Questions tagged [tls]
SSL (Secure Sockets Layer) and/or TLS (Transport Layer Security)
338
questions with no upvoted or accepted answers
7
votes
0
answers
6k
views
Running openssl s_client with an aes encrypted key fails
I'm trying to verify a 2-way SSL connection using the openssl s_client command
openssl s_client -connect localhost:8883 -CAfile ca.pem -cert client.crt -key client.key
The openssl s_client fails ...
- 221
7
votes
1
answer
516
views
TLS connection to untrusted server - client reaction for dropping connection standardized?
I played around with a man-in-the-middle proxy tool and connected different smart phones to it. As the proxy uses a self signed certificate the tested smartphone apps did not accept the presented ...
- 1,316
5
votes
0
answers
427
views
How is my ISP circumventing SSL on thepiratebay even though the certificate is valid?
When I visit https://thepiratebay.org it is displaying a message from my ISP saying it is blocked under government rules. BUT the https icon is green and the certificate is a SNI certificate from ...
- 51
5
votes
0
answers
443
views
Why are banks largely absent from the HSTS preload list?
There seems to be widespread support for the idea that election-related websites, of all things, should be resistant to man-in-the-middle attacks. The secret ballot makes detecting and recovering from ...
- 51
5
votes
0
answers
5k
views
How does TLS 1.3 break inspection?
The latest research seems to indicate that TLS 1.3 completely breaks the MITM/proxy model of many current security tools.
I don't fully understand how it does that and if there are ways around this. ...
- 51
5
votes
0
answers
546
views
How does Chrome distrust Symantec Certificates?
Sometime back Google Chrome had announced plans to distrust Symantec certificates. I am trying to figure out how this is done for a POC.
When I visit chase.com on Google Chrome, I get the following ...
- 163
5
votes
0
answers
551
views
Should I force Thunderbird to avoid RFC5746 and CVE-2009-3555 security bugs?
I see that the latest version of Thunderbird (38.0.1) still has the defaults set to ignore the error. Is this a big problem? Should I change the defaults to enforce greater security?
Here is ...
- 1,648
5
votes
1
answer
575
views
Should I trash my router if it still runs OpenSSL 0.9.8p and OpenVPN 2.2.2 in 2017?
I have the Easybox 904 xDSL router from Vodafone (Germany) running the latest firmware 03.17.01.17.
I wanted to upgrade the firmware but found out that the latest version is from 2015 - no updates ...
- 151
4
votes
0
answers
306
views
Create self-signed ssl certificate that can't sign other certificates
I have a LAN HTTPS server that I want to give an SSL certificate to. Since it's local-only, a self-signed certificate is sufficient for me. I have previously given it a self-signed root certificate, ...
- 105
4
votes
1
answer
709
views
Using NameConstrains in a CA certificate
I am trying to do something similar to what has been pointed out in this nice answer by Jonathon Reinhart.
I have a CA certificate with Name Constrains (RFC):
Permitted
[1]Subtrees (0..0):
...
- 456
4
votes
0
answers
3k
views
Java Updates Restrict Unsafe SSL Renegotiation With Active Directory Servers
We have two active directory (AD) hosts, ead01.domain.com and ead02.domain.com; we also have a corresponding service domain, at eadauth.domain.com which round-robins between these AD hosts (via DNS).
...
- 161
4
votes
0
answers
1k
views
Safe communication via rest api between two known servers
I'm using Kinvey as backend but because it doesn't provide the ability to run custom code I have set up another server. So basically when x happens on Kinvey server, I send a call to my rest api on ...
- 141
4
votes
1
answer
10k
views
Why did Chrome show my connection to Youtube as not secure?
I was browsing on Youtube a while ago, when I noticed that Chrome showed it as an insecure connection even though it was over HTTPS.
I'm using Ghostery and Adblock to block trackers but nothing more, ...
- 41
4
votes
1
answer
8k
views
Why does Chrome warn about "Obsolete Connection Settings" for key exchange?
What do I have to change so Google Chrome won't say that I am using an obsolete key exchange?
Obsolete Connection Settings
The connection to this site uses a strong protocol (TLS 1.2), an obsolete ...
- 41
4
votes
1
answer
175
views
MITM or Something Else?
Problem:
When a given set of user devices (tablets/laptops) downloads files from a certain server from outside the host server's country, downloads are sporadically and routinely interrupted. The ...
- 41
3
votes
0
answers
129
views
Using TPM to generate certificates associated with different users on the same device
I plan to use the TPM to generate CSR's backed by a private key stored on the TPM. The CSR's will then be signed by an external HSM.
Since a certificate is tied to a particular private key, how do you ...
