tls

Could not create SSL/TLS secure channel, despite setting ServerCertificateValidationCallback

匿名 (未验证) 提交于 2019-12-03 01:23:02
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I'm trying to establish SSL/TLS connection to test server with self-signed certificate . Communication through unsecure channel worked without issues. Here is my sample code, which I've written based on this solutions: Allowing Untrusted SSL Certificates with HttpClient C# Ignore certificate errors? .NET client connecting to ssl Web API ServicePointManager.ServerCertificateValidationCallback += (sender, cert, chain, sslPolicyErrors) => true; var c = new HttpClient(); var r = c.GetAsync("https://10.3.0.1:8443/rest/v1").Result; if (r

okHTTP Unable to find acceptable protocols(android)

匿名 (未验证) 提交于 2019-12-03 01:23:02
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: Sorry for my english. I try using libruary OKhttp, and i use https for post reqest. Now i have error, when i try post my example, this is error: java.net.UnknownServiceException: Unable to find acceptable protocols. isFallback=false, modes=[ConnectionSpec(cipherSuites=[TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE

TLS 1.2 not working in cURL

匿名 (未验证) 提交于 2019-12-03 01:23:02
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 由 翻译 强力驱动 问题: I am having trouble curling an HTTPS url that uses TLS1.2, in my curl operation I post my login data into the website and save it in cookiefile. The error message I am getting is this error : 14077438 : SSL routines : SSL23_GET_SERVER_HELLO : tlsv1 alert internal error I have tried setting VERIFYPEER and VERIFYHOST to 0 but that does not seem to work, any suggestions? Here are the versions I am using: OpenSSL version is 0.9.8b CURL version is 7.24.0 PHP is 5.3 Here is the code: $setuplogin = curl_init (); curl_setopt (

Java HttpsURLConnection and TLS 1.2

匿名 (未验证) 提交于 2019-12-03 01:23:02
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I read in an article that HttpsURLConnection will transparently negotiate the SSL connection. The official document says: This class uses HostnameVerifier and SSLSocketFactory. There are default implementations defined for both classes. [ 1 ] Does that mean once you open a connection with httpsCon = (HttpsURLConnection) url.openConnection(); It is already SSL/TLS encrypted without any more hassle? How can I view and set the TLS version for the standard implementation? (Should be TLS 1.2 for Java 8 and TLS 1.0 for Java 7) References Oracle

How to disable tls 1.0 and use only tls 1.1 using nodejs

匿名 (未验证) 提交于 2019-12-03 01:21:01
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I want to disable the TLS v1.0 and use TLS 1.1 and above only. By nodejs, I use the https module, how to set the https options? I have read the api doc node api tls , but I still don't know how to set this. I think it depends on the secureProtocol and cipher , but I just don't know how to set the value. My node version is 0.10.36, and openssl version is 0.9.8j. 回答1: TLS 1.0 should no longer be used. This works to disable TLS 1.0 in node.js: https.createServer({ secureOptions: require('constants').SSL_OP_NO_TLSv1, pfx: fs.readFileSync(path

kubectl behind a proxy

匿名 (未验证) 提交于 2019-12-03 01:20:02
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I have installed a local Kubernetes cluster using minikube following the instructions here . I'm under a corporate proxy. Therefore I have set the http_proxy and https_proxy env vars. Once the cluster is started after minikube start command I also added the value of minikube ip to the no_proxy env var. However still kubectl cannot connect to the cluster. ubuntu@ros-2:~$ kubectl -v=7 get pods I0105 10:31:47.773801 17607 loader.go:354] Config loaded from file /home/ubuntu/.kube/config I0105 10:31:47.775151 17607 round_trippers.go:296] GET

Enable TLSv1 ciphers in Spring Boot

匿名 (未验证) 提交于 2019-12-03 01:18:02
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I am trying to enable TLSv1 ciphers in my spring boot REST service so that older android clients can connect to it but it is not working for some reason. I'm running openjdk version "1.8.0_131" and by default TLSv1, TLSv1.1 and TLSv1.2 seem to be enabled I'm using nmap --script ssl-enum-ciphers -p 8443 127.0.0.1 to scan what the server can take and I'm getting this 8443/tcp open https-alt | ssl-enum-ciphers: | TLSv1.2: | ciphers: | TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (secp256k1) - A | TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 (secp521r1) -

How do you enable TLS 1.2 on Spring-boot?

匿名 (未验证) 提交于 2019-12-03 01:18:02
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I am trying to enable TLS 1.2 on Tomcat on Spring-boot 1.2.1. Android 5.0 is failing to connect to the default SSL settings, due to an SSL handshake failure. Android 4.4, iOS, Firefox, and Chrome all connect to the default version. I think this is because of a mismatch in the TLS protocols supported in Android 5.0 and the spring boot tomcat defaults (TLS v1?). I imagine I want to change this application.properties setting: server.ssl.protocol=TLS but I have not located the other acceptable strings (or if there are any, even). There is no

TLS support for GRPC in C#

匿名 (未验证) 提交于 2019-12-03 01:18:02
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I'm rather new to C#, and I need to use GRPC over TLS. As a dry-run, I'm modifying the example provided in the main grpc repo to use TLS. To do this, I found another SO question with what seemed like a good answer: How to enable server side SSL for gRPC? . However, I get an error Unhandled Exception: Grpc.Core.RpcException: Status(StatusCode=Unavailable, Detail="Connect Failed") (full trace below). I get the same error if I in the original, non-tls code, specify an incorrect port or just don't start the server. I'm using dotnet core on

Testing SSL/TLS Client Authentication with OpenSSL

匿名 (未验证) 提交于 2019-12-03 01:12:01
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试): 问题: I am developing a client/server application with TLS. My idea is to use a certificate on the client so it is authenticated by the server. Also another certificate on the server so the client is also able to authenticate that it is connecting to the right server. I want first to test and use openssl s_server and openssl s_client to validate the proposal. Until now I have created a CA private key on the server, I have created a root certificate. With the root certificate I have signed two CSR, so I get one certificate for the server and one