SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms

-2
votes
0answers
31 views

Why is this SSLerror coming on sending request to any subdomain like sandbox.example.com? [migrated]

>>> import requests >>> requests.get("https://api.example.com/index.php") <Response [200]> >>> requests.get("https://sandbox.example.com/index.php") Traceback (most ...
0
votes
1answer
21 views

How do I configure nginx on RHEL to recognize root SSL certificates of external sites?

Setup: I have a nginx reverse proxy that is a load balancer for ASP.NET applications. The problem is when ASP.NET application tries to access an external application, the SSL handshake fails. I think ...
-3
votes
0answers
27 views

How does the browser know which ssl cert to use? [on hold]

Originally I assumed it matched the url from the site to the cert. But when I visit the site via 'localhost' i.e. Not the same domain name, it still encrypts. Chrome gives me a warning saying ...
0
votes
1answer
17 views

AWS EC2 SSL Server certificate does not match the URL

After uploading the certificate to iam, when I visit https://www.mywebsite.com I get this error The identity of this website has not been verified. • Server's certificate does not match the URL. ...
3
votes
1answer
36 views

How do I work out my certificate chain order manually?

Lets say I start with a certificate. Using openssl I can print it out like this: openssl x509 -in cert.pem -text -noout And I'll get some output such as Validity, Issuer and Subject along with ...
0
votes
2answers
38 views

Dockerfile separation of concerns for a secure apache httpd server with respect to SSL certification files

Issue: In a non-docker solution, the SSL certificates can be located in /etc/pki/CA/.... and with references to these in /etc/httpd/conf.d/*.conf files. How must these SSL certificates be ...
6
votes
1answer
579 views

Why does my wildcard SSL certificate cause a domain mismatch error on a second level subdomain?

I have a server https://www.groups.example.com - in FireFox I get the "This Connection is Untrusted" message and the "technical details" say www.groups.example.com uses an invalid security ...
2
votes
1answer
50 views

Two SSL virtualhosts on same IP with Apache

I have an apache server with one ip address. (on a debian server). I have several virtualhosts for http and one virtualhost for https one vhost, redirect traffic to the https vhost and this works ...
1
vote
2answers
68 views

Setting up SSL with a redundant connection

My situation: We have two servers, Server A and Server B. Server A has a proxy configured, which serves data (over SSL) from Server B. Server B is reachable via 1.1.1.1 (one.server.example.com) and ...
1
vote
1answer
19 views

OpenVPN client from multidomain SSL host

My server uses it's server certificate when connecting as a client to another server. webserver - server1.mydomain.com openvpnserver - server2.mydomain.com Server1 is a web server with SSL ...
1
vote
2answers
111 views

Curl with custom certificate

I 'd like curl to work with sites signed by goDaddy: If I call curl mypage.com/bla I am getting a certificate verification error. I tried getting the ca certificate with this snippet: echo | ...
0
votes
0answers
12 views

MissMatched Address Certificate Error

I have been trying to set up an Apache server for testing purposes in a virtual environment and I have been having some troubles. I want to set up SSL in Apache so I created my own certificate ...
0
votes
1answer
36 views

Can't get Network Solutions Certificate chain working with EC2 Elastic Load Balancer

I have a certificate file provided to me which is a wildcard domain name. It comes as both a key and a crt file. No other files were provided. I'm having trouble getting it to work correctly with ...
0
votes
0answers
14 views

Oracle Wallet Add Trusted Intermediate CA?

I have a Oracle Wallet for use with a Oracle HTTP Server. I am trying to update my Trusted Certs in the wallet as they have changed for my client authentication for DOD CACs (Smart Cards). I have ...
0
votes
0answers
16 views

Apache not checking crl for revoked certificates

I have the same problem as is described on question 23939112. I run my own CA authority. I created a certificate signed by my CA, with I can to login to web pages. Now, I'm testing revocation. I ...
1
vote
1answer
64 views

MySQL and SSL with -sha256

I'm trying to create some certificate to use with MySQL and everything works fine if I use the sha1 algorithm. If I add the -sha256 switch or -sha384 I can NOT connect to MySQL!. I get this error: ...
0
votes
1answer
34 views

IIS 7 Still showing old certificate

I installed an SSL certificate in my IIS 7 (Windows Server 2008). I deleted the expired certificate but still showing when i access from any browser. I deleted the expired certificate. I Installed ...
0
votes
0answers
29 views

VSFTP authentication with client certificate

I have a VPS Box running on CentOS 6.5 with vsftpd. I have setup a user account for login with username/password. My customer now sent me a id_rsa_2048.pub key which he wants to use for ...
0
votes
0answers
19 views

How Can I Test If Another Server Certificate is Trusted?

