SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

0
votes
0answers
7 views

Purchasing a certificate for Freeradius / WPA-Enterprise

I'm moving my WiFi to WPA-Enterprise, using a Freeradius server that authenticates with our Samba 4 directory. I'm currently using a self-signed certificate, but want to move to a purchased ...
0
votes
0answers
26 views

Change Self Signed SSL to Commercial SSL on Apache 2.4

I installed Godaddy UCC SSL to replace self signed SSL on Ubuntu 12 Apache 2.4. I have updated default-ssl.conf file in etc/apache2/sites-available: <IfModule mod_ssl.c> <VirtualHost ...
0
votes
0answers
10 views

How to disable OCSP for a headless firefox browser (xvfb)?

I have a headless firefox browser (XVFB) on a linux server. I use it to run selenium tests as part of CI (Its a Jenkins box and the tests run for every build). However, the tests suddenly started ...
-1
votes
3answers
32 views

Chrome on Android random red HTTPS

When I'm using Chrome on my desktop, the address bar is always green. However, on my Android phone the address bar is usually green, but sometimes red. It says that I'm using a certificate signed ...
0
votes
0answers
16 views

SSL_Stripping/SSL_Interception with OpenSource Software [closed]

in my day job I work quite a lot with solutions to intercept and decrypt SSL traffic (mostly bluecoat software). I plan to do something the like in my home network but bluecoat systems are a bit ...
-1
votes
2answers
18 views

How to generate .key and .crt file from JKS file for httpd apache server

I have the mycert.jks file only. Now i need to extract and generate .key and .crt file and use it in apache httpd server. SSLCertificateFile /usr/local/apache2/conf/ssl.crt/server.crt ...
1
vote
0answers
21 views

Import a P12 certificate into a NSS database (with an alias)

Here´s the deal... I have a personal P12 certificate generated by a certificate authority. I want to use it with CURL to access a protected URL. If CURL on CENTOS was compiled with openssl, I should ...
1
vote
1answer
21 views

Changing SSL Certificate

We are currently deploying a security solution for one of our clients and we require their SSL cert in PEM / PKCS12 format. However, they told us that they have "Lost" their CSR and wouldn't be able ...
-2
votes
0answers
17 views

SSL Certificate for apache 2.2 wont update to new cert after being changed

I am trying to update the SSL Cert in Apache on windows and after adding the new key and cert to the httpd-ssl.conf and upon restart the Apache Service the website is still using the old certificate. ...
2
votes
1answer
14 views

Apache-Served CA vs Local Root CA - Which Wins?

I currently have two Apache servers running here and here, both use SSL certs signed by StartSSL. Apache SSL configuration below: ## SSL directives SSLEngine on SSLCertificateFile ...
5
votes
3answers
152 views

Nginx client SSL authentication

I have Nginx running purely as a proxy to a various number of web servers. One of our clients has asked us to use client certificates and has provided us 3 certificates for the 3 different machines ...
2
votes
1answer
52 views

How secure is this Nginx Config? What else can I do to optimize it further? [closed]

So I recently setup a personal GitLab server and I am using the following config with full SSL. I tried my best but what else can be done to make it better? I mostly learned what I know about ...
-1
votes
1answer
30 views

How to debug where an SSL connection is getting lost?

The big picture is I'm trying to setup an SSL connection for a subdomain, if I go to currently if I go to the non-secure url the website works, but if requeset https://sub.domain.com there is no ...
0
votes
2answers
39 views

automate generation of SSL certificates

How I can automate the generation of self signed certificates when I know the domain name ? This works, but it asks me on the command line prompt certain questions. How I should change it to ignore ...
0
votes
1answer
58 views

SSL: Issued SSL for www.domain.com but only works for https://domain.com

Last week about an SSL Certificate issued by RapidSSL and my hosting MediaTemple, you can see the order details at RapidSSL here: http://i.imgur.com/s5XHcPH.jpg And SSL details on my panel at ...
0
votes
1answer
29 views

SSL certificate for a pointed domain

I have a domain hosted by GoDaddy and I have just bought a vps server (without domain) and an SSL certificate (not used) from 1&1. Could I use my SSL certificate for that domain if I just point ...
0
votes
0answers
37 views

How to create a SSL certificate using SSL certificate text?

