Skip to main content

Questions tagged [tls]

SSL (Secure Sockets Layer) and/or TLS (Transport Layer Security)

Filter by
Sorted by
Tagged with
1 vote
1 answer
23 views

server negotiating TLS1.3 but sent TLS1.2 ciphersuite

sent a client hello indicating TLS1.3 support, and if it contains list of all cipher suites that supports TLS1.3,TLS1.2 and TLS1.1 --> and consider server negotiated TLS1.3 indicating serverHello....
12 votes
4 answers
4k views

HTTP: how likely are you to be compromised by using it just once?

My question is, if somebody, today, in 2024, sent a password or a credit card number to some random HTTP website just once, how likely is that password or credit card number to be found on a hacker ...
1 vote
1 answer
35 views

In TLS1.3 can the client hello have the extensions which were not sent as part of HelloRetryRequest

I am having a Handshake session of PSK_only mode in TLS1.3 , where I use PSK's established out of band. consider, client Hello is sent with the extensions of supported_versions, PreSharedKey, ...
3 votes
2 answers
890 views

Securing HTTP File Transfer over local network

My intention is to transfer files between a computer and a cell phone in the same network. I have created a system consisting of two apps for this purpose (everyone should be able to use the apps): ...
0 votes
1 answer
1k views

Creating Client certificate for mutual TLS authentication

I have an application that is installed at customer premises. This sometimes has to communicates with their server(PACS server), and the details are configured in our application. I have to enable TLS ...
0 votes
0 answers
22 views

Define DH parametes in python-mbedtls

I'm using python-mbedtls library - https://github.com/Synss/python-mbedtls/tree/master my goal is to create handshake with different cipher suites, I've managed to do so with the given server and ...
1 vote
1 answer
772 views

HAProxy Trust only specific client certs for mutual

I am using HAProxy to perform Mutual TLS termination for my API. HAProxy has Mutual TLS enabled with "verify required" and a cert-auth file to restrict access to the Apache service that ...
2 votes
1 answer
52 views

Why is the browser being prompted for a client certificate without a Certificate Request in the handshake?

When I visit a particular site, foobar.com, I am being prompted for a client certificate, which is unexpected for this site. I assumed there would be a Certificate Request message in the HTTPS ...
5 votes
1 answer
123 views

Do browsers like FireFox, Chrome, Opera, and Tor store TLS 1.3 session tickets on the disk?

Do browsers save TLS 1.3 session tickets on the disk to resume a TLS session after the browser process has been killed and restarted? Are there any glaring security risks of caching TLS 1.3 session ...
0 votes
1 answer
41 views

Anlyzing PSK-TLS handshake (Handshake Finished record) in Wireshark

I am doing testing with some ethernet device, for which I use an own TLS implementation (using OpenSSL for the actual cryptographic functions). There are pre shared keys used. When I am connecting to ...
1 vote
2 answers
96 views

Web Browser and server using ECDHE_RSA cypher suite, then what is the use of X.509 certificate public key for?

User Crover has given a very great explanation for this question: RSA or ECDHE for x.509 certificates-what does each do? I have one question to Crover and/or any other member. What I understand from ...
1 vote
1 answer
362 views

Encryption with Tomcat & Nginx reverse proxy

I'm working with Tomcat and nginx as a reverse proxy and I'm trying to have a better understanding of how the traffic flows and of what the security issues are. Picture this as what I have in mind: ...
114 votes
11 answers
82k views

Should I change the private key when renewing a certificate?

My security department insists that I (the system administrator) make a new private key when I want a SSL certificate renewed for our web servers. They claim it's best practice, but my googling ...
0 votes
1 answer
53 views

export burp certificate to wireshark for inspection

I am trying to figure out if i can take the burpsuite certificate and export it to wireshark to be able to inspect the traffic going through it. My main goal here is to test a website i own to see ...
9 votes
4 answers
16k views

A security warning when accessing a site through IP

When I go to https://www.schneier.com/, everything works normal. As soon as I access the same site using its IP address (66.33.204.254), I get a security warning (even if I write something like https:/...
1 vote
1 answer
954 views

Decrypt TLS1.2 Websocket traffic

We want to decrypt websocket traffic to analyse the used protocol. The traffic is between a pc-system (windows) and an embedded system. All certificates are available with private keys and everything ...
1 vote
1 answer
51 views

TLS-1.3 gnutls_aead_cipher_init from SSLKEYLOGFILE secret

I have a pcapng file with its corresponding SSLKEYLOGFILE. This file contains valid (random/secret) couples. I know my SSLKEYLOGFILE is valid because I can decrypt packets with Wireshark. I'm using ...
1 vote
1 answer
40 views