My certificate expired on my server (Server A) and I needed to generate a new one. I've verified the new certificate is updated on Server A, but now my CAS server is timing out when Server A attempts ...
1
vote
0answers
20 views

Is using self-signed certificates an option for this m2m scenario [migrated]

Imagine having a couple of hundred of embedded devices in the field that need to be remotely managed over SSH or HTTPS. These embedded devices are exposed on the internet but are installed at secure ...
0
votes
2answers
91 views

Nginx sslv3 poodle disable

I tried setup SSL cert without SSLv3 in my nginx, but SSL Labs say, my server have SSLv3 how to disable it. My config: add_header Strict-Transport-Security max-age=31536000; add_header ...
0
votes
4answers
96 views

My Certificate doesn't work on all machines

I installed Centos7 on my new brand server. I use LDAP as authentication. I deployed my certificate on all server and LDAPS is working with RHEL5, Debian or SOLARIS On Centos7, I 've got problem ...
-2
votes
1answer
39 views

SSL on Heroku, error add cert: “not valid. The 'Not After' date restriction on the certificate has passed.” [closed]

I purchased a wildcard SSL cert from Gandi.net many months ago, and used it immediately after purchase successfully on other hosting services than Heroku. I now need to secure a new subdomain on a ...
1
vote
0answers
29 views

Owncloud - Proxy changes certificate

I'm running an owncloud server 7.0.2 with apache(Ubuntu host) and configured it to use a self-signed ssl certificate. Everything works fine on my home-PC On an other machine I would like to use the ...
0
votes
1answer
21 views

Extract correct format of key and cert files from .p12 file for a SSL MEAN App?

I'm writing a MEAN app for my university department on my Mac development machine. I started with the boilerplate from mean.io. In the configuration file config/env/all.js, there is a section for ...
-1
votes
0answers
22 views

Installing an SSL certificate for one domain causes default domain to use it

I've installed a new SSL certificate on our server for a new domain. We have a wildcard SSL certificate installed for the default-ssl vhost, but when I enable the vhost for the new certificate and ...
0
votes
1answer
60 views

Secure Domain.nl , Alias of SSL Certified Domain.com not working with .com's SSL Certificate [closed]

I have a .com site that is https with a Comodo certificate via Dreamhost. I also have https://cdn.domain.com with a unique ip address to make it play nice with MaxCDN. The site is run in two languages ...
0
votes
1answer
45 views

AH01896: Unable to determine list of acceptable CA certificates for client authentication in Apache v2.4 SSLCACertificatePath directive

I am using Apache v2.4 In ssl.conf file I am using SSLCACertificatePath directive with parameter like /var/dat/certificates/ssl.intermediate where ssl.intermediate is an empty directory with ...
0
votes
0answers
100 views

Enable secure port 9091 of Openfire server

Is it possible to import .crt and gd-g2_iis_intermediates.p7b certificates in to the keystore of Openfire 3.9.3 XMPP server in order to make SSL ports enabled. I received .crt and ...
2
votes
1answer
30 views

How can I install a certificate into IIS on machine the cert request wasn't generated from?

I generated a request from a production web server, then gave it to my boss who sent it off and then emailed me back the 4 .crt files he received. On another server (our staging server) I installed ...
5
votes
2answers
105 views

SSL Certificate management with Powershell DSC

I have a third-party issued certificate that I need to ensure is running on all targets in a given domain. Is there a way to ensure this certificate is installed by way of DSC?
0
votes
0answers
32 views

Install an SSL certificate for a subdomain on a server that already has an EV SSL certificate (CentOS 5.11)

I am maintaining a site on a server that is currently running: CentOS release 5.11 (Final) Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 PHP/5.3.28 The server is ...
0
votes
1answer
41 views

ELB and SSLInsecureRenegotiation

I currently have SSLInsecureRenegotiation set to off on my Apache 2.4 Amazon Linux server, but I am still failing over at SSLLabs (Secure Client-Initiated Renegotiation SUPPORTED). Do you know how ...
0
votes
1answer
33 views

