Questions tagged [tls]
Questions about Transport Layer Security (TLS) protocol, which allows client-server apps to communicate across a network in a way designed to try and prevent eavesdropping and tampering.
44
questions with no upvoted or accepted answers
3
votes
0
answers
850
views
Very slow TLS handshake on certain sites across different browsers
I am running Ubuntu 16.04 and have been experiencing a very particular issue with a certain set of webpages.
The first visit of some pages (see list below) within a certain timeframe (~5min) is very ...
3
votes
0
answers
7k
views
How to enable sslv3 in openssl for ubuntu 16.04
I am researching the attacks against TLS as a part of my Masters topic. But as I am using the ubuntu 16.04 the ssl3 in OpenSSL is permanently disabled here.
openssl s_client -connect www.google.com:...
3
votes
0
answers
598
views
Big problems with new ssl cert on aws mail server
I am at a last resort :(
I have an Amazon EC2 instance that I run my mail server from.
My mail server is setup with ubuntu server 14.04, postfix, dovecot and has been running fine for years however ...
2
votes
0
answers
584
views
Let's Encrypt certificates refused by GnuTLS
On one machine with an up-to-date Ubuntu 20.04, certificates issued by Let's Encrypt are rejected by GnuTLS and only GnuTLS. They fail with applications that are linked with GnuTLS, such as Git and ...
2
votes
0
answers
1k
views
MSMTP using TLS/SSL
I ty to send emails using MSMTP. I want to use TLS/SSL encryption for it.
Now I had to turn on the encryption in this lines:
# Enable or disable TLS/SSL encryption.
tls on
tls_starttls on
...
2
votes
0
answers
1k
views
Ubuntu 19.04 Screen Sharing Issues
I just did a fresh install of Ubuntu 19.04 on a new computer today. I need to be able to use VNC (Remmina) to remotly connect to this new computer regularly.
I logged on, ran
sudo apt install vino
...
2
votes
0
answers
1k
views
Does Ubuntu support a CA chain?
Is there a way to install a CA certificate where the file is a certificate chain?
I don't want to have certain files for each step so I want to use a PEM file with a certification chain e.g.:
-----...
2
votes
0
answers
3k
views
SSL routines:ssl3_read_bytes:tlsv1 alert access denied connect to bitbucket
I have trouble, my ubuntu don't connect to bitbucket.org by https.
I install newsletter openssl version
kodix@n-kdx-30:~/tmp$ openssl version
OpenSSL 1.1.1 11 Sep 2018
but error don't desappear. If ...
2
votes
0
answers
2k
views
TLS not working at all for Ubuntu in WSL
I recently reinstalled my computer and installed Linux Subsystem which I always do. So this is a complete new install. When I wanted to run composer I noticed something strange. It failed because it ...
2
votes
0
answers
2k
views
How do you connect to VPN with IKEV2 with EAP-TLS authentication on Ubuntu 16.0.4?
I've recently received three files called:
vpn-host-certificate.cer
company-ca-certificate.cer
me.p12
My work environment is Ubuntu 16.0.4. It has been requested that I connect to a VPN that is ...
2
votes
1
answer
2k
views
Ubuntu 16.04 Firefox not creating SSLKEYLOGFILE to be used by wireshark
One should be able create an SSL Pre-Master-Secret key log file from firefox by creating the environment variable export SSLKEYLOGFILE=~/path/to/sslkeylog.log so external programs, i.e. Wireshark, are ...
2
votes
0
answers
8k
views
LDAPS not working: failed to bind to LDAP server (16.04)
LDAP works fine on my machine but LDAPS does not seem to work. Tried /etc/ldap.conf and /etc/ldap/ldap.conf with the Cert names to be specified with TLS_CACERTFILE & TLS_CACERT as mentioned in ...
2
votes
0
answers
2k
views
Postfix: turning on "smtpd_tls_security_level = encrypt" breaks mailman
I have an Ubuntu installation (16.04) where I run postfix as my mail server, and mailman to host a couple of mailing lists I manage. I recently discovered the postfix commands: smtp_tls_security_level ...
2
votes
1
answer
825
views
Ubuntu 14.04 Exim 4.82 how to make tls_sni variable expanded in tls_certifcate?
I can't figure out how to make exim 4.82 recognise variable ${tls_sni} in tls_certificate section.
I'm trying to make exim use per-domain certificates, but I'm getting an error
expansion of ...
