The tag has no wiki summary.

learn more… | top users | synonyms

27
votes
4answers
4k views

Are self-signed SSL certificates secure?

I want to have a secure connection, when I log into my webmail, phpMyAdmin, etc. Therefore I signed my own SSL certificates with OpenSSL and told Apache to listen on port 443. Is this in fact ...
22
votes
2answers
8k views

Can I build my own Extended Validation SSL certificate?

I can create by own CA and generate a self signed SSL certificate this way. But what does it take to make the browser show the certificate as being an "Extended Validation SSL certificate" ? Can I ...
7
votes
2answers
9k views

IIS 7.5 Creating self signed certificates with validation date of more than a year

I am creating self-signed SSL certificates in IIS 7.5 for internal use. The problem I have is that I want to create them so that they last for 10 years as it is only a dev environment. I can't see an ...
7
votes
4answers
986 views

Why is Windows 2012 R2 not trusting my self-signed certificate?

In a testing environment, I'm currently being held up from testing some things that need to be deployed soon (actually already, but you know how deadlines go...) because Windows refuses to trust the ...
6
votes
3answers
4k views

Cannot create self-signed SSL certificate with IIS 7

I'm trying to create a self-signed certificate from within the IIS 7 snap-in, with little luck. When prompted for a friendly name for the certificate, I type in the name, and click OK, but then I am ...
5
votes
3answers
239 views

Is a self signed cerificate secure from man in the middle once you have accepted it

I have a mail server that has a self signed SSL certificate. I use Thunderbird to access this server, and it asks me to accept this certificate. So lets say I accept this in a semi secure location, ...
5
votes
4answers
4k views

Can I use Active Directory as a CA for creating test SSL certificates for IIS?

We have an internal test version of our website, which is available (via internal DNS zones) as www.mysite.com.test I'd like to create an SSL certificate for www.mysite.com.test, so that our testers ...
4
votes
3answers
7k views

How to create a self-signed SSL certificate with subject alternate names (SAN) for IIS websites

Does anyone know how to create a self-signed SSL certificate for use with IIS (7) that has subject alternative names (SAN)s? I need the certificate to be able to validate the hostname AND the IP ...
4
votes
5answers
4k views

Ubuntu 12.04 LDAP SSL self-signed cert not accepted

I'm working with Ubuntu 12.04, using OpenLDAP server. I've followed the instructions on the Ubuntu help pages and can happily connect without security. To test my connection, I'm using ldapsearch ...
4
votes
1answer
3k views

How to create self signed wildcard (*.domain.com) certificate

I'm trying to install Dynamics CRM 2011 RC and configure it for Internet Facing Deployment. One of the requirements for this is a wildcard SSL certificate. Since I'm installing development/testing ...
4
votes
1answer
5k views

Install a root certificate in CentOS 6

I know it has been already asked, but despite many hours of research I couldn't find a working solution. I am trying to install my root certificate in my server, so internal service can bind to each ...
3
votes
1answer
333 views

Self-signed server certificate question

If I sign someone else's server certificate will it allow them to avoid the whole "untrusted certificate" thing that browsers give when you use a self signed cert?
3
votes
2answers
1k views

Is it ok to use self-signed certificates for smtp transport?

By "by ok to use" I mean: are MTA agents receiving emails from my server going to reject my email if not, are they going to make other kind of bad treatment for my emails (marking as spam, unsafe ...
3
votes
2answers
7k views

Renewing SBS2011 Exchange Self-Signed Certificate w/o changing home page in IE?

On a previous server when we used the built in SBS wizard to renew the certificate it worked, however it reset all of the computers on the domain's IE home page to companyweb. Is there a way to do ...
3
votes
2answers
3k views

Configuring client certificate authentication in apache

I am trying to set up part of a Virtualhost in apache to require client authentication. The VirtualHost in question also acts as a reverse proxy for the actual web server. Here's what I have done: ...
3
votes
1answer
287 views

Create Self-Signed Root Level Certificate on Ubuntu

I have found tutorials in the past for creating self-signed certificates. Now for my personal website (on a virtual server), I want to use a self-signed SSL certificate for logging into my WordPress ...
3
votes
2answers
1k views

How do I secure Remote Desktop sessions on Windows 2008 R2 server?

