SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

0
votes
1answer
11 views

Proper method to generate a secure self-signed certificate

I have several websites on which I want to install a self-signed SSL certificate. I tried following various guides, such as this one (all provided more or less the exact same instructions). The given ...
0
votes
0answers
4 views

Domain validation for SSL certificate from StartSSL for personal mail server [on hold]

relatively new member here. I'm trying to set up my own mail server using AWS for hosting and am trying to get an SSL certificate. A tutorial I'm following recommends using StartSSL for this, and ...
1
vote
2answers
149 views

Postfix: Should I use snakeoil cert or my https cert?

I run a site and have a valid wildcard certificate installed for serving HTTPS pages. I just set up postfix on my Ubuntu host and by default its configuration includes: ...
0
votes
0answers
20 views

sec_error_unknown_issuer after new ip [on hold]

Yesterday my vps provider locked down my ip during 24 hours because of an external ddos attack. I immediately purchased a new ip, set it up in the network as eth0:0 (and added the original one as ...
0
votes
0answers
16 views

IPSEC for RDP Connections

I am stuck with a wired problem, I am trying to achieve a functionality in which if a certificate is not installed on a system that system won't able to remote desktop the server, he won't even see ...
1
vote
0answers
19 views

Nginx user uploaded SSL Certificates

I'm wondering what's the best way to let users upload their SSL certificates. I have a multitenant application based on rails/passenger/nginx and I need each user to use his own domain with his SSL ...
0
votes
1answer
17 views

TLS/SSL mail server Certificate installation for Postfix/Dovecot Mail Server Setup

I have tried to setup a my own web-server with mail server, (I am not a linux export just following some tutorials), webserver setup with Nginx,PHP-fpm and MySQL seems to be successful, then i moved ...
0
votes
2answers
41 views

Can't import certificate into Exchange 2013: Private Key Missing (I know it's there.)

I know this question has been asked before and I've gone through countless threads on here (as well as google) trying all of them. Unfortunately, I think I'm having an unrelated issue to what others ...
-1
votes
0answers
17 views

How to redirect from within a HTTP page to a HTTPS page - IIS 8, URL Rewrite 2.0 Module

I have looked at the other answers on this site and on Google but nothing is quite helping me in my issue. I am running Windows Server 2012 with IIS 8.0 and the URL Rewrite 2.0 module installed. I ...
-1
votes
1answer
15 views

RDS server load balancing avoid identity cannot be verified [on hold]

Internal RDS servers, users connect via a load balancer so the name being used is not the name of the server they are RDPing to. How can this be avoided so users aren't seeing this every time they ...
-2
votes
2answers
25 views

Creating a self signed certificate for demonstration purposes on Centos 7 server

I have setup my default tomcat website (tomcat 8.0.3) on a server inside my company LAN. From my work computer if I try to access the website by typing it into google chrome it is not working. The IP ...
1
vote
0answers
29 views

curl error 51 - of multiple requesting machines, only one has the issue

I have an SSL cURL request that fails from a single machine with the following error: curl: (51) SSL peer certificate or SSH remote key was not OK This error seems to have popped up overnight, and ...
1
vote
1answer
22 views

One SSL certificate for load balancing amazon instances

As the title says I want to have one SSL certificate for multiple instances in amazon AWS. The multiple instances are connected to the internet through an load balancer. To make an SSL certificate and ...
-2
votes
0answers
17 views

Certificate chain, middle certificate error

I want to save time so I go straight in to it. I have generated a root certificate by this guide, www.akadia.com/services/ssh_test_certificate.html then I have generated more certificates and signed ...
2
votes
0answers
11 views

OpenSSL cannot convert PKCS12 exported from Cisco ASA 55xx

I have exported an existing certificate+key from an ASA 5510: asa5510(config)# crypto ca export MYTRUSTSTORE pkcs12 MYPASSWORD Saved the output in a file (vpn-cisco.pkcs12), and now I am trying to ...
0
votes
1answer
19 views

Which L1K entrust certificates should be kept private?

