The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
1answer
66 views

SSL chain verification problems - Barracuda load balancer

I've installed a new SSL certificate using SHA1 hashing. Im user a security certificate by GeoTrust SSL CA - G2 but With WebServices communications I'm getting a PKIX error. The follow page: ...
4
votes
2answers
80 views

Beginning a company's digital certificate infrastructure [closed]

What type of digital certificate product do I need to begin a digital security infrastructure within my company and for use by our customers (pre-trusted by chaining)? I believe I need some kind of ...
0
votes
0answers
45 views

no local computer physical store, only registry and smartcard

I'm currently encountering an issue whereby i cannot see the "local computer" physical store, under trusted root CA, when attempting to install a cert. Instead the only stores i see are "Registry" and ...
0
votes
2answers
1k views

SSLCertificateChainFile Deprecation Warning on Apache 2.4.8+

We have an SSL Certificate for our website from Network Solutions. After upgrading Apache/OpenSSL to version 2.4.9, I now get the following warning when starting HTTPD: AH02559: The ...
1
vote
1answer
556 views

version 0.9.7a of openssl reports “certificate signature failed”, but version 0.9.8e is happy

I am trying to construct an openssl certificate chain that will work with a standard CentOS 4 install as client. (I know it's very old, but it's what our client is using so we need to support it). ...
1
vote
1answer
217 views

Installing StartSSL certificate in ProFTPD

I am currently experiencing some trouble installing a StartSSL certificate in ProFTPD. These are the files I have: cert.pem - certificate file cert.key - ...
0
votes
2answers
839 views

Installing intermediate certificates in ELB

I had a certificate expire today and needed to get one reissued from GoDaddy. In the past, I've had no trouble using the pem encodings they generate with the ELB SSL interface. However, when I try ...
0
votes
2answers
523 views

Checking the issued and expiry dates for the certificates involved a certificate chain

Is it possible to check the issued and expiry dates for the certificates involved in a certificate chain by just passing a domain? I tired various openssl s_client attributes, but I am not able to ...
2
votes
4answers
3k views

Nginx and client certificates from hierarchical OpenSSL-based certification authorities

I'm trying to set up root certification authority, subordinate certification authority and to generate the client certificates signed by any of this CA that nginx 0.7.67 on Debian Squeeze will accept. ...
0
votes
0answers
140 views

PKI and Direct Access UAG

I have a two tier PKI infrastructure with an offline root CA and two Enterprise Intermediate Certification Authorities setup to auto enroll certificates. I have setup auto enrollment in default ...
3
votes
1answer
703 views

openssl s_client reports certificate OK, but other clients report problems

I have set up a server with a SSL certificate, added the necessary chain, and done the apache set up. I have tested using: openssl s_client -CAPath /etc/ssl/certs -connect www.example.org:443 and ...
1
vote
3answers
140 views

Can I create a chained SSL certificate that is recognized by browsers?

Let's say I have a certificate that is valid for example.com (and backed by a known SSL vendor). I want to be able to have a test version of the domain, test.example.com, that is also secured with an ...
2
votes
2answers
3k views

How to trust a certificate for all users on a citrix server

We have a problem with a specific website which our staff need to access via Internet Explorer on our Citrix server (running Win2K3). When connecting via SSL (a requirement), the site is ...
2
votes
1answer
637 views

What actually happens when I use IIS to generate an SSL certificate, especially during the import operation? Is this the only way?

I get the basic idea of public/private key pairs, but what I don't know is what is the inner workings of what IIS does when generating an SSL key. One thing that makes me think there is more under ...
1
vote
2answers
163 views

Whats the worst than can happen if your EV certificate chain is incorrect?

After having had EV SSL certificate installed a couple months we got an email from GoDaddy telling us the certificate chain was incorrect. They requested we disable 'GoDaddy Class 2 root certificate' ...