Questions tagged [tls1.3]
TLS (Transport Layer Security) version 1.3 is a security protocol. It is an upgrade of TLS version 1.2, and provides improvements in speed, efficiency, security and privacy.
261
questions
0
votes
0
answers
37
views
How to set specific cipher suites in XAMPP for localhost?
Before starting this project, I have never directly worked with API requests. I have learned a lot and I am able to successfully get valid responses from the FedEx and USPS tracking APIs. However, I ...
1
vote
0
answers
41
views
Trying to make haskell warp-tls authenticate the client
I'm trying to make a https server that authenticates the client but it serves curl --verbose --cacert ca.crt https://localhost:3443 successfully. I think it should reject for lack of client creds and ...
-1
votes
0
answers
55
views
System.ComponentModel.Win32Exception (0x80004005): The client and server cannot communicate, because they do not possess a common algorithm
TCP Socket with TLS1.3 in C#
Server:
CType(_stream, SslStream).AuthenticateAsServer(certificate, False, System.Security.Authentication.SslProtocols.Tls13, False)
Client:
CType(_stream, SslStream)....
1
vote
0
answers
32
views
Can I change client certificate in the browser without a restart?
I am working on using client-side certificates MTLS certificates in FireFox/Chrome and that works fine.
But, is there any way I can get the client certificate selector to open so that I can change the ...
0
votes
1
answer
38
views
Bad record MAC on TLS v1.3 when using early_data
I have a project to complete in Ruby involving TLS v.1.3. I want to optimize requests and thus use "early data". I'm using a package called tttls1.3 and the client works until I send early ...
0
votes
0
answers
20
views
How to verify a Postgres database is SSL enabled?
I am trying to setup SSL on a postgres database instance. Tested using self-signed certificates. Here are the steps which I followed:
openssl genrsa -out rootCA.key 2048
openssl req -x509 -new -key ...
0
votes
0
answers
21
views
TLS versions supported by different version of Oracle Db
I am trying to find the TLS version supported by different Oracle DB, but not getting consolidated information. Below is the chart of my findings:
Any idea, where I will get this info?
1
vote
0
answers
35
views
Jlinked jre built from modules in corretto 11 jdk result in "Connection Reset" when attempting HttpUrlConnection [duplicate]
This might be a bug for corretto 11. But before i file one of those i'm hoping someone can peer review my findings. Downloading the most recent corretto 11 jdk for windows: https://corretto.aws/...
0
votes
0
answers
74
views
Getting "Caught Error Domain NSURLErrorDomain Code=-1200 "An SSL error has occurred and a secure connection to the server cannot be made"?
We've enabled ATS restrictions in our app, and everything works fine, except sometimes, randomly, the CDN download resource fails.
In most cases, it happens to users who on iOS 14.* and WiFI (VPN ...
0
votes
1
answer
25
views
unable to upgrade TLS protocol to its latest TLSv1.3 in nginx server
I want to upgrade my TLS protocol to TLSv1.3 for which the requirement is nginx version should be above 1.15 and OpenSSL version is 1.1.1,
so I have upgraded my OpenSSL and Nginx to the latest, and it ...
1
vote
0
answers
38
views
Can't connect to my mongodb localhost after using SSL/TLS certificates
Each time I try connecting to my localhost server using SSL/TLS certificate I get an error which says, connection attempt failed: HostUnreachable
Things I've tried
I've tried restarting my system
I'...
0
votes
1
answer
94
views
Subject doesn't qualify for public certification SearXNG
I have been following a tutorial by NetworkChuck setting up SearXNG on Linode so i can "ditch Google". I have followed all the instructions and yet i keep getting this error:
terminal
This ...
0
votes
0
answers
23
views
How can vault be integrated in the backend with Java and TLS authentication?
Someone knows or have applied TLS to the authentication in the backend with java using vault to retrieve credentials like a JSON object? I have this problem to integrate vault with TLS in the backend ...
0
votes
0
answers
20
views
Apply different TLS version in different servers in Nginx?
I try to apply different TLS version to different servers like this:
http {
...
server {
// use TLSv1.2 only
ssl_protocols TLSv1.2
server_name a.com;
...
}
...
0
votes
0
answers
71
views
How to fix TLS/SSL vulnerabilities in windows server?
Currently on our windows server (Windows 2016 R2) , we have following cipher suites installed:-
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
...
0
votes
0
answers
31
views
troubleshoot sporadic SSL "bad record MAC" exception in influxdb
We recently updated our influxdb configuration (to reduce SWEET32 issues) as follows:
[http]
auth-enabled = true
pprof-enabled = false
flux-enabled = true
https-enabled = true
https-...
