SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

learn more… | top users | synonyms (1)

0
votes
0answers
7 views

SSL Cipher Mismatch Tomcat RHEL

I'm deploying a Tomcat web server with an SSL certificate. I've created the keystore and have received and installed the certificate back from the certificate vendor. However, I receive ...
-1
votes
0answers
17 views

apache web two-way athentication, authenticated after removing certificate

I setup two-way authentication on my web server with openssl certificates. everything working fine. But, now when i removed the client certificate from my system, it still authenticates. Whats the ...
0
votes
1answer
18 views

openvpn certificate error prevents from connection

I try to connect with Tunnelblick to my private VPN, but I get the following error message. 2016-05-24 12:18:07 VERIFY ERROR: depth=1, error=unable to get issuer certificate: C=IL, O=StartCom Ltd., ...
0
votes
0answers
11 views

Parse Server SSL

I have setup Parse Server on Windows platform. I want to use SSL so that I can access Parse API using https. Is there a way to use SSL without using reverse proxy? I just want to cut one step to ...
0
votes
2answers
55 views

Should I use a single SSL certificate for example.com and www.example.com?

I have a website (hosted by Amazon S3) which redirects example.com to www.example.com. I am setting up an Amazon CloudFront distribution for this website, and would like the same redirection to work ...
0
votes
1answer
38 views

how do I covert a certificate with extension .cer to .asc

I have a certificate file (with extension .cer) that has content which looks something like this. -----BEGIN CERTIFICATE----- lots of data here -----END CERTIFICATE----- It is our signing ...
0
votes
0answers
40 views

Domain is issuing trust certificate instead of root authority

I was running into an issue on Windows Server 2012 R2 where any website I visited was throwing a untrusted certificate error. I circumvented this issue by copying the certifications from another ...
0
votes
1answer
45 views

Unable to get StartSSL trust chain to work

I received a free SSL certificate from StartSSL which I installed on my server. It works fine on desktop browsers and such but as soon as I open the website on my phone it says ...
-1
votes
0answers
11 views

Captive-Portal Cert [closed]

I've recently become aware of the conflict between HSTS and the current implementations of captive-portals. As I've been reading up on the topic (RFC's and such) the thought occurred to me, why not ...
0
votes
1answer
51 views

MQTT certificates verification fails

I'm been desperately trying to get my MQTT clients to connect to my MQTT broker which is set up with a certificate from a CA (Letsencrypt). To be able to get the CA certificate, I've used the ...
0
votes
0answers
20 views

Can I perform delegation for azure cloud with wildcard domain certificate or i need a server sertificate?

I currently have a windows adfs server installed locally with wildcard domain certificate. I am planning to setup Azure Cloud ADFS with a sub-domain of the wildcard domain certificate that i own. ...
0
votes
0answers
33 views

Check if RHEL certs have been updated

I have a sample .pem file placed in /etc/pki/ca-trust/source/anchors, and I have run update-ca-trust, but I'm not sure how I can check if the command actually worked. I tried to cat ...
0
votes
2answers
66 views

Using Lets Encrypt certificates with openLDAP

I've been running an openLDAP server for several months now and we use it to authenticate for a number of applications. A previous staff member set up the server and it doesn't seem to be a standard ...
0
votes
0answers
35 views

Unable to change ssl settings for custom domain on app engine

When I attempt to change the ssl setting for my custom domains, the dash board were unable to load the "Select SSL serving mode", and the save button is disabled. I've also noticed in Inspector that ...
1
vote
1answer
65 views

Cloudflare SSL - CACert cert file?

I have decided to generate SSL for IIS. I have own CSR and private key. The SSL generated by CloudFlare is in pcks7 format. I would like to to combine it into one pfx formate in order to import it in ...
0
votes
0answers
12 views

How can I update certs on RHEL with cloud init?

The cloud-init documentation says that this syntax ca-certs: trusted: - | -----BEGIN CERTIFICATE----- THIS IS A TEST -----END CERTIFICATE----- will update certs. This code works just ...
0
votes
1answer
39 views

ServerAlias without www not working on SSL virtualhost

I'm moving a site from a server to another, and using its current and still valid SSL certificate. The machine I'm working on is a Ubuntu 14.04 server. I've set up my usual virtual host file, let's ...
2
votes
0answers
50 views

Installing apache2 ssl - ubuntu

I need to install a ssl in my apache2 ubuntu, and do not know what I'm wrong, but the fact is that I do not get ... I have the relevant files: one .key file and two .crt files. At first, when editing ...
30
votes
1answer
2k views

Trusting an untrustworthy CA - Can I restrict how system trusts it?

