Tagged Questions

The tag has no wiki summary.

learn more… | top users | synonyms

4
votes
3answers
88 views

Is a self signed cerificate secure from man in the middle once you have accepted it

I have a mail server that has a self signed SSL certificate. I use Thunderbird to access this server, and it asks me to accept this certificate. So lets say I accept this in a semi secure location, ...
1
vote
2answers
93 views

Self Signed Certificate Risks

I'm currently using a self signed certificate for in-house development purposes and want to make sure I am aware of any real security risks. Here's how I set things up. Root Certificate Created a ...
0
votes
1answer
82 views

Mac OS X Server: This root certificate is not trusted

I don't know much about certificates but one of them on a Snow Leopard Server just expired and I'm trying to replace it. It was self-signed at "birth" with the Mac mini server it came installed on. I ...
2
votes
3answers
50 views

What are the risks of trusting a self-signed certificate on a development machine?

We have development machines that test web applications under development over https, because the deployed app operates over https. We have a couple of internal url's set up in our hosts file, so ...
2
votes
1answer
103 views

Commercial SSL Certificate and Self-Signed Certificate for Authentication

I have a apache 2 host running with a commercial (rapidssl) signed certificate and I need to generate client certificates for authentication. I created a CA (according to ...
1
vote
0answers
38 views

Switch stunnel from self-signed cert to signed by CA cert

We use stunnel configured to provide SSL-tunnel between SERVER A (where we have stunnel configured as client) and many SERVERS B (where we deployed stunnel configured to work in server mode). We use ...
1
vote
1answer
151 views

Assign CA certificate to Fortigate https WAN interface

I have a Fortigate 80C that allows remote administration via https. I access the URL and all fine but the one thing that really bugs me is that is brings up "untrusted connection" in chrome with the ...
1
vote
2answers
771 views

How to create a self-signed SSL certificate with subject alternate names (SAN) for IIS websites

Does anyone know how to create a self-signed SSL certificate for use with IIS (7) that has subject alternative names (SAN)s? I need the certificate to be able to validate the hostname AND the IP ...
1
vote
1answer
78 views

How do I secure Remote Desktop sessions on Windows 2008 R2 server?

I need to secure my RDP connections to a Win2k8 server with an SSL certificate, and I am hoping to use a self-signed cert that I can generate on the server. The last time I tried this (on a Win2k3 ...
3
votes
1answer
115 views

Create Self-Signed Root Level Certificate on Ubuntu

I have found tutorials in the past for creating self-signed certificates. Now for my personal website (on a virtual server), I want to use a self-signed SSL certificate for logging into my WordPress ...
0
votes
1answer
281 views

SelfSSL7 for CN = localhost and MachineName

I'm trying to create a cert for the default web site on my local dev server using selfssl7 I ran the following and it generates a cert for the machiname ( visible under "server certificates" in IIS) ...
1
vote
2answers
50 views

Creating a self signed cert. to be used on an externally hosted site

Is it possible to generate a self signed certificate for use on a site which is hosted externally? The only users for this are ourselves and this particular site is IP restricted to our given IP ...
0
votes
1answer
110 views

Setup an IIS self signed certificate on Oracle Application Server

My main server is running IIS 7 and has an ASP.NET/C# website that needs communicate to another server that uses Oracle Application Server. Currently, the website is communicating to the Oracle ...
0
votes
1answer
112 views

SSL certificates and group policy

We are in the process of rolling out a new website and want to secure the administrative parts with ssl/https. As we see it there is no reason to purchase an ssl certificate from a root CA since the ...
0
votes
1answer
86 views

Generate csr against root certificate

I have a root certificate (root.cer) that's not signed by a CA, but is trusted on all computers on our internal network & I need to create a csr against it for my local apache webserver that ...
1
vote
1answer
953 views

How to create self signed wildcard (*.domain.com) certificate

I'm trying to install Dynamics CRM 2011 RC and configure it for Internet Facing Deployment. One of the requirements for this is a wildcard SSL certificate. Since I'm installing development/testing ...
0
votes
1answer
273 views

A non interactive alternative to makecert

I have a need to create a self signed certificate non interactively. Unfortunately, the only tool that I know of (makecert) is interactive - it uses GUI to ask for a password. My OS is Windows (from ...
0
votes
2answers
2k views

Deploying internal certificate via GPO - will this only work for IE?

