SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms

1
vote
1answer
10 views

How to view all ssl certificates in a bundle?

I have a certificate bundle .crt file. doing openssl x509 -in bundle.crt -text -noout only shows the root certificate. how do i see all the other certificates?
0
votes
1answer
10 views

postfix master.cf configuration from database

I am wondering if it is possible to configure postfix master.cf file from database. Same as, for example, in main.cf one can set alias_maps = pgsql:/etc/postfix/pgsql-aliases.cf What I'm ...
2
votes
1answer
15 views

Certificate Authority - Issuing Authority Confusion

This is a bit of a newbie question, but my head is fried after reading various differing article on how CA's work. Are most certificates issued by an 'intermediate CA' where the chain eventually ...
-1
votes
1answer
46 views

Generate CSR for SSL [duplicate]

I need to add SSL to a Apache/Linux sever. Do I have to generate CSR from the same server which I need to add SSL? Also when I add SSL in Apache sever, can I omit mentioning key file like below? ...
0
votes
0answers
12 views

Failed to Configure CA Certificate chain after Rebuilding/Re-Installing OS

I got my free ssl at startssl.com and it works really fine. My site is working with https://. After I configure LAMP and VSFTP and broke something in there, I decided to re-install UBUNTU 12.04 OS to ...
0
votes
1answer
24 views

Understanding XP users accessing a UCC certificate on IIS8

I have a single IIS website which hosts 3 different websites all using the same UCC SSL certificate. (The code of my site examines the host header itself to decide which variation of the site to ...
1
vote
1answer
96 views

Switch the SSL provider after Heartbleed bug instead of revoking

I have a question regarding the Heartbleed problem and the SSL certificates. About Heartbleed many people say that admins should revoke their certificates and get new ones. I got my SSL certs from ...
1
vote
0answers
13 views

Maven - resolving “java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors”

I am attempting to build/install this project on an Ubuntu 12.04 box: https://bitbucket.org/petermr/pdf2svg However: mvn clean install Fails to build due to getting errors like this: ...
0
votes
0answers
38 views

Understanding the output of openssl s_client

Ever since our email provider changed their SSL certificate, a POP3 client based on mono refuses to connect to their secure POP server to download emails. Other clients do not have an issue; e.g. ...
4
votes
0answers
66 views

How to find out which server generated a CSR

I sent a client a CSR a few months ago and now they finally sent me back the CA response. However, there are multiple Windows 2008R2 servers and I don't remember which one I used to generate the CSR ...
1
vote
1answer
17 views

Linxu Forward proxy for client authentication

I need to use a simple HTTP forward proxy proxy for linux to do mutual SSL authentication The proxy needs to attach a client certificate to HTTP request and then upgrade HTTP to HTTPS. I have tried ...
0
votes
1answer
23 views

Exchange Server - How to use existing certificate without CSR?

I have some SSL certificates problem. We have an Exchange 2010 server hosting mailboxes for mydomain.com, otherdomain.com and thirddomain.com. It's internal name is myserver.mydomain.local. When ...
0
votes
1answer
59 views

SSLCertificateChainFile Deprecation Warning on Apache 2.4.8+

We have an SSL Certificate for our website from Network Solutions. After upgrading Apache/OpenSSL to version 2.4.9, I now get the following warning when starting HTTPD: AH02559: The ...
0
votes
0answers
27 views

Can't seem to get Apache SSL client certificate authentication working with an intermediate CA

I'm restructuring my personal CA system and trying to add an intermediate CA into the mix. I have a self-signed root CA whose certificate is imported into all appropriate browsers/OSes. I seem to be ...
3
votes
2answers
35 views

Use DNSSEC for secure connections

From my understanding DNSSEC allows me to create a public key and sign my DNS records. There appears to be multiple ways to have a certificate record (such as DANE see ...
0
votes
1answer
48 views

SSL Certificate implementation for a stack that has varnish and multiple NGINX webservers

My current stack has Varnish -> NGINX (2 servers) running Drupal -> MySql. All static content is cached and served by Varnish over HTTP. However when a user signs-up and wants to purchase a plan the ...
0
votes
0answers
44 views

SSL Certificate keeps changing on IIS7, I don't have any idea what keeps changing it? [duplicate]

We installed an SSL certificate in our IIS7 installation on a Windows 2008 Server. SSL certificate is from RapidSSL (GeoTrust) The problem is the SSL certificate just keeps on changing, 1 day it ...
8
votes
3answers
865 views

Do I have to update my snakeoil certificate after updating openssl (heartbleed)?