(Posted to ServerFault instead of StackOverflow because I feel it concerns OS configuration more than programming code). I'm currently responsible for maintaining a system which connects to a ...
0
votes
1answer
45 views

Installing SSL Certificate

I am trying to install an SSL certificate on my Apache server that's hosted on an EC2 instance from AWS. I originally intended to go with AWS Certificate Manager and put the SSL on a Load Balancer but ...
2
votes
2answers
139 views

Renew Letsencrypt certificate

I am trying to renew my letsencrypt certificate by the next command: ./letsencrype-auto renew but I receive this error message: configuration file /etc/letsencrypt/renewal/domain.conf produced ...
1
vote
0answers
25 views

Import Windows 2008R2 .p12 certificate into Samba4 SDC

In our firm we need to migrate our existing infrastructure from Windows 2008R2 to Samba 4. To do this we already managed to add the Samba machine as a secondary domain controller. The next step would ...
1
vote
2answers
50 views

Do web Servers send the certificate chain to the Web Client?

If my web server (latest Apache) has a valid (not expired or revoked) Verisign certificate chain (root -> intermediate -> leaf/my server), then does the server send the entire(?) chain to the client? ...
0
votes
0answers
37 views

Google App Engine The SSL certificate provided could not be inserted. xn- domain

I try installing Comodo Certificate that I ordered in SSLs.com on Google App Engine Custom Domain. But I have error: The SSL certificate provided could not be inserted. I checked that my key is ...
0
votes
1answer
29 views

Adding a second SSL for a second domain on a server - second domain is still using the first SSL Cert

I need to add an ssl cert to a second domain on my server (AWS Amazon Linux) I thought I enabled SNI correctly? although probably not... domain1 already has a functioning SSL cert. First attempt I ...
0
votes
1answer
35 views

Ensure client compatibility before https certificate change on server if you don't have access to all clients

In the next months we plan/need to refresh our https certificate and update our server OS version. We are thinking about switching to Let's Encrypt. It would be inacceptable, if clients could not ...
1
vote
0answers
16 views

Certificate is not showing up in SQL Server

I need to say first that I am not a DBA and so, my problem is getting SQL Server Configuration Manager to recognize a certificate. I have 3 SQL Instances I work on, 2 are on the same network, the ...
1
vote
1answer
61 views

Let's Encrypt SSL Certificate File Not Found Error, but still working

I'm running SSL Certificates from Let's Encrypt. I've got them installed on my Ubuntu machine running Apache. The setup works fine and I can launch the website, see the green padlock and even got an ...
0
votes
1answer
19 views

importing self signed certificates mysql/mariadb and tomcat how to?

trying to use certs for securing connections between Tomcat 8.x and mysql/mariadb. I'm going to use a self-signed cert. What follows is what i think i should be going and appreciate you to jump in and ...
1
vote
1answer
13 views

Migrate an SSL certificate from Heroku

I have a functioning SSL certificate for a site I'm currently hosting on Heroku. I set it up myself once a year and a half ago but I've only ever done it that one time. I'm in the process of migrating ...
1
vote
1answer
54 views

gitlab SSL configuration / certificate verification failed

I have my own gitlab server, now secured with an letsencrypt SSL certificate. Now, I want to publish some packages via packagist. But when I enter the git repository url in packagist, I got the ...
0
votes
0answers
16 views

Accessing self signed SSL website in iis remotely shows error in ie

I have created a self signed SSL in IIS for the default website. I have used the solution here to get rid of certificate error while accessing the site locally however the requirement is that the ...
2
votes
1answer
20 views

Verifying RADIUS server is sending the correct certificates?

