tls1.2

iOS 9 app download from Amazon S3 SSL error: TLS 1.2 support

折月煮酒 提交于 2019-11-29 22:09:06
I get An SSL error has occurred and a secure connection to the server cannot be made. on iOS 9 if I try to download a file from amazon s3: https://s3.amazonaws.com/xyz/qer/IMG_0001.JPG From what I understand Amazon s3 supports TLS 1.2 see: https://forums.aws.amazon.com/thread.jspa?threadID=192512 S3 and Kinesis support TLS 1.2 at this time. "S3 and Kinesis support TLS 1.2 at this time." Aug 23, 2015 9:19 PM Not sure then why do I get this SSL error. The account should be configured to take advantage of TLS 1.2? I would've guessed that this should be 'on' by default. I don't want to put this

TLS 1.2 was supported in Java 8 but not in Java 7

ぐ巨炮叔叔 提交于 2019-11-29 15:04:10
When I tried to connect a URL (one of vendors URL which supports TLS 1.2 and worked fine previously with Java 7) by using Java 7, I found bellow Exception: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure at sun.security.ssl.Alerts.getSSLException(Alerts.java:192) at sun.security.ssl.Alerts.getSSLException(Alerts.java:154) at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:1943) at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1059) at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1294) at sun.security.ssl

Non-RSA TLS1.2 Packet decryption

心已入冬 提交于 2019-11-29 12:55:54
I am trying to decrypt a pcap file. This pcap file contains a capture of an HLS encrypted video stream. The pcap contains TLSv1.2 packets. Below are some information from the pcap file Server Hello message Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384. EC Diffie-Hellman server Params: pubkey (1) The Certificate Status message: Signature Hash Algorithm Hash: SHA256 Signature Hash Algorithm Signature: ECDSA Client Key Exchange Message EC Diffie-Hellman server Params: pubkey (2) I tried to follow this Wireshark SSL decryption tutorial . But it seems that it works only for RSA encryptions.

Ubuntu, Docker - proxyconnect tcp: tls: oversized record received with length 20527

你离开我真会死。 提交于 2019-11-29 07:42:22
I am running a docker binary I built (following this ) and when I do a docker pull , I get this error. Error response from daemon: Get https://registry-1.docker.io/v2/ : proxyconnect tcp: tls: oversized record received with length 20527 I have set the proxy as mentioned here , and the pull works fine with the default daemon and the same proxy settings. Changing DNS to 8.8.8.8 doesn't seem to help. ping registry-1.docker.io results in 100% packet loss. docker info gives this Containers: 0 Running: 0 Paused: 0 Stopped: 0 Images: 0 Server Version: dev Storage Driver: vfs Logging Driver: json-file

How to enforce TLS1.2 to Rest client using Rest Template

◇◆丶佛笑我妖孽 提交于 2019-11-28 20:53:29
I am consuming json webservice using Spring3.0 restTemplate by calling post method. MultiValueMap<String, String> headers = new LinkedMultiValueMap<String, String>(); headers.add("Content-Type", MediaType.APPLICATION_JSON_VALUE); HttpEntity<Object> entity = new HttpEntity<Object>(requestAsString, headers); postForObject = restTemplate.postForObject(url, entity, responseClass ); Our application is deployed in WAS server and trying to connect producer by creating socket connection with TLS1.0. However, now producer only supports TLS1.1 and TLS1.2. How to enforce restTempate to use TLS1.1 or TLS

iOS 9 app download from Amazon S3 SSL error: TLS 1.2 support

两盒软妹~` 提交于 2019-11-28 18:29:25
问题 I get An SSL error has occurred and a secure connection to the server cannot be made. on iOS 9 if I try to download a file from amazon s3: https://s3.amazonaws.com/xyz/qer/IMG_0001.JPG From what I understand Amazon s3 supports TLS 1.2 see: https://forums.aws.amazon.com/thread.jspa?threadID=192512 S3 and Kinesis support TLS 1.2 at this time. "S3 and Kinesis support TLS 1.2 at this time." Aug 23, 2015 9:19 PM Not sure then why do I get this SSL error. The account should be configured to take

.Net Framework 4.6.1 not defaulting to TLS 1.2

…衆ロ難τιáo~ 提交于 2019-11-28 16:41:06
Our client have recently upgrade the security protocol to TLS 1.2. Therefore We have our application upgraded to 4.6.1 expecting the security protocol will be default to TLS 1.2 but it is not. Any idea why? Kartik Gupta I had a similar problem and this is what worked for me. open Powershell and check for supported protocols by using [Net.ServicePointManager]::SecurityProtocol Run the following 2 cmdlets to set .NET Framework strong cryptography registry keys : set strong cryptography on 64 bit .Net Framework (version 4 and above) Set-ItemProperty -Path 'HKLM:\SOFTWARE\Wow6432Node\Microsoft\

Set option 9 in SQL Server stored procedure using WinHttp.WinHttpRequest.5.1 for TLS 1.2

瘦欲@ 提交于 2019-11-28 14:29:08
I am trying to connect to a web service that only supports TLS 1.2. I'm having trouble with the syntax for setting option9 ( WinHttpRequestOption_SecureProtocols ) to use TLS 1.2 I've tried EXEC sp_OASetProperty @objectID, 'Option', '2720', 9 but no dice. Not because it's a good idea, but so that no one else has to figure out how to use the horrid sp_OAxxx stored procedures... Here's an update to my ancient HTTP stored procedure to use both WinHttp and set that option. The Option property is an "indexed property" so calling it with sp_OASetProperty is wierd. create or alter procedure get_http

Handling App Transport Security (kCFStreamErrorDomainSSL, -9802)

家住魔仙堡 提交于 2019-11-28 12:14:44
You run this code: let URL = "https://www.nasa.gov/sites/default/files/wave_earth_mosaic_3.jpg" let imageData = NSData(contentsOfURL: NSURL(string: URL)!) UIImage(data: imageData!) and you get this: 2015-09-11 16:33:47.433 Cassini[21200:447896] NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9802) Digging a bit deeper shows SHA1 signature is used. maximveksler$ openssl s_client -connect www.nasa.gov:443 < /dev/null 2>/dev/null | openssl x509 -text -in /dev/stdin | grep "Signature Algorithm" Signature Algorithm: sha1WithRSAEncryption Signature Algorithm:

Authenticating rabbitmq using ExternalCredentials

橙三吉。 提交于 2019-11-28 11:15:08
问题 I have a rabbitmq server and use the pika library with Python to produce/consume messages. For development purposes, I was simply using credentials = pika.PlainCredentials(<user-name>, <password>) I want to change that to use pika.ExternalCredentials or TLS. I have set up my rabbitmq server to listen for TLS on port 5671, and have configured it correctly. I am able to communicate with rabbitmq from localhost, but the moment I try to communicate with it from outside the localhost it doesn't