SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

1
vote
0answers
10 views

How to install SSL Certificate into Service Bus 1.1 on Windows Server

For test cases and evaluation we installed 2 nodes with "Azure Service Bus 1.1" on Windows Server 2012 R2 machines. The installation process installs the https endpoints with a self-signed ...
0
votes
0answers
12 views

Application does on open upon Installing SSL on Glassfish v3 on cloud Digital Ocean

I have strictly followed the instructions given here: https://javadude.wordpress.com/2010/04/06/getting-started-with-glassfish-v3-and-ssl/ It does not show me any error or exception but my ...
0
votes
1answer
39 views

SSL certificate for CNAME [on hold]

We have added CNAME for AWS Amazon S3 domain. Like below test.domain.com IN CNAME d5f29cy3a2ai3ip.cloudfront.net. We already have the SSL certificate for the domain "www.domain.com". But don't have ...
2
votes
2answers
24 views

Change Key exchange mechanism in IIS 8

We are using RSA key exchange mechanism for SSL certificate. How can i change that to DHE_RSA or ECDHE_RSA? Due to using RSA, we are getting the below warning in chrome “Your connection to website is ...
1
vote
1answer
95 views

The site is using outdated security settings that may prevent future versions of Chrome from being able to safely access it

We're using an AWS ELB to do SSL termination and are having an issue where Chrome is displaying "https" in red with a strikethrough. It says "The site is using outdated security settings that may ...
0
votes
2answers
27 views

Apache:mod_ssl:Error: Private key not found

I'm installing a SSL certificate to serve HTTPS. I'm using Apache 2.4 in Amazon Linux and got the certificate in Startssl. My Vhost config is the following: <IfModule mod_ssl.c> ...
0
votes
0answers
19 views

Multiple domains with postfix and one SSL certificate [closed]

I know i have to set up something like this: https://blog.wpkg.org/2013/07/31/postfix-and-multiple-ssl-certificates/ but the problem is - i don't have two ip adresses. Could i emulate it by adding a ...
0
votes
0answers
16 views

Squid transparent https certificate error: ssl_error_bad_cert_domain

I have a squid transparent proxy (squid 3.4 in pfsense 2.1) with ssl_bump for https, all my clients trusts squid as CA and many sistes are well working... However I have some problem with websites ...
0
votes
0answers
16 views

Gray triangle on firefox over HTTPS [closed]

I've been searching on the net for a while now but don't really seem to find the solution. I have an TLS connection to app.spiderdoc.co that works on Chrome and Safari but I have a minor issue on ...
-1
votes
1answer
19 views

https connection can't established behind a gre tunnel

I have a network topological graph like this: Local box GateWay box +---------------+ +--------------------------+ |192.168.1.200 | -> |192.168.1.2 10.2.10.2 | ...
1
vote
0answers
28 views

SHA-2 issues with Verisign root on OS 10.9 Mavericks?

I'm using a Secure Site Pro with EV certificate from Verisign/Symantec, with a full SHA-2 root chain. Everything is great - except for Mac OS 10.9 (Mavericks), that complains the certificate is ...
0
votes
1answer
15 views

IIS: logging client certificate's thumbprint

On IIS 7.5, with client authentication by certificate, how to enable logging of client certificate's thumbprint (or serial, or subject dn) to IIS log?
0
votes
1answer
34 views

Root Certificate Update Solution - Windows Server 2008

We have an application attempting to run licensing checks via http over the web. The machines this software resides on are Server 2008 vm's with no domain configured. While tracking what is ...
1
vote
0answers
45 views

Why do apache SSL certificate and key need to be in /etc/pki/tls/private/?

I have an Apache 2.2 web server running on CentOS 6.6. I have a certificate and key file that functions when the files are in this directory: SSLCertificateFile ...
0
votes
1answer
41 views

SBS 2008 CSR remove .local

SBS 2008 server the third party SSL certificate has just expired!! trying to renew with a two year, SAN/Multi-Domain SSL going through the SBS Console Adding a new cert and get the CSR copy/paste ...
0
votes
0answers
16 views

HTTPS Config for symfony2

I have followed this tutorial for setting up https on an ubuntu server: https://www.digitalocean.com/community/tutorials/how-to-create-a-ssl-certificate-on-apache-for-ubuntu-14-04 I have ended up ...
0
votes
0answers
16 views