What are the risk of using http when capturing open events on an email

I want to configure a custom domain for open and click tracking in Amazon Simple Email Service (SES). However, I've encountered a limitation where Amazon SES only allows HTTPS domains for tracking ...
0 votes
0 answers
25 views

Why cannot we use TLS in the data link layer instead of EAPTLS? [duplicate]

since EAPTLS also makes use of the TLS protocol features to provide authentication why cannot we just make use of TLS in datalink layer. What is the exact difference between them.
0 votes
0 answers
7 views

Disable TLSv1.3 in apache2 [migrated]

I would like to disable the use of TLSv1.3 in apache2 and only use TLSv1.2 I tried a few changes in the ssl.conf file, like: SSLProtocol -all +TLSv1.2 SSLProtocol all -TLSv1.3 SSLProtocol TLSv1.2 ...
0 votes
1 answer
55 views

mTLS set up - Does it require any offline certificates exchange?

My company is exposing a few APIs to one of our partner systems (external). We're looking at mTLS authentication here than any credentials based Auth schemes. My understanding is, My system (server) ...
1 vote
0 answers
64 views

Is it safe to use a laptop on a public WiFi with VPN? [duplicate]

Im in a situation where Im moving between apartments and need to live at an extended stay hotel for a week or two. The hotel does have free WiFi but it is public. If I use my company’s VPN and visit ...
1 vote
0 answers
56 views

ECDSA certificates not impacted by Let’s Encrypt certificate chain change?

We received an email from Cloudflare about the upcoming Let’s Encrypt certificate chain change. At some point, it states that "Additionally, this change only impacts RSA certificates. It does not ...
1 vote
1 answer
48 views

Does the CORS asteriks / wildcard include both encrypted and unencrypted origins?

Does the CORS asteriks / wildcard (*) include both encrypted (https) and unencrypted origins (http)? And is the null origin (i.e., when a local file is doing a xmlhttprequest, or within an iframe ...
7 votes
8 answers
4k views

Does Self-signed certificate differ from CA from a security point of view?

I know that if I use self-signed cert, browsers will warn about it to the user, but I want to know that from security viewpoint is self-signed cert as secure as certificate authority(CA)?
0 votes
0 answers
32 views

how to alter a value in RMI TLS communication

I am pentesting a java thick client application, and the communication between client and server is RMI over TLS. On a certain button, there is an action triggered from the client to the server. In ...
4 votes
3 answers
391 views

How can you bind a public key to a certificate if the public key depends on the choice of algorithms?

Can the same public key be used with RSA, Elliptic Curve, or other asymmetric encryptions algorithms? If not, how is a public key bound to a X.509 Certificate? Presumably, you'd have to know the ...
0 votes
1 answer
69 views

How many ephemeral session keys made when loading web page

I'm trying to understand the concept of ephemeral session keys as it pertains to perfect forward secrecy. There's an example I wasn't sure if. Let's say I have a webpage served over TLS at the url ...
37 votes
4 answers
34k views

Is it possible to pass TCP handshake with spoofed IP address?

Little time ago, me and my friends argued if TCP handshake can be passed with a spoofed IP address. Assume I have a web server that allows only certain IP addresses. Can anyone connect that web ...
1 vote
1 answer
205 views

Using certificate-constrained access tokens created by private key used to authentication (with private_key_jwt)

I have a OIDC provider that can't use mutual TLS authentication due to mTLS problems like certificates expiration (what if client didn't rotate certificate and it's expired now? Client cant ...
0 votes
3 answers
122 views

Goal of CA is to allow clients ability to determine if TLS was tampered with while "in-transit"?

I believe my question will be a continuation of questions such as: What's the point of the CA? How does a digital certificate prove authenticity? In short, I still don't have a firm grasp on why a ...
3 votes
1 answer
407 views

Multiple certificate chains on a single server for TLS

Is it possible for a single server to use two different certificate chains for TLS? For instance, rootCA1, intermediateCert1, serverCert1, rootCA2, intermediateCert2, serverCert2. If this is possible, ...
1 vote
2 answers
519 views

TLS 1.0 Deprecation and Mitigation Tactics

With the deprecation of TLS 1.0 on the horizon, I'm curious how others are handling connectivity and mail delivery issues for dated client environments. Lets face it, there are more environments live ...
1 vote
2 answers
196 views

