18 questions from the last 30 days
-3
votes
0
answers
90
views
How does TLS 1.3 derive a shared secret? [closed]
I am writing a bare minimum HTTPS/TLS 1.3 server in C. Currently I want it to work an just the bare minimum spec:
X22519 key establishment
AES 128 GCM encryption
Self signed certificate
I find ...
0
votes
0
answers
48
views
Java Apple KeyStore or SSL TrustManager which trusts certificates from both admin and root keychains
Running security dump-trust-settings -d on my MacBook shows some company-specific certificates that I want Java's TrustManager to trust when creating SSL/TLS connections to internal company servers. I ...
3
votes
1
answer
150
views
Custom Security Provider works in fat jar but not in GraalVM native image while extracting PostgreSQL server certificates
I am trying to extract the public certificate of any PostgreSQL database. I got it working with plain java as a library and as a standalone fat jar, but not in a native-image build with GraalVM. I ...
5
votes
1
answer
116
views
How to disable certain certificate types in Java SSL handshake
I have a Spring Boot 3.4.10 application written in Java 25 that authenticates via an SSL handshake. I'm using server.ssl.bundle to setup TLS within Spring Boot.
The snippet below is from the server ...
3
votes
1
answer
138
views
How to disable certain handshake features
When looking at PCAP traces of Java TLS handshake, I can see details in Server Hello like this:
Signature Algorithm: SHA224 DSA (0x0302)
I would like to disable it, so server application does not ...
0
votes
1
answer
58
views
Spring Kafka consumer stops consuming after 1–2 days with ExpiringCredentialRefreshingLogin logs
I have a Spring Kafka application with a single consumer. The Kafka client authentication is configured using SASL/OAUTHBEARER over SSL, as shown below:
authProps.put(SaslConfigs.SASL_MECHANISM,...
-1
votes
1
answer
70
views
Different .NET 8 runtime behaviour based on different SDK used [closed]
Opening bounty for wierd behaviour of .NET SDK/runtime. DotNet team remains silent
https://github.com/dotnet/sdk/issues/38325
Reproducible sample:
FROM mcr.microsoft.com/dotnet/sdk:8.0 AS build
...
1
vote
1
answer
73
views
Configure jax-ws in Glassfish not to supply client certificate in SSL handshake
I have built a jax-ws web service client using the jaxws-maven-plugin. It is failing when I use it from a Glassfish 7.0.25 server with Java 21.
I'm calling a SAP server which only validates the client ...
1
vote
2
answers
136
views
TLS in Perl REST request
This curl command works fine (must be accessed in tls 1.3):
curl -v --tlsv1.3 -u "xxxx":"xxx" -X POST "https:xxxxxxx"
Try to get the same result with Perl. Created a ...
1
vote
0
answers
54
views
How to disable PSA Crypto in Mbed TLS 3.x and build a minimal classic TLS + X.509 configuration?
I am working with Mbed TLS (latest release) on an embedded target and I want to disable all PSA Crypto / PSA driver layers completely and instead build the classic pre-PSA Mbed TLS stack (i.e., using ...
0
votes
2
answers
67
views
MariaDB / QMySqlDriver connection without SSL got 2026 error
My problem:
A MariaDB-Server is running in a LAMPP-Installation
It runs by default without SSL.
A Qt-Application (both 5.15.2 and 6.10.1) with loaded QMARIADB-Driver tried to open a connection to the ...
0
votes
1
answer
109
views
502 error with NGINX and Cloudflare - 2 servers [closed]
I've tried much of the advice I've found on here, and it hasn't worked so far.
Here's my network flow:
HTTPS -> Cloudflare -> NGINX (server 1) -> Apache (server 2) -> WordPress
Here are my ...
1
vote
2
answers
103
views
Azure linux function app to IBM MQ using IBMMQDotnetClient 9.4.2
Scenario: I've an azure function app(event hub trigger) which needs to connect to SSL enabled IBM MQ server.
I'm using IBMMQDotnetClient 9.4.2 nuget package and I've installed a pfx cert in local(...
Advice
0
votes
2
replies
90
views
PKIX path building failed: unable to find valid certification path — How to load PEM certificate into truststore at runtime in Spring Boot?
I am getting the below SSL error when my Java (Java 21, Spring Boot 3/4) application makes a REST call to a gateway:
Internal server error: (certificate_unknown) PKIX path building failed:
sun....
-1
votes
0
answers
103
views
Flutter + Firebase not working when device is connected to certain VPNs (SSLHandshakeException, ERR_CONNECTION_CLOSED)
I'm seeing a consistent issue across multiple Flutter apps, not just one project.
Whenever the user's mobile device (Android or iOS) is connected to specific VPN providers, the Flutter app fails to ...