SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

0
votes
1answer
21 views

SSL certificate installation on AWS Load Balancer

I am following this documentation to set up GoDaddy's standart SSL on my EC2 instance using Load Balancer: Create a Server Certificate I connect to my instance using amazon's java based SSH and run ...
0
votes
0answers
9 views

Windows Home Server 2011 and SSL certificates

I am running a home server with Windows Home Server 2011 and have set up Remote Web Access and Remote Desktop. I also have a valid SSL certificate from PositiveSSL which is set up on IIS. But whenever ...
0
votes
0answers
11 views

How to Setup Apache as a reverse proxy to another ip

I have a wordpress site example.com running from apache on server1 and example.com/forum running on a different server(server2). I have a Single Domain SSL Certificate which is not limited to a ...
-1
votes
1answer
27 views

CN field format

A csr certificate is actually a crypted text file used to request and create an SSL certificate. My doubt is about the Common Name (CN) which according to someone can also be different from a ...
0
votes
1answer
16 views

Google app engine SSL and map to example.com/api

I'm going to setup the SSL for my domain, now, the configuration is this: - google cloud machine that hosts the website (example.com), and a webapp (js, example.com/myapp) that communicates with API ...
1
vote
0answers
24 views

SSL Configuration failed in Apache after moving keys/certs to another machine

I'm in the process of moving my website to another server, and after moving the SSL key and certs and recreating the same Apache config, I encounter the following in the error logs at the time of ...
0
votes
1answer
27 views

Generating a CSR with a Multi-Domain Wildcard SSL [duplicate]

I tried Googling and haven't been able to find anything reliable that shows me how to generate the CSR. I have multiple domains, that I'd like added so I can't use the usual OpenSSL wizard: ...
0
votes
2answers
48 views

Is it possible to get 'csr' info from SSL certificate in web browser? [on hold]

When creating a csr you provide some information about Country,company, email, etc. Then when the certificate files are installed in i.e. apache , you browse to the url and see i.e. in chrome the ...
0
votes
0answers
16 views

CentOS 7 Automated SSL Generation from Active Directory

I have an Active Directory Server setup for Certificate Services. I am able to manually generate certs as needed. However, I need to find a way to automate the sending of the cert request to AD and ...
0
votes
2answers
24 views

NGNIX, SSL Certificates and PC-DSSI 3.1

We are going to have to pass a PCI 3.1 audit for the web application we're currently developing. It's on Amazon EC2 running NGINX under Debian. We're in contact with Symantec for certificates and ...
0
votes
1answer
47 views

How to Check if a SSL Certificate is successfully renewed

I have two web servers, one for an intranet and the other for a website. The system specs of the two are almost the same, which is as follows: CentOS 6.5 LAMP (Apache/2.2.15) + WordPress, which were ...
0
votes
0answers
80 views

Firefox users get sec_error_bad_signature over HTTPS

We've had a couple of users recently complain about not being able to connect to the HTTPS version of our website (served via Apache) from Firefox. They error they receive is: Secure Connection ...
0
votes
1answer
40 views

How to disable catch-all on a ssl virtual host

My virtual host looks like following: <VirtualHost example.com:443> SSLEngine on SSLCertificateFile /etc/apache2/ssl-keys/example/example.crt SSLCertificateKeyFile ...
1
vote
1answer
22 views

Is capolicy.inf processed in full (or part) during server install, renewal, and issuing new certs

When installing a Windows CA, capol.inf confuses me. It seems that capol.inf does set defaults for the CA that can otherwise be done using certutil's registry functions (or regedit). It also ...
1
vote
1answer
37 views

Unable to use builtin CA bundle to verify GoDaddy SHA2 SSL certificate

I ran into an interesting problem. We have a PHP script that contacts a LTL shipper (https://facts.dohrn.com/). That script has been failing because it can't validate the SSL certificate. I went to ...
0
votes
1answer
17 views

Meaning of ssl_ciphers line on nginx.conf

What is the meaning of the following line from an nginx.conf file? ssl_ciphers HIGH:!aNULL:!MD5; I know the ssl cipher is specifying which algorithm to use to secure the server communication and ...
0
votes
0answers
54 views

How to stop Cyrus from serving root certificate?

