SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms

0
votes
1answer
16 views

AH01896: Unable to determine list of acceptable CA certificates for client authentication in Apache v2.4 SSLCACertificatePath directive

I am using Apache v2.4 In ssl.conf file I am using SSLCACertificatePath directive with parameter like /var/dat/certificates/ssl.intermediate where ssl.intermediate is an empty directory with ...
0
votes
0answers
8 views

Enable secure port 9091 of Openfire server

Is it possible to import .crt and gd-g2_iis_intermediates.p7b certificates in to the keystore of Openfire 3.9.3 XMPP server in order to make SSL ports enabled. I received .crt and ...
2
votes
1answer
25 views

How can I install a certificate into IIS on machine the cert request wasn't generated from?

I generated a request from a production web server, then gave it to my boss who sent it off and then emailed me back the 4 .crt files he received. On another server (our staging server) I installed ...
5
votes
2answers
54 views

SSL Certificate management with Powershell DSC

I have a third-party issued certificate that I need to ensure is running on all targets in a given domain. Is there a way to ensure this certificate is installed by way of DSC?
0
votes
0answers
9 views

Install an SSL certificate for a subdomain on a server that already has an EV SSL certificate (CentOS 5.11)

I am maintaining a site on a server that is currently running: CentOS release 5.11 (Final) Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 PHP/5.3.28 The server is ...
0
votes
1answer
15 views

ELB and SSLInsecureRenegotiation

I currently have SSLInsecureRenegotiation set to off on my Apache 2.4 Amazon Linux server, but I am still failing over at SSLLabs (Secure Client-Initiated Renegotiation SUPPORTED). Do you know how ...
0
votes
1answer
11 views

ELB and Backend Authentication with Apache 2.4

I tried looking at AWS guides, and other things but can't seem to figure this one out. When using ELB there is a backend authentication option. I want to enable it, but I am not sure what ...
1
vote
1answer
21 views

Updating SSL Certificates in vCenter 5.1

I'm trying to configure vCenter to use SSL certificates that I generated with my Windows CA (Server 2008 R2). I followed this to configure the cert template and issue the cert: ...
1
vote
0answers
7 views

Do I have to give my mailing address to create a certificate? [migrated]

So, ICANN seems to require a mailing address for my domain, but my registrar (like many others) offers to proxy the mail to me to provide privacy. However, when I want to create an SSL certificate, ...
1
vote
0answers
20 views

IIS/Apache dont recognize my certificate

Im completely new in this. I have a windows 2008 R2 Server with IIS 7.0 with a expired certificate, so finally i created another (*.CSR, then PKCS#7 and installed). Installing the certificate i have ...
-1
votes
1answer
38 views

Copy/transfer SSL certificate from Apache to Sendmail for the same domain [on hold]

unfortunately i don't get it Apache (working): SSLCertificateFile /etc/pki/tls/certs/domain.com.crt SSLCertificateKeyFile /etc/pki/tls/private/domain.com.key SSLCertificateChainFile ...
1
vote
2answers
46 views

New SSL Cert causes no connection to website on POST from web application

I have a web application which will not connect to a website to POST after they changed their SSL cert. The URL and REF post is mentioned below. Is there anything else I should try on the server? ...
1
vote
1answer
22 views

wildcard certificates for linux mail servers

I would like to publish non-self-signed SSL certificates for some linux mail servers, which operate SSL and/or TLS mail services. (If relevant, these are dovecot+sendmail servers.) I need to cover ...
0
votes
1answer
44 views

One Certificate to Rule them all [closed]

I'm looking to roll out Exchange 2013. We also have various web facing properties. We have an internal domain name of ourdomain.local and an external domain name of ourdomain.com. To keep things as ...
3
votes
1answer
30 views

IIS 6 SSL Certificate issue - SSL Connection error on service start, but alright if stop and go website from MMC

I'm taking care of a legacy win2k3 (sp2) which has IIS 6 installed. I have a very weird problem which is making me pull my hair out. There are 5 websites configured to run on the particular ...
0
votes
0answers
33 views

“Pass phrase incorrect” in Apache SSL certificate after adjusting httpd.conf

On Friday I replaced an SSL certificate (purchased by my school's IT through Symantec and sent to me) in Server Admin for Mac OS X 10.6.8 Snow Leopard Server running on an Xserv. I serve a couple ...
1
vote
1answer
67 views

Setup client certificate verification in an Apache webserver via SSLVerifyCilent on a Centos 6.5+ server

Goal: My goal is to setup an Apache web server on a Centos box, with SSL and client certificate validation similar to the following Apache virtual host ...
0
votes
0answers
16 views

Where are the anonymous/private domain validation SSL certs? [migrated]

I'd like to replace my personal web server's self-signed SSL certificate with a certificate signed by a well-trusted certificate authority. I understand that some use cases require thorough identity ...
0
votes
1answer
27 views

Adding a self-signed cert to the trusted certs within cURL in Windows?

I have created a self-signed cert from the instructions on this page, have installed it and it appears to all be working correctly, but now I need cURL to trust it. Since the later versions of cURL ...
-2
votes
2answers
53 views

Ssl error on mobile devices

I have a website which is ssl installed and working properly on pc's and also on Mac. But when I open it from mobile devices it gives an error that says server's certificate is not trusted. You can ...
2
votes
1answer
62 views

Nginx redirect from old domain to new with ssl

I am trying to change the domain name for my site from https://www.myolddomain.se/ to https://www.mynewdomain.se/ The problem is that for my old domain I forced SSL on all pages and therefore all ...
0
votes
1answer
16 views

How do I get my wildcard SSL Certificate to work for an Exchange server that is masquerading under that wildcard's domain?

My SSL certificate is for *.example.com but my internal domain is junk.com. I have an Exchange environment that masquerades as mail.example.com. This was working from what I could tell for the last ...
0
votes
0answers
31 views

Apache2 SSL Configuration Issues

I just got a PositiveSSL cert from Comodo and then followed the steps here http://billpatrianakos.me/blog/2014/04/04/installing-comodo-positive-ssl-certs-on-apache-and-openssl/ to setup Apache. ...
0
votes
0answers
18 views

Is there a way to tell IIS to not require SSL, but require client certificates if the client uses SSL?

I'd like to set up IIS to listen on 127.0