I have received a certificate from StartSSL for my domain in pure text which looks somewhat like: -----BEGIN CERTIFICATE----- [...]Many letters and digits[...] -----END CERTIFICATE----- I'm trying ...
4
votes
3answers
98 views

Chrome reports ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY connecting to local web server over HTTPS

Summary Chrome is reporting ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY when I try and connect to my local web server over HTTPS. I am almost certain this problem has to do with my recent Windows 10 ...
2
votes
2answers
72 views

Can I use wildcards with SAN self-signed certificates?

We have a dev server that is accessible through the Internet, but is IP restricted, so security here is merely a way of allowing us to reproduce the live environment as opposed to trying to be secure. ...
0
votes
1answer
21 views

Change amazon's ELB domain name to my own domain without it changing upon resolving it

I'm trying to set my own domain name as an alias for the generated DNS by Amazon's ELB. The generated DNS is not good for me, since I've purchased a certificate for my domain (www.domain.com). ...
0
votes
1answer
12 views

OpenSSL get's the server SSL key instead of the website SSL key [duplicate]

If I navigate to my site, it shows in the browser that my ssl key is correct for my site hosted at WP Engine. It is showing and validating my certificate. However, if I connect with openssl, it get's ...
-3
votes
2answers
45 views

Becoming a Root Certificate Authority? [closed]

I am putting together a SASS project that will be hosting thousands of different domains - many of them ecommerce which will need SSL certificates. Rather than forcing all our customers to get their ...
0
votes
1answer
40 views

wmic: error when setting remote desktop self-signed certificate

I'm attempting to use the wmic approach of assigning a self-signed certificate for Remote Desktop use on a Windows Server 2012 VM as described here and here. The CA for the RDP certificate has been ...
0
votes
1answer
20 views

Client certificate authentication with no access to private keys

We are trying to set up client certificate authentication for VPN users on Cisco ASA. User certificate store is being used to complete the authentication. The problem we are running into is that the ...
5
votes
0answers
33 views

How can I set up Certificate Transparency if my CA doesn't support it?

I think many of you have actually heard of Google's Certificate Transparency initiative. Now the initiave involves a public log of all certificates issued by some CA. As this is some amount of work, ...
1
vote
1answer
33 views

SSL Fault, Apache won't start [closed]

After installing an SSL certificate from Comodo following these instructions, I've found that apache will no longer start. This is my config: <VirtualHost *:80> ServerName latimer.io ...
1
vote
2answers
27 views

SSL Cert for one domain and multiple IPs

I have a question about SSL certs and multiple servers. Question: I have one cert, one domain name and I have many servers that hold my website code. Example.com can point to IPs 192.168.1.1, ...
0
votes
1answer
24 views

Signing wildcard cert for a subdomain

I want to use my issued wildcard certificate to generate an SSL cert for a subdomain E.g. *.bar.com -> foo.bar.com Reason being I want to attempt to prevent some XSS weaknesses caused by multiple ...
3
votes
0answers
52 views

Creating SSL certificate signed by a self-signed CA certificate in Jetty

I'm trying to configure a jetty-distribution-9.3.1.v20150714 backend running on Java 1.8.0_45-b14 with a certificate signed by a self-signed CA certificate, for SSL pinning. Following Apple's guide, ...
0
votes
0answers
7 views

Right way to configure startSSL Certificate [duplicate]

Hy! I try to apply a Start-SSL Certificate on my Apache 2 (Debian Wheezy). On Xampp i got it fast and it works, but on my Debian root, the certificate is confirmed by Avast (in this case) and not by ...
2
votes
1answer
56 views

How do I connect to an OpenVPN server and dump the certificate chain presented when connecting?

My first thought was to use something like openssl s_client but this only supports TCP not UDP and it seems there requires some special magic to get TLS over UDP working, how do I interface with that ...
0
votes
2answers
38 views

Single *.company.com wildcard cert for RDS Deployment possible?

