The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
18 views

File transfers cause SSLv3 read error bad record mac to personal cloud

This error also occurs when using webDav and also the build in web-browser uploader. When I start the sync client with no upload limit, any file over 50 or so megabytes size produces the following ...
0
votes
2answers
84 views

RapidSSL: domain name does not match the certificate common name or SAN

I'm installing SSL certifcate (RapidSSL) on Amazon AWS (Load balancer). Installation was already completed, but when I test it I get: Wrong certificate installed. The domain name does not match the ...
0
votes
0answers
21 views

How Can I Test If Another Server Certificate is Trusted?

My certificate expired on my server (Server A) and I needed to generate a new one. I've verified the new certificate is updated on Server A, but now my CAS server is timing out when Server A attempts ...
1
vote
0answers
34 views

Owncloud - Proxy changes certificate

I'm running an owncloud server 7.0.2 with apache(Ubuntu host) and configured it to use a self-signed ssl certificate. Everything works fine on my home-PC On an other machine I would like to use the ...
2
votes
3answers
108 views

Steps to produce a self-signed certficate(s) that, after being trusted, will work for two different IPs without a security warning

We have a test server that I'm trying to change over to HTTPS/SSL, and it has both an internal IP and an external IP. We have to use self-signed certificates for this particular server. There was ...
0
votes
0answers
64 views

SSL Certificate error only on host server

I'm running Windows Server 2008 R2 with IIS 7.5. This is in a development environment. I have a self-signed certificate, and a second wildcard server authentication certificate which was issued by ...
0
votes
0answers
52 views

Self Signed SSL Cert - Browser Warning

I generated a new self-signed cert for one of our intranet sites. The old cert expired today. I pushed the new cert out via GPO and deleted the old one. I can see on the client that the new cert has ...
7
votes
4answers
992 views

Why is Windows 2012 R2 not trusting my self-signed certificate?

In a testing environment, I'm currently being held up from testing some things that need to be deployed soon (actually already, but you know how deadlines go...) because Windows refuses to trust the ...
0
votes
1answer
1k views

Sending to gmail with TLS and self signed certificate

Since many provider switched to TLS only connections, I cannot deliver to gmail anymore with a default plaintext postfix setup. My question is, can I use valid TLS / does google accept TLS with a ...
3
votes
2answers
2k views

Is it ok to use self-signed certificates for smtp transport?

By "by ok to use" I mean: are MTA agents receiving emails from my server going to reject my email if not, are they going to make other kind of bad treatment for my emails (marking as spam, unsafe ...
1
vote
0answers
4k views

openssl s_client -connect: 20 error with server signed certificate for client

What I want I want to connect to a server using a given signed certificate (by the company running the server) What I have Ubuntu 12.04 LTS My key and CSR files A signed certificate. It was signed ...
1
vote
1answer
158 views

Apache with self signed certificate, www subdomain hanging when requesting from browser

I created a staging site with a self signed certificate using: mkdir /etc/ssl/wildcard.yourdomain.com cd /etc/ssl/wildcard.yourdomain.com/ openssl genrsa 2048 > host.key openssl req -new -x509 ...
2
votes
1answer
34 views

Certificate generation : root ca needed each time?

I want to create a different (unique), self signed, certificate to distribute to some clients. That way I think that if one is doomed, I just have to delete his certificate without bothering the ...
4
votes
1answer
5k views

Install a root certificate in CentOS 6

I know it has been already asked, but despite many hours of research I couldn't find a working solution. I am trying to install my root certificate in my server, so internal service can bind to each ...
0
votes
1answer
153 views

RD Session Host Configuration doesn't list my SSL certificate

I'm trying to change SSL certificate from auto-generated to another one, e.g. custom self-signed made by makecert. But RD Session Host Configuration snap-in -> Connections -> RDP-Tcp -> ...
0
votes
1answer
94 views

Renewing a self-signed certificate

Is there a way to reset the expiry of a self signed X.509 certificate but keep both the public and the private key as they were? Technically this should be nothing more than a different date for the ...
1
vote
2answers
796 views

Thunderbird not trusting certificate signed with self-signed authority

I have generated a self-signed certificate authority using mydomain.org as the common name. I imported the public certificate using Thunderbird's certificate manager under the "Authorities" tab. So ...
3
votes
2answers
7k views

Renewing SBS2011 Exchange Self-Signed Certificate w/o changing home page in IE?

