Questions tagged [tls]

Questions about Transport Layer Security (TLS) protocol, which allows client-server apps to communicate across a network in a way designed to try and prevent eavesdropping and tampering.

44 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3 votes
0 answers
850 views

Very slow TLS handshake on certain sites across different browsers

I am running Ubuntu 16.04 and have been experiencing a very particular issue with a certain set of webpages. The first visit of some pages (see list below) within a certain timeframe (~5min) is very ...
Bubblbu's user avatar
  • 31
3 votes
0 answers
7k views

How to enable sslv3 in openssl for ubuntu 16.04

I am researching the attacks against TLS as a part of my Masters topic. But as I am using the ubuntu 16.04 the ssl3 in OpenSSL is permanently disabled here. openssl s_client -connect www.google.com:...
NAZMUL HOSSAIN's user avatar
3 votes
0 answers
598 views

Big problems with new ssl cert on aws mail server

I am at a last resort :( I have an Amazon EC2 instance that I run my mail server from. My mail server is setup with ubuntu server 14.04, postfix, dovecot and has been running fine for years however ...
Jinxzy's user avatar
  • 143
2 votes
0 answers
584 views

Let's Encrypt certificates refused by GnuTLS

On one machine with an up-to-date Ubuntu 20.04, certificates issued by Let's Encrypt are rejected by GnuTLS and only GnuTLS. They fail with applications that are linked with GnuTLS, such as Git and ...
Gilles 'SO- stop being evil''s user avatar
2 votes
0 answers
1k views

MSMTP using TLS/SSL

I ty to send emails using MSMTP. I want to use TLS/SSL encryption for it. Now I had to turn on the encryption in this lines:   # Enable or disable TLS/SSL encryption. tls on tls_starttls on ...
fteinz's user avatar
  • 121
2 votes
0 answers
1k views

Ubuntu 19.04 Screen Sharing Issues

I just did a fresh install of Ubuntu 19.04 on a new computer today. I need to be able to use VNC (Remmina) to remotly connect to this new computer regularly. I logged on, ran sudo apt install vino ...
Jordan Ketterer's user avatar
2 votes
0 answers
1k views

Does Ubuntu support a CA chain?

Is there a way to install a CA certificate where the file is a certificate chain? I don't want to have certain files for each step so I want to use a PEM file with a certification chain e.g.: -----...
Wie's user avatar
  • 125
2 votes
0 answers
3k views

SSL routines:ssl3_read_bytes:tlsv1 alert access denied connect to bitbucket

I have trouble, my ubuntu don't connect to bitbucket.org by https. I install newsletter openssl version kodix@n-kdx-30:~/tmp$ openssl version OpenSSL 1.1.1 11 Sep 2018 but error don't desappear. If ...
Naumov's user avatar
  • 121
2 votes
0 answers
2k views

TLS not working at all for Ubuntu in WSL

I recently reinstalled my computer and installed Linux Subsystem which I always do. So this is a complete new install. When I wanted to run composer I noticed something strange. It failed because it ...
inquam's user avatar
  • 236
2 votes
0 answers
2k views

How do you connect to VPN with IKEV2 with EAP-TLS authentication on Ubuntu 16.0.4?

I've recently received three files called: vpn-host-certificate.cer company-ca-certificate.cer me.p12 My work environment is Ubuntu 16.0.4. It has been requested that I connect to a VPN that is ...
Joseph Casey's user avatar
2 votes
1 answer
2k views

Ubuntu 16.04 Firefox not creating SSLKEYLOGFILE to be used by wireshark

One should be able create an SSL Pre-Master-Secret key log file from firefox by creating the environment variable export SSLKEYLOGFILE=~/path/to/sslkeylog.log so external programs, i.e. Wireshark, are ...
user3325563's user avatar
2 votes
0 answers
8k views

LDAPS not working: failed to bind to LDAP server (16.04)

LDAP works fine on my machine but LDAPS does not seem to work. Tried /etc/ldap.conf and /etc/ldap/ldap.conf with the Cert names to be specified with TLS_CACERTFILE & TLS_CACERT as mentioned in ...
Malavika's user avatar
2 votes
0 answers
2k views

Postfix: turning on "smtpd_tls_security_level = encrypt" breaks mailman

I have an Ubuntu installation (16.04) where I run postfix as my mail server, and mailman to host a couple of mailing lists I manage. I recently discovered the postfix commands: smtp_tls_security_level ...
Doug Barbieri's user avatar
2 votes
1 answer
825 views

Ubuntu 14.04 Exim 4.82 how to make tls_sni variable expanded in tls_certifcate?