Setting up mail server that can handle multiple users for side project

I want to set up a mail server that can handle multiple users. Basically, the end application will assign each user an address, say example1@testdomain.com. The users can send emails to this address, ...
0
votes
1answer
11 views

Exchange 2013 Certificate replacement

I have an Exchange 2013 server which works just fine (almost) with all the basic functions and it uses a SAN certificate from GoDaddy. I will have to add a new name to the cert so I will have to ...
0
votes
0answers
9 views

Missing CA certificates on OpenShift WordPress cartridge [migrated]

I am trying to use a WordPress theme named "X" on an OpenShift WordPress cartridge. While installing an "Extension" through the "X" theme configuration page I get the following error: Downloading ...
0
votes
1answer
44 views

Proper method to generate a secure self-signed certificate

I have several websites on which I want to install a self-signed SSL certificate. I tried following various guides, such as this one (all provided more or less the exact same instructions). The given ...
1
vote
2answers
172 views

Postfix: Should I use snakeoil cert or my https cert?

I run a site and have a valid wildcard certificate installed for serving HTTPS pages. I just set up postfix on my Ubuntu host and by default its configuration includes: ...
0
votes
0answers
23 views

IPSEC for RDP Connections

I am stuck with a wired problem, I am trying to achieve a functionality in which if a certificate is not installed on a system that system won't able to remote desktop the server, he won't even see ...
1
vote
0answers
22 views

Nginx user uploaded SSL Certificates

I'm wondering what's the best way to let users upload their SSL certificates. I have a multitenant application based on rails/passenger/nginx and I need each user to use his own domain with his SSL ...
0
votes
1answer
39 views

TLS/SSL mail server Certificate installation for Postfix/Dovecot Mail Server Setup

I have tried to setup a my own web-server with mail server, (I am not a linux export just following some tutorials), webserver setup with Nginx,PHP-fpm and MySQL seems to be successful, then i moved ...
0
votes
2answers
82 views

Can't import certificate into Exchange 2013: Private Key Missing (I know it's there.)

I know this question has been asked before and I've gone through countless threads on here (as well as google) trying all of them. Unfortunately, I think I'm having an unrelated issue to what others ...
-2
votes
2answers
32 views

Creating a self signed certificate for demonstration purposes on Centos 7 server

I have setup my default tomcat website (tomcat 8.0.3) on a server inside my company LAN. From my work computer if I try to access the website by typing it into google chrome it is not working. The IP ...
1
vote
0answers
35 views

curl error 51 - of multiple requesting machines, only one has the issue

I have an SSL cURL request that fails from a single machine with the following error: curl: (51) SSL peer certificate or SSH remote key was not OK This error seems to have popped up overnight, and ...
1
vote
1answer
27 views

One SSL certificate for load balancing amazon instances

As the title says I want to have one SSL certificate for multiple instances in amazon AWS. The multiple instances are connected to the internet through an load balancer. To make an SSL certificate and ...
-2
votes
0answers
23 views

Certificate chain, middle certificate error

I want to save time so I go straight in to it. I have generated a root certificate by this guide, www.akadia.com/services/ssh_test_certificate.html then I have generated more certificates and signed ...
2
votes
0answers
33 views

OpenSSL cannot convert PKCS12 exported from Cisco ASA 55xx

I have exported an existing certificate+key from an ASA 5510: asa5510(config)# crypto ca export MYTRUSTSTORE pkcs12 MYPASSWORD Saved the output in a file (vpn-cisco.pkcs12), and now I am trying to ...
0
votes
1answer
31 views

Which L1K entrust certificates should be kept private?

One of our client has made an update to his SSL certificate and he did send us a procedure to update the certificate on our side. They also provided the L1Kchain.txt (that should be converted to a ...
0
votes
1answer
36 views

SSL Certificates from nginx only works in Windows IE and Chrome

I have a wildcard certificate and got it signed by AlphaSSL. I followed the steps from here: http://nginx.org/en/docs/http/configuring_https_servers.html#chains to set it up on my nginx server which ...
0
votes
0answers
20 views

Forward SSL client certification information from httpd1 to httpd2

I have two Apaches running (on the same host), one serving as a reverse proxy, and the 2nd one is my app webserver. I'm doing some kind of authentication on the proxy based on SSL Client certificate ...
0
votes
1answer
20 views

Signed SSL certificates on Zyxel USG60 web interface?

