Skip to main content

Questions tagged [tls]

SSL (Secure Sockets Layer) and/or TLS (Transport Layer Security)

390 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
7 votes
0 answers
6k views

Running openssl s_client with an aes encrypted key fails

I'm trying to verify a 2-way SSL connection using the openssl s_client command openssl s_client -connect localhost:8883 -CAfile ca.pem -cert client.crt -key client.key The openssl s_client fails ...
ddewaele's user avatar
  • 221
7 votes
1 answer
593 views

TLS connection to untrusted server - client reaction for dropping connection standardized?

I played around with a man-in-the-middle proxy tool and connected different smart phones to it. As the proxy uses a self signed certificate the tested smartphone apps did not accept the presented ...
Robert's user avatar
  • 1,461
6 votes
0 answers
602 views

Why are banks largely absent from the HSTS preload list?

There seems to be widespread support for the idea that election-related websites, of all things, should be resistant to man-in-the-middle attacks. The secret ballot makes detecting and recovering from ...
prhymethyme's user avatar
6 votes
0 answers
6k views

How does TLS 1.3 break inspection?

The latest research seems to indicate that TLS 1.3 completely breaks the MITM/proxy model of many current security tools. I don't fully understand how it does that and if there are ways around this. ...
RussM's user avatar
  • 61
6 votes
0 answers
592 views

How does Chrome distrust Symantec Certificates?

Sometime back Google Chrome had announced plans to distrust Symantec certificates. I am trying to figure out how this is done for a POC. When I visit chase.com on Google Chrome, I get the following ...
Krishnaraj's user avatar
5 votes
1 answer
417 views

Does HTTP/3 necessitate additional - beyond HTTP/2 via TLS1.3 - restrictions on client authentication (mTLS)?

A recent Nginx release allows me to set listen 443 quic; to enable HTTP/3. Neat. I had been using HTTP/2 with TLS1.3 before, so I did not expect that change much, just optimize round trips with ...
anx's user avatar
  • 370
5 votes
0 answers
594 views

Should I force Thunderbird to avoid RFC5746 and CVE-2009-3555 security bugs?

I see that the latest version of Thunderbird (38.0.1) still has the defaults set to ignore the error. Is this a big problem? Should I change the defaults to enforce greater security? Here is ...
Chloe's user avatar
  • 1,758
5 votes
1 answer
637 views

Should I trash my router if it still runs OpenSSL 0.9.8p and OpenVPN 2.2.2 in 2017?

I have the Easybox 904 xDSL router from Vodafone (Germany) running the latest firmware 03.17.01.17. I wanted to upgrade the firmware but found out that the latest version is from 2015 - no updates ...
lampshade's user avatar
  • 151
4 votes
0 answers
438 views

Create self-signed ssl certificate that can't sign other certificates

I have a LAN HTTPS server that I want to give an SSL certificate to. Since it's local-only, a self-signed certificate is sufficient for me. I have previously given it a self-signed root certificate, ...
arcus_mannen's user avatar
4 votes
1 answer
1k views

Using NameConstrains in a CA certificate

I am trying to do something similar to what has been pointed out in this nice answer by Jonathon Reinhart. I have a CA certificate with Name Constrains (RFC): Permitted [1]Subtrees (0..0): ...
user1156544's user avatar
4 votes
0 answers
3k views

Java Updates Restrict Unsafe SSL Renegotiation With Active Directory Servers

We have two active directory (AD) hosts, ead01.domain.com and ead02.domain.com; we also have a corresponding service domain, at eadauth.domain.com which round-robins between these AD hosts (via DNS). ...
KM.'s user avatar
  • 161
4 votes
0 answers
1k views

Safe communication via rest api between two known servers

I'm using Kinvey as backend but because it doesn't provide the ability to run custom code I have set up another server. So basically when x happens on Kinvey server, I send a call to my rest api on ...
Captain Obvious's user avatar
4 votes
1 answer
11k views

Why did Chrome show my connection to Youtube as not secure?

I was browsing on Youtube a while ago, when I noticed that Chrome showed it as an insecure connection even though it was over HTTPS. I'm using Ghostery and Adblock to block trackers but nothing more, ...
sshcarex's user avatar
4 votes
1 answer
8k views

Why does Chrome warn about "Obsolete Connection Settings" for key exchange?

What do I have to change so Google Chrome won't say that I am using an obsolete key exchange? Obsolete Connection Settings The connection to this site uses a strong protocol (TLS 1.2), an obsolete ...
EasyPeasy's user avatar
4 votes
1 answer
199 views

MITM or Something Else?

Problem: When a given set of user devices (tablets/laptops) downloads files from a certain server from outside the host server's country, downloads are sporadically and routinely interrupted. The ...
Yoga Fire's user avatar
3 votes
0 answers
120 views

Does the DNS belong to the threat model in the ACME protocol with the TLS challenge

If I use the ACME protocol to generate Certificates and I use the TLS Challenge, is the DNS Server a critical part in the threat model?
haschibaschi's user avatar
3 votes
0 answers
136 views

What is expected of domain owners in the Certificate Transparency system?

