SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

0
votes
0answers
6 views

Right way to configure startSSL Certificate [duplicate]

Hy! I try to apply a Start-SSL Certificate on my Apache 2 (Debian Wheezy). On Xampp i got it fast and it works, but on my Debian root, the certificate is confirmed by Avast (in this case) and not by ...
2
votes
1answer
40 views

How do I connect to an OpenVPN server and dump the certificate chain presented when connecting?

My first thought was to use something like openssl s_client but this only supports TCP not UDP and it seems there requires some special magic to get TLS over UDP working, how do I interface with that ...
0
votes
2answers
27 views

Single *.company.com wildcard cert for RDS Deployment possible?

With a Remote Desktop Services deployment in a domain ad.company.com, I have RDG and RDSH installed on the same server, rd.ad.company.com. I can use a wildcard cert on *.company.com for access to the ...
1
vote
2answers
36 views

Transferring SSL certificate to new server

We're swicthing from an OSCommerce website to Magento and are also swicthing servers. The old server is on Apache and our new one is on NGINX. The SSL certificate we have seems to have been purchased ...
0
votes
0answers
21 views

Confusion over the correct private key

I inherited work on a website and I am trying ultimately to replace SHA-1 certificates with SHA-2 certificates. The first step would be to generate a CSR from my server using the command openssl req ...
0
votes
1answer
24 views

Installing Domain SSL is not working

I have a Linode Server running Debian 7.5 & Apache2 I have the following files stored in the /etc/ssl/localcerts/ directory: www.test-site.com.key www.test-site.com.csr www.test-site.com.crt ...
0
votes
1answer
32 views

Apache2 Server should be SSL-aware but has no certificate configured [Hint: SSLCertificateFile] for wild card SSL certificate

I am trying to configure Godaddy Wild Card Certificates on a Apache web server.I am getting the following error: [Thu Jul 23 02:32:42.499991 2015] [mpm_event:notice] [pid 12293:tid 140626762094464] ...
0
votes
2answers
32 views

Real trouble over an expired SSL certificate

I renewed my SSL certificate at a very well known company, who screwed up my order. After it was righted, I received several certificate files with no instructions: MY.SERVER.COM.crt ...
0
votes
0answers
11 views

SSL Certificates for Exchange 2013

I really need some help in configuring exchange 2013 and SSL. I purchased an SSL cert for my external domain - remote.company.com and this works fine as I have added the certificate and applied it to ...
0
votes
2answers
25 views

SSL configuration on nginx - missing .icrt file?

I've managed to get SSL working on my site, under nginx (or so I thought!). However, I was trying to run it via GTMetrix (to check the new speeds), and it appears that there is something wrong. I ...
0
votes
0answers
20 views

Self-signed cert with Subject Alternative Names

I'm attempting to create a self-signed cert with SANs using OpenSSL on Ubuntu 14.10. I have been about to successfully generate a CSR that includes the proper extensions. When I generate the ...
0
votes
1answer
28 views

Share SSL certificate between VM

I have a SSL certificate for example.com, and I want to protect with it: My home page (example.com) running on a VM in Azure My servlet (servlet.example.com) which is running on a different VM (but ...
1
vote
1answer
26 views

How do I configure Windows for dual certificates, ECDSA with RSA fallback?

We'd like to use an ECDSA SSL cert; however, we need to support a fairly wide variety of devices including some that are unlikely to ever support ECDSA certificates. The standard solution is to ...
0
votes
1answer
13 views

Windows 2008 Cert Authority only issuing certificates for 10 days

I am trying to get a certificate for my Remote Desktop server on my AD. When I submit the request through the Certificate Authority snap in it generates a certificate that is only valid for a few days ...
0
votes
0answers
23 views

Can I use a credit card EMV chip as a client-side SSL Cert?

Is there a way to read the certificate in a consumer credit card EMV chip and use this to authenticate to an Apache web server using the client-side certificate support in SSL/TLS?
0
votes
2answers
34 views

Common Name does not match Server Name - SSL Certificate

I recently purchased an SSL certificate. I've got www.site.com.key, www.site.com.csr, intermedia.pem, www.site.com.crt all set up in my /etc/ssl/localcerts folder. When I open my browser I get the ...
0
votes
2answers
59 views

IIS sends incorrect intermediate SSL certificate

I just installed a new SSL certificate (from StartCom) to one of our servers and noticed that in Chrome there is the crossed padlock icon displayed for the site so I started investigating why is that ...
0
votes
2answers
33 views

SSL certificate issue for all clients

I had exchange 2013 installed on Windows 2012 server and all way happy until I attempted to add remote access role. This failed the first time, and I had to remove the role and re-add the role. Remote ...
2
votes
3answers
39 views

SSL binding with no hostname, and centralized certificate store?