Since changing the certificate for my cyrus instance I get the following warning whenever I sign with cyradm: cyradm --user cyrus --authz cyrus localhost verify error:num=19:self signed certificate ...
0
votes
1answer
66 views

The site is using outdated security settings that may prevent future versions of Chrome from being able to safely access it - even with SHA2

I get the above complaint from chrome. I've found The site is using outdated security settings that may prevent future versions of Chrome from being able to safely access it, but this is a non-issue ...
0
votes
0answers
22 views

Linux / Nginx - Centralized SSL Certificate Hosting

I manage about 20 virtual machines all running different web applications. The domain names of these web apps are subdomains of the same domain. I have one wildcard SSL certificate which will work for ...
0
votes
1answer
19 views

New Exchange SSL certificate now Windows XP Outlook clients won't connect

I renewed our SSL certificate for Exchange but now Outlook won't connect on any Windows XP machines. It asks for the username and password and even when the correct credentials are entered it just ...
0
votes
1answer
24 views

SSL certificate on cloned server, common name not same as server name

I've cloned a rackspace cloud server and put it into a load balancer, whilst removing the original server. The site seems to respond fine but then I have a problem with the SSL certificate, as I'm ...
0
votes
1answer
41 views

Self signed certificate in certificate chain

I'm having building the correct certificate chain. My certificate issue a class 2 issued by StartSSL. Here's in order what I have put in my ssl.crt: my cert https://www.startssl.com/certs/ca.pem ...
1
vote
2answers
34 views

Do I need to include `.local` addresses when I renew a SSL certificate?

I am about to renew a SSL certificate to be used with Microsoft Exchange Server 2013. I am viewing the current SSL certificate that is about to expire to check what addresses are currently included on ...
-2
votes
0answers
25 views

Is it possible to create a single SSL certificate with two or more wildcard domains? [duplicate]

I am aware of the possibility to have a wildcard SSL certificate, for ex *.example.com or a multi-domain SSL certificate, for ex example.com;example.nl etc. But since we host multiple domains per ...
3
votes
2answers
150 views

Do I need to purchase a trusted cert for offline environment?

I have a webserver used self-sign cert which is not connected to internet and those connect to my webserver also have no connection to internet, in such environment, do I need to purchase a trusted ...
1
vote
1answer
18 views

IIS8.5 Centralized Certificates: using more specific wildcard?

I've set up Centralized Certificates on my IIS 8.5 (Windows 2012 Standard). I have the following certificates available, among others: CN=*.dev2.pressero.com, OU=Domain Control Validated ...
3
votes
3answers
84 views

Windows server 2012 Root Enterprise Certification Authority issue certificates only with 2 years validity

I cannot make my Enterprise Root CA issue certificates with an expiration date more than 2 years. I've already set ValidityPeriodUnits and ValidityPeriod register keys with certutil.exe. I've ...
0
votes
1answer
32 views

Self-signed SSL certificate to match multiple subdomains

I have a bunch of sites served through nginx with SSL with self-signed certificates, each of which is on a subdomain, e.g.: https://app1.example.com https://app2.example.com My user base is small ...
1
vote
1answer
82 views

Apache's deprecated SSLCertificateChainFile directive (AH02559)

Recently I've upgraded Apache from 2.2 to 2.4 and I cannot figure out how to deprecate a SSLCertificateChainFile directive. The error: me@jessie:~$ sudo apache2ctl configtest AH02559: The ...
2
votes
1answer
31 views

User domain CA to create a UCC cert

We have 30+ RDS servers and use a hardware load balancer. I'm trying to figure out how to generate a UCC cert from our in house CA. Anyone point me in the right direction to do so? Need to alias all ...
1
vote
0answers
294 views

Squid 3.5.4: ssl bump: error - Error negotiating SSL connection on FD 10: Success (0)

I am trying to install squid 3.5.4 (on docker, running debian 8) and run it in ssl-bump mode. Compilation: ./configure --prefix=/opt/squid --srcdir=. --disable-maintainer-mode \ ...
2
votes
2answers
21 views

Command line to set up SNI on IIS for Windows 2012

I'm trying to complete the automated build script of my web server, which runs Windows 2012 and has two SSL websites, each with its own digital certificate. I am using SNI, which works fine when I ...
-1
votes
1answer
31 views

Which kinds of SSL certs there are?

