Skip to main content

All Questions

Tagged with
1 vote
0 answers
125 views

Unable to cURL on some platforms, in particular DigitalOcean VPS

I am on Ubuntu 23.10 (GNU/Linux 6.5.0-27-generic x86_64) is not working, curl is 8.2.1 suspect is there is something on the machine. I have two Virtual Private Servers (VPS) based on Digital Ocean ...
Jason 'Slingshot' Miller's user avatar
0 votes
1 answer
2k views

How to disable old TLS versions in Windows?

Using Windows 11, no server or IIS, just want to disable old TLS versions of my personal computer so no connection over those versions can be made, even if that means some connections will fail. I ...
user avatar
10 votes
1 answer
10k views

In Wireshark where can I find the TLS Server's Certificate

I'm looking at a TLS v1.3 headers in Wireshark and I'm not sure where I would find the server certificate that is used to confirm that the server is who they claim to be. The Client Sends Hello then ...
masonCherry's user avatar
2 votes
0 answers
620 views

NGINX as TLS-transparent (secure TCP) and a TLS-terminating (TLS offload) reverse-proxy based on sub-domain name

I host a few services from my home network to the internet and I learned recently about reverse-proxy concepts using NGINX. Some of my services (like Home Assistant) have the built-in ability to ...
Greg G.'s user avatar
  • 81
1 vote
1 answer
993 views

Checkmate about TLS certificates on local networks, self-signed certificates and CA

I know barely anything regarding SSL and TLS certificates. Sorry about that. This is what my company asked me: They need to put a server on the local network that will be accessible through VPN to ...
Duck's user avatar
  • 1,777
1 vote
1 answer
4k views

Will Chrome fully remove TLS 1.0?

As of Chrome 84, support for TLS 1.0/1.1 has been "removed" although you can still bypass the warning: In the error message it states: The connection used to load this site used TLS 1.0 or ...
rink.attendant.6's user avatar
1 vote
1 answer
2k views

AuthorityKeyIdentifier missing from keypair generated with java keytool

Background: I'm trying to set up a QA/test environment for a system comprising (1) a web application configured for HTTPS connections, and (2) a Python-based client application running on a mobile ...
JDM's user avatar
  • 123
0 votes
1 answer
431 views

Accessing a HTTPS server using old ciphers

I was looking around the EWS of my HP printer and I accidentally set a old cipher and I can't access anymore, I'm always getting ERR_SSL_VERSION_OR_CIPHER_MISMATCH from chrome. Any browser settings I ...
Gabriel de Biasi's user avatar
0 votes
1 answer
33 views

SSL / TLS on EC2 load balancer - why does it work?

My boss says to get SSL / TLS working on EC2 servers, just put a load balancer in front of them that uses https. But I can still access the original servers with http. So is this really secure? Doesn'...
Alexander Mills's user avatar
0 votes
1 answer
3k views

Getting Jenkins to use TLS / SSL with Docker

I was looking at this wiki article: https://wiki.jenkins.io/pages/viewpage.action?pageId=135468777 it says to use these options: --httpPort=-1 (to stop Jenkins from listening over plain HTTP) --...
Alexander Mills's user avatar
2 votes
1 answer
2k views

How to serve devpi with https?

I have an out-of-the-box devpi-server running on http://. I need to get it to work on https:// instead. I already have the certificates for the domain. I followed the devpi documentation for nginx-...
Noam Musk's user avatar
1 vote
1 answer
270 views

What order are TLS/SSL certificate attributes checked for validity? Is there a standard?

Imagine an SSL certificate with the following parameters - we're going to concoct the worst imaginable cert by doing every possible thing wrong: Old, vulnerable cipher Vulnerable signature alrgorithm ...
Karu's user avatar
  • 4,772
0 votes
1 answer
60 views

HTTPS communication without requesting certificate

Is there a hack or the architecture of SSL/TLS allows communication with a Server without requesting it's certificate may be by pre downloading the certificate and installing it,The reason I'm asking ...
Kaleem Ullah's user avatar
1 vote
1 answer
2k views

curl HTTPS problems in debian 9

Recently I started to use Debian 9 (9.4, from Debian 8.x) and a script involving curl stopped working. I connect to internet through a squid proxy on localhost connected to a parent proxy. My ...
Yanko Hernández Álvarez's user avatar
0 votes
1 answer
188 views

Why are HTTPS connections not slow anymore?

When the web was young, HTTP connections were relatively fast, and HTTPS connections were painfully slow. In the last several years, the speed of HTTPS connections are often very similar to that of ...
End Antisemitic Hate's user avatar

15 30 50 per page