We have a web app that serves a large number of websites from a single IIS website. The IIS website simply has a catch-all binding on port 80. Up till now, for the SSL bindings, we have added a new IP ...
4
votes
3answers
489 views

Do I need a dedicated IP address for each SSL certificate?

I am hosting multiple domains on a single AWS instance. The domains all share the same underlying codebase, but we provide "white label" services on various domains. Each of the domains (foo.com, ...
0
votes
0answers
41 views

Azure hosted website certificate chain (comodo) intermittently doesn't send full chain

We host a website in azure. The service we host has 6 instances. On that service we have added a certificate that covers the site, and has an authentication chain that looks like: our certificate ...
7
votes
2answers
362 views

Creating sub certificates from a root certificate (SSL) [duplicate]

If I purchase a signed certificate for example.com, can I then produce sub-certificates for a.example.com and b.example.com? These sub-certificates would have PEM files whose privacy cannot be ...
2
votes
0answers
37 views

Browser and openSSL return different certificates

I'm trying to debug my first attempt at using SSL Pinning in an app I'm developing. I use a shared hosting service on which I have a few domains active. One of the domains is going to act as an API ...
-1
votes
0answers
15 views

Schannel Fatal Alert 48 from failed LDAP connection over TLS, but Domain computers only [duplicate]

So I am setting up a service using PHP and it's LDAP functions to edit AD user accounts. I want to change account passwords and that requires an encrypted connection, so I use TLS. Now here's where ...
0
votes
0answers
15 views

IIS website stops working after installing new certificate

We have an IIS website that is available at the URL acc.myapp.mycustomer.com. The myapp.mycustomer.com website shares the certification with the Sharepoint website. The site has been working fine for ...
1
vote
0answers
17 views

Certificate chain lost apache 2.4

So I think I'm not getting something here. I'm getting javax.net.ssl.SSLHandshakeException: null cert chain when I access my application via apache httpd, but not when I'm accessing it directly. ...
1
vote
2answers
90 views

Is a good idea to use a SSL UCC certificate for two different but related web sites?

There are two e-commerce sites on the same Apache server, moreover they share the same Drupal installation with common users and products. They differ for domain name and for aspect but are ...
0
votes
1answer
21 views

Apache Server does not update certificate for subdomains after restart

I have a server which has domain1.example.com and domain2.example.com. The server is using 2 certificates one for domain1.example.com and a UCC certificate for domaind.example.com. My ssl config is as ...
0
votes
0answers
34 views

Wildcard SSL on 2 Servers

I'm helping an SEO client install an SSL certificate and have run into some issues. I'll try to simplify it. He has 2 servers: 1. SERVER A: Internal server running IIS that contains chat and support ...
1
vote
1answer
42 views

facebook app giving Security error when click on a shared link to my site [closed]

I have built a site and users are sharing it on facebook, but when one of their friends click on the link it give them this error. Security error There are problems with the security ...
0
votes
0answers
10 views

Cross Domain LDAPS

I have a bit of an issues I am running in to. We have two domains: domain1.com domain2.com Our Enterprise and Subordinate CA Resides on domain1, let's call it subca.domain1.com. I am trying to ...
1
vote
2answers
83 views

Windows XP invalid certificate on Nginx

I migrated my SSL websites and certificates from Apache to Nginx and from that moment all Windows XP clients does not recognize the SSL certificate (it is a wildcard certificate issued by Trustico). ...
7
votes
1answer
110 views

Is is possible to disable Certificate Transparency (audit log checking) of certificates in Chrome?