On a previous server when we used the built in SBS wizard to renew the certificate it worked, however it reset all of the computers on the domain's IE home page to companyweb. Is there a way to do ...
1
vote
1answer
121 views

When do SSL certs require a dedicated IP, and when don't they? [duplicate]

My host has informed me that I need to purchase a dedicated IP from them in order to use a SSL cert I want to buy. I don't believe them. Is there a way to leave them out of the loop and get this done ...
1
vote
2answers
695 views

When to use self-signed certificate with RDWeb?

I want to make sure the users connection is as secure as possible. Our RDWeb server has a .local name (for this question it will be called rdweb.contoso.local) and a public name: rdweb.contoso.com ...
0
votes
1answer
1k views

AWS installing mod_ssl on apache

I tried installing mod_ssl,I used this command apt-get install mod_ssl to install but I got an error saying unable to locate package mod_ssl. After executing the above command, I got below output ...
1
vote
1answer
209 views

SSL certificate for subdomain without domain

I have a webserver in my intranet which can be accessed via subdomain.domain.com and simply subdomain. The SSL certificate is created for subdomain.domain.com which results in a warning as soon as I ...
3
votes
3answers
789 views

Check if root ca certificate is installed

We are having a custom CA for our local-domains. The Root CA certificate is installed on all the corporate machines by default, but sometimes it happens that we have someone here who doesn't have it ...
3
votes
2answers
3k views

Configuring client certificate authentication in apache

I am trying to set up part of a Virtualhost in apache to require client authentication. The VirtualHost in question also acts as a reverse proxy for the actual web server. Here's what I have done: ...
5
votes
4answers
4k views

Can I use Active Directory as a CA for creating test SSL certificates for IIS?

We have an internal test version of our website, which is available (via internal DNS zones) as www.mysite.com.test I'd like to create an SSL certificate for www.mysite.com.test, so that our testers ...
0
votes
1answer
1k views

Apache with a self signed certificate displays wrong certificate

I'm trying to setup Apache to use a self signed certificate but I can't seem to get it working. I've tried many methods and last tried This answer but still ran into the same issue. Safari (And ...
4
votes
5answers
4k views

Ubuntu 12.04 LDAP SSL self-signed cert not accepted

I'm working with Ubuntu 12.04, using OpenLDAP server. I've followed the instructions on the Ubuntu help pages and can happily connect without security. To test my connection, I'm using ldapsearch ...
1
vote
2answers
402 views

Internal Code Signing: Key Distribution, or Certificate Server?

I should first note that we have nobody in IT with significant familiarity with self-signed certification. We have a moderately sprawling network (one forest, many locations), and we are now rolling ...
1
vote
0answers
998 views

EC2 Windows: Certificate for local system with Thumbprint … is about to expire or already expired

I regularly see this error in the Windows Error Log on one of my EC2 instances: Certificate for local system with Thumbprint aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa is about to ...
27
votes
4answers
4k views

Are self-signed SSL certificates secure?

I want to have a secure connection, when I log into my webmail, phpMyAdmin, etc. Therefore I signed my own SSL certificates with OpenSSL and told Apache to listen on port 443. Is this in fact ...
7
votes
2answers
9k views

IIS 7.5 Creating self signed certificates with validation date of more than a year

I am creating self-signed SSL certificates in IIS 7.5 for internal use. The problem I have is that I want to create them so that they last for 10 years as it is only a dev environment. I can't see an ...
5
votes
3answers
239 views

Is a self signed cerificate secure from man in the middle once you have accepted it

I have a mail server that has a self signed SSL certificate. I use Thunderbird to access this server, and it asks me to accept this certificate. So lets say I accept this in a semi secure location, ...
2
votes
2answers
309 views

Self Signed Certificate Risks

I'm currently using a self signed certificate for in-house development purposes and want to make sure I am aware of any real security risks. Here's how I set things up. Root Certificate Created a ...
0
votes
1answer
2k views

Mac OS X Server: This root certificate is not trusted

I don't know much about certificates but one of them on a Snow Leopard Server just expired and I'm trying to replace it. It was self-signed at "birth" with the Mac mini server it came installed on. I ...
2
votes
3answers
368 views

What are the risks of trusting a self-signed certificate on a development machine?

