general error
unfortunately I experience the following error when running
$ gpg2 --refresh-keys
gpg: refreshing 18 keys from hkps://keys.openpgp.org
gpg: keyserver refresh failed: General error
As you can gather ...
- 342
0
votes
1
answer
157
views
Configure SSSD Package against Microsoft Patch (inforce LDAPS/tls)
I'm looking at altering some config of some Ubuntu machines that are using the SSSD package to bind to AD. As far as I understand, all ldap queries should be going through TSL from the config below.
...
- 129
0
votes
2
answers
3k
views
Can’t get TLSv1.3 to work with nginx 1.14.0 and OpenSSL 1.1.1 on Ubuntu 18.04.4
I’m going nuts here to trying to figure out how to enable TLSv1.3 on my nginx server.
Based on my research, my setup should support it:
# lsb_release -a
No LSB modules are available.
Distributor ID: ...
- 21
1
vote
1
answer
2k
views
OpenLDAP Trouble Setting TLS Cipher List
My institution wants to configure one of our Ubuntu servers with OpenLDAP in order to interface with our SSO provider, Okta, using a server-side agent they have for provisioning users from their cloud ...
- 11
1
vote
1
answer
113
views
Get internet working on newly installed ubuntu
I live in kashmir valley where we were under communication blackout since Aug 5. The govt has recently restored phone networks and access to 301 whitelisted websites like travel, education, and other ...
- 11
1
vote
1
answer
3k
views
Cannot retrieve directory listing from vsftpd after enabling TLS
I set up vsftpd on an Ubuntu 16.04 server. I added a user, and gave him FTP access via a userlist and chrooted him to his home directory. It worked fine. To make the file transfer more secure I wanted ...
- 23
0
votes
0
answers
2k
views
How to use OpenConnect without blocking port 443?
I've migrated a Windows 10 machine to Ubuntu.
On Windows 10 I connected to a Cisco VPN through the Cisco AnyConnect client. It worked fine and allowed me to use port 443 while connected to the VPN (...
- 113
1
vote
1
answer
2k
views
FTP server with TLS does not work in windows file explorer and browsers
When I finish configuring my TLS, I try to connect from the Windows file explorer and from browsers with ftps:// ftpes:// sftp:// and user:password@server:port and also as a network unit but nothing ...
- 96
2
votes
0
answers
777
views
MSMTP using TLS/SSL
I ty to send emails using MSMTP. I want to use TLS/SSL encryption for it.
Now I had to turn on the encryption in this lines:
# Enable or disable TLS/SSL encryption.
tls on
tls_starttls on
...
- 121
-1
votes
2
answers
1k
views
Not able to enable ktls while build OpenSSL3.0.0 on Ubuntu 16.04.1
I am trying to build Openssl-3.0.0 from master branch to use ktls feature on Ubuntu 16, but the build is skipping the ktls feature
even though i am using Ubuntu 16.04.1 (Kernel version: 4.15) ...
- 7
2
votes
1
answer
817
views
Will Ubuntu 18.04 get an nginx version compiled with OpenSSL 1.1.1?
I run multiple servers with Ubuntu 18.04 and nginx. Updating to 18.10/19.04 is not an option.
I'd like to activate TLS 1.3 support for my webserver.
I know I need an nginx version built with OpenSSL ...
- 183
1
vote
0
answers
1k
views
Ubuntu 19.04 Screen Sharing Issues
I just did a fresh install of Ubuntu 19.04 on a new computer today. I need to be able to use VNC (Remmina) to remotly connect to this new computer regularly.
I logged on, ran
sudo apt install vino
...
- 321
2
votes
0
answers
984
views
Does Ubuntu support a CA chain?
Is there a way to install a CA certificate where the file is a certificate chain?
I don't want to have certain files for each step so I want to use a PEM file with a certification chain e.g.:
-----...
- 125
0
votes
1
answer
2k
views
Docker: unable to connect through https
I'm trying to get a docker container of Onlyoffice up and running.
I'm following the instructions provided on GitHub, but get a connection refused error.
This is my docker command:
docker run -i -...
- 1,151
1
vote
1
answer
7k
views
How to clean my OpenSSL installation
I use Ubuntu 18.04. It was shipped with OpenSSL 1.1.0g
. I tried to link manually compiled Python to a manually compiled OpenSSL1.1.1a but things does not seem to work well. When I now run Python it ...
