tls1.2

How to Enable TLS 1.2, 1.1,1.0, and SSL in iOS app?

十年热恋 提交于 2019-12-06 23:48:44
问题 My question is related to Apple Transport Security (ATS) and I am too much confused. I want to support all the protocols (all version of TLS and SSL) in my swift app. If I change NSAllowsArbitraryLoads to false, will app work on all protocols by default? Or do I have to specify domain in configuration and add NSExceptionMinimumTLSVersion? <key>NSAppTransportSecurity</key> <dict> <key>NSAllowsArbitraryLoads</key> <false/> <key>NSExceptionDomains</key> <dict> <key>your.servers.domain.here</key>

Enable TLSv1 ciphers in Spring Boot

允我心安 提交于 2019-12-06 16:41:12
I am trying to enable TLSv1 ciphers in my spring boot REST service so that older android clients can connect to it but it is not working for some reason. I'm running openjdk version "1.8.0_131" and by default TLSv1, TLSv1.1 and TLSv1.2 seem to be enabled I'm using nmap --script ssl-enum-ciphers -p 8443 127.0.0.1 to scan what the server can take and I'm getting this 8443/tcp open https-alt | ssl-enum-ciphers: | TLSv1.2: | ciphers: | TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (secp256k1) - A | TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 (secp521r1) - A | TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 (secp521r1)

Random The request was aborted: Could not create SSL/TLS secure channel. Returned code=MessageAltered

纵饮孤独 提交于 2019-12-06 16:04:00
In one out of around a thousand HTTPS requests, following exception is thrown: System.Net.WebException: The request was aborted: Could not create SSL/TLS secure channel. at System.Net.WebClient.DownloadDataInternal(Uri address, WebRequest& request) at System.Net.WebClient.DownloadString(Uri address) The logs from System.Net look like follows: 2016-09-20 15:10:17.1031 | INFO | 72 | System.Net | [2688] Associating HttpWebRequest#37618637 with ServicePoint#28841767 2016-09-20 15:10:17.1031 | INFO | 72 | System.Net | [2688] Associating Connection#16407032 with HttpWebRequest#37618637 2016-09-20 15

Not able to connect to HTTPS service using ISTIO Gateway and Virtual Service

蓝咒 提交于 2019-12-06 14:35:43
As I am new to istio, along with all my team members, we would really appreciate if we can get some help here. Problem I have followed the below documentation to create certs and create secrets in k8s using the application cert and key https://istio.io/docs/tasks/traffic-management/secure-ingress/#troubleshooting After that I restarted my istio-ingressgateway pod so that it loads the certs. Which aanyway I can see inside the pod when I exec. And I have added below annotation in istio-ingressgateway service to use domain names: *external-dns.alpha.kubernetes.io/hostname: .byom-i344382.xxx.xxx

Getting No such algorithm exception while using TLSV1.2 in java 1.4

杀马特。学长 韩版系。学妹 提交于 2019-12-06 13:49:23
问题 I am trying to hit a webservice which supports TLSv1.2. I am using Java 1.4. It does not support TLSv1.2. Now someone told me that BC could solve my problem. Though does it work with a SSLEngine as drop in replacement somehow? Is this possible with BC? What do I have to do to get a working SSLEngine (for use with TLSv1 in a nonblocking io scenario) without such low restrictions on primesize for DH. What I tried: Security.addProvider(new BouncyCastleProvider()); This alone seems not to solve

TLS 1.2 + C# + BouncyCastle

柔情痞子 提交于 2019-12-06 13:25:50
To support TLS 1.1 and above on WinCE we are using BouncyCastle library, but when making a connection it throws error "Internal TLS error, this could be an attack". Can someone advice on this. TcpClient client = new TcpClient(); client.Connect(resolvedIpAddr, PORT_TLS_11); Org.BouncyCastle.Security.SecureRandom sr = new Org.BouncyCastle.Security.SecureRandom(); TlsProtocolHandler handler = new TlsProtocolHandler(client.GetStream(), sr); handler.Connect(new MyTlsClient()); 来源: https://stackoverflow.com/questions/33776495/tls-1-2-c-sharp-bouncycastle

How to run django runserver over TLS 1.2

旧城冷巷雨未停 提交于 2019-12-06 05:30:04
问题 I'm testing Stripe orders on my local Mac OS X machine. I am implementing this code: stripe.api_key = settings.STRIPE_SECRET order = stripe.Order.create( currency = 'usd', email = 'j@awesomecom', items = [ { "type":'sku', "parent":'sku_88F260aQ', "quantity": 1, } ], shipping = { "name":'Jenny Rosen', "address":{ "line1":'1234 Main Street', "city":'Anytown', "country":'US', "postal_code":'123456' } }, ) I receive an error: Stripe no longer supports API requests made with TLS 1.0. Please

eval “$(docker-machine env default)” leads to Error checking TLS connection

怎甘沉沦 提交于 2019-12-06 05:29:56
I've installed Docker on my Mac about a month ago, and I now wanted to use it again. The command eval "$(docker-machine env default)" used to work perfectly before, but I now get an error: Error checking TLS connection: default is not running. Please start it in order to use the connection settings I searched around for this error, but I can't really find anything about it. Does anybody know what I should do to solve this? All tips are welcome! Your boot2docker virtual machine must be running inside Virtualbox. List your Docker machines: $ docker-machine ls NAME ACTIVE DRIVER STATE URL SWARM

Google App Engine Node.js TLS 1.2

不羁岁月 提交于 2019-12-06 03:40:23
问题 Our application hosted on Google App Engine Node.js (Flexible Environment). We are now under review of security inspection and failing on the issue that Google App Engine supports TLS 1.0 and 1.1 versions. Is there a way to enforce the use of only TLS 1.2? And also block ciphers that are below 128 bit? 回答1: I've not tried this so I can't guarantee it would work, but it seems like you could use a HTTP(S) Load Balancer. The SSL policies are configurable such that it would likely meet the

PHP Sockets with SSL / TLS - no suitable shared cipher could be used

送分小仙女□ 提交于 2019-12-05 22:55:18
I am attempting to create a server and client using PHP Sockets with SSL / TLS. However, when sending data to the server, I receive the following error: PHP Warning: stream_socket_accept(): SSL_R_NO_SHARED_CIPHER: no suitable shared cipher could be used. This could be because the server is missing an SSL certificate (local_cert context option) in server.php on line 32 I've looked at other examples and tried various changes to no avail. Any help could be much appreciated. client.php <?php $host = '192.168.10.10'; $port = 8080; $timeout = 30; $cert = 'assets/cert.pem'; $context = stream_context