-2
votes
1
answer
41
views
How to use scapy to decrypt TLS traffic and print the http headers
I want to decrypt TLS traffic in a pcap file using scapy by providing certificate and private key.
But i dont have a clue how to do it without using wireshark or tshark
Could someone give me some ...
0
votes
1
answer
72
views
SChannel TLS 1.3 mystery additional message
A while ago I implemented a client and server using SChannel to encrypt communication. Recently I made the required switch from the SCHANNEL_CRED struct to the SCH_CREDENTIALS one so that TLS 1.3 ...
1
vote
1
answer
194
views
TLSv1.3 - java.io.EOFException: SSL peer shut down incorrectly
I am trying to connect to a response from a external site
at java.lang.Thread.run(Thread.java:748)
Caused by: java.io.EOFException: SSL peer shut down incorrectly
at sun.security.ssl....
0
votes
1
answer
49
views
Tls 1.3 client hello structure. in C supported on Linux Userspace. Can anyone please tell what struct should look like to represent client hello
I like to understand tls by code. tls 1.3 and cipher suits so I started and at first I found in tls 1.3 handshake is client initiate the handshake with the server with hello message. On the ...
1
vote
0
answers
60
views
Disabling Bouncy Castle
The application is currently running in java version build 1.7.0_79-b15 and the third party application upgraded its TLS to 1.3 version. We can't easily upgrade java version that will support TLS 1.3 ...
0
votes
0
answers
23
views
How to reuse session and the port number in TCP-TLS communication using Cloudbees- TcpSyslogMessageSender
We have a syslog client in our application and it is implemented using Cloudbees- TcpSyslogMessageSender. We are creating the context and connHow to reuse the session and port number in TCP-TLS ...
0
votes
1
answer
73
views
Does SChannel support key update requests for TLS v1.3?
How can I request a key update on a TLS v1.3 connection implemented with Win32's SChannel?
In other words, what is the Win32 function that provides similar functionality as SSL_key_update() in OpenSSL?...
0
votes
0
answers
53
views
How get session key from ssl session
I created client and server program to exchange the data.
Client and server uses tls to pass the message securely.
Used openssl to make the connection between server and client.
Now i have the ssl ...
0
votes
0
answers
62
views
how i can enable TLS before calling .exe inside PS1 file
I have a ps1 file which calls a .exe, as follow:-
Show-Message -Message "Step 1a: Create groups and adding users to it"
& "$HelperPath\Microsoft.Legal.MatterCenter.CreateGroups.exe&...
0
votes
0
answers
72
views
setting TLS ciphers suit for htttp client
const ciphers = [
'TLS_CHACHA20_POLY1305_SHA256',
'TLS_AES_128_GCM_SHA256',
'TLS_AES_256_GCM_SHA384',
'TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256' ];
const agent = new Agent({ ciphers: ciphers.join(...
0
votes
0
answers
32
views
How to programmatically detect whether TLS 1.3 is supported on the current OS
I am creating custom UI for enabling/disabling the support for TLS 1.0/1.1/1.2/1.3 on OS level (for Windows).
I need to determine whether the current OS supports the different versions of TLS. I've ...
0
votes
0
answers
210
views
TLS 1.3 for .NET 4.0 under Windows 7
Apologizes if this question is a bit ignorant. I'm trying to figure out a way to make a .NET 4.0 application running under Windows 7 to use TLS 1.3 when making HTTPS requests to the internet.
Context: ...
0
votes
1
answer
56
views
Java SSLServerSocket: Request client certificate allowing ANY client certificate
I followed these threads and others with similar examples:
How to create a secured TCP connection via TLS v.1.2 in Java
Accept server's self-signed ssl certificate in Java client
I've already ...
1
vote
1
answer
77
views
Http Over TLS Golang Not Receiving Headers
I am sending 'User-Agent Header' from my client but not receiving on server-side but when i use browser it works.
server code :
package main
import (
"crypto/tls"
"fmt"
&...
0
votes
0
answers
109
views
Create X509 certificate programmactically
I would like to create certificates programmatically instead with java keytool.
For example, this is how I create a server certificate and would like to translate it into Java code:
keytool -v \
...
0
votes
0
answers
26
views
Best Practices: How to help customers who must upgrade TLS in registry on Microsoft systems?
I am helping with development and support for customers who use software products from my employer aimed at Microsoft systems. These products include several client products that communicate with ...
0
votes
0
answers
21
views
how jdk11 supports/implements TLSv1.3?