As I understand it, Certificate Transparancy provides proof to the client that the presented certificate is publicly accessible in CT logs. The certificate being in the logs enables a domain owner to ...
JazZeus's user avatar
  • 53
3 votes
0 answers
532 views

Openssl s_server ticket validation

How does Openssl's s_server validate session tickets? I started up an s_server and stored the session ticket in a file, and then shutdown the s_server and started up a new server with the same command....
CryptoBipto's user avatar
3 votes
0 answers
402 views

Capture macOS/IOS system HTTPS packets

I tried to analyze the https traffic of apps on my MacBook and iPhone with Charles with SSL proxy (I use HTTP proxy for IOS and installed and trusted Charles certificate). I managed to decrypt most ...
lewisxy's user avatar
  • 31
3 votes
0 answers
189 views

How are sessions handled in case of long lasting communications?

How does TLS 1.3 handle communication between the server and the client where it can last for a very long time (like years), without any pause in it? My concern is that the longer a key is used the ...
Sylvester's user avatar
3 votes
0 answers
190 views

Risks of not enabling HSTS on a static content subdomain. Even though main domain does have hsts

I'm investigating an issue where our static content (js, css) is deployed in AWS Cloudfront under a subdomain of our main website and doesn't have HSTS enabled. The main domain does have HSTS enabled ...
Cyassin's user avatar
  • 515
3 votes
0 answers
303 views

Experimenting with SSLStrip+ on the same machine

I am trying to play around to understand how SSLStrip+ works by: $ cat /proc/sys/net/ipv4/ip_forward 1 $ sudo iptables --flush $ sudo iptables --flush -t nat $ sudo iptables -t nat -A PREROUTING -p ...
HCSF's user avatar
  • 153
3 votes
0 answers
125 views

Secure internal network with hundreds of small devices requiring web administration

Does anyone know of a method, or browser, capable of accessing older network devices once the new browsers begin blocking unsecured logins and devices that do not have https capability?
Dave Goodrich's user avatar
3 votes
0 answers
140 views

Switching connection encryption on the fly (browser padlock)

On Youtube, the connection is encrypted (green padlock). However I found myself in a situation that when I click on for example a comment that contains a URL to a different website (on which the ...
Learn on hard way's user avatar
3 votes
0 answers
373 views

Does RenegotiateOnce in Go's crypto/tls package protect against triple handshake?

Looking into how to do client cert authentication from the Go HTTP client, I found out I needed renegotiation from the client side and I came across issue 5742 for Go on GitHub, which is the issue ...
Andy Haskell's user avatar
3 votes
0 answers
451 views

Why does the TLS Client have to send the digital signature over all previous handshake messages in CertificateVerify?

TLS (non-anonymous) Handshake requires the Server to sign the ServerKeyExchange message so that the Client can authenticate the Server using the public key present in the Server Certificate. However, ...
Naruto999's user avatar
  • 193
3 votes
1 answer
692 views

Client Side Encryption (CSE) across multiple clients

Working on 2 layer security in the cloud (AWS). Have multiple clients pushing files to S3 document storage which are then retrieved by one EC2 instance. Multiple external customers each requiring ...
csi's user avatar
  • 153
3 votes
0 answers
19k views

Server sends RST during TLS handshake. Why?

I have a problem with a machine to machine communication where for me it looks like our server hangs up the TCP during the handshake, but I cannot understand why. We have been running for several ...
Roy's user avatar
  • 31
2 votes
0 answers
96 views

How to retrieve TLS unique value from Apache?

TLS unique value is present in TLS 1.2 version. In Golang, I can get the value of the TLS unique value from the http response through the field TLS. I'd like know how I can get it from Apache. Is ...
MoBe's user avatar
  • 21
2 votes
1 answer
220 views

Decrypt SSL with Wireshark supported browsers

I've been following the guide: https://www.comparitech.com/net-admin/decrypt-ssl-with-wireshark/ Using it for chrome and Safari on MacOS does not populate any keys in the file, Did browsers stop keys ...
S3Im's user avatar
  • 21
2 votes
0 answers
834 views

Couldn't establish a secure connection

NordVPN popped up with "Couldn't establish a secure connection." "We couldn't validate this TLS certificate and ensure a secure connection required for NordVPN to run. It looks like ...
Richard's user avatar
  • 21
2 votes
0 answers
105 views

Is there an SSL library that allows me to add and access extensions and the certificate data?

The subject (sort of) says it all... Is there a TLS library (other than OpenSSL which does everything :-) ) that allows me to: Add my own extensions to the TLS Get the certificate data so I can make ...
user500123's user avatar
2 votes
1 answer
267 views

Benefits of certificate pinning to leaf with intermediate as a backup?

According to the OWASP Cheat Sheet on Certificate Pinning, their recommendation is to pin to the leaf certificate, but also pin to the intermediate CA as a backup. Any security measure is only as good ...
jon's user avatar
  • 121
2 votes
0 answers
172 views

Does QUIC use the TLS 1.3 Exporter Master Secret?