- 547
2
votes
1
answer
8k
views
curl: (35) error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version /home/mohan/mesg
When I am running the following command:
bash <(curl -fsSL https://mesg.com/install)
, I am getting this error:
curl: (35) error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol ...
- 21
11
votes
5
answers
31k
views
How to disable TLS 1.0, TLS 1.1 on Apache
I have enabled TLS 1.2 in my web server. But the http://ssllabs.com indicates that, I have enabled TLS 1.0 and 1.1 versions along with the TLS1.2 in my server. I modified my configurations files to ...
3
votes
0
answers
779
views
Very slow TLS handshake on certain sites across different browsers
I am running Ubuntu 16.04 and have been experiencing a very particular issue with a certain set of webpages.
The first visit of some pages (see list below) within a certain timeframe (~5min) is very ...
- 31
2
votes
1
answer
3k
views
16.04 SERVER USING vsftpd using tls getting ECONNREFUSED
I have 16.04 on a hosted server with a static IP. I have the ufw off for the moment to get ftp working. I configured vsftp, then I added the chroot capability. It was working fine-sign in with a ...
- 29
0
votes
1
answer
1k
views
TLS Downgrade error on Opera or Firefox but not on Chrome
When I try to browse some secure websites on Firefox or Opera, I often get the error "ERR_TLS13_DOWNGRADE_DETECTED", while the page loads properly on Chrome.
This occurs with a lot of websites, but ...
- 73
1
vote
0
answers
4k
views
How to solve TLS handshake failed error? [duplicate]
I was trying to install sublime text on my ubuntu 18.04. The method I tried to install Sublime Text is to follow this link Linux Package Manager Repositories but it throws below error when I issue the ...
- 1,379
5
votes
2
answers
7k
views
How to send TLS syslog message via logger command
I am working on ubuntu 16.04.
Is there any way to send TLS syslog message by logger command?
2
votes
2
answers
3k
views
How to disable TLSv1 in Apache
I have installed Apache on an Ubuntu server, and have SSL installed through "Let's Encrypt".
The SSL certificate is valid, but when running the URL of the website thought https://whynopadlock.com, it ...
- 121
1
vote
1
answer
548
views
Internet error hanging on TLS handshake and TB at connected to pop3
Since yesterday I have a problem with my wired internet connection only on Ubuntu, Win7 works fine (dual boot), Thunderbird hangs at connected to pop3 and receives no e-mails and various websites hang ...
2
votes
0
answers
3k
views
SSL routines:ssl3_read_bytes:tlsv1 alert access denied connect to bitbucket
I have trouble, my ubuntu don't connect to bitbucket.org by https.
I install newsletter openssl version
kodix@n-kdx-30:~/tmp$ openssl version
OpenSSL 1.1.1 11 Sep 2018
but error don't desappear. If ...
- 121
6
votes
1
answer
24k
views
Ubuntu 16.04 openssl s_client write:errno=104
I'm getting the following error when trying to connect to github.com, google.com, dropbox.com via https, but stackoverflow.com, askubuntu.com and the majority of https websites work.
Relevant details:...
- 635
0
votes
1
answer
1k
views
CA root install issue on Ubuntu 16.04 LTS Server
I am setting up nginx reverse proxy on Ubuntu 16.04 LTS Server for Web-Server.
There will three different Services running on Ubuntu. Services will communicate each other using API calls. Similarly ...
1
vote
1
answer
4k
views
Firefox not creating sslkeylog file after setting SSLKEYLOGFILE variable
I ran this in the terminal: export SSLKEYLOGFILE=/home/user/sslkeylog
After opening regular Firefox, the developer version of Firefox and Chromium, "sslkeylog" was never created, even after visiting ...
- 29
0
votes
2
answers
122
views
Building a file in Linux
I am a Windows user but I need to use a Linux tool. I am using Ubuntu. The tool's website here provided a file named: build-x86-64.sh which I installed it. It then says all what you need is to run: % ....
- 101
2
votes
0
answers
2k
views
TLS not working at all for Ubuntu in WSL
I recently reinstalled my computer and installed Linux Subsystem which I always do. So this is a complete new install. When I wanted to run composer I noticed something strange. It failed because it ...
- 216