Evading authenticated diffie hellman with MITM

I understand that in a non-authenticated Diffie-Hellman setup, a man-in-the-middle attack can occur. Now i'm curious about the feasibility of the following scenario: Let's assume a situation where www....
2 votes
1 answer
49 views

SSL cert for mailserver, which domain? mail client refuses self-signed

I've got a mailserver and the hostname is mx.domain.com. Of course the server is configured to send emails to $mydomain and/or $myhostname.$mydomain in Postfix. Do I need to create the CSR/key for the ...
0 votes
0 answers
5k views

Couldn't validate TLS certificate - Nord VPN

I received this notification from Nord randomly. Should I be worried? Is there something I can do? Am I being hacked? P.S. clicked Don't trust EDIT: I tried connecting from mobile data and am ...
1 vote
1 answer
603 views

How secure is SSL private key in AWS ELB service?

We host a cluster of microservices on AWS. The cluster has a public-facing gateway that uses an Elastic Load Balancer to terminate SSL traffic. The certificate is issued by AWS Certificate Manager (...
1 vote
0 answers
38 views

3rd-Party CDN SSL Inspection for Financial/Banking API Traffics

We have 3rd-Party CDN in front of Financial/Banking APIs which involves sensitive data, login, access token, cookies, etc. We would like to leverage WAF and SSL Inspection capability of CDN. This ...
1 vote
1 answer
149 views

How does TLS-CRYPT-V2 work in OpenVPN?

I am configuring an OpenVPN server and I would like to use TLS-CRYPT-V2. For that, in the documentation, it is said that I have to create a TLS-CRYPT-V2 key for the server and one for each client, ...
3 votes
3 answers
655 views

Is it a good idea to reuse certificate issued by public CA for internal database client authentication?

Let's say we have: Publicly available HTTPS API (e.g. api.example.com). The web server that runs it uses a certificate from a publicly trusted CA (e.g. Let's Encrypt) with both server auth and client ...
0 votes
1 answer
48 views

Nexpose reporting ciphers not present in machine

Nexpose reports the following vulnerability: TLS/SSL Server Supports The Use of Static Key Ciphers. Negotiated with the following insecure cipher suites: TLS 1.2 ciphers: ...
6 votes
2 answers
3k views

Has anyone heard of cases where SSL Certificate insurance/warranty paid out?

Has anyone heard of any cases where SSL Certificate insurance - sometimes called "warranty" or "liability protection" has actually been paid out? Or is that just a marketing scam? ...
166 votes
10 answers
222k views

How do I run proper HTTPS on an Internal Network?

This question has been asked several times, I'll link a few: https://superuser.com/questions/791015/https-over-private-network https://stackoverflow.com/questions/616055/https-certificate-for-...
0 votes
1 answer
74 views

How to get debug output from `openssl s_server` when (PSK-only DTLS) handshake fails?

We have tested our DTLS client using the openssl s_server program from OpenSSL 3.2.1. The handshake failed because we used the wrong PSK on the client. To our surprise, the server neither responded ...
2 votes
2 answers
3k views

How to get the certificate of the Client

A client sends data to a server over an SSL-encrypted connection. I want to see the client certificates that are sent to the server. I got the server certificate with: openssl s_client -connect 192....
0 votes
0 answers
27 views

Does Vault (or basically any other system) require TLS when it only connects to a host on the LAN? [duplicate]

I'm trying to understand where TLS is required. I've heard that TLS encrypts data when a client communicates with a server through HTTP by verifying the server and passing encryption keys. This ...
1 vote
1 answer
230 views

What is the minimum TLS version for support of Ed25519 Keys?

I'm setting up a client TLS CA for authenticating requests over the internet to an AWS API Gateway endpoint. It supports TLS 1.2 but not TLS 1.3, at least from what I can tell. Is there a minimum ...
0 votes
1 answer
126 views

Certificate structure for accessing a local device from a web app

I have a pretty standard web app (react client, node server), https-enabled. I want to add the ability for the web app to access a device on the local LAN. The device has REST APIs and I can install ...
2 votes
1 answer
270 views

Benefits of certificate pinning to leaf with intermediate as a backup?

According to the OWASP Cheat Sheet on Certificate Pinning, their recommendation is to pin to the leaf certificate, but also pin to the intermediate CA as a backup. Any security measure is only as good ...
0 votes
0 answers
33 views

Is it possible to see HTTPS traffic without intercepting? (With a copy of the traffic) [duplicate]

I have a WAF solution that can work both inline and out-of-band. And we want to try the OOB option first. And possibly want to see HTTPS traffic as well. But the vendor says if we want to see the ...

1
2 3 4 5
117