-
As witnessed, e.g., by #12140 and #12141, OpenSSL is too sloppy with checking key usages, at least for SSL/TLS use.
* For server certs, `check_purpose_ssl_server()` in `v3_purp.c` is happy with any…
DDvO updated
5 months ago
-
**Is your feature request related to a problem?**
Observed here https://github.com/opensearch-project/security/issues/4144 and https://github.com/opensearch-project/security/issues/1763
Currently …
-
The current implementation of SSL certs capture:
- Happens out-of-band, in a distinct capture step
- Uses [crip](https://github.com/Hakky54/certificate-ripper)
While the current setup is extreme…
-
I'm using `snowflake-sdk` with NodeJS to connect and run simple show tables query and it works when running directly against snowflake API. However, trying to run `universql` with docker-compose (no c…
-
I saw that support for SSL bundles was added to the actuator `info` and `health` endpoints in https://github.com/spring-projects/spring-boot/pull/41205 and I think it would be really helpful to make…
-
Chrome doesn't accept the certificate generated by the proxy. It sends the Certificate Unknown (46) fatal TLS alert after receiving server hello. Always reproduces on Linux and Android
-
Server seems to have this new ssl certificate now:
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgIQDFAZC2FU7HPzSy83FS09MzANBgkqhkiG9w0BAQsFADA8MQswCQYDVQQG
EwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDE…
-
In haproxy deploy script I had to remove -e after echo otherwise I receive "unknow command -e" and certificate is not deployed nor committed to haproxy socket
Line 359 changed from this
`_socat_ce…
-
### Your Feature Request
I'd like to propose that haproxy adds support for [RFC 9440 Client-Cert HTTP Header Field](https://www.rfc-editor.org/rfc/rfc9440.html).
This RFC specifies two HTTP head…
-
12:45:20.705] ERROR: NS train schedule[Script Filter] Code 1: Traceback (most recent call last):
File "/Library/Frameworks/Python.framework/Versions/3.7/lib/python3.7/urllib/request.py", line 1350,…