I just updated my debian wheezy server to the newest version of the openssl package which has the heartbleed bug fixed. I do support SSL on my server, but only with a snakeoil certificate. I was just ...
1
vote
2answers
421 views

How do I rotate an SSL Certificate as requested by AWS

Amazon AWS sent an email today that users using Elasic Load Balancing (ELB) service with SSL certificates should "Rotate" them for precaution (Heartbleed bug). How exactly do I rotate an ssl ...
0
votes
1answer
406 views

Heartbleed testing tools do not recognize reissued certificates (PositiveSSL Wildcard + Amazon ELB)

In response to the Heartbleed news, I have upgraded OpenSSL on my production server and am now trying to reissue the SSL certificate. I am using a PositiveSSL Wildcard certificate on an Amazon ELB. I ...
1
vote
1answer
39 views

Replacing SSL Cert Apache

I am replacing our SSL cert on our Apache web server. This is the first time I have done this, with my 2 colleagues being on holiday, and an urgent need to replace our SSL cert(due to the openssl ...
5
votes
1answer
602 views

How can I check if certificates generated with openssl are vulnerable to heartbleed

I am aware that you can show the version of openssl you are using by typing the following at the command line "openssl version". I created a certificate and a key some time ago with similar names to ...
0
votes
1answer
32 views

How to re-check SSL certificate even with exeption in browsers

My SSL certificate has expired. I created a new one for my domain but after a few days. Certificate is now online and working but there is a problem at users side. When the certificate expired, users ...
1
vote
1answer
45 views

Proper config for Couchdb + SSL Ubuntu. Getting error: curl: (35) Unknown SSL protocol error in connection to 127.0.0.1:6984

I'm looking to use CouchDB with SSL and nodejs and I have just switched from self signed certificates (which were working for over a month) to a real SSL certificate and now I'm running into ...
0
votes
0answers
5 views

PKI subjectAltName OID for custom, internal data

If I had a business who wants to act as a root authority for the purpose of authenticating subordinate certificates, is there a subjectAltName OID that I can use to also store some arbitrary ...
0
votes
3answers
79 views

Some users receive untrusted SSL certificate warnings

I've been getting reports of users visiting our site getting "this certificate is not trusted" errors when visiting our site via https. I don't seem to ever have any problems, but two separate people ...
3
votes
1answer
41 views

If I get a certificate signed for ECDSA will older browsers be able to use RSA?

I'm looking into using ECDHE-ECDSA and there are a lot of great articles on why (https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/) and ...
1
vote
1answer
21 views

Single IIS, 2 applications, 2 IP addresses, 2 Domains, 2 SSLs

I know there are many questions out there, but none seemed to address specifically what I am after. I have one instance of IIS, with two separate applications on it. Each application works on its ...
0
votes
1answer
50 views

Apache fails to start with new ssl certificate

I'm running RHEL 6.4 and my trusted certificate has expired recently, so I decided to renew it. I've obtained a new certificate from StartSSL. After downloading and putting the certificate file on the ...
0
votes
1answer
36 views

S/MIME certificate to minimize email bounce

I have a website hosted in a vps that sends informative emails to my clientes, maybe 20-40 emails per day. Since few weeks ago some sent emails are bouncing with the following error: This message ...
0
votes
0answers
13 views

Windows 2012 - Certificate Issue

My application runs as a WCF web-server in a Windows service. It uses https/ssl protocol and binds it's certificate with its port number. During the Service start, I am seeing this error in Windows ...
-1
votes
1answer
20 views

Only allow a specific client to talk to a server

I have the following situation: have a server (ubuntu) running an application. I have a client (only the one client) requesting stuff from that server. To execute the requests, the client has to ...
0
votes
0answers
10 views

Chef SSL authentication using enterprise CA

I am trying to configure Chef in our environment. My understanding regarding the Chef SSL configuration is as below. While installing chef-client in nodes using knife bootstrap command, ...
2
votes
1answer
375 views

Can't upload certificate to AWS

I'm doing: aws iam upload-server-certificate --server-certificate-name MysiteCertificate --certificate-body Downloads/mysite/mysite.crt --private-key mysite.pem --certificate-chain ...
0
votes
1answer
25 views

IIS 7 filling disk with millions of certificate files

I've got an ASP.NET website running on IIS 7. Using PA File Sight, I've proven that it is creating 2 to 3 new files in the C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys folder every minute. PA ...
13
votes
1answer
642 views

How does this kind of SSL work?