One of our client has made an update to his SSL certificate and he did send us a procedure to update the certificate on our side. They also provided the L1Kchain.txt (that should be converted to a ...
0
votes
1answer
28 views

SSL Certificates from nginx only works in Windows IE and Chrome

I have a wildcard certificate and got it signed by AlphaSSL. I followed the steps from here: http://nginx.org/en/docs/http/configuring_https_servers.html#chains to set it up on my nginx server which ...
0
votes
0answers
18 views

Forward SSL client certification information from httpd1 to httpd2

I have two Apaches running (on the same host), one serving as a reverse proxy, and the 2nd one is my app webserver. I'm doing some kind of authentication on the proxy based on SSL Client certificate ...
0
votes
1answer
14 views

Signed SSL certificates on Zyxel USG60 web interface?

I know that you can add SSH certificates for client/server authentication for the web interface and SSL VPN, but is there a way to change the SSL cert that the web interface sends to the browser just ...
8
votes
2answers
424 views

Is this SSL certificate chain broken and how to fix it?

For the SSL cert on the domain example.com, some tests tell me that the chain is incomplete and since Firefox keeps its own certificate store, it might fail on Mozilla (1, 2, 3). Others tell me it is ...
0
votes
0answers
19 views

Key and Certificate for Ideal PHP Wrapper

I try to make a Ideal sandbox with a PHP wrapper and Simulator. IDEAL wrapper: https://github.com/PENDOnl/iDEAL-v3.3.1-PHP-Wrapper IDEAL simulator: http://ideal-simulator.nl/ I runned these ...
0
votes
1answer
35 views

SSL on Ubuntu 12 LTS with Apache and PHP-FPM

After reading many tutorials I managed to run successfully Apache MPM-Worker and PHP-FPM on Ubuntu 12 LTS. I have separate pools for each user and everything works like a charm. However I need to ...
0
votes
1answer
18 views

Https transparent proxy and SSL certificate validation

If I setup a transparent proxy for https connections using a SSL certificate signed by my local CA and distributed to all my active directory clients by GPO, may the client (browsers) reject or advise ...
1
vote
2answers
43 views

Wildcard certificates with shortnames?

I'm trying to generate a certificate with the following sub_alt_names: hostname *.hostname hostname.mydomain.local *.hostname.mydomain.local I generate the CSR via OpenSSL and then get the ...
1
vote
1answer
21 views

How do I get alerted to an pending AD CS certificate request?

I want to get a summary report of pending AD CS requests. How would I approach this? Does anything already exist? The problem I'm trying to solve is where a user requests a certificate, and i'm ...
14
votes
2answers
929 views

Purchase new SSL Certificate before existing one expires

I am currently transferring a new customer onto my virtual private server from their old host. They have an existing SSL certificate but it expires next month so I don't think it is worth the hassle ...
0
votes
0answers
14 views

Set IIS to Require SSL + Require Client Certificate on requests from localhost?

So, This is my scenario: I have a WCF service application which is invoked by the cruel and mean outside world, and it is hosted in IIS to REQUIRE both SSL and client certificate. I.e. no ...
3
votes
1answer
40 views

Is it unusual for a database client to install the server's SSL certificate?

We use Amazon RDS for our databases at work. Recently we got an automated email from Amazon stating they'd be updating the SSL certificates and that if we didn't upgrade our database instances within ...
0
votes
0answers
30 views

Apache basic auth or SSL client certificate based on the originating IP

In Apache 2.4 is it possible to present a basic auth to the client if it comes from the predefined IP range and check a SSL client certificate otherwise. I know about FakeBasicAuth but this is not ...
1
vote
2answers
35 views

Nginx: possible to use SSL certificates from different authorities on one IP address?

I'd like to know if it's possible to have two Nginx virtual hosts sitting on the same v4 IP address. I know there exist SNI but I have two basic (no SAN, no wildcard) SSL certificates from two ...
2
votes
3answers
61 views

Where did this wildcard SSL certificate come from?

My company is hosting example.com and sub.example.com on the same server, using a wildcard SSL certificate for *.example.com. Now it's time to renew our certificate, and we're not sure how we got that ...
1
vote
3answers
156 views

Certificate error: The name in the certificate does not match…, Outlook client using .local

We have recently had to decommission our .local certificate from Godaddy, as it will not be valid anymore. The new certificate contains the following names: mail.mydomain.com ...
0
votes
0answers
59 views

apache 2.4 don't find the SSL Certificate File

I try to configure SSL on my apache 2.4.12 Webserver. But apache2 can't find the Certificate and Key File in the corespondening ssl directory. I already checked file permissions but without success. ...
2
votes
0answers
9 views

Skip password authentication on Dovecot when client certificate provided

Using Dovecot version 2.1.7, I've gotten client certificates working with fairly little effort, and at this point I can choose between having password authentication after the certificate check or ...
1
vote
0answers
33 views

How do I change the expiration of CRLs with OpenSSL?

