The tls tag has no wiki summary.
3
votes
2answers
113 views
How to globally configure secure clients using OpenSSL on Oracle Linux 5/RHEL 5?
My workplace recently patched one of our servers to address the POODLE vulnerability. Since then older Oracle Linux 5 clients (based on RHEL 5) can no longer securely connect to the server with any ...
1
vote
1answer
1k views
Disable SSLv3 In cURL?
I'm having a problem connecting to a website that is hosted with CloudFlare using cURL. When I try to connect to the website with HTTPS (using curl -v https://www.xxxxxx.com), it says:
* About to ...
1
vote
0answers
29 views
When would CUPS use TLS?
I'm running Debian Testing on amd64, with the apt-listbugs feature that tells me if bugs are present before upgrading.
Now the package libgnutls-deb0-28 has a serious bug to the effect that "CUPS ...
0
votes
0answers
15 views
Can Postfix inbound TLS (smtpd) use a policy map to not enforce TLS for some hosts?
I have a Postfix server running submission on port 587 with mandatory TLS and SASL authentication. I want to allow clients on localhost to connect without using TLS and without authenticating.
By ...
0
votes
1answer
19 views
TLS and Packet Filtering
I want to set up a client wit BSD packet filtering that only allows outgoing 443 connections. Would this do the trick in my pf.conf?
block out
block in
pass out on eth0 inet proto tcp from (eth0) ...
2
votes
1answer
112 views
Does fetchmail support SSL or TLS when using SMTP to forward email?
I am trying to forward emails that are fetched with fetchmail to another SMTP host, which enforces STARTTLS. I could not find a way to enable TLS in fetchmail. Is this possible at all? If so, how?
0
votes
1answer
133 views
phpldapadmin with STARTTLS
I'm trying to configure OpenLDAP on Ubuntu using the the Ubuntu server guide. I have enabled Start TLS with a certificate generated using my own CA certificate (since it is for internal use). I ...
1
vote
3answers
296 views
specify certificate of CA in Dovecot
In Postfix, I have specified my private key, my certificate, and the certificate of my CA
smtpd_tls_CAfile = /etc/ssl/cacert.pem
smtpd_tls_key_file = /etc/ssl/server.key
smtpd_tls_cert_file = ...
1
vote
1answer
107 views
How to turn off STARTTLS for internal relaying of emails?
I read with interest from sendmail guide that it is possible to disable TLS. I tried doing so for internal mails by adding the following lines in /etc/mail/access:
Try_TLS:my.server NO
...
1
vote
0answers
81 views
Please help diagnose very slow Remmina session for VirtualBox VM
I'm using Remmina 0.9.99.1 with CrunchBang VMs on a remote server (VirtualBox 4.3.4 on Debian 7.2.0 x64). I'm using RDP with TLS security, and connect through a UDP-mode VPN.
With freshly-installed ...
0
votes
2answers
115 views
Trying to use TLS SMTP against Exim, getting Security Error back; what's wrong?
OS: FreeBSD9 64 Bit
MTA: EXIM4 with TLS with Self Signed Certificate.
I am using
telnet myserver.com 25
EHLO [email protected]
STARTTLS
It says
TLS go ahead
And then I issue
MSG FROM: ...
2
votes
3answers
588 views
How to record an interactice socat TCP/TLS session?
Socat is great for interactively testing line based human readable protocols like HTTP or IMAP.
For example:
$ socat -d -d READLINE,history=$HOME/s.hist openssl:host:port,crnl,cafile=some.ca
For ...
1
vote
2answers
625 views
Create SSL certificate - Silent [closed]
I want to create a SSL certificate without get prompt for the data.
The normal way to create the certificate would be:
openssl req -x509 -nodes -days 7300 -newkey rsa:2048 -keyout ...
2
votes
2answers
553 views
WeeChat decryption fails while reading from data socket
I'm using WeeChat for quite a while on different machines now. All instances are using the same settings over and over again. When I connect, everything is fine, like this output from WeeChat, just ...
3
votes
1answer
5k views
How do I use implicit FTP over TLS
using any FTP client (I'm on Ubuntu 12.04 and tried using lftp), I want to be able to make an implicit TLS connection on a FTP server, but I can't quite manage to successfully connect(All I get is : ...
3
votes
2answers
4k views
How to make ldapsearch working on SLES over tls using certificate?
We need to connect our php script to LDAP over tls using a certificate. LDAP connection works nicely without tls. More details here ...
2
votes
1answer
2k views
mutt SMTP TLS error sending mail
When I try to send a mail, I get the following error:
gnutls_handshake: An unexpected TLS packet was received.
This is my .muttrc (myname, myaddress and mymail are placeholders):
# Automatically ...
1
vote
1answer
259 views
Sendmail with TLS support changes FROM: address
I have multiple domains on one server and when sending email to
server, which supports TLS, server changes FROM field to default
domain ($j).
What should i do (in .mc level please) to remain primary ...
1
vote
1answer
607 views
How to display server's TLS certicicate details in terminal?
Having TLS certificate in local file, I can display its details using syntax like:
openssl x509 -text -noout -in cert_filename
Is there any way to display remote SMTP/POP3/HTTP server's TLS ...
5
votes
1answer
818 views
TLS over unix pipe
Can I use TLS/SSL over Unix pipe with Unix command line?
I want the equivalent of
$ mkfifo /tmp/spipe
$ echo a|openssl s_server -acceptFifo /tmp/spipe &
[1] 25563
$ openssl s_client ...