2
votes
0
answers
432
views
Squid/DansGuardian: Block tls on specific websites
I have successfully set up squid in combination with DansGuardian and it blocks http-traffic really wel. Sadly (and understandable) it doesn't block https at all. Is there a way to:
filter specific ...
1
vote
1
answer
592
views
TLS Negotiation fails from Multipass VM but succeeds from host machine (or other machines on network)
Summary
Running curl -sfL https://github.com/k3s-io/k3s/releases/download/v1.25.4+k3s1/sha256sum-amd64.txt from a Multipass VM appears to result in a hung TLS negotiation, as there is no (IN), TLS ...
1
vote
0
answers
522
views
Peer failed to perform TLS handshake when adding Google account to online accounts
I have Ubuntu 22.04.1 LTS. When I try to connect the Google account to the online account, I encounter the following error:
Peer failed to perform TLS handshake: The TLS connection was non-properly ...
1
vote
0
answers
62
views
My ubuntu system suddenly got somehow reset
One day when I boot up on ubuntu after entering the password (I only have one user) suddenly the display went off for a sec and then everything was like reset to a fresh install! All new sudo commands ...
1
vote
1
answer
3k
views
How to configure curl (openssl) in order to make it work with custom engine and TLSv1.0
I've successfully added a custom engine to my OpenSSL configuration like this:
openssl_conf = openssl_def # at the beginning of the config file
[openssl_def] # at the end
engines = engine_section
[...
1
vote
1
answer
118
views
Get internet working on newly installed ubuntu
I live in kashmir valley where we were under communication blackout since Aug 5. The govt has recently restored phone networks and access to 301 whitelisted websites like travel, education, and other ...
1
vote
1
answer
3k
views
FTP server with TLS does not work in windows file explorer and browsers
When I finish configuring my TLS, I try to connect from the Windows file explorer and from browsers with ftps:// ftpes:// sftp:// and user:password@server:port and also as a network unit but nothing ...
1
vote
0
answers
70
views
What encryption algorithms over HTTPS (TLS) are supported by Ubuntu 16.10 trial version?
I am using Ubuntu 16.10 trial version with Firefox, running on a hardware-write-protected USB memory, to do online banking on https sites. My PC has Windows 10 installed on the hard drive but I think ...
0
votes
0
answers
31
views
How to enable TLS1.3 for wifi connection in ubantu
I am using Ubuntu 22.04.4 LTS (jammy), I want to connect access point of wifi network where authentication method is TLS enable. By default connection handsake initiated with EAP_TLS1.2, I want to ...
0
votes
0
answers
207
views
Why do I have TLS verification failure when trying to send mail via msmtp?
I am trying to send mail via smtp (using msmtp). The aim is to simply send via a yahoo mail account. I have configured it correctly (see bottom) so that if I run with the option --tls-certcheck=off, ...
0
votes
1
answer
36
views
Is the process for SSL/TLS server key generation different on VMs?
For 3 of our company's servers, Bitsight is reporting that our Diffie-Hellman prime is very commonly used and is not safe. We've followed the directions here: https://weakdh.org/sysadmin.html several ...
0
votes
0
answers
52
views
Is Certificates are required for STARTTLS connection on LDAP
My LDAP server's ldap.conf file
#
# LDAP Defaults
#
# See ldap.conf(5) for details
# This file should be world readable but not world writable.
BASE dc=coretesting,dc=com
URI ldap://ldap....
0
votes
0
answers
47
views
OpenSSL SSL_read: error:8006F074:lib(128):capi_rsa_priv_enc:function not supported
Server Env : Ubuntu 22..04
Openssl 3.0.2
Apache 2.4.52
SSL x509 certificate is installed on the Apache Server
Client Env: Windows 2016
Curl 7.78.0
openssl 1.1.1f
Below command has been executed to ...
0
votes
0
answers
312
views
Getting HTTP/0.0 307 Temporary Redirect in connecting to my vps without typing https://
I ran a graphical version of v2ray(X-UI) on one of my VPS on Hetzner, I also add an A record to bind the IP of this VPS to a DNS on my Cloudflare account.
Well with the below commands, I tried to get ...
0
votes
2
answers
2k
views
ubuntu 22.04 sqlcmd can not connect to ms sql server 2016
I have spent several days on google search to find a solution, but no right one. so I post it here.
I have 3 VM machines.