I am currently experimenting with my self signed CA. But in order for my devices to work I need a valid CRL. I set the CDP to one of the CDN hosting providers. As I have only 5 certificates issued I ...
2
votes
1answer
45 views

Possible causes of CRL validation error

What are the possible causes of CRL validation error? I run a network with my self-signed CA. But since three weeks ago, all of my RDP clients started saying that they had failed to validate the CRL. ...
0
votes
0answers
48 views

Apache Tomcat for Windows - cannot get https to work

Environment: Windows 2003 Server 64-bit Running on VMWare ESX 5.5 8GB of Ram Apache Tomcat 6.0.36 Server D:\Program Files\Java\jdk1.6.0_26\jre\bin\server\jvm.dll JDK 1.6 update: 26 Have been able ...
-2
votes
1answer
23 views

how many SSL certificate can be listed in SSLServercert?

I wanted to list more than one certificate in SSLServercert, so that websites can use either one of these certificates. i will use "SSLServercert label1 label2" in httpd.conf file. label1 has IP based ...
1
vote
0answers
22 views

IIS bindings keep being removed

I'm having a problem where the security certificate for a site is being periodically unbound from port 443 and replaced with another certificate which is sitting on the server. So whenever a user ...
0
votes
0answers
21 views

External clients get a certificate mismatch - but internal clients do not

I have a scenario where external clients are receiving a certificate that is different than the one that is bound to the IIS site. This is Win2008R2 / IIS, in the following configuration: ...
0
votes
1answer
140 views

Windows Server 2003 R2 / IIS6 & SHA-256 SSL Certificates

Was hoping someone could help me out with this one as there seems to be conflicting articles on the subject. I've got a legacy server running Windows Server 2003 R2 with IIS6 and need to generate an ...
0
votes
1answer
27 views

Is it normal for the identity of a host to change after enabling SSL?

I logged in to a known host - ssh username@example.com. I did a2enmod ssl and I generated a CSR to enable SSL on one of the virtual hosts on the server. From a separate terminal tab, I tried to do an ...
-1
votes
1answer
51 views

PEM File “CERTIFICATE” vs “PUBLIC KEY”

I have a PEM file that looks like: -----BEGIN CERTIFICATE----- ... -----END CERTIFICATE----- which I can convert to another PEM file using: openssl x509 -in key.crt -pubkey -noout. The new PEM file ...
0
votes
1answer
17 views

Issue with creating an SSL certificate

I am having the following issue: There is a Terminal Server name TERM-SRV.example.com running Windows Server 2012 that hosts a site "https://example.com/RDWeb". There was a certificate that recently ...
0
votes
0answers
11 views

Reconfigure Exchange 2010 to use public mail domain on private network

This question has been asked but solution offered did not work for me. I have Exchange 2010 and Outlook 2010 clients on my private network. AD domain established 17 years ago is just BBC (not it's not ...
2
votes
1answer
52 views

Is it possible to have a single SSL certificate with IP address and domain name?

We want to have a single SSL certificate for a web site so that the website can be accessed with a domain name and IP address. Is this possible?
6
votes
1answer
64 views

What is “Cisco STG” and why would it dynamically replace a wildcard certificate on port 5061?

I have a lync client that is connecting to a Lync Edge server on port 5061. I get an invalid certificate error when connecting. When I run wireshark, during the TLS setup, and inside the ...
0
votes
1answer
35 views

Heroku is not switching certificates after adding custom

I have an app on Heroku and I bought my own certificate, valid for myapp.mydomain.de. I added it to Heroku using their addon, SSL Endpoint. I have a CNAME record which redirect from myapp.mydomain.de ...
0
votes
1answer
53 views

Ubuntu/apache2: cannot open port 443

I am trying to install a SSL certificat on my Ubuntu 14 server (using apache 2). For some reason the port 443 appears to be closed I installed and enable ssl /etc/apache2/ports.conf is as ...
-6
votes
2answers
69 views

Why are self-signed SSL certificates untrusted by browsers?

I have seen similar questions and answers, but none really answer my question effectively. There are 2 problems that SSL answers: Encryption and trust. Time for a truth table: ...