I know that you can add SSH certificates for client/server authentication for the web interface and SSL VPN, but is there a way to change the SSL cert that the web interface sends to the browser just ...
8
votes
2answers
563 views

Is this SSL certificate chain broken and how to fix it?

For the SSL cert on the domain example.com, some tests tell me that the chain is incomplete and since Firefox keeps its own certificate store, it might fail on Mozilla (1, 2, 3). Others tell me it is ...
0
votes
0answers
22 views

Key and Certificate for Ideal PHP Wrapper

I try to make a Ideal sandbox with a PHP wrapper and Simulator. IDEAL wrapper: https://github.com/PENDOnl/iDEAL-v3.3.1-PHP-Wrapper IDEAL simulator: http://ideal-simulator.nl/ I runned these ...
0
votes
1answer
51 views

SSL on Ubuntu 12 LTS with Apache and PHP-FPM

After reading many tutorials I managed to run successfully Apache MPM-Worker and PHP-FPM on Ubuntu 12 LTS. I have separate pools for each user and everything works like a charm. However I need to ...
0
votes
1answer
23 views

Https transparent proxy and SSL certificate validation

If I setup a transparent proxy for https connections using a SSL certificate signed by my local CA and distributed to all my active directory clients by GPO, may the client (browsers) reject or advise ...
2
votes
2answers
69 views

Wildcard certificates with short hostnames?

I'm trying to generate a certificate with the following subjectAltName: hostname *.hostname hostname.mydomain.local *.hostname.mydomain.local I generate the CSR via OpenSSL and then get the ...
1
vote
1answer
26 views

How do I get alerted to an pending AD CS certificate request?

I want to get a summary report of pending AD CS requests. How would I approach this? Does anything already exist? The problem I'm trying to solve is where a user requests a certificate, and i'm ...
14
votes
2answers
947 views

Purchase new SSL Certificate before existing one expires

I am currently transferring a new customer onto my virtual private server from their old host. They have an existing SSL certificate but it expires next month so I don't think it is worth the hassle ...
0
votes
0answers
17 views

Set IIS to Require SSL + Require Client Certificate on requests from localhost?

So, This is my scenario: I have a WCF service application which is invoked by the cruel and mean outside world, and it is hosted in IIS to REQUIRE both SSL and client certificate. I.e. no ...
3
votes
1answer
42 views

Is it unusual for a database client to install the server's SSL certificate?

We use Amazon RDS for our databases at work. Recently we got an automated email from Amazon stating they'd be updating the SSL certificates and that if we didn't upgrade our database instances within ...
0
votes
0answers
31 views

Apache basic auth or SSL client certificate based on the originating IP

In Apache 2.4 is it possible to present a basic auth to the client if it comes from the predefined IP range and check a SSL client certificate otherwise. I know about FakeBasicAuth but this is not ...
1
vote
2answers
35 views

Nginx: possible to use SSL certificates from different authorities on one IP address?

I'd like to know if it's possible to have two Nginx virtual hosts sitting on the same v4 IP address. I know there exist SNI but I have two basic (no SAN, no wildcard) SSL certificates from two ...
2
votes
3answers
70 views

Where did this wildcard SSL certificate come from?

My company is hosting example.com and sub.example.com on the same server, using a wildcard SSL certificate for *.example.com. Now it's time to renew our certificate, and we're not sure how we got that ...
1
vote
3answers
294 views

Certificate error: The name in the certificate does not match…, Outlook client using .local

We have recently had to decommission our .local certificate from Godaddy, as it will not be valid anymore. The new certificate contains the following names: mail.mydomain.com ...
0
votes
0answers
113 views

apache 2.4 don't find the SSL Certificate File

I try to configure SSL on my apache 2.4.12 Webserver. But apache2 can't find the Certificate and Key File in the corespondening ssl directory. I already checked file permissions but without success. ...
2
votes
0answers
14 views

Skip password authentication on Dovecot when client certificate provided

Using Dovecot version 2.1.7, I've gotten client certificates working with fairly little effort, and at this point I can choose between having password authentication after the certificate check or ...
1
vote
0answers
40 views

How do I change the expiration of CRLs with OpenSSL?

I am currently experimenting with my self signed CA. But in order for my devices to work I need a valid CRL. I set the CDP to one of the CDN hosting providers. As I have only 5 certificates issued I ...