I was reading online that jdk 11 supports tls v1.3, so I was wondering how under the table is this happening? is it that java does the implementation of tls1.3 like openssl does? or it uses something ...
0
votes
1
answer
58
views
configure psk_ke (PSK-only) mode in TLS1.3
I am using openssl 1.1.1 and trying to configure psk_ke (PSK-only) mode only in requests generated through s_client. In my requests, in client hello message, I am not able to suppress psk_dhk_ke mode,...
2
votes
0
answers
30
views
client-server different VM's
I need to create a client, and a server using Go; both reside on two different VM on the cloud. My question is, how do we make a request (say post) from client to server? I am not looking for a code, ...
0
votes
0
answers
31
views
Keycloak Prod mode env KEYCLOAK_ENABLE_TLS not picked up
Hello everyone I am attempting to run my bitnami/keycloak on production mode but as I turn on the KEYCLOAK_PRODUCTION=true the system says i need to turn on the TLS but even though I added the ...
0
votes
0
answers
22
views
Spring boot application for calling url and returning the exact response
I was wondering if there is any trustable source code available for launching a springboot project which gets a url and calls it and returns the response exactly as it is.
I am dealing with TLS v1.3 ...
0
votes
0
answers
38
views
Powershell Invoke-WebRequest could not create ssl/tls secure channel when tls is upgrade to tls1.3 [duplicate]
there is a powershell script running as a remote process on uDeploy, below is the script:
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
Invoke-WebRequest -Uri https://...
0
votes
0
answers
31
views
Sockets Python | chatting server multiple clients
i am trying to implement a TLS secured socket server in python, and i want multiple clients to connect to the server and talk to each other,
what i would like to do is that each client connecting can ...
0
votes
0
answers
67
views
How do I enable TLSv1.3 in nginx (server is setup using laravel forge)
How do I enable TLSv1.3 in nginx (server is setup using laravel forge)
In /etc/nginx/nginx.conf I have ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; and nginx is restarted
And in the vhost of the ...
0
votes
1
answer
49
views
How to download a file from TLS1.3 enabled web site on Windows 10 using webclient or httpclient in C#
I am trying to download a file from UK government official site using WebClient and HttpClient in C#
Following is the site which i guess is using TLS1.3
https://www.gov.uk/government/publications/the-...
1
vote
1
answer
113
views
X509TrustManager checkServerTrusted with TLSv1.3
I'm making a TLS client in java and using the x509TrustManager checkServerTrusted method to validate if server certificates are trusted.
void checkServerTrusted(X509Certificate[] chain,
...
0
votes
0
answers
43
views
How to configure Two Way TLS Java App in a container?
I have two .cer files (one for client and other from server). I need to configure a docker container running a java spring boot app.
I'm a little confused with identity.jks, truststore.jks, client.cer ...
0
votes
0
answers
134
views
Ruby 2.7 and TLS 1.3 with RestClient not working
I'm having problems trying to request an endpoint that is using TLS 1.3
require 'base64'
require 'openssl'
require 'rest-client'
auth_payload = {
grant_type: 'client_credentials',
scope: '...
0
votes
1
answer
185
views
"System.ComponentModel.Win32Exception (0x80090308): The token supplied to the function is invalid" when TLS13 is enabled
After adding the below registry key to enable TLS1.3 on Windows Server 2022
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client]
"...
0
votes
0
answers
98
views
How to Configure TLS Certs for Signing Container Images With Cosign
I'm trying to use cosign to sign container images in a local docker registry. However, when I try I keep getting the error remote error: tls: bad certificate. I'm fairly sure this is because cosign ...
1
vote
0
answers
58
views
GoLang gRPC client on raspberryPI (armv7l) fails to handshake TLS 1.3
I have a gRPC client written in GoLang that I'm running on raspberryPI 4 (armv7l).
When I run the client on my MacBook it connects to the server and everything is fine.
When I run the same client on ...
0
votes
0
answers
79
views
Any idea whether TLS 1.3 works with .NET framework 4.7.1?
Asking here to see whether .NET Framework 4.8 really needed for TLS 1.3 as the documentation is creating confusion. My existing app using .NET 4.7.1.
-1
votes
1
answer
74
views
How can I add "set_read_timeout" from TcpStream to TlsStream?
I'm new to Rust and I love the language more and more. I downloaded crate "native-tls" and it has the TlsStream element which replaces TcpStream but it doesn't have the "...
0
votes
0
answers
74
views
Confirming I am using TLSv1.3
My code works, yet I have a question.
According to my code my client is proposing to the server to use TLSv1.3. Since the connection is established, I believe this is the case. However, I want to see ...