SSL questions refer to either the Secure Sockets Layer communications protocol or interacting with signed certificates issued by trusted signing authorities.
Questions tagged [ssl]
666 questions
158
votes
4 answers
How do I patch/workaround SSLv3 POODLE vulnerability (CVE-2014-3566)?
After the BEAST attack and Heartbleed bug, now I've heard about a new vulnerability in SSL/TLS called POODLE. How do I protect myself against being exploited?
Are only servers or also clients affected?
Is this OpenSSL/GnuTLS specific?
What kind of…
gertvdijk
- 69,427
114
votes
19 answers
apt-get update failed because certificate verification failed because handshake failed on nodesource
Running sudo apt-get update on my AWS EC2 Ubuntu 18.04.01 LTS instance fails:
Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown
when trying to access the deb.nodesource.com/node_10.x bionic…
Joe
- 1,279
102
votes
2 answers
What is the purpose of the ssl-cert-snakeoil.key
Right now I installed ubuntu 12.04.3 server which I want to access via ssh. For that reason I created a private key which I moved to
/etc/ssl/private/
I'm just wondering why there already is private key ssl-cert-snakeoil.key in there. Where is…
My-Name-Is
- 1,137
76
votes
3 answers
How do I create a self-signed SSL certificate?
I've set up SSL on my webserver, now I need two files:
a certificate
a certificate Key
How do I create a self-signed certificate for testing purposes?
Stefano Palazzo
- 88,393
72
votes
5 answers
Ubuntu 20.04 - how to set lower SSL security level?
I'd like to ask if there's a way to lower SSL security level to 1 on Ubuntu 20.04, since I'm receiving:
141A318A:SSL routines:tls_process_ske_dhe:dh key too small
when trying to curl the website.
Curl works if I add --ciphers 'DEFAULT:!DH'…
39
votes
6 answers
How to verify the SSL fingerprint by command line? (wget, curl, ...)
Using a command line website downloader, such as wget, curl or any other one... In a script...
I have the SHA-1 and the SHA-256 certficate fingerprint of a website. Due to security concerns (1) (2), I don't want to use the public SSL certificate…
26
votes
8 answers
Force Pidgin to acept an invalid certificate
I am getting the following error on Pidgin 2.10.10-3.fc20 (libpurple 2.10.10).
How can I force it to accept an invalid certificate?
(According to this bug report it should be capable).
Here's what I have done:
visited the domain on Firefox, and…
That Brazilian Guy
- 4,490
26
votes
7 answers
Enabling SSL in MySQL
I'm running Ubuntu Server 12.04, and I want to enable SSL connections to MySQL.
I've generated the following keys/certs files with OpenSSL:
ca-cert.pem
server-cert.pem
server-key.pem
I stored these at /etc/mysql, then added added the following…
visitor93746
- 361
25
votes
3 answers
Where are PEM files stored for validating SSL certificates?
I'm writing a SOAP client application on Ubuntu using OpenSSL and C++. I am having trouble getting my code to validate the server certificate even though I know has a valid certificate.
Just to make sure I would like to check that it's the case and…
mathematician1975
- 2,321
24
votes
7 answers
Python HTTPS requests (urllib2) to some sites fail on Ubuntu 12.04 without proxy
I have an little app I wrote in Python and it used to work... until yesterday, when it suddenly started giving me an error in a HTTPS connection. I don't remember if there was an update, but both Python 2.7.3rc2 and Python 3.2 are failing just the…
Pablo
- 481
21
votes
3 answers
How can I disable and enable SSL in Apache (without a command if possible)?
I have Apache running in Ubuntu 14.04. How do I disable and enable the SSL mode without a command? What about with a command?
stevGates
- 349
18
votes
1 answer
Are the DigiNotar certificates supposed to be present in Firefox in a clean install?
Just installed Ubuntu 18.04 LTS, and noticed in Mozilla Firefox 70.0.1 (64-bit), two strange certificates that rang a bell for some reason. Not wanting to trust anywhere on the web for information in case I am being MiTM attacked, can anyone confirm…
Thomas L
- 183
- 1
- 5
17
votes
2 answers
Update-ca-certificates: 0 added; 0 removed - how come?
I am following the instructions here to install a root certificate for Charles Proxy.
I followed every step exactly as it was outlined, and made sure to set the permissions correctly. However, when I run sudo update-ca-certificates, it…
Jon
- 335
17
votes
1 answer
Can I run nginx and apache at the same time?
Here is my scenario:
Apache is running perfectly with SSL enabled and certs installed on port 443.
I would like to install nginx as well on the same machine. Both as a functional reverse proxy and a server on port 81 or 8443 (using the same cert…
Sands
- 171
- 1
- 1
- 3
17
votes
1 answer
Open source FortiGate (Forti SSL VPN) client support in Ubuntu
Does anyone work on adding support for open source FortiGate SSL VPN NetworkManager client to Ubuntu?
According to this blog post there is initial support for open source FortiGate client.
Frontend: network-manager-fortisslvpn.
Backend:…
Venca B Spam
- 299