I can't figure out how to make exim 4.82 recognise variable ${tls_sni} in tls_certificate section. I'm trying to make exim use per-domain certificates, but I'm getting an error expansion of ...
Aleksey's user avatar
  • 21
2 votes
0 answers
432 views

Squid/DansGuardian: Block tls on specific websites

I have successfully set up squid in combination with DansGuardian and it blocks http-traffic really wel. Sadly (and understandable) it doesn't block https at all. Is there a way to: filter specific ...
Thomas131's user avatar
1 vote
1 answer
592 views

TLS Negotiation fails from Multipass VM but succeeds from host machine (or other machines on network)

Summary Running curl -sfL https://github.com/k3s-io/k3s/releases/download/v1.25.4+k3s1/sha256sum-amd64.txt from a Multipass VM appears to result in a hung TLS negotiation, as there is no (IN), TLS ...
scubbo's user avatar
  • 133
1 vote
0 answers
522 views

Peer failed to perform TLS handshake when adding Google account to online accounts

I have Ubuntu 22.04.1 LTS. When I try to connect the Google account to the online account, I encounter the following error: Peer failed to perform TLS handshake: The TLS connection was non-properly ...
Reza Zarei's user avatar
1 vote
0 answers
62 views

My ubuntu system suddenly got somehow reset

One day when I boot up on ubuntu after entering the password (I only have one user) suddenly the display went off for a sec and then everything was like reset to a fresh install! All new sudo commands ...
Adjective's user avatar
1 vote
1 answer
3k views

How to configure curl (openssl) in order to make it work with custom engine and TLSv1.0

I've successfully added a custom engine to my OpenSSL configuration like this: openssl_conf = openssl_def # at the beginning of the config file [openssl_def] # at the end engines = engine_section [...
Violet Wagner's user avatar
1 vote
1 answer
118 views

Get internet working on newly installed ubuntu

I live in kashmir valley where we were under communication blackout since Aug 5. The govt has recently restored phone networks and access to 301 whitelisted websites like travel, education, and other ...
SaqibMir's user avatar
1 vote
1 answer
3k views

FTP server with TLS does not work in windows file explorer and browsers

When I finish configuring my TLS, I try to connect from the Windows file explorer and from browsers with ftps:// ftpes:// sftp:// and user:password@server:port and also as a network unit but nothing ...
Saori Ken's user avatar
1 vote
0 answers
70 views

What encryption algorithms over HTTPS (TLS) are supported by Ubuntu 16.10 trial version?

I am using Ubuntu 16.10 trial version with Firefox, running on a hardware-write-protected USB memory, to do online banking on https sites. My PC has Windows 10 installed on the hard drive but I think ...
Doug Millar's user avatar
0 votes
0 answers
31 views

How to enable TLS1.3 for wifi connection in ubantu

I am using Ubuntu 22.04.4 LTS (jammy), I want to connect access point of wifi network where authentication method is TLS enable. By default connection handsake initiated with EAP_TLS1.2, I want to ...
Khushbu's user avatar
0 votes
0 answers
207 views

Why do I have TLS verification failure when trying to send mail via msmtp?

I am trying to send mail via smtp (using msmtp). The aim is to simply send via a yahoo mail account. I have configured it correctly (see bottom) so that if I run with the option --tls-certcheck=off, ...
Thomas Stokes's user avatar
0 votes
1 answer
36 views

Is the process for SSL/TLS server key generation different on VMs?

For 3 of our company's servers, Bitsight is reporting that our Diffie-Hellman prime is very commonly used and is not safe. We've followed the directions here: https://weakdh.org/sysadmin.html several ...
Kevin Foster's user avatar
0 votes
0 answers
52 views

Is Certificates are required for STARTTLS connection on LDAP

My LDAP server's ldap.conf file # # LDAP Defaults # # See ldap.conf(5) for details # This file should be world readable but not world writable. BASE dc=coretesting,dc=com URI ldap://ldap....
ram ajay's user avatar
0 votes
0 answers
47 views

OpenSSL SSL_read: error:8006F074:lib(128):capi_rsa_priv_enc:function not supported

Server Env : Ubuntu 22..04 Openssl 3.0.2 Apache 2.4.52 SSL x509 certificate is installed on the Apache Server Client Env: Windows 2016 Curl 7.78.0 openssl 1.1.1f Below command has been executed to ...
Ankit Malviya's user avatar
0 votes
0 answers
312 views

Getting HTTP/0.0 307 Temporary Redirect in connecting to my vps without typing https://

I ran a graphical version of v2ray(X-UI) on one of my VPS on Hetzner, I also add an A record to bind the IP of this VPS to a DNS on my Cloudflare account. Well with the below commands, I tried to get ...
Javad's user avatar
  • 101
0 votes
2 answers
2k views

ubuntu 22.04 sqlcmd can not connect to ms sql server 2016

I have spent several days on google search to find a solution, but no right one. so I post it here. I have 3 VM machines. VM 1: windows server 2012 R2 sp1, 192.168.1.10 sql server 2016, port 1432 sql ...
wenny0501's user avatar
0 votes
0 answers
168 views

