Questions tagged [openssl]
OpenSSL is a software library for applications that provide secure communications over computer networks.
1,644 questions
0 votes
0 answers
109 views
openssl x509 req: getting subject alternate name to carry from the csr file to the resulting certificate file
We have previously been signing certificate requests from .csr files using xca; however xca has broken down, reason unknown. Bug filed: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1120348 In the ...
- 452
2 votes
0 answers
261 views
Apache 2.4.25 stopped working from one day to another on debian9 [closed]
I am running 2 forums and since the forum software does not support any current PHP and MySsql/Mariadb versions from Debian 10 forward, I am forced to stay on Debian 9. Either that or no forums ...
- 21
1 vote
1 answer
137 views
Rancher pod fails to download docker-machine-driver-harvester
Ahoy everyone, I have a rancher deployment (v2.11.1) that I have connected to a Harvester node (v1.4.2) that I am trying to use the cluster deployment chart here to deploy clusters as code in ...
- 21
0 votes
1 answer
370 views
Lookup server SSL certificate via openssl s_client behind corporate proxy
I need to lookup a public servers SSL certificate by using OpenSSL and through a corporate proxy. With the following request openssl s_client -showcerts -connect my.server.com:443 -proxy_user <USER&...
- 101
2 votes
1 answer
209 views
rsyslog server GnuTLS error -54
Running rsyslog v8.2102.0-15.el8_10.1 on RHEL 8.10 (and 9.6). It logs these messages about clients sending syslog via TLS: Jul 17 13:06:38 rsyslog-server rsyslogd[1782767]: unexpected GnuTLS error -54 ...
- 21
1 vote
1 answer
187 views
SSH items with kex algorithms mismatch
Zabbix 7.2 OS Oracle Linux 9.6 I have a legacy switch that is monitored by a Zabbix Proxy and has SSH items configured. However, the SSH items are unable to reach the host due to a mismatch in Kex ...
- 143
0 votes
0 answers
45 views
Freeradius doesn't recognise sub-type for EAP method ttls
When deploying a well tested radius server from my workstation to a server, I stumbled across this error: $ sudo freeradius -X […]# everything works fine here freeradius/3.0/mods-enabled/eap[14]: No ...
- 1
2 votes
0 answers
237 views
How to properly upgrading openssl with Homebrew?
I just resolved a dependency issue in some software installed via Homebrew so the outdated openssl 1.1 can finally be removed. I did that with brew uninstall [email protected] and it warned brew uninstall ...
- 125
0 votes
1 answer
297 views
Configure MariaDB with Let's Encrypt SSL Certificate
I'm trying to setup SSL for a new MariaDB instance. I have a Let's Encrypt certificate, and I need to use that and would rather not request a new certificate or use a self-signed cert. I know that Let'...
0 votes
0 answers
986 views
certificate verify failed as EE certificate key too weak during https do_handshake call
Our "service" has just switched to Centos 9 from Centos 8, where by default, on Centos 9, it is of python 3.9.21, and openssl of 3.2.1 version. Once I have the service started and to try ...
- 101
0 votes
1 answer
115 views
How to ease the process of SSL certificate renewal for customers? [closed]
We are using CloudFlare with Universal SSL that does all the SSL renewal job for us, with a validity period of 90 days as recommended, and a 15 days "overlap" window. Afaik, only one ...
- 143
0 votes
0 answers
137 views
Change TLS version apache server
I need to use a payment service for my project, so I created an API with the GET method. I sent it to the provider, and it told me everything worked. However, our system can't work with this API ...
- 1
0 votes
1 answer
479 views
TLS handshake fails for some websites
Some websites fail HTTP requests from my VPS. For example, https://openvpn.net fails a request: root@vm3226933:~# curl -vvvv --head https://openvpn.net * Trying 104.19.190.106:443... * Connected to ...
- 3
0 votes
0 answers
140 views
SVN / SASL authentication error: failed to init cipher 'rc4'
im trying to update an old project via SVN and get this: SASL authentication error: SASL(-1): generic failure: internal error: failed to init cipher 'rc4' openssl tells me RC4 is disabled by default ...
- 1
0 votes
1 answer
1k views
Windows Server 2022 Permission denied when submitting a certificate request
We are using Windows to host our internal CA server for all internal web server, and other TLS secured services, certificates. Before the upgrade to server 2022, from 2016 if I remember correctly, I ...
- 360