When I visit eg. https://www.google.com, my web browser (IceWeasel) shows just a (grey) lock icon next to the URL. However, when I visit eg. https://www.cia.gov, a green lock and "Central Intelligence ...
0
votes
1answer
32 views

Nginx SSL cant connect to site

I just bought a SSL certicate for my website and tried to get it working with my nginx install, but uppon connection the browser refuses the connection with the website. Here is the relevant part of ...
2
votes
1answer
44 views

configuring ssl on nginx - is this ciphers list up to date?

I have bought a certificate from Comodo and I'm following an article on their site on how to configure the certificate on my nginx. The question is, is this configuration, mainly the ciphers list, up ...
-1
votes
0answers
71 views

Differences between Exchange's “default” SMTP certificate and others enabled for SMTP?

I know that: You can enable the SMTP service for multiple certificates in Exchange The last certificate enabled for SMTP becomes the "default SMTP certificate" My question: What are the ...
0
votes
0answers
23 views

Lync Server SSL Cert

I have a cert issued by the domain CA. The cert subject is the name of the server. The subject alternative name contains sip.domain sip.domain2 dialin, meet, admin, and the auto discover for ...
1
vote
0answers
27 views

Apache Signed certificate by know authority and client certificate self-signed

I've been investigating about this and it work with the apache SSL option SSLVerifyClient optional_no_ca I have the following virtualhost configuration. NameVirtualHost *:443 <VirtualHost ...
3
votes
2answers
84 views

Firefox sec_error_unknown_issuer after renewing root CA certificate [closed]

For our corporate network we use an internal CA, which directly signs some intranet server certificates. Now the root certificate is about to expire. I tried to renew it with the following OpenSSL ...
-1
votes
0answers
28 views

How to issue a Client Certificate with the Client's hostname using openssl?

I recently went through the process of securing a communication between two servers, one internal to my network, the other external. In order to accomplish this, I used openssl and went through the ...
1
vote
1answer
84 views

Outlook/Exchange certificate errors after setting clientaccessserver, etc… properties

After updating exchange 2010 using the commands for Set-ActiveSyncVirtualDirectory, Set-ClientAccessServer, Set-ECPVirtualDirectory, Set-OABVirtualDirectory, Set-OWAVirtualDirectory, & ...
2
votes
1answer
30 views

How to build a chained cert for Dovecot?

I have a Dovecot default certificate "dovecot.pem" which is for localhost. My email client uses "domain1" and "domain2" as email hosts. Herefore I have two more self-signed certificates "domain1.crt" ...
0
votes
1answer
55 views

Installing SSL certificate on nginx server

I am trying to install a positivessl certificate on my server without success. I started creating a mydomain.key file on my server and requested the certificate. I bundled the files using cat ...
1
vote
1answer
43 views

the same certificates are sold at different prices?

I've encountered so many times with this situation. For example everybody know if I buy a Positive SSL for a year from a reseller, its price is about $5.95 . If I buy the certificate from CA ...
1
vote
1answer
59 views

How to install SSL Certificate into Service Bus 1.1 on Windows Server

For test cases and evaluation we installed 2 nodes with "Azure Service Bus 1.1" on Windows Server 2012 R2 machines. The installation process installs the https endpoints with a self-signed ...
0
votes
1answer
45 views

SSL certificate for CNAME [closed]

We have added CNAME for AWS Amazon S3 domain. Like below test.domain.com IN CNAME d5f29cy3a2ai3ip.cloudfront.net. We already have the SSL certificate for the domain "www.domain.com". But don't have ...
6
votes
2answers
693 views

Change Key exchange mechanism in IIS 8

We are using RSA key exchange mechanism for SSL certificate. How can I change that to DHE_RSA or ECDHE_RSA? Due to using RSA, we are getting the below warning in chrome Your connection to ...
3
votes
2answers
2k views

The site is using outdated security settings that may prevent future versions of Chrome from being able to safely access it

We're using an AWS ELB to do SSL termination and are having an issue where Chrome is displaying "https" in red with a strikethrough. It says "The site is using outdated security settings that may ...
0
votes
2answers
95 views

Apache:mod_ssl:Error: Private key not found

I'm installing a SSL certificate to serve HTTPS. I'm using Apache 2.4 in Amazon Linux and got the certificate in Startssl. My Vhost config is the following: <IfModule mod_ssl.c> ...
0
votes
0answers
91 views

Squid transparent https certificate error: ssl_error_bad_cert_domain

I have a squid transparent proxy (squid 3.4 in pfsense 2.1) with ssl_bump for https, all my clients trusts squid as CA and many sistes are well working... However I have some problem with websites ...