Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [gnutls]

33 questions
7
votes
4 answers

How to change libcurl SSL backend from gnutls to openssl on Ubuntu server

I am getting gnutls specific errors in my Tornado webserver while processing Google OpenID SSL responses. One of the suggestions I got from Tornado mailing list is to try OpenSSL backend instead of gnutls. But it doesn't seem to be straightforward…
Jayesh
  • 327
  • 1
  • 4
  • 12
6
votes
3 answers

TLS: Error while reading file

I'm setting up a new server with Debian 8. Exim4 is preinstalled and I'm trying to get TLS working. I have copied the snakeoil key and cert into the /etc/exim4 folder and set the correct permissions and ownership: -r--r----- 1 root Debian-exim …
muz the axe
  • 201
  • 2
  • 7
5
votes
3 answers

Configure exim4 to use Microsoft Exchange as smarthost

My company has set recently set up an Active Directory driven Microsoft Exchange environment to consolidate outgoing mails. We do have a set of staging servers which should now use our MSEXCHG as smarthost for outgoing mail. These servers are…
Christian Kiewiet
  • 111
  • 1
  • 6
5
votes
2 answers

exim4 is showing a TLS error on connection... (gnutls_handshake)

My exim server is showing the following error: TLS error on connection from xxxx.xxxx.xxxx. ([127.0.0.1]) [xxx.xxx.xxx.xxx] (gnutls_handshake): A TLS fatal alert has been received. I'm using the plain authentication and my settings are…
John Mathew
  • 51
  • 1
  • 1
  • 3
4
votes
2 answers

How do I force my Debian system to update GnuTLS?

After the news broke that GnuTLS is broken hacker news | arstechnica I would like to know how to find out if my system(s) Debian 7.1 Stable & Debian 7.1 Testing are safe and more specifically how to update & upgrade them. There are many tools that…
denjello
  • 143
  • 1
  • 6
3
votes
2 answers

Configure OpenLDAP using GnuTLS with TLS=required

We have an openldap server and don't want to allow unencrypted communication, so acceptable is either tls over port 389 (starttls) or ssl over 636 (ldaps). As we use slapd.conf for configuration, olcSecurity isn't an option. TLSCipherSuite seems to…
blockbax
  • 33
  • 1
  • 5
3
votes
1 answer

exim4 gnu_tls cipher configuration for incoming connections to gmail

On the Debian 7 / exim4 / gnutls mailserver I'm running, since about 1-2 weeks, mails from gmail don't arrive any more with the following typical error message in the log file: 2015-02-14 17:32:07 TLS error on connection from…
LaTechneuse
  • 161
  • 6
3
votes
1 answer

Is it possible to configure ECDHE-ECDSA with mod_gnutls and Apache 2?

I'm trying to configure my Debian box with mod_gnutls implementation (for sake of SNI), to achieve best possible results in TLSv1.0/1.1/1.2 (disregarding both SSL2 and SSL3) However it seems to me, that it's not possible to use ECDHE-ECDSA/ECDHE-RSA…
Marek Sebera
  • 271
  • 3
  • 16
3
votes
1 answer

GNUTLSClientVerify does not block unrecognized CAs

I have installed Apache on Ubuntu, installed GNUTLS module and everything worked fine: root@ilnwad15:~# apache2 -v Server version: Apache/2.2.22 (Ubuntu) Server built: Jul 12 2013 13:37:15 Now, I want that on port 1443, if the CA of the client…
boaz_shuster
  • 131
  • 5
3
votes
1 answer

Cannot Connect to Surry to get Php8

My system is Debian Buster: ~# lsb_release -a No LSB modules are available. Distributor ID: Debian Description: Debian GNU/Linux 10 (buster) Release: 10 Codename: buster I have run the following commands attempting to install Php…
Belle 'Sandon' Ling
  • 31
  • 3
2
votes
1 answer

Is it possible to make OpenSSL work with gnutls?

I have libvirt, one client and one server. Libvirt uses gnutls implementation of tls. I want to use mitmproxy and put in the middle between client and remote server. But mitmproxy uses different implementation of tls - openssl. I read that their…
Anastasiya Ruzhanskaya
  • 123
  • 5
2
votes
1 answer

vsftpd LIST causes GnuTLS error -15

I have an Arch Linux system running vsftpd which has been functioning with FTPES for the past year now. Within the past two days, I have noticed that all of my FTP clients fail to connect over FTPES. When I connect using FileZilla 3.17.0 on…
Kyle
  • 383
  • 1
  • 2
  • 11
2
votes
1 answer

Configure Apache2 webserver using mod gnutls error

The apache2 mod_gnutls https service actually manages to successfully run but keeps returning this error when trying to read private key from pkcs11 URL: [Wed Jan 20 13:26:25.268236 2016] [gnutls:emerg] [pid 5232:tid 140334984677248] GnuTLS: Failed…
lkn2993
  • 123
  • 3
2
votes
1 answer

Download an SSL certificate from a remote website through a proxy

I want a script checking my server's certificate. There are very good answers around here how to get this with openssl s_client or gnutls-cli, which works fine.... but NOT if you are behind a proxy! Doh! I did not found a possibility to tell these…
avh
  • 41
  • 1
  • 3
2
votes
1 answer

Apache/GnuTLS: can't get multiple TLS-enabled virtual hosts to work

A while ago, I set up an SSL certificate authority for our intranet, generated a bunch of certificates and ran a number of sites with them, all on the same physical host with one single Apache2 installation; one root certificate and one certificate…
ssc
  • 1,129
  • 3
  • 16
  • 30
1
2 3