I need to secure my RDP connections to a Win2k8 server with an SSL certificate, and I am hoping to use a self-signed cert that I can generate on the server. The last time I tried this (on a Win2k3 ...
3
votes
3answers
789 views

Check if root ca certificate is installed

We are having a custom CA for our local-domains. The Root CA certificate is installed on all the corporate machines by default, but sometimes it happens that we have someone here who doesn't have it ...
2
votes
2answers
309 views

Self Signed Certificate Risks

I'm currently using a self signed certificate for in-house development purposes and want to make sure I am aware of any real security risks. Here's how I set things up. Root Certificate Created a ...
2
votes
3answers
368 views

What are the risks of trusting a self-signed certificate on a development machine?

We have development machines that test web applications under development over https, because the deployed app operates over https. We have a couple of internal url's set up in our hosts file, so ...
2
votes
3answers
108 views

Steps to produce a self-signed certficate(s) that, after being trusted, will work for two different IPs without a security warning

We have a test server that I'm trying to change over to HTTPS/SSL, and it has both an internal IP and an external IP. We have to use self-signed certificates for this particular server. There was ...
2
votes
3answers
833 views

In-house Trusted Certificate

Hi there I'm a developer looking at introducing ClickOnce deployment for an internal .NET Winforms application that will be distributed via the corporate network. Now I would like to deploy this ...
2
votes
1answer
34 views

Certificate generation : root ca needed each time?

I want to create a different (unique), self signed, certificate to distribute to some clients. That way I think that if one is doomed, I just have to delete his certificate without bothering the ...
2
votes
1answer
572 views

Commercial SSL Certificate and Self-Signed Certificate for Authentication

I have a apache 2 host running with a commercial (rapidssl) signed certificate and I need to generate client certificates for authentication. I created a CA (according to ...
1
vote
1answer
209 views

SSL certificate for subdomain without domain

I have a webserver in my intranet which can be accessed via subdomain.domain.com and simply subdomain. The SSL certificate is created for subdomain.domain.com which results in a warning as soon as I ...
1
vote
3answers
8k views

Assign CA certificate to Fortigate https WAN interface

I have a Fortigate 80C that allows remote administration via https. I access the URL and all fine but the one thing that really bugs me is that is brings up "untrusted connection" in chrome with the ...
1
vote
1answer
155 views

Apache with self signed certificate, www subdomain hanging when requesting from browser

I created a staging site with a self signed certificate using: mkdir /etc/ssl/wildcard.yourdomain.com cd /etc/ssl/wildcard.yourdomain.com/ openssl genrsa 2048 > host.key openssl req -new -x509 ...
1
vote
2answers
694 views

When to use self-signed certificate with RDWeb?

I want to make sure the users connection is as secure as possible. Our RDWeb server has a .local name (for this question it will be called rdweb.contoso.local) and a public name: rdweb.contoso.com ...
1
vote
2answers
91 views

Creating a self signed cert. to be used on an externally hosted site

Is it possible to generate a self signed certificate for use on a site which is hosted externally? The only users for this are ourselves and this particular site is IP restricted to our given IP ...
1
vote
2answers
8k views

Deploying internal certificate via GPO - will this only work for IE?

I am contemplating adding AD CA role to our server and using GPO to add a self signed, trusted certificate to all internal clients (to ease testing)... Some of the related questions regarding this ...
1
vote
3answers
854 views

signed applet automatically running as insecure

My application is deployed as a self-signed applet to several thousand users at more than 50 schools across the country (in Norway). The user is presented with the standard Java security warning ...
1
vote
2answers
795 views

Thunderbird not trusting certificate signed with self-signed authority

I have generated a self-signed certificate authority using mydomain.org as the common name. I imported the public certificate using Thunderbird's certificate manager under the "Authorities" tab. So ...
1
vote
2answers
402 views

Internal Code Signing: Key Distribution, or Certificate Server?