QUIC is protected by TLS 1.3. TLS 1.3 generates many keys, to include an Exporter Master Secret -- is this the key that is used to start the key generation process within QUIC? If not that, is there ...
jester's user avatar
  • 142
2 votes
0 answers
111 views

With TLS 1.3 is it possible to conduct the handshake on a separate device from where the main channel is?

With TLS 1.3 a PSK is established along with main secrets for the encrypted channel. Can this mechanism be employed to allow client authentication to occur on one device (say a mobile device), which ...
Frank's user avatar
  • 159
2 votes
0 answers
266 views

OCSP Must-Staple test website?

I'm interested in the status of OCSP respect in modern browsers (particularly the one I'm using right now). Is there any website that will allow me to test how my browser treats the status_request ...
JamesTheAwesomeDude's user avatar
2 votes
0 answers
419 views

Request to produce Android APK without 'certificate pinning'

Information Protection Officer at my work requested me to produce a version of our Android App (quote) "...without SSL pinning for our.backend.domain.name.com" for vulnerability scanning ...
bluearth's user avatar
  • 131
2 votes
2 answers
109 views

Security Concern Opening Up Azure VM to AWS IPs

We have an IIS webserver hosted in Azure. We want to monitor this server via our cloud SIEM hosted in AWS. To monitor, there is a requirement to open outbound 443, on the VM, to a few hundred AWS ...
Nina G's user avatar
  • 133
2 votes
1 answer
233 views

PCI & e-banking sensitive information tokenization/encryption/obfuscation - Which fields require to be secured?

According to PCI standard all businesses that store, process or transmit payment cardholder data must be PCI Compliant. Taking into account that we are talking about a bank, fields like card number ...
Belf's user avatar
  • 21
2 votes
0 answers
280 views

Using TPM to generate certificates associated with different users on the same device

I plan to use the TPM to generate CSR's backed by a private key stored on the TPM. The CSR's will then be signed by an external HSM. Since a certificate is tied to a particular private key, how do you ...
Dr. Lecter's user avatar
2 votes
0 answers
471 views

Are there any TLS Extensions that a server can *require* the client send?

This question is a bit of a follow on to this Q&A: TLS 1.2 Handshake: Does the server have to take all extensions sent by the Client? If the client sends an Extension that the server does not ...
Eddie's user avatar
  • 781
2 votes
0 answers
143 views

Is the HTTPS lock sign displayed if reasources are loaded from insecure sites?

We all know that if you visit a secure site which uses https, all modern browsers will show a padlock sign if it has a CA certified certificate. My questions are: Suppose there is an image loaded in ...
SRaj's user avatar
  • 155
2 votes
0 answers
482 views

How good can X-Frame-Options HTTP header do against click-jacking?

X-Frame-Options HTTP header is used to tell if a webpage is allowed to be used in a frame/iframe. Frames can be used for click-jacking/UI-redress attacks. It is advised to set X-Frame-Options to '...
Xfce4's user avatar
  • 121
2 votes
0 answers
704 views

Storing Apache web server's SSL certificate in HashiCorp Vault

This could be basic question as I'm new to this area. I have an apache web server which load balances to a set of servers to provide a web site. The apache server has SSL enabled and we terminate TLS ...
Viraj's user avatar
  • 121
2 votes
0 answers
436 views

What will be the key size for rsa, ecdhe and ecdsa from the cipher suite given?

From the cipher suites tls_rsa_with_aes_128_cbc_sha256 and tls_ecdhe_ecdsa_with_aes_128_cbc_sha256 how do I know what will be the RSA , ECDHE, and ECDSA key support in IBM cloud Watson? here is the ...
wanglen soram's user avatar
2 votes
3 answers
3k views

Intercept HTTP Traffic of an android app?

I was trying to test and intercept traffic from an app developed on Rhodes open source framework, I setup a proxy with burp, and of course I have installed burp certificate on my device hence I can ...
hanan's user avatar
  • 131
2 votes
0 answers
199 views

Does it matter that my browser shows an out-of-date certificate when a website uses service workers?

A website I frequent (a Discourse forum) uses Let's Encrypt TLS certificates which are updated every two months with a valid period of three months. But the certificate information shown by Chrome ...
curiousdannii's user avatar
2 votes
0 answers
851 views

BURP SSL connection failing on Genymotion Virtual Device - Android 8.0 API 26

Everything earlier used to work fine. However, recently I downloaded a newer virtual device on Genymotion, which is an Android 8.0 API 26. I have been struggling to get HTTPS traffic intercepted on ...
qre0ct's user avatar
  • 1,522
2 votes
0 answers
120 views

Which messages are included in (D)TLS Finished message's verify_data field for session resumption

The https://www.rfc-editor.org/rfc/rfc5246#section-7.4.9 states which messages are included for PRF computation that is included in Finished messages It is clear for 'regular' (initial) handshake But ...
lakier's user avatar
  • 121
2 votes
0 answers
331 views

TLS 1.2. Handshake: Where do Client and Server negotiate how the master key is built from randoms and pre?

I am currently trying to solve an exercise where I should look at a TLS 1.2 handshake trace while having access to pre and both randoms (server random and client random). In order to decrypt ...
Lavair's user avatar
  • 175

1
2 3 4 5
8