Testing application with self signed cert - works with ubuntu 20.04 but not 18.04

Using the below conf file to generate a self signed cert for testing purposes. I added the generated cert and pem as a tls certificate in the ingress and everything works perfectly with ubuntu 20.04 ...
bjamin's user avatar
  • 1
0 votes
1 answer
2k views

SSSD - Unable to Authenticate Against Google LDAP After 20.04 Upgrade - Could not start TLS encryption. unknown error

I'm trying to authenticate against Google LDAP (G Suite/Google Admin) to allow my clients to log in using their Google credentials. I have no visibility on the LDAP side of things I can only generate ...
A V's user avatar
  • 1
0 votes
0 answers
366 views

Python's test_ssl fails starting from Ubuntu 20.04. I need to find a person at Canonical responsible for openssl configuration

Please take a look at https://bugs.python.org/issue41561. Developers who work on Python think that the issue is due to a change in Ubuntu 20.04 that is best described by https://bugs.python.org/...
Bug Reporter's user avatar
0 votes
1 answer
2k views

Thunderbird, TLS and ubuntu 20.04

I have ubuntu 20.04. After some uncertain updates (but nothing big), my thunderbird stop working. I have several IMAP servers, but on all I am getting same error: The base socket has problems ...
Rado Dr.'s user avatar
  • 101
0 votes
1 answer
174 views

Configure SSSD Package against Microsoft Patch (inforce LDAPS/tls)

I'm looking at altering some config of some Ubuntu machines that are using the SSSD package to bind to AD. As far as I understand, all ldap queries should be going through TSL from the config below. ...
jamboNum5's user avatar
  • 130
0 votes
0 answers
2k views

How to use OpenConnect without blocking port 443?

I've migrated a Windows 10 machine to Ubuntu. On Windows 10 I connected to a Cisco VPN through the Cisco AnyConnect client. It worked fine and allowed me to use port 443 while connected to the VPN (...
Andrea Ligios's user avatar
0 votes
1 answer
2k views

CA root install issue on Ubuntu 16.04 LTS Server

I am setting up nginx reverse proxy on Ubuntu 16.04 LTS Server for Web-Server. There will three different Services running on Ubuntu. Services will communicate each other using API calls. Similarly ...
user2488926's user avatar
0 votes
1 answer
1k views

StartTLS fail with LDAP mechanism in saslauthd

I upgraded my mail server from Ubuntu 14.04 to 16.04 and now StartTLS does not work anymore with LDAP mechanism in saslauthd. % sudo testsaslauthd -u clement -p bar 0: NO "authentication failed" ...
Clèm's user avatar
  • 196
0 votes
1 answer
930 views

How is the Ubuntu root CA store created?

I know that the root store is located at /etc/ssl/certs and can be updated with update-ca-certificates. But where does it get it's certificates from? And how do browsers interact with it which have ...
Hansi's user avatar
  • 1
0 votes
2 answers
148 views

Folder/Directory Navigation (Ubuntu 14.04 TLS)

I'm completely new to Linux/Ubuntu so apologies for the rather elementary question. Using the "save as" command, I'm trying to save e-mails (from Thunderbird) and documents (from Libre Office) to my ...
Rasko's user avatar
  • 1
0 votes
2 answers
3k views

Sendmail down on Ubuntu 12.04, SSL problem?

I posted this on askubuntu.com yesterday but haven't gotten any responses. We run a production Ubuntu server that serves thousands of people per day. Sendmail is currently not working on this server. ...
Benjamin's user avatar
  • 101
0 votes
2 answers
3k views

Uncomplete install of POCO C++ libraries

I recently started to use POCO C++ libraries to create a simple mail client and I needed to use SecureSMTPClientSession class, but compiler reports Poco/Net/SecureSMTPClientSession.h: No such file ...
J.Doe's user avatar
  • 1
0 votes
1 answer
2k views

Problem in openldap with TLS configuration

I configured openldap with TLS, but when I tried to test it with following command, I receieve the error message: $ openssl s_client -connect localhost:389 -showcerts CONNECTED(00000005) ...
Gohar's user avatar
  • 345
-1 votes
1 answer
474 views

Samba ad port 636 and 3269 disable tls 1.0 and 1.1

Samba ad port 636 and port 3269 by default enabled with tls 1.0 and tls 1.1. Need help to disable tls 1.0 and tls 1.1, keep only 1.2
Manjunath G's user avatar
-1 votes
2 answers
2k views

Not able to enable ktls while build OpenSSL3.0.0 on Ubuntu 16.04.1

I am trying to build Openssl-3.0.0 from master branch to use ktls feature on Ubuntu 16, but the build is skipping the ktls feature even though i am using Ubuntu 16.04.1 (Kernel version: 4.15) ...
sanat's user avatar
  • 7