Dennis Faas's picture

How to Fix: OpenVPN 'SSL_CTX_use_certificate:ca md too weak'

Infopackets Reader Steve T. writes: " Dear Dennis, I recently upgraded my OpenVPN from version 2.3.2 (back in 2014) to the latest version 2.4.6, but now my OpenVPN server is broken. I checked the log files and it says ' SSL ... routines:SSL_CTX_use_certificate:ca md too weak ', followed by 'Cannot load certificate file /path/cert.crt'. I have tried embedding my certificates inside the server.ovpn file (rather than having it point somewhere externally), but that does not help. It simply won't load the certificate. I've researched this issue for days and keep coming across a forum post on the ... (view more)

Dennis Faas's picture

Explained: How to Send and Receive Encrypted Emails (Easily!)

Infopackets Reader Tom G. writes: " Dear Dennis, I am trying to send encrypted email to a friend using MS Outlook . To do so, I purchased a digital certificate from Comodo, then imported the certificate into Outlook. I could send my friend digitally ... signed messages which he could read and reply to. He could send me digitally signed and encrypted messages, which I could read and reply to. However, I could not generate an encrypted message; I could only reply to his. I could not create an encrypted message from scratch. When attempting to initiate an encrypted message, I was told ' Microsoft ... (view more)

Dennis Faas's picture

How to Fix: Send Encrypted Email to Gmail (Postfix, TLS, SSL Certificates)

Infopackets Reader Martin R. writes: " The email newsletter I receive from you is showing in my gmail as "unencrypted," with a red pad lock . There is also a new warning banner that says: 'Be careful with this message. It contains content that's ... typically used to steal personal information.' The options are: learn more, report this suspicious message, ignore, or 'I trust this message.' This is not the only email I get that shows as unencrypted. What does this mean and how can it be fixed? " My response: Essentially it means that the mail you received (at gmail) was not sent using email ... (view more)

Subscribe to RSS - tls