ELB and Backend Authentication with Apache 2.4

I tried looking at AWS guides, and other things but can't seem to figure this one out. When using ELB there is a backend authentication option. I want to enable it, but I am not sure what ...
1
vote
1answer
30 views

Updating SSL Certificates in vCenter 5.1

I'm trying to configure vCenter to use SSL certificates that I generated with my Windows CA (Server 2008 R2). I followed this to configure the cert template and issue the cert: ...
1
vote
1answer
32 views

IIS/Apache dont recognize my certificate

Im completely new in this. I have a windows 2008 R2 Server with IIS 7.0 with a expired certificate, so finally i created another (*.CSR, then PKCS#7 and installed). Installing the certificate i have ...
1
vote
2answers
49 views

New SSL Cert causes no connection to website on POST from web application

I have a web application which will not connect to a website to POST after they changed their SSL cert. The URL and REF post is mentioned below. Is there anything else I should try on the server? ...
1
vote
1answer
24 views

wildcard certificates for linux mail servers

I would like to publish non-self-signed SSL certificates for some linux mail servers, which operate SSL and/or TLS mail services. (If relevant, these are dovecot+sendmail servers.) I need to cover ...
0
votes
1answer
54 views

One Certificate to Rule them all [closed]

I'm looking to roll out Exchange 2013. We also have various web facing properties. We have an internal domain name of ourdomain.local and an external domain name of ourdomain.com. To keep things as ...
3
votes
1answer
48 views

IIS 6 SSL Certificate issue - SSL Connection error on service start, but alright if stop and go website from MMC

I'm taking care of a legacy win2k3 (sp2) which has IIS 6 installed. I have a very weird problem which is making me pull my hair out. There are 5 websites configured to run on the particular ...
0
votes
0answers
66 views

“Pass phrase incorrect” in Apache SSL certificate after adjusting httpd.conf

On Friday I replaced an SSL certificate (purchased by my school's IT through Symantec and sent to me) in Server Admin for Mac OS X 10.6.8 Snow Leopard Server running on an Xserv. I serve a couple ...
1
vote
1answer
94 views

Setup client certificate verification in an Apache webserver via SSLVerifyCilent on a Centos 6.5+ server

Goal: My goal is to setup an Apache web server on a Centos box, with SSL and client certificate validation similar to the following Apache virtual host ...
0
votes
1answer
163 views

Adding a self-signed cert to the trusted certs within cURL in Windows?

I have created a self-signed cert from the instructions on this page, have installed it and it appears to all be working correctly, but now I need cURL to trust it. Since the later versions of cURL ...
-2
votes
2answers
158 views

Ssl error on mobile devices

I have a website which is ssl installed and working properly on pc's and also on Mac. But when I open it from mobile devices it gives an error that says server's certificate is not trusted. You can ...
2
votes
1answer
98 views

Nginx redirect from old domain to new with ssl

I am trying to change the domain name for my site from https://www.myolddomain.se/ to https://www.mynewdomain.se/ The problem is that for my old domain I forced SSL on all pages and therefore all ...
0
votes
1answer
19 views

How do I get my wildcard SSL Certificate to work for an Exchange server that is masquerading under that wildcard's domain?

My SSL certificate is for *.example.com but my internal domain is junk.com. I have an Exchange environment that masquerades as mail.example.com. This was working from what I could tell for the last ...
0
votes
0answers
40 views

Apache2 SSL Configuration Issues

I just got a PositiveSSL cert from Comodo and then followed the steps here http://billpatrianakos.me/blog/2014/04/04/installing-comodo-positive-ssl-certs-on-apache-and-openssl/ to setup Apache. ...
0
votes
0answers
29 views

Is there a way to tell IIS to not require SSL, but require client certificates if the client uses SSL?

I'd like to set up IIS to listen on 127.0.0:80, and on *:443, so http connections are allowed from localhost only, while anyone from the net will have to use SSL. (This part is no problem). Also, i ...
0
votes
0answers
14 views

IIS routes to wrong https site

We are running a Microsoft Server 2008 R2 with 2 IP addresses: .1 .2 and IIS 7.5 as the webserver. On this server there is a website configures to use the domain A.Company.com on port 80 with IP ...
0
votes
1answer
36 views

Unable to use https on Amazon loadbalancer

I have a wild card certificate for a domain and have configured it on a load balancer. The load balancer has an EC2 instance assigned. I am using the domain name to point to the load balancer through ...