"Issued to" and "Domain Name" doesn't match but still valid and accepted by all major browsers without any warning. While previewing my blog post in Blogger, I noticed that my blog was previewed via ...
0
votes
1answer
81 views

StartSSL.com SSL Class2 Certificate and Postfix

currently my Postfix 2.11 instance runs TLS on a GoDaddy SSL Certificate but as i would like to be able to access my server from smtp.example.com as well as imap.example.com, example.com or ...
2
votes
2answers
66 views

Nginx issues between vhosts and SSL

I have two sites in the same IP with the follow configuration: site1.com Multiples subdomains (ie.: foo.site1.com, bar.site1.com) Everything listening on port 80, NOTHING in 443 ...
9
votes
2answers
299 views

Does it matter where the CSR and key files for SSL certification are generated?

I have to create a CSR for a wildcard SSL certificate. Some FAQs from SSL providers say that I should generate the CSR file on the machine where I want to install the certificate? My understanding is ...
0
votes
1answer
20 views

MDM Server Apple Certificate: Certificate Signature Verification failed

I want to create a MDM server to manage my iOS devices. I have enrolled in iOS Enterprise Developer program. And executed the following openSSL commands "1. Creating Certificate Authority (CA)" ...
0
votes
1answer
27 views

How can I renew the SSL certificate used on our Exchange server?

According to the MSDN article Renew an Exchange Certificate, I'm supposed to use Get-ExchangeCertificate -Thumbprint 'AD19B141228C7CF98B5F78DCED978B7C45E15434' | New-ExchangeCertificate ...
0
votes
0answers
62 views

Config Manager 2012 Application Download stuck at 0%

We have a Config Manager 2012 R2 setup with 2 Distribution Points on remote sites. In the remote site the Applications don't get downloaded, the status remains on 'downloading (0% complete)' In the ...
0
votes
0answers
15 views

Let Postfix show the appropiate SSL Certificate for a variety of host names

i bought an SSL Certificate for domain host.domain.com so my GNU/Linux mail server can deal with secure connections appropriately. That's ok while clients connect to host.domain.com but when they ...
-2
votes
1answer
38 views

Why openssl s_client and gnutls-cli deliver different certificates (own server)

on my server i have multiple virtual hosts with apache2. Some with domain *.example-one.org and some whith *.example-two.org. Each domain has it's own wildcard certificate. When I fetch the ...
1
vote
2answers
36 views

Does a domain computer trust certs from domain CA

I have investigated this but have been unable to find a definitive answer to my question. I have never used certificate services in active directory before so am unsure of its possible ...
0
votes
1answer
59 views

version 0.9.7a of openssl reports “certificate signature failed”, but version 0.9.8e is happy

I am trying to construct an openssl certificate chain that will work with a standard CentOS 4 install as client. (I know it's very old, but it's what our client is using so we need to support it). ...
0
votes
1answer
62 views

Will renewing a wildcard SSL certificate on one server invalidate the certificate on other servers?

We have a wildcard SSL certificate that is due to expire in a few weeks. I currently have this certificate installed on six servers. I'd like to renew it on one server first, test it out, and then ...
0
votes
1answer
86 views

Restart of nginx service fails because of /etc/nginx/nginx.conf test failure

Installing 3rd party SSL on DigitalOcean Droplet, Apache running Ubuntu 12.10. Following the instructions here: AlphaSSL on Apache Self signed SSL instructions from DigitalOcean So everything ...
0
votes
1answer
19 views

Certificates/SSL via SSL-Proxy vs. real certificate for a server

While researching the different certificate types I've come across hosters that offer what they call SSL-Proxy type installations for their servers. I'm concerned about this idea, as it defeats what I ...
0
votes
0answers
6 views

Apache: Pass phrase incorrect SSLPassPhraseDialog [duplicate]

On one of my servers I observe the following problem with SSL passphrase: some certs are passing it without asking for a password, while some others keep asking for it. I have set it up globally: ...