Questions tagged [sslv3]

SSLV3 is the Secure Sockets Layer ([tag:SSL]) Version 3, are cryptographic protocols that provide communication security over the Internet. SSL V3 has reached end of life and has been deprecated in favor of Transport Layer Security ([tag:TLS]).

SSLV3 is the Secure Sockets Layer () Version 3, are cryptographic protocols that provide communication security over the Internet. SSL V3 has reached end of life and has been deprecated in favor of Transport Layer Security ().

109 questions
11
votes
2 answers

How to tell if boto is using SSLv3 or TLS?

Amazon is sunsetting SSLv3 support soon, and I am trying to verify that boto is utilizing TLS. Is there a good way to verify this? Or is there a good test to show TLS utilization?
ashchristopher
  • 25,143
  • 18
  • 48
  • 49
8
votes
1 answer

SSL handshake failure with TLS 1.3

curl fails with openssl version 1.1.1d butt works fine with OpenSSL/1.0.1t. I am trying to debug the reason and unable tto find one. Please find below trace from curl logs. Failure case (curl 7.64.0 (x86_64-pc-linux-gnu) libcurl/7.64.0…
SunilS
  • 2,030
  • 5
  • 34
  • 62
8
votes
1 answer

Why does Volley fall back to SSLV3?

i am constantly monitoring my app errors and I see the following error too many times javax.net.ssl.SSLHandshakeException: javax.net.ssl.SSLProtocolException: SSL handshake aborted: ssl=0xb8f0fc28: Failure in SSL library, usually a protocol…
7
votes
3 answers

Php curl set ssl version

Since 3 days I can't connect to the paypal sandbox. I found out that they maybe dissabled the support for SSLv3. So i tried to change the SSL Version in my curl Request by setting : curl_setopt($curl, CURLOPT_SSLVERSION,1); # 1 = TLSv1 But it still…
Ephenodrom
  • 1,797
  • 2
  • 16
  • 28
5
votes
2 answers

Enable SSLv3 in nginx on debian server

For some demonstration on HTTPS weakness, I'd like to enable SSLv3 on one sub domain of my webserver. I use nginx 1.12.2 on debian 8, and already tried to add the following line ssl_protocols SSLv2 SSLv3 TLSv1 TLSv1.1 TLSv1.2; and then a sudo…
zarak
  • 663
  • 1
  • 6
  • 16
5
votes
3 answers

Disable SSLv3 on Nginx

Why on my server still enabled SSLv3 ? I want to disable for reasons that in some computers can not open my page because of safety issues. I found this guide: But currently I've got it set. My server is hosted in Google Cloud, I currently have…
5
votes
3 answers

websphere + SSLv3 SSLContext not available

I have a java application that is using hibernate to do a JNDI lookup for the datasource in Websphere Application Server which then talks to a MSSQL database. The security team has recently patched the Websphere server 8.5.5.4 to disable SSLv3. As…
Coola
  • 51
  • 1
  • 2
5
votes
1 answer

Enable TLS 1.2 on windows server 2008 R2

I am trying to enable TLS 1.2 on windows server 2008 R2. I have made registry entries to enable TLS 1.2 as mentioned in below link : http://forums.iis.net/t/1201043.aspx. I have also tried powershell script in link :…
Anil Sharma
  • 275
  • 1
  • 6
  • 16
5
votes
1 answer

"SSL23_GET_SERVER_HELLO:unknown protocol" Error Trying to Reach Outlook smtp Server

I'm trying to send emails from an Outlook account in my iOS application. I'm using Mailcore2 and Outlook's Live-SDK. I am able to receive emails, but get an error when I try to send emails: "a stable connection to the server could not be…
jac300
  • 5,182
  • 14
  • 54
  • 89
4
votes
2 answers

SSL handshaking fails

Strange situation: there is an android app. Before it was working directly to apache2. Recently I've tried to use nginx as a reverse proxy. Application stopped working. Debug on nginx log shows "SSL_do_handshake() failed (SSL: error:14094416:SSL…
b.mazgarov
  • 149
  • 1
  • 1
  • 5
4
votes
0 answers

Simple, possibly one-liner tool to proxy http or https (SSLv2) to https (SSLv3)

Quite often I have to access old sites using Sslv3 or other old, deprecated, SSL protocols. Most of them are appliance that are not easy to update (storage controllers, tape controllers...). Unluckily latest browsers on Linux (chrome and firefox)…
d3k
  • 599
  • 1
  • 5
  • 10
4
votes
0 answers

override http.ssl_version to TLSv1 not working

I am trying to force Ruby's net/http and net/https to use TLSv1 instead of SSLv3. I have read a lot of articles which say that you can do this with one of: http.ssl_version = :TLSv1 http.ssl_version = "TLSv1" but neither seems to work, I keep on…
opensource-developer
  • 2,826
  • 4
  • 38
  • 88
4
votes
1 answer

Change ssl version with Net::HTTP and Ruby 1.8.7

One of my legacy Ruby application still uses Ruby 1.8.7. It makes a lot of HTTP requests on third-party web services and some of them are over SSL. Those third-party services are dropping their support of SSLv3 as of the POODLE vulnerability and I'd…
jlecour
  • 2,905
  • 1
  • 25
  • 24
4
votes
1 answer

Dropwizard TLS and SSL: deactivate SSLv3

Does someone know how to deactivate SSLv3? Does someone know if DW supports SSLv3 or how I can check what is supported by DW 0.7.1?
user3280180
  • 1,393
  • 1
  • 11
  • 27
4
votes
1 answer

TLS sslv3 hankshake error

I use a Tcl script to pull from several API's and all of a sudden some API's stopped working. eg: set data [http_call_get https://api.vineapp.com/timelines/popular?page=1&anchor=1] responds with the error: SSL Channel "sock624": error: sslv3…
vinniyo
  • 787
  • 2
  • 8
  • 21
1
2 3 4 5 6 7 8