I should first note that we have nobody in IT with significant familiarity with self-signed certification. We have a moderately sprawling network (one forest, many locations), and we are now rolling ...
1
vote
1answer
314 views

Self-Signed SSL Cert in Lighttpd Causing 404s

Hey guys, I wanted to try out SSL on my server so I decided to create some self-signed SSL certificates as outlined here. After going to the document-root, firefox did indeed allow me to accept the ...
1
vote
1answer
121 views

When do SSL certs require a dedicated IP, and when don't they? [duplicate]

My host has informed me that I need to purchase a dedicated IP from them in order to use a SSL cert I want to buy. I don't believe them. Is there a way to leave them out of the loop and get this done ...
1
vote
2answers
572 views

Problem Implementing SSL with WSUS

I'm working on setting up SSL on our WSUS server using a self signed certificate, but I'm running into trouble. Specifially, after running selfssl /n:CN=server.domain.local /t /v:365, and ensuring ...
1
vote
0answers
34 views

Owncloud - Proxy changes certificate

I'm running an owncloud server 7.0.2 with apache(Ubuntu host) and configured it to use a self-signed ssl certificate. Everything works fine on my home-PC On an other machine I would like to use the ...
1
vote
0answers
4k views

openssl s_client -connect: 20 error with server signed certificate for client

What I want I want to connect to a server using a given signed certificate (by the company running the server) What I have Ubuntu 12.04 LTS My key and CSR files A signed certificate. It was signed ...
1
vote
0answers
997 views

EC2 Windows: Certificate for local system with Thumbprint … is about to expire or already expired

I regularly see this error in the Windows Error Log on one of my EC2 instances: Certificate for local system with Thumbprint aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa is about to ...
1
vote
0answers
292 views

Switch stunnel from self-signed cert to signed by CA cert

We use stunnel configured to provide SSL-tunnel between SERVER A (where we have stunnel configured as client) and many SERVERS B (where we deployed stunnel configured to work in server mode). We use ...
1
vote
3answers
6k views

Generating self-signed, wildcard certificate for IIS 7.5 on .local domain

Is it possible to generate self signed, wild-card ssl certificate for internal domain on IIS 7.5 for testing purposes. For example I'd like common name to be *.domain.local Similar question for IIS 6 ...
0
votes
1answer
1k views

AWS installing mod_ssl on apache

I tried installing mod_ssl,I used this command apt-get install mod_ssl to install but I got an error saying unable to locate package mod_ssl. After executing the above command, I got below output ...
0
votes
3answers
2k views

RHEL/Apache ssl.conf configuration issue

We've got multiple subdomains, each with it's own virtualhost entry in httpd.conf and (for those supporting https) in ssl.conf as well. Our main www subdomain has a GoDaddy cert associated with it. ...
0
votes
1answer
123 views

Generate csr against root certificate

I have a root certificate (root.cer) that's not signed by a CA, but is trusted on all computers on our internal network & I need to create a csr against it for my local apache webserver that ...
0
votes
2answers
81 views

RapidSSL: domain name does not match the certificate common name or SAN

I'm installing SSL certifcate (RapidSSL) on Amazon AWS (Load balancer). Installation was already completed, but when I test it I get: Wrong certificate installed. The domain name does not match the ...
0
votes
1answer
94 views

Renewing a self-signed certificate

Is there a way to reset the expiry of a self signed X.509 certificate but keep both the public and the private key as they were? Technically this should be nothing more than a different date for the ...
0
votes
1answer
813 views

A non interactive alternative to makecert

I have a need to create a self signed certificate non interactively. Unfortunately, the only tool that I know of (makecert) is interactive - it uses GUI to ask for a password. My OS is Windows (from ...
0
votes
1answer
865 views

XCA Signing Problem

I am trying to make a self-signed SSL Certificate for Sun WebServer 6.1 using the XCA Certificate GUI. Here is my process: Login to Sun Webserver admin console. Use the "Generate CSR" function to ...
0
votes
1answer
771 views

How do you get self-signed certificates working for server to server communications?

I have software that connects two applications - one that runs on Windows Server 2008 and another that runs on Linux/CentOS. The Windows app runs within IIS and ASP.NET. The Linux/CentOS app runs ...
0
votes
1answer
1k views

Sending to gmail with TLS and self signed certificate

Since many provider switched to TLS only connections, I cannot deliver to gmail anymore with a default plaintext postfix setup. My question is, can I use valid TLS / does google accept TLS with a ...