With a Remote Desktop Services deployment in a domain ad.company.com, I have RDG and RDSH installed on the same server, rd.ad.company.com. I can use a wildcard cert on *.company.com for access to the ...
1
vote
2answers
50 views

Transferring SSL certificate to new server

We're swicthing from an OSCommerce website to Magento and are also swicthing servers. The old server is on Apache and our new one is on NGINX. The SSL certificate we have seems to have been purchased ...
0
votes
1answer
33 views

Confusion over the correct private key

I inherited work on a website and I am trying ultimately to replace SHA-1 certificates with SHA-2 certificates. The first step would be to generate a CSR from my server using the command openssl req ...
0
votes
1answer
34 views

Installing Domain SSL is not working

I have a Linode Server running Debian 7.5 & Apache2 I have the following files stored in the /etc/ssl/localcerts/ directory: www.test-site.com.key www.test-site.com.csr www.test-site.com.crt ...
0
votes
1answer
59 views

Apache2 Server should be SSL-aware but has no certificate configured [Hint: SSLCertificateFile] for wild card SSL certificate

I am trying to configure Godaddy Wild Card Certificates on a Apache web server.I am getting the following error: [Thu Jul 23 02:32:42.499991 2015] [mpm_event:notice] [pid 12293:tid 140626762094464] ...
0
votes
2answers
36 views

Real trouble over an expired SSL certificate

I renewed my SSL certificate at a very well known company, who screwed up my order. After it was righted, I received several certificate files with no instructions: MY.SERVER.COM.crt ...
0
votes
1answer
18 views

SSL Certificates for Exchange 2013

I really need some help in configuring exchange 2013 and SSL. I purchased an SSL cert for my external domain - remote.company.com and this works fine as I have added the certificate and applied it to ...
0
votes
2answers
31 views

SSL configuration on nginx - missing .icrt file?

I've managed to get SSL working on my site, under nginx (or so I thought!). However, I was trying to run it via GTMetrix (to check the new speeds), and it appears that there is something wrong. I ...
0
votes
0answers
35 views

Self-signed cert with Subject Alternative Names

I'm attempting to create a self-signed cert with SANs using OpenSSL on Ubuntu 14.10. I have been about to successfully generate a CSR that includes the proper extensions. When I generate the ...
0
votes
1answer
29 views

Share SSL certificate between VM

I have a SSL certificate for example.com, and I want to protect with it: My home page (example.com) running on a VM in Azure My servlet (servlet.example.com) which is running on a different VM (but ...
1
vote
2answers
64 views

How do I configure Windows for dual certificates, ECDSA with RSA fallback?

We'd like to use an ECDSA SSL cert; however, we need to support a fairly wide variety of devices including some that are unlikely to ever support ECDSA certificates. The standard solution is to ...
0
votes
1answer
14 views

Windows 2008 Cert Authority only issuing certificates for 10 days

I am trying to get a certificate for my Remote Desktop server on my AD. When I submit the request through the Certificate Authority snap in it generates a certificate that is only valid for a few days ...
0
votes
0answers
25 views

Can I use a credit card EMV chip as a client-side SSL Cert?

Is there a way to read the certificate in a consumer credit card EMV chip and use this to authenticate to an Apache web server using the client-side certificate support in SSL/TLS?
0
votes
2answers
90 views

Common Name does not match Server Name - SSL Certificate

I recently purchased an SSL certificate. I've got www.site.com.key, www.site.com.csr, intermedia.pem, www.site.com.crt all set up in my /etc/ssl/localcerts folder. When I open my browser I get the ...
0
votes
2answers
118 views

IIS sends incorrect intermediate SSL certificate

I just installed a new SSL certificate (from StartCom) to one of our servers and noticed that in Chrome there is the crossed padlock icon displayed for the site so I started investigating why is that ...
0
votes
2answers
34 views

SSL certificate issue for all clients

I had exchange 2013 installed on Windows 2012 server and all way happy until I attempted to add remote access role. This failed the first time, and I had to remove the role and re-add the role. Remote ...
2
votes
3answers
76 views

SSL binding with no hostname, and centralized certificate store?

We have a web app that serves a large number of websites from a single IIS website. The IIS website simply has a catch-all binding on port 80. Up till now, for the SSL bindings, we have added a new IP ...
4
votes
3answers
517 views

Do I need a dedicated IP address for each SSL certificate?

I am hosting multiple domains on a single AWS instance. The domains all share the same underlying codebase, but we provide "white label" services on various domains. Each of the domains (foo.com, ...
0
votes
0answers
57 views

Azure hosted website certificate chain (comodo) intermittently doesn't send full chain

We host a website in azure. The service we host has 6 instances. On that service we have added a certificate that covers the site, and has an authentication chain that looks like: our certificate ...