I am contemplating adding AD CA role to our server and using GPO to add a self signed, trusted certificate to all internal clients (to ease testing)... Some of the related questions regarding this ...
1
vote
4answers
2k views

Generating self-signed, wildcard certificate for IIS 7.5 on .local domain

Is it possible to generate self signed, wild-card ssl certificate for internal domain on IIS 7.5 for testing purposes. For example I'd like common name to be *.domain.local Similar question for IIS 6 ...
0
votes
1answer
221 views

XCA Signing Problem

I am trying to make a self-signed SSL Certificate for Sun WebServer 6.1 using the XCA Certificate GUI. Here is my process: Login to Sun Webserver admin console. Use the "Generate CSR" function to ...
0
votes
1answer
324 views

How do you get self-signed certificates working for server to server communications?

I have software that connects two applications - one that runs on Windows Server 2008 and another that runs on Linux/CentOS. The Windows app runs within IIS and ASP.NET. The Linux/CentOS app runs ...
1
vote
2answers
207 views

Problem Implementing SSL with WSUS

I'm working on setting up SSL on our WSUS server using a self signed certificate, but I'm running into trouble. Specifially, after running selfssl /n:CN=server.domain.local /t /v:365, and ensuring ...
0
votes
1answer
25 views

ssl, co issue (issuer) instead of Self Signed?

Instead of self signing each website i make which is accessible online but is not meant for the public i would like to create an issuer which i'll import into my trusted issuer and sign multiple ...
0
votes
3answers
388 views

In-house Trusted Certificate

Hi there I'm a developer looking at introducing ClickOnce deployment for an internal .NET Winforms application that will be distributed via the corporate network. Now I would like to deploy this ...
1
vote
3answers
407 views

signed applet automatically running as insecure

My application is deployed as a self-signed applet to several thousand users at more than 50 schools across the country (in Norway). The user is presented with the standard Java security warning ...
1
vote
1answer
205 views

Self-Signed SSL Cert in Lighttpd Causing 404s

Hey guys, I wanted to try out SSL on my server so I decided to create some self-signed SSL certificates as outlined here. After going to the document-root, firefox did indeed allow me to accept the ...
3
votes
1answer
221 views

Self-signed server certificate question

If I sign someone else's server certificate will it allow them to avoid the whole "untrusted certificate" thing that browsers give when you use a self signed cert?
0
votes
2answers
550 views

How do I enable mutual SSL in IIS7 with a self-signed certificate?

I've created a self-signed certificate in IIS7. Then I exported this certificate to a .pfx and then installed it on the client machine's IE browser. Then I set "Require Client Certificate" on the ...
5
votes
3answers
2k views

Cannot create self-signed SSL certificate with IIS 7

I'm trying to create a self-signed certificate from within the IIS 7 snap-in, with little luck. When prompted for a friendly name for the certificate, I type in the name, and click OK, but then I am ...
5
votes
2answers
2k views

Can I build my own Extended Validation SSL certificate?

I can create by own CA and generate a self signed SSL certificate this way. But what does it take to make the browser show the certificate as being an "Extended Validation SSL certificate" ? Can I ...
0
votes
3answers
1k views

RHEL/Apache ssl.conf configuration issue

We've got multiple subdomains, each with it's own virtualhost entry in httpd.conf and (for those supporting https) in ssl.conf as well. Our main www subdomain has a GoDaddy cert associated with it. ...