tls1.2

Creating a ManagedCertificate results in “Status: FailedNotVisible”

限于喜欢 提交于 2020-01-23 07:51:17
问题 Using Kubernetes 1.12.6-gke.7 or higher it is possible to create a ManagedCertificate which is then referenced from an Ingress Resource exposing a Service to the Internet. Running kubectl describe managedcertificate certificate-name first indicates the certificate is in a Provisioning state but eventually goes to FailedNotVisible. Despite using a Static IP and DNS that resolves fine to the http version of said service all ManagedCertificate's end up in a "Status: FailedNotVisible" state.

Twitter API responds with 'An existing connection was forcibly closed by the remote host'

北战南征 提交于 2020-01-22 13:49:42
问题 My company had some dotNET code which has been talking to Twitter's API happily over the last three months, tweeting our news out. On 29th July it stopped working, and the POST request was hit with this error: An existing connection was forcibly closed by the remote host System.Net.Sockets.SocketException I assume this is because our server is still using TLS 1.1 and I only just found this Twitter API announcement from June, which says: Since the removal of SSL support 104 in 2014, the

Socket.io client in android connection with HTTPS protocol failed?

依然范特西╮ 提交于 2020-01-22 12:19:07
问题 io on server and client on android. It results in connection error on android as long as I enable HTTP(S) SSL(works fine if disable it however) I've tried to implement HTTPS connection on Android, took reference from sample on Github as following: opts = new IO.Options(); opts.sslContext = mySSLContext; opts.hostnameVerifier = myHostnameVerifier; socket = IO.socket("https://mychat.url", opts); also this SSLContext mySSLContext = SSLContext.getInstance("TLS"); mySSLContext.init(null, null,

Issue with using bouncycastle libraries to enable TLSv1.2 for JDK1.6 running on Tomcat7

烈酒焚心 提交于 2020-01-22 02:27:52
问题 I am trying to make api calls from my apache tomcat7 server running jdk1.6 (on an aws ec2) to aws api gateway private endpoints inside my vpc. Such private endpoints only allow TLSv1.2. I am using jdk1.6.45 (which does not have TLSv1.2 support OOTB) and there is no possibility of upgrading due to other constraints. I am attempting to use bouncy castle jce and jsse providers so that I can create https connections to the api gateway using HttpsUrlConnection object. I am having issues with the

Powershell CREDSSP and TLS 1.2

与世无争的帅哥 提交于 2020-01-16 19:54:54
问题 Server A is Server 2008 R2, Powershell V3 All SSL and TLS enabled and all Ciphers. Server B is Server 2016, Powershell V5 and Only TlS 1.2 and specific set of Ciphers. I cannot get Credssp authentication to work from A to B, even if I use Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 i am aware this is a per Session setting so I included in the script itself. If I set Server B (Server 2016) to turn on all SSL and TLS encryption, CREDSSP works no problem. And

Session State FIPS Validation Error in ASP.NET

ε祈祈猫儿з 提交于 2020-01-16 12:36:07
问题 I am attempting to enable TLS 1.2 on our Windows 2008 R2 server for PCI compliance, and have managed to get it working by following this obscure blog post which requires turning on FIPS validation. Finally, after weeks of looking for a solution, click-once, .NET remoting, and MS Web Deploy are communicating over TLS 1.2. However, I also have web applications on the machine that quit functioning when I enabled FIPS validation with the following error: This implementation is not part of the

How to use digicert with nginx-ingress to enable https

梦想与她 提交于 2020-01-14 05:38:08
问题 I'm trying to use the certificates obtained through digicert to enable https on my nginx-ingress. We've obtained a wildcard certificate and I have the following files. domain_name_2019-2021.csr domain_name_2019-2021.key domain_name_2019-2021.pem DigiCertCA2_2019-2021.pem star_domain_name_2019_2021.pem TrustedRoot.pem I've created the tls secrets by running the following commands kubectl create secret tls tls-secret --key ${KEY_FILE} --cert ${CERT_FILE} And used these secrets in my ingress

SSL: CERTIFICATE_VERIFY_FAILED when connecting to a company Exchange Server

雨燕双飞 提交于 2020-01-14 04:08:46
问题 I try to send mails from out company exchange server via Python. My problem is, that I get a SSL error. I read a lot of pem-, cer-, crt-files, but I can not connect all these information to have success. I am sure, that if one can fix the issue in my little example script, one could fix the exchange script, too. I read a lot about certificates and ca_bundles, but I don't know how to apply all of that to my issue. Example-Script : import requests requests.get('https://mail.ourserver.loc')

TLS v1.2 ciphers to use in PHP NUSOAP SoapClient

风格不统一 提交于 2020-01-13 08:51:19
问题 I want to connect to a server that only supports TLS 1.2. What possible ciphers can I specify to stream context in the PHP NUSOAP SoapClient creation? <?php $objSoapClient = new SoapClient( "https://example.com/?wsdl", array( "encoding"=>"ISO-8859-1", "stream_context"=>stream_context_create( array( "ssl"=>array("ciphers"=>"<????>") ) ) ) ); ?> 回答1: TLS v1.2 is described in RFC5246 , you can read it here. List of ciphers you can find in openssl wiki, use the second line without trailing 256 .

iOS 13 TLS issue

独自空忆成欢 提交于 2020-01-12 05:01:04
问题 I have installed iOS 13 beta version and run my framework which contains a lot of network requests, but I got this error: 2019-09-19 15:01:33.566811+0200 ---[395:25439] Connection 4: default TLS Trust evaluation failed(-9814) 2019-09-19 15:01:33.567022+0200 ---[395:25439] Connection 4: TLS Trust encountered error 3:-9814 2019-09-19 15:01:33.567110+0200 ---[395:25439] Connection 4: encountered error(3:-9814) 2019-09-19 15:01:33.569824+0200 ---[395:25439] Connection 4: unable to determine