We utilize HTTPS deep packet inspection in our firewall via a trusted root certificate in the Windows certificate store. Chrome recently pushed forward with a feature to perform additional checks on ...
1
vote
1answer
31 views

Configuring IIS ARR for backend client certificate authentication

I have an IIS server configured with ARR to reverse proxy requests to a backend server. The backend server requires client certificate authentication, however, it only needs to authenticate the ...
1
vote
1answer
53 views

Best Certs to use for internal https [duplicate]

I'm helping out a large church with some IT stuff they have lots of internal secure connections, like to the security cameras, or to the UniFi AP controller that want to use https. Of course each of ...
4
votes
3answers
607 views

View the SSL certificate of a page that immediately redirects to another

So I've googled quite a bit for this but it appears that my google-fu fails me - apologies if this is a trivial and already answered question, I could not find anything about this I'm trying to ...
0
votes
1answer
64 views

Easiest way to generate PFX certificate (Windows)

At the moment to generate PFX Certificate, I use openssl and: Generate a CSR with its private key Connect to my CA website (Microsoft CA), and submit CSR along with (san:dns=) additional attribute. ...
0
votes
1answer
58 views

What would be a less-known SSL certificate attribute to look out for? [closed]

I'm looking for a simple domain SSL certificate for our company's website and I'm a little confused. A lot of them seems to offer the exact same features, yet at price ranges going from 5$ / year to ...
3
votes
2answers
480 views

Why does Chrome complain about “obsolete cryptography”?

I am hosting an ASP.NET website with wildcard ssl certificate on IIS / Windows 2008R2. While Chrome works fine with my website and shows a green lock the https connection, the https details mention ...
-1
votes
4answers
110 views

Why are many mail servers using subdomains like mail.example.com?

I'm just setting up dovecat and postfix for the first time and wondering why so many companies are using subdomains for IMAP and SMTP like smtp.mail.example.com and imap.mail.example.com? What are ...
-2
votes
1answer
16 views

TLS for outgoing mail (following ISPmail) not working

I built my mailserver on a vserver after the ISPmail tutorial (https://workaround.org/ispmail/wheezy) (which is awesome). The only remaining problem is that it does not seem to use TLS with outgoing ...
0
votes
1answer
26 views

Replace ssl certificate in bundle

I'm not really used to administration stuff so please bear with me. Recently, the server's certificate from RapidSSL expired and we renewed an received a new one. TO replace the cert, I opened up ...
1
vote
1answer
59 views

How to unassign self-signed cert from SMTP on Exchange 2010?

We have a GoDaddy wildcard certificate that we have installed into Exchange 2010 and is successfully used on IIS connections for OWA. We have assigned this certificate to the SMTP Service as well as ...
0
votes
0answers
33 views

Imported wildcard SSL Certificate on Windows Server 2008 R2 IIS7.5 ERR_CONNECTION_RESET

I've been battling this all day! I've exported our production SSL Certificate to a PFX file, copied this to our dev IIS server. Using MMC, added the certificate management, imported the PFX into the ...
-1
votes
1answer
45 views

Do I need a wildcard cert if I'm running two SSL websites off different ports?

If I've got two vhosts for two different websites running off 8081 and 8082 (both SSL), do I need a wildcard cert? The hostnames resolve to the same IP but seeing as they are running off of different ...
1
vote
0answers
19 views

MS Webdeploy V3 encryptPassword correct usage

I have installed MS Webdeploy (Version 3.5) on both my ("old") Server 2003/IIS6 and ("new") Server 2012/IIS8. Currently, I am following the guidelines in the article here, backing up the Target ...
0
votes
1answer
49 views

Client Certificate Web Service Call

I have a requirement to call server web service with client certificate. They have provided me one .crt file. I am hosting my project in WindowsServer2008 IIS7. I install .crt from right click ...
0
votes
0answers
46 views

firefox with ssl two way authentication chains

I fall into a never ending trouble with certificate chains and 2-way authentication on my servers; I'll try to describe the problem as best as I can: I have 2 sites on 2 different servers, ...
0
votes
1answer
16 views

Multiple Certificates on Exchange for OWA and EWS

We are currently running Exchange 2007. All our clients access the EWS service on Outlook via the internal server name server.domain.local. For this we use a self-signed certificate from the domain's ...
0
votes
1answer
54 views

Exchange 2010 rejecting Amazon SES TLS with UntrusedRoot

Due to our network setup, when we moved our business last year we switched Exchange 2010 to use AWS SES to relay our outgoing emails. This has worked pretty well up until yesterday, when Exchange ...