How can I see the TLS (SSL) certificates that my RADIUS server is using, to make sure it is sending the correct certificate and chain? I am implementing 802.1x authentication with a RADIUS server, ...
2
votes
1answer
27 views

mod ssl error during ssl installation

Server Environment AWS EC2, Ubuntu 14.04LTS, LAMP 443 Port is enabled from security group. Server is listening to 443 port. I have purchased SSL from cheapsslsecurity.com and followed following ...
1
vote
1answer
44 views

Intermittent API/SSL Issue

I've been working with an API for some time now with which calls work for the majority of the time however occasionally (1 to 2 times a day for around an hour, although it's completely unpredictable ...
0
votes
0answers
26 views

SSL Certificate works except for with z-push

I have Ubuntu 14.04, LAMP, Dovecot, Postfix, and z-push-2.2.9. The email is setup direct on example.com. When I use this z-push setting: define('IMAP_OPTIONS', '/ssl/notls/norsh'); I get the ...
0
votes
0answers
59 views

EssentialSSL Intermediate CA

Where can i find the EssentialSSL Intermediate CA? I downloaded the bundle from https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/979/108/domain-validation-sha-2 , then ...
1
vote
0answers
98 views

Apache, Tomcat : How to use multiple SSL certificates on a single server

I am working on our Debian X64 server which is the endpoint for 5 domain-names. One of the domain-names is utilized by a web-project running on Apache web server. The remaining 4 domains have ...
1
vote
2answers
84 views

how to re-direct from http(s)://(www.)example.com to https://example.com using Nginx?

Just as the title states. I found another helpful Q/A, but it does not show how to do it correctly in Nginx settings, I mean the parameters. He might mean that https://exmaple.com should have a valid ...
0
votes
2answers
52 views

Can I use the same SSL certificate on the CDN and the origin

It's pretty straightforward question, I have a certificate issued by DigiCert, already installed it on my origin, and I want to use it for the CDN. I'm starting to configure Akamai CDN in front of my ...
3
votes
1answer
59 views

(Self-signed) certificate with wildcards for localhost IPs (127…)

Is there a way to create a (self-signed) certificate that will cover all localhost IPs such as the full range for 127? I tried both 127.* and 127.*.*.* but neither worked; I still got SSL error pages ...
0
votes
0answers
10 views

Client Certificate Authentication with IIS from a guest account

I have an IIS 7.5 server that uses client certificate authentication. A typical setup is to create a local user and import the client ssl certificate to that profiles user store. This process works ...
7
votes
3answers
2k views

How can an SSL certificate work for some clients only?

My hosting provider has recently re-issued and re-installed an SSL certificate for my domain, after they let the old one expire by mistake. I am now able to browse the website over HTTPS again, and ...
2
votes
1answer
44 views

Centralize the update of Internet Root Certificates

I would like the client machines in my organization to update the Root Certificates from a centralized location INSIDE the organization. This used to work with WSUS, but Microsoft left this way aside ...
0
votes
0answers
16 views

Windows: Verifying intermediate CA on dark network with keystore (.kdb)

Background: We have Windows Server 2012's (Server A and B) whose Internet Explorer (IE) connects to RHEL's Apache server (IBM HTTP Server). PKI: Apache serves a certificate whose intermediate CA was ...
0
votes
1answer
56 views

Apache2 - SSL is not working

I am currently trying to install an SSL certificate issued through Namecheap by Comodo. I am however currently having issues. In the error log, I have this error: [Sun Apr 10 17:59:06.567045 2016] ...
-2
votes
2answers
92 views

How long does it take to renew an SSL certificate?

I rent a managed dedicated server from a hosting company. A year ago, they added SSL support to one of my domains at my request. Last night, however, the certificate expired: yourdomain uses an ...
1
vote
1answer
43 views

Wordpress hosted behind a load balancer that provides SSL

Clean Wordpress website located behind loadpalancer proxy that provides wildcard SSL for wp.mydomain.com but I'm not involved into its configuration. WP server based on CentOS 7.1 with Apache ...
0
votes
0answers
26 views

Is there any way to disable at least TLS 1.0 in GCE HTTPS Load Balancer?

I'm trying to pass the Trustwave pci DSS scan but i can't because it fails in "TLSv1.0 supported" and i think the problem is in GCE HTTPS loadbalancer that enables TLSv 1.0, 1.1 and 1.2 by default ...
1
vote
2answers
46 views

Better way to view windows certs than MMC?

I'm trying to view the windows certs on my box but the UI for certmgr and MMC is terrible. Specifically, I'd like a quick way to view and compare thumbprints and friendly names. Does anyone know a ...