We have development machines that test web applications under development over https, because the deployed app operates over https. We have a couple of internal url's set up in our hosts file, so ...
2
votes
1answer
572 views

Commercial SSL Certificate and Self-Signed Certificate for Authentication

I have a apache 2 host running with a commercial (rapidssl) signed certificate and I need to generate client certificates for authentication. I created a CA (according to ...
1
vote
0answers
293 views

Switch stunnel from self-signed cert to signed by CA cert

We use stunnel configured to provide SSL-tunnel between SERVER A (where we have stunnel configured as client) and many SERVERS B (where we deployed stunnel configured to work in server mode). We use ...
1
vote
3answers
8k views

Assign CA certificate to Fortigate https WAN interface

I have a Fortigate 80C that allows remote administration via https. I access the URL and all fine but the one thing that really bugs me is that is brings up "untrusted connection" in chrome with the ...
4
votes
3answers
7k views

How to create a self-signed SSL certificate with subject alternate names (SAN) for IIS websites

Does anyone know how to create a self-signed SSL certificate for use with IIS (7) that has subject alternative names (SAN)s? I need the certificate to be able to validate the hostname AND the IP ...
3
votes
2answers
1k views

How do I secure Remote Desktop sessions on Windows 2008 R2 server?

I need to secure my RDP connections to a Win2k8 server with an SSL certificate, and I am hoping to use a self-signed cert that I can generate on the server. The last time I tried this (on a Win2k3 ...
3
votes
1answer
287 views

Create Self-Signed Root Level Certificate on Ubuntu

I have found tutorials in the past for creating self-signed certificates. Now for my personal website (on a virtual server), I want to use a self-signed SSL certificate for logging into my WordPress ...
0
votes
1answer
1k views

SelfSSL7 for CN = localhost and MachineName

I'm trying to create a cert for the default web site on my local dev server using selfssl7 I ran the following and it generates a cert for the machiname ( visible under "server certificates" in IIS) ...
1
vote
2answers
91 views

Creating a self signed cert. to be used on an externally hosted site

Is it possible to generate a self signed certificate for use on a site which is hosted externally? The only users for this are ourselves and this particular site is IP restricted to our given IP ...
0
votes
1answer
200 views

Setup an IIS self signed certificate on Oracle Application Server

My main server is running IIS 7 and has an ASP.NET/C# website that needs communicate to another server that uses Oracle Application Server. Currently, the website is communicating to the Oracle ...
0
votes
1answer
344 views

SSL certificates and group policy

We are in the process of rolling out a new website and want to secure the administrative parts with ssl/https. As we see it there is no reason to purchase an ssl certificate from a root CA since the ...
0
votes
1answer
123 views

Generate csr against root certificate

I have a root certificate (root.cer) that's not signed by a CA, but is trusted on all computers on our internal network & I need to create a csr against it for my local apache webserver that ...
4
votes
1answer
3k views

How to create self signed wildcard (*.domain.com) certificate

I'm trying to install Dynamics CRM 2011 RC and configure it for Internet Facing Deployment. One of the requirements for this is a wildcard SSL certificate. Since I'm installing development/testing ...
0
votes
1answer
813 views

A non interactive alternative to makecert

I have a need to create a self signed certificate non interactively. Unfortunately, the only tool that I know of (makecert) is interactive - it uses GUI to ask for a password. My OS is Windows (from ...
1
vote
2answers
8k views

Deploying internal certificate via GPO - will this only work for IE?

I am contemplating adding AD CA role to our server and using GPO to add a self signed, trusted certificate to all internal clients (to ease testing)... Some of the related questions regarding this ...
1
vote
3answers
6k views

Generating self-signed, wildcard certificate for IIS 7.5 on .local domain

Is it possible to generate self signed, wild-card ssl certificate for internal domain on IIS 7.5 for testing purposes. For example I'd like common name to be *.domain.local Similar question for IIS 6 ...