- 131
3
votes
0
answers
211
views
Capture macOS/IOS system HTTPS packets
I tried to analyze the https traffic of apps on my MacBook and iPhone with Charles with SSL proxy (I use HTTP proxy for IOS and installed and trusted Charles certificate). I managed to decrypt most ...
- 31
3
votes
0
answers
142
views
How are sessions handled in case of long lasting communications?
How does TLS 1.3 handle communication between the server and the client where it can last for a very long time (like years), without any pause in it? My concern is that the longer a key is used the ...
- 75
3
votes
0
answers
101
views
Risks of not enabling HSTS on a static content subdomain. Even though main domain does have hsts
I'm investigating an issue where our static content (js, css) is deployed in AWS Cloudfront under a subdomain of our main website and doesn't have HSTS enabled. The main domain does have HSTS enabled ...
- 493
3
votes
0
answers
248
views
Experimenting with SSLStrip+ on the same machine
I am trying to play around to understand how SSLStrip+ works by:
$ cat /proc/sys/net/ipv4/ip_forward
1
$ sudo iptables --flush
$ sudo iptables --flush -t nat
$ sudo iptables -t nat -A PREROUTING -p ...
- 143
3
votes
0
answers
99
views
Secure internal network with hundreds of small devices requiring web administration
Does anyone know of a method, or browser, capable of accessing older network devices once the new browsers begin blocking unsecured logins and devices that do not have https capability?
3
votes
0
answers
114
views
Switching connection encryption on the fly (browser padlock)
On Youtube, the connection is encrypted (green padlock). However I found myself in a situation that when I click on for example a comment that contains a URL to a different website (on which the ...
3
votes
0
answers
253
views
Does RenegotiateOnce in Go's crypto/tls package protect against triple handshake?
Looking into how to do client cert authentication from the Go HTTP client, I found out I needed renegotiation from the client side and I came across issue 5742 for Go on GitHub, which is the issue ...
- 131
3
votes
0
answers
355
views
Why does the TLS Client have to send the digital signature over all previous handshake messages in CertificateVerify?
TLS (non-anonymous) Handshake requires the Server to sign the ServerKeyExchange message so that the Client can authenticate the Server using the public key present in the Server Certificate.
However, ...
- 193
3
votes
1
answer
584
views
Client Side Encryption (CSE) across multiple clients
Working on 2 layer security in the cloud (AWS). Have multiple clients pushing files to S3 document storage which are then retrieved by one EC2 instance.
Multiple external customers each requiring ...
- 153
3
votes
0
answers
16k
views
Server sends RST during TLS handshake. Why?
I have a problem with a machine to machine communication where for me it looks like our server hangs up the TCP during the handshake, but I cannot understand why.
We have been running for several ...
- 31
2
votes
0
answers
65
views
What is expected of domain owners in the Certificate Transparency system?
As I understand it, Certificate Transparancy provides proof to the client that the presented certificate is publicly accessible in CT logs. The certificate being in the logs enables a domain owner to ...
- 33
2
votes
1
answer
36
views
Security Concern Opening Up Azure VM to AWS IPs
We have an IIS webserver hosted in Azure. We want to monitor this server via our cloud SIEM hosted in AWS. To monitor, there is a requirement to open outbound 443, on the VM, to a few hundred AWS ...
- 133
2
votes
0
answers
47
views
Openssl s_server ticket validation
How does Openssl's s_server validate session tickets? I started up an s_server and stored the session ticket in a file, and then shutdown the s_server and started up a new server with the same command....
- 23
2
votes
0
answers
148
views
Are there any TLS Extensions that a server can *require* the client send?
This question is a bit of a follow on to this Q&A:
TLS 1.2 Handshake: Does the server have to take all extensions sent by the Client?
If the client sends an Extension that the server does not ...
- 677
2
votes
0
answers
113
views
Is the HTTPS lock sign displayed if reasources are loaded from insecure sites?
We all know that if you visit a secure site which uses https, all modern browsers will show a padlock sign if it has a CA certified certificate. My questions are:
Suppose there is an image loaded in ...
- 145
2
votes
0
answers
123
views
How good can X-Frame-Options HTTP header do against click-jacking?
X-Frame-Options HTTP header is used to tell if a webpage is allowed to be used in a frame/iframe.
Frames can be used for click-jacking/UI-redress attacks.
It is advised to set X-Frame-Options to '...
- 121
2
votes
0
answers
394
views
Storing Apache web server's SSL certificate in HashiCorp Vault
This could be basic question as I'm new to this area. I have an apache web server which load balances to a set of servers to provide a web site. The apache server has SSL enabled and we terminate TLS ...
- 121
2
votes
0
answers
211
views
What will be the key size for rsa, ecdhe and ecdsa from the cipher suite given?
