tls1.2

System.Net.SecurityProtocolType.Tls12 definition not found

青春壹個敷衍的年華 提交于 2019-12-05 15:16:44
I'm trying to add the following line of code to the Global.asax file in a website project. System.Net.ServicePointManager.SecurityProtocol = System.Net.SecurityProtocolType.Tls12; The vs2012 IntelliSense is showing that Tls12 definition exist. But the build is saying that the definition does not exist (See screen shot). I've tried adding System.Net.dll to the bin folder of the project, but the build still failed. Any idea how I might be able to resolve this? SecurityProtocolType.Tls11 and SecurityProtocolType.Tls12 enum values are missing on Framework 4.0 only. SecurityProtocolType numeric

Openssl: certificate verification fails when CApath argument is used in SSL_CTX_load_verify_locations API

女生的网名这么多〃 提交于 2019-12-05 13:39:47
I am trying to establish a TLS connection to a server machine. I have created the root CA certificate and the server certificate using openssl CLI commands. I created the server certificate with common name same as its IP address. The common name of the root CA certificate is the FQDN of the server. I am using openssl library APIs to establish connection to the server. I am using the API int SSL_CTX_load_verify_locations(SSL_CTX *ctx, const char *CAfile, const char *CApath) for setting the CA file look up path. Everything works fine when I use the CAfile argument to specify the path of my CA

Hyperledger Fabric SDK - https & TLS Cert / Key

梦想与她 提交于 2019-12-05 13:09:09
Note: I am using the Go SDK, but this should apply to Node, Java, etc. SDKs. I am using a fabric-ca instance as my Certificate Authority, and for a realistic production environment I need to use a secure connection. Based on the config-e2e.yaml example configuration file [1], we should be able to use https in the CA url. Example: certificateAuthorities: org1-ca: url: https://localhost:7054 However, once https is required, the SDK requires that the TLS cert/key filepath is added in the client section [1]: tlsCACerts: # Comma-Separated list of paths path: {filepath} # Client key and cert for SSL

Android <= 4.4.2 and TLS 1.2

筅森魡賤 提交于 2019-12-05 10:38:39
问题 I did an app for a company and it supported API level 13+ (3.0+). It collects data from their CMS via XML and displays it on the app. This is done over HTTPS which worked fine until they upgraded their server to TLS 1.2. Now android versions below API level 20 won't fetch the XML because of SSLPeerUnverifiedException and a whole lot of phones can't see this app anymore. Is there a way to get past SSLPeerUnverified while leaving TLS 1.2 enabled? Note: The current SSL certificates are as

Configured SSL on Tomcat 8 and Connection Times Out

霸气de小男生 提交于 2019-12-05 09:51:47
I setup a keystore and got a SSL cert from openssl.com. The exact steps I followed are here: https://drive.google.com/file/d/0B6PUGo7cBLcDTzdkc0pzT2pTMk0/view?usp=sharing Unfortunately even after following their instructions for tomcat exactly and working with customer support my https connection times out. It seems like tomcat is up and running, listening on port 443, but I don't know how to debug deeper. Http requests are served just fine, so I know tomcat itself is working just fine. [ec2-user@ip- logs]$ sudo netstat -tunlp | grep 443 tcp6 0 0 :::443 :::* LISTEN 19407/java [ec2-user@ip-

Kubernetes. HTTPS API return `Unauthorized`

帅比萌擦擦* 提交于 2019-12-05 07:17:33
Kubernetes API request curl https://192.168.0.139 --cacert /home/mongeo/ku-certs/ca.pem return Unauthorized Request curl localhost:8080 worked good. My kube-proxy and kube-apiserver standart ( coreos+k8s tutorial ) How do I get data on HTTPS? Eric Tune Did you specify --token-auth-file=<file> and/or --basic-auth-file=<otherfile> or one of the other authentication modes? I don't know that https endpoint will work without one of these (maybe it should, but it doesn't, apparently). Check out https://kubernetes.io/docs/admin/authentication/ SyamAhmad Hi this is what I did for token, Find address

Signing certificate request with certificate authority

一笑奈何 提交于 2019-12-05 05:05:28
I want to use TLS mutual authentication to authenticate a client on a API made in go. I've created a certificate authority, and let's say Bob has a key pair he wants to use with the client. Bob created a certificate request and want me to validate his certificate in order to be authorized and authenticated on the API. I've used this to create my Certificate Authority : openssl genrsa -aes256 -out ca.key 4096 openssl req -new -x509 -sha256 -days 730 -key ca.key -out ca.crt Bob used this to create his certificate and certificate request : openssl genrsa -out bob.key 4096 openssl req -new -key

How to detect an end of stream properly, when TLS PSK encryption is used?

不想你离开。 提交于 2019-12-05 04:39:30
问题 I have prepared a simple TLS PSK client test case based on MockPSKTlsClient by Bouncy Castle. In the main method I call: public static void main(String[] args) throws IOException { SecureRandom random = new SecureRandom(); TlsPSKIdentity identity = new BasicTlsPSKIdentity("Client_identity", Hex.decode("1A1A1A1A1A1A1A1A1A1A1A1A1A1A1A1A")); Socket socket = new Socket(InetAddress.getLocalHost(), 12345); TlsClientProtocol proto = new TlsClientProtocol(socket.getInputStream(), socket

How to Enable TLS 1.2, 1.1,1.0, and SSL in iOS app?

蹲街弑〆低调 提交于 2019-12-05 04:07:06
My question is related to Apple Transport Security (ATS) and I am too much confused. I want to support all the protocols (all version of TLS and SSL) in my swift app. If I change NSAllowsArbitraryLoads to false, will app work on all protocols by default? Or do I have to specify domain in configuration and add NSExceptionMinimumTLSVersion? <key>NSAppTransportSecurity</key> <dict> <key>NSAllowsArbitraryLoads</key> <false/> <key>NSExceptionDomains</key> <dict> <key>your.servers.domain.here</key> <dict> <key>NSIncludesSubdomains</key> <true/> <key>NSExceptionRequiresForwardSecrecy</key> <false/>

TLS v1.2 ciphers to use in PHP NUSOAP SoapClient

我与影子孤独终老i 提交于 2019-12-05 03:29:06
I want to connect to a server that only supports TLS 1.2. What possible ciphers can I specify to stream context in the PHP NUSOAP SoapClient creation? <?php $objSoapClient = new SoapClient( "https://example.com/?wsdl", array( "encoding"=>"ISO-8859-1", "stream_context"=>stream_context_create( array( "ssl"=>array("ciphers"=>"<????>") ) ) ) ); ?> TLS v1.2 is described in RFC5246 , you can read it here . List of ciphers you can find in openssl wiki , use the second line without trailing 256 . You can manually get a list of ciphers used by running openssl ciphers -v | grep -v 'TLSv1.2' on the