VM 1:
windows server 2012 R2 sp1, 192.168.1.10
sql server 2016, port 1432
sql ...
0
votes
0
answers
168
views
Testing application with self signed cert - works with ubuntu 20.04 but not 18.04
Using the below conf file to generate a self signed cert for testing purposes. I added the generated cert and pem as a tls certificate in the ingress and everything works perfectly with ubuntu 20.04 ...
0
votes
1
answer
2k
views
SSSD - Unable to Authenticate Against Google LDAP After 20.04 Upgrade - Could not start TLS encryption. unknown error
I'm trying to authenticate against Google LDAP (G Suite/Google Admin) to allow my clients to log in using their Google credentials. I have no visibility on the LDAP side of things I can only generate ...
0
votes
0
answers
366
views
Python's test_ssl fails starting from Ubuntu 20.04. I need to find a person at Canonical responsible for openssl configuration
Please take a look at https://bugs.python.org/issue41561. Developers who work on Python think that the issue is due to a change in Ubuntu 20.04 that is best described by https://bugs.python.org/...
0
votes
1
answer
2k
views
Thunderbird, TLS and ubuntu 20.04
I have ubuntu 20.04. After some uncertain updates (but nothing big), my thunderbird stop working. I have several IMAP servers, but on all I am getting same error:
The base socket has problems ...
0
votes
1
answer
174
views
Configure SSSD Package against Microsoft Patch (inforce LDAPS/tls)
I'm looking at altering some config of some Ubuntu machines that are using the SSSD package to bind to AD. As far as I understand, all ldap queries should be going through TSL from the config below.
...
0
votes
0
answers
2k
views
How to use OpenConnect without blocking port 443?
I've migrated a Windows 10 machine to Ubuntu.
On Windows 10 I connected to a Cisco VPN through the Cisco AnyConnect client. It worked fine and allowed me to use port 443 while connected to the VPN (...
0
votes
1
answer
2k
views
CA root install issue on Ubuntu 16.04 LTS Server
I am setting up nginx reverse proxy on Ubuntu 16.04 LTS Server for Web-Server.
There will three different Services running on Ubuntu. Services will communicate each other using API calls. Similarly ...
0
votes
1
answer
1k
views
StartTLS fail with LDAP mechanism in saslauthd
I upgraded my mail server from Ubuntu 14.04 to 16.04 and now StartTLS does not work anymore with LDAP mechanism in saslauthd.
% sudo testsaslauthd -u clement -p bar
0: NO "authentication failed"
...
0
votes
1
answer
930
views
How is the Ubuntu root CA store created?
I know that the root store is located at /etc/ssl/certs and can be updated with update-ca-certificates. But where does it get it's certificates from? And how do browsers interact with it which have ...
0
votes
2
answers
148
views
Folder/Directory Navigation (Ubuntu 14.04 TLS)
I'm completely new to Linux/Ubuntu so apologies for the rather elementary question.
Using the "save as" command, I'm trying to save e-mails (from Thunderbird) and documents (from Libre Office) to my ...
0
votes
2
answers
3k
views
Sendmail down on Ubuntu 12.04, SSL problem?
I posted this on askubuntu.com yesterday but haven't gotten any responses.
We run a production Ubuntu server that serves thousands of people per day. Sendmail is currently not working on this server. ...
0
votes
2
answers
3k
views
Uncomplete install of POCO C++ libraries
I recently started to use POCO C++ libraries to create a simple mail client and I needed to use SecureSMTPClientSession class, but compiler reports
Poco/Net/SecureSMTPClientSession.h: No such file ...
0
votes
1
answer
2k
views
Problem in openldap with TLS configuration
I configured openldap with TLS, but when I tried to test it with following command, I receieve the error message:
$ openssl s_client -connect localhost:389 -showcerts
CONNECTED(00000005)
...
-1
votes
1
answer
474
views
Samba ad port 636 and 3269 disable tls 1.0 and 1.1
Samba ad port 636 and port 3269 by default enabled with tls 1.0 and tls 1.1.
Need help to disable tls 1.0 and tls 1.1, keep only 1.2
-1
votes
2
answers
2k
views
Not able to enable ktls while build OpenSSL3.0.0 on Ubuntu 16.04.1
I am trying to build Openssl-3.0.0 from master branch to use ktls feature on Ubuntu 16, but the build is skipping the ktls feature
even though i am using Ubuntu 16.04.1 (Kernel version: 4.15) ...