From the cipher suites tls_rsa_with_aes_128_cbc_sha256 and tls_ecdhe_ecdsa_with_aes_128_cbc_sha256 how do I know what will be the RSA , ECDHE, and ECDSA key support in IBM cloud Watson?
here is the ...
2
votes
3
answers
2k
views
Intercept HTTP Traffic of an android app?
I was trying to test and intercept traffic from an app developed on Rhodes open source framework, I setup a proxy with burp, and of course I have installed burp certificate on my device hence I can ...
- 121
2
votes
0
answers
147
views
Why don't CAs advertize public keys of verified entities on a central location instead of giving out signed certificates?
If CAs (Certification Authorities) start advertizing public keys of verified websites via some API, browsers can simply query them for each domain instead of asking websites to give them certificates ...
- 189
2
votes
0
answers
514
views
BURP SSL connection failing on Genymotion Virtual Device - Android 8.0 API 26
Everything earlier used to work fine. However, recently I downloaded a newer virtual device on Genymotion, which is an Android 8.0 API 26. I have been struggling to get HTTPS traffic intercepted on ...
- 1,472
2
votes
0
answers
84
views
Which messages are included in (D)TLS Finished message's verify_data field for session resumption
The https://www.rfc-editor.org/rfc/rfc5246#section-7.4.9 states which messages are included for PRF computation that is included in Finished messages
It is clear for 'regular' (initial) handshake
But ...
- 121
2
votes
0
answers
2k
views
Help with meterpreter reverse https
I was trying to practice with meterpreter, so I used the overflow ms17_010_eternalblue and as a payload windows/meterpreter/reverse_https but I am unable to make this payload to work properly.
1st ...
- 21
2
votes
0
answers
249
views
OpenSSL for Self Signed Certificate - Intranet Site
I have a question about Self Signed Certs that I couldn't find a direct answer to.
I have a site designed to be hosted on a client's server. Some of the information coming from a windows workstation ...
- 299
2
votes
0
answers
911
views
What are the different secrets in the SSLKEYLOGFILE file?
I've dumped the secrets from a TLS handshake into a text file but I don't understand what the different secrets are. I have:
SERVER_HANDSHAKE_TRAFFIC_SECRET
EXPORTER_SECRET
SERVER_TRAFFIC_SECRET_0
...
2
votes
0
answers
146
views
Bruteforce https post using single tcp connection
So I've tried bruteforcing my server using thc-hydra's https-post-form, but it floods the server very quickly and the requests start timing out.
However, If I go through the browser where the HTTP ...
- 21
2
votes
3
answers
234
views
How to limit web API microservice communication to specific list of machines?
I have an PHP API that I want to be consumed only by one static website.
However the HTTP is not secure as from what I suspect any header can be spoofed (IP - I may be wrong here, domain name, and so ...
2
votes
0
answers
408
views
For cloud-based password managers, is it safe to login using public WiFi?
For cloud-based password managers, is it safe to login when using public WiFi?
To help get good answers to this question, let's define 3 terms:
Cloud-based password managers = Password managers such ...
2
votes
0
answers
1k
views
Wireshark does not decrypt TLS, decrypt tab does not appear
What I did:
Setup the env var "SSLKEYLOGFILE" as "C:\ssl-keys.log" and ensure it is valid.
Enter its path in Wireshark 3 preferences -> protocols -> tls -> pre-master-secret-log filename -> "C:\ssl-...
- 121
2
votes
1
answer
3k
views
Using PSK between an openssl server and client
I'm trying to create a connection between an openssl server and client on my machine using ECDHE-PSK-AES256-CBC-SHA384 What am I doing wrong with these commands?
openssl s_server -cipher ECDHE-PSK-...
- 195
2
votes
0
answers
4k
views
SSL routines:ssl3_read_bytes:sslv3 alert bad certificate
Running the following command:
curl -v --key client_key.key --cert client_cert.crt <some url> -u <username>
I get the following response:
* Trying XX.XXX.XXX.X...
* TCP_NODELAY set
* ...
- 121
2
votes
0
answers
154
views
Decrypting DH traffic in DMZ
We have various servers in our DMZ's. Some of them are behind load balancers (but only few). We also have BlueCoat SSL Visibility Appliances currently deployed in passive-tap mode (we get the inbound ...
- 236
2
votes
0
answers
159
views
How can a 802.11 client verify the authenticity of an AP it is trying to connect to?
With the onset of hardware like the WiFi pineapple, it has become somewhat harder to protect the privacy of your WiFi network. WPA2 Enterprise with Radius authentication could come to rescue here, but ...
- 583
2
votes
0
answers
301
views
Delegating SSL certificate requests to a third party
I'm wondering what best practices are regarding delegating the authority to approve SSL certificate issuance.
One of our vendors (www.vendordomain.com) will soon host a Web application for us (www....
- 1,009