The syncing machine does not trust the certificate chain it is shown: install the organisation's CA certificate into the environment the CLI uses, or point the SDK at the CA bundle with the standard SSL environment variables. Use when wandb sync of an offline run from a corporate or cluster machine. Not for a genuinel…
Fixes this failure: inspect the TLS handshake to that partner domain: check certificate expiry and name match on their receiving servers, your gateway's TLS version and cipher offer. Use when the exact error or symptom in the title appears. Not for a different error, tool, or a manual process with no such failure.
The syncing machine does not trust the certificate chain it is shown: install the organisation's CA certificate into the environment the CLI uses, or point the SDK at the CA bundle with the standard SSL environment variables. Use when wandb sync of an offline run from a corporate or cluster machine. Not for a genuinel…
Fixes this failure: correct the server clock and time service first, then update the root certificate store and check TLS 1.2 is enabled. Use when the exact error or symptom in the title appears. Not for a different error, tool, or a manual process with no such failure.
Fixes MTA-STS policy fetch failures and TLS-RPT starttls errors by correcting the policy file hosting, the DNS record, and the certificate on the mail host. Use when TLS reports show inbound starttls failures for your domain. Not for outbound TLS failures to a single recipient domain.
Fixes a failure in TLS certificate for the custom domain: verify the cname target, remove stale dns records, and re-provision the certificate from the statuspage custom domain settings once dns propagates. Use when this exact error blocks an incident update or public status change. Not for general status page setup or…
Fixes a patch agent sync failing because the TLS certificate for the update server (WSUS, SUP, or an internal repository) expired mid-cycle, so TLS validation kills the connection. Use when sync errors begin abruptly with certificate expiry messages. Not for a client clock problem that makes valid certificates look ex…
Fixes gobuster failing with the first record does not look like a TLS handshake error by matching the URL scheme to the actual service on an authorized target. Use when gobuster dir or vhost mode hits this TLS error on an in-scope host. Not for genuine certificate validation failures, which produce a different message.
Vectle found the following relevant skills: - how to fix gobuster "tls: certificate is not standards compliant" on authorized lab - Cloudflare Errors 525/526: the origin TLS handshake is broken
Vectle found the following relevant skills: - how to fix gobuster "tls: certificate is not standards compliant" on authorized lab - Cloudflare Errors 525/526: the origin TLS handshake is broken
Stops an agent from reporting directories that a failed gobuster run never actually found on an authorized target. Use when the findings list contains paths with no evidence in the raw tool output. Not for gobuster returning real false positives like wildcard matches.
Vectle found the following relevant skills: - agent timed out waiting for gobuster recursive scan; the scan failed on large authorized site - agent hallucinated seat counts from a truncated CSV, audit failed
Fixes Karate SSLHandshakeException failures against test environments with self-signed certificates. Use when Karate API tests fail on TLS handshake in test but pass against production-like environments. Not for hostname verification issues in real certificates.
Stops an agent from losing a whole gobuster recursive scan to one timeout on a large authorized site. Use when recursive directory enumeration explodes in scope and the run dies with nothing saved. Not for gobuster failing to connect.
Vectle found the following relevant skills: - agent timed out waiting for nmap full-port scan; the scan failed on authorized subnet - a11y scan agent timed out waiting for web font load error
Fixes a failed mTLS handshake against an origin server where the client presented the wrong client certificate. Shows how to capture exactly which cert the client sent, verify the cert/key pair matches, check the origin's acceptable-CA list, and point the test at the right files. Use when an mTLS test or agent probe f…
Vectle found the following relevant skills: - agent's mTLS client certificate expired mid-pipeline run - agent generated the client from the provider's OpenAPI spec - the spec's examples were wrong and every happy-path...