tls

FTPES - Session Reuse Required

匿名 (未验证) 提交于 2019-12-03 02:26:02
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: So, I am trying to connect to an ftp server to get directory listings and download files. But the first command after the prot_p() function is raising an exception - Producing these errors from the log: *get* '150 Here comes the directory listing.\r\n' *resp* '150 Here comes the directory listing.' *get* '522 SSL connection failed; session reuse required: see require_ssl_reuse option in vsftpd.conf man page\r\n' *resp* '522 SSL connection failed; session reuse required: see require_ssl_reuse option in vsftpd.conf man page' Traceback (most

TLS/SSL session resume on FTP transfer connection with OpenSSL

匿名 (未验证) 提交于 2019-12-03 02:22:01
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I'm open source developer implementing FTP client ( WinSCP ). I'm trying to resume TLS/SSL session from the FTP control socket on the transfer socket. Some FTP servers started to require this. E.g. vsftpd: https://scarybeastsecurity.blogspot.com/2009/02/vsftpd-210-released.html I'm using OpenSSL to implement SSL layer. I've tried the obvious way to implement the session resume, i.e. to use SSL_get1_session and SSL_set_session , like here: https://www.linuxjournal.com/article/5487?page=0,1 Though it does not work. I'm still not able to

Enabled ciphers on Ubuntu OpenJDK 7

匿名 (未验证) 提交于 2019-12-03 02:20:02
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I wrote the following Java program to dump the enabled ciphers in the JVM: import java.security.KeyStore; import javax.net.ssl.KeyManagerFactory; import javax.net.ssl.SSLContext; import javax.net.ssl.SSLSocket; import javax.net.ssl.TrustManagerFactory; public class ListCiphers { public static void main(String[] args) throws Exception { SSLContext ctx = SSLContext.getInstance("TLSv1"); // Create an empty TrustManagerFactory to avoid loading default CA KeyStore ks = KeyStore.getInstance("JKS"); TrustManagerFactory tmf = TrustManagerFactory

.NET SslStream doesn't close TLS connection properly

匿名 (未验证) 提交于 2019-12-03 02:14:01
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: .NET's SslStream class does not send the close_notify alert before closing the connection. How can I send the close_notify alert manually? 回答1: Thanks for this question. It pointed me into the right direction, that there is a bug in .Net, which I do not very often think about. I bumped into this problem during writing of my implementation of FTPS server and Filezilla (or GnuTLS probably) client was complaining "GnuTLS error -110 in gnutls_record_recv: The TLS connection was non-properly terminated". I think it is a quite significant drawback

SSLHandshakeException: Received fatal alert: handshake_failure when setting ciphers on tomcat 7 server

匿名 (未验证) 提交于 2019-12-03 02:13:02
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I have a Tomcat7 web-server which I tried to configure to accept secure connections by adding this connector to the server.xml file: <Connector SSLEnabled="true" acceptCount="100" connectionTimeout="20000" executor="tomcatThreadPool" keyAlias="server" keystoreFile="c:\opt\engine\conf\tc.keystore" keystorePass="o39UI12z" maxKeepAliveRequests="15" port="8443" protocol="HTTP/1.1" redirectPort="8443" scheme="https" secure="true" sslProtocol="TLS"/> I'm using a self-signed certificate generated using this command: %JAVA_HOME%/bin/keytool

ECDHE cipher suites not supported on OpenJDK 8 installed on EC2 Linux machine

匿名 (未验证) 提交于 2019-12-03 02:13:02
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: When starting jetty-distribution-9.3.0.v20150612 with openjdk 1.8.0_51 running on an EC2 Amazon Linux machine, is prints that all configured ECDHE suites are not supported. 2015-08-12 16:51:20 main SslContextFactory [INFO] Cipher TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 not supported 2015-08-12 16:51:20 main SslContextFactory [INFO] Cipher TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 not supported 2015-08-12 16:51:20 main SslContextFactory [INFO] Cipher TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 not supported 2015-08-12 16:51:20 main

pip: cert failed, but curl works

匿名 (未验证) 提交于 2019-12-03 02:13:02
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 由 翻译 强力驱动 问题: We installed the our root cert on the client, and the https connection works for curl . But if we try to use pip , it fails: Could not fetch URL https : //installserver:40443/pypi/simple/pep8/: There was a problem confirming the ssl certificate : < urlopen error [ Errno 1 ] _ssl . c : 499 : error : 14090086 : SSL routines : SSL3_GET_SERVER_CERTIFICATE : certificate verify failed > The cert is on the client. See: ( foo_fm_qti ) foo_fm_qti@vis - work :~ $ curl - v https : //installserver:40443/pypi/simple/pep8/ * About to connect ()

[nginx][tls] nginx配置https与ssl/tls的sni的方法

生来就可爱ヽ(ⅴ<●) 提交于 2019-12-03 02:11:37
一 https的sni配置方法 http { } server { listen 443 ssl; server_name test1.www.local test1.tls.local; ssl_certificate /root/sni/sni_test1.cer; ssl_certificate_key /root/sni/sni_test1.key; location / { root /data/www; } } server { listen 443 ssl; server_name test2.www.local test2.tls.local; ssl_certificate /root/sni/sni_test2.cer; ssl_certificate_key /root/sni/sni_test2.key; location / { root /data/www; } } server { listen 443 ssl; server_name test3.www.local test3.tls.local; ssl_certificate /root/sni/sni_test3.cer; ssl_certificate_key /root/sni/sni_test3.key; location / { root /data/www; } } } 二

SSL connection failing for Java 7

匿名 (未验证) 提交于 2019-12-03 02:06:01
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 由 翻译 强力驱动 问题: I am attempting to create an SSL connection to a remote server using Java 7 and I'm receiving the following exception: javax . net . ssl . SSLHandshakeException : Remote host closed connection during handshake at sun . security . ssl . SSLSocketImpl . readRecord ( SSLSocketImpl . java : 946 ) at sun . security . ssl . SSLSocketImpl . performInitialHandshake ( SSLSocketImpl . java : 1312 ) at sun . security . ssl . SSLSocketImpl . writeRecord ( SSLSocketImpl . java : 702 ) at sun . security . ssl . AppOutputStream . write (

How to fix curl: (35) Cannot communicate securely with peer: no common encryption algorithm(s)

匿名 (未验证) 提交于 2019-12-03 02:05:01
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I am trying to access and download some .torrent files from https://torrage.com using php curl . But nothing happens , curl_error($ch) gives $ch = curl_init ('https://torrage.com/torrent/640FE84C613C17F663551D218689A64E8AEBEABE.torrent'); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0'); curl_setopt($ch, CURLOPT_HEADER, 1); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true); curl_setopt($ch, CURLOPT_VERBOSE,true); $data = curl_exec($ch); $error = curl