tls

TLS extension “Server Name Indication” (SNI): value not available on server side

匿名 (未验证) 提交于 2019-12-03 08:57:35
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: Based on the JSSE examples, I'm trying to get the value of the TLS parameter "Server Name Indication" (SNI) on the server side - without success. I'm sure that the value is sent by the client since I used a network sniffer (Wireshark) that shows the value. But when I use the following code fragment, the list of server name parameters is empty (while the "protocols" are shown): public void connectionAccepted(Socket socket) { System.out.println("Connection accepted!"); try { /* get SNI parameter */ SSLSocket sslSocket = (SSLSocket)socket;

Unexpected error communicating with Stripe

匿名 (未验证) 提交于 2019-12-03 08:54:24
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: Billing with Stripe i have a form and i submit information and place the order following error has occured.... Unexpected error communicating with Stripe. If this problem persists, let us know at support@stripe.com. (Network error [errno 77]: error setting certificate verify locations: CAfile: C:\xampp\htdocs\PhpProject2\app\Lib\Stripe/../data/ca-certificates.crt CApath: none ) my controller action code if(!empty($this->request->data)){ $email = $this->request->data['email']; $credit_card = $this->request->data['card_number']; $expire_month

SSLv2Hello - javax.net.ssl.SSLException: Received fatal alert: unexpected_message

匿名 (未验证) 提交于 2019-12-03 08:52:47
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I am trying to call an SSL protected web service running on JDK7 / WildFly 8.2 with a Java 6 (update 31) based client. The first problem I encountered on the client was: javax.net.ssl.SSLException: Received fatal alert: unexpected_message By setting javax.net.debug to all on both sides, I got the following hint on the server side: javax.net.ssl.SSLHandshakeException: SSLv2Hello is disabled Quick research shows that, SSLv2Hello disabled by default on the client: In Java SE 7, SSLv2Hello is removed from the default enabled protocol list on the

Azure Kubernetes: TLS handshake timeout

匿名 (未验证) 提交于 2019-12-03 08:52:47
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I created a new cluster as per the Azure guide and created the cluster without issue but when I enter the kubectl get nodes to list the nodes I only get this response Unable to connect to the server: net/http: TLS handshake timeout . I tried once in the Cloud Shell and once on my machine using the latest version of the Azure CLI (2.0.20). I saw that there was a similar earlier issue regarding Service Principal credentials , which I updated but that didn't seem to solve my issue either. Any guidance would be greatly appreciated. 回答1: Piling

LWP::UserAgent Can't Post with TLS1.1

匿名 (未验证) 提交于 2019-12-03 08:46:08
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: Getting 500 handshaker error:443 over https. The host service I am sending XML to does not support TLS 1.2, they do support 1.0 and 1.1. Currently using LWP 6.03 on CentOS 6. Using the code below they claim I am still sending using TLS1.2 use LWP::UserAgent; $ua = LWP::UserAgent->new(ssl_opts => { verify_hostname => 0,SSL_version => 'SSLv23:!TLSv12' }); $req = HTTP::Request->new(GET => 'https://secure-host-server'); $res = $ua->request($req); if ($res->is_success) { print $res->content; } else { print "Error: " . $res->status_line . "\n"; }

TLS v1.2 ciphers to use in PHP NUSOAP SoapClient

匿名 (未验证) 提交于 2019-12-03 08:41:19
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I want to connect to a server that only supports TLS 1.2. What possible ciphers can I specify to stream context in the PHP NUSOAP SoapClient creation? <?php $objSoapClient = new SoapClient( "https://example.com/?wsdl", array( "encoding"=>"ISO-8859-1", "stream_context"=>stream_context_create( array( "ssl"=>array("ciphers"=>"<????>") ) ) ) ); ?> 回答1: TLS v1.2 is described in RFC5246 , you can read it here . List of ciphers you can find in openssl wiki , use the second line without trailing 256 . You can manually get a list of ciphers used by

OpenSSL error - unable to get local issuer certificate

匿名 (未验证) 提交于 2019-12-03 08:41:19
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I have a simple chain setup and can successfully verify in this case: $ openssl version OpenSSL 1.0.2m 2 Nov 2017 $ openssl verify -CAfile chain.pem cert.pem cert.pem: OK However I get errors in these cases: $ openssl verify -CAfile ca-cert.pem cert.pem cert.pem: C = US... error 2 at 1 depth lookup:unable to get issuer certificate Specifically the unable to get issuer certificate . Also get it here: $ openssl verify chain.pem chain.pem: C = US... error 20 at 0 depth lookup:unable to get local issuer certificate $ openssl verify cert.pem cert

How to implement Security Protocols TLS 1.2 in .Net 3.5 framework

匿名 (未验证) 提交于 2019-12-03 08:28:06
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 由 翻译 强力驱动 问题: As Paypal updated their response, I need to update security protocols TLS to v1.2 in my existing application which is on .NET 3.5 framework. What changes required to update this in existing code, I cannot update the application to newer framework. 回答1: I'm using VS 2008 with .net 3.5.30729.4926. All I had to do was: Add imports: Imports System . Security . Authentication Imports System . Net Add this to my code (C#): public const SslProtocols _Tls12 = ( SslProtocols ) 0x00000C00 ; public const SecurityProtocolType Tls12 = (

android ftp file tranfer over explicit TLS

匿名 (未验证) 提交于 2019-12-03 08:28:06
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I'm posting this question after have tried over and over again to get it working, with no success. I trying to implement a FTP file transfer in android, using apache commons library. The communication must be done through explicit TLS authentication. I can successfully login, connect to the server and list files, but whenever i try to get or store a file, I always get a timeout exception, also with very large timeout value, even for a 2Kb txt file. This is my code: FTPSClient ftpClient = new FTPSClient("TLS", false); ftpClient

SSL handshake_failure after clientHello

匿名 (未验证) 提交于 2019-12-03 08:28:06
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I am trying to connect an embedded device to smtp.gmail.com:465 using tls1.2 with WolfSSL. The library creates and sends the following clientHello message and receives a handshake failure. 16 03 03 00 4f 01 00 00 4b 03 03 2e 2a ec 85 7f 15 dd 09 5f 22 d1 53 82 60 d7 80 67 28 aa 67 48 ce f0 71 ab 63 d0 b2 3e 55 3a 05 00 00 14 c0 27 c0 23 c0 0a c0 09 c0 07 c0 08 c0 14 c0 13 c0 11 c0 12 01 00 00 0e 00 0d 00 0a 00 08 04 03 02 03 04 01 02 01 Here is the received message; 15 03 03 00 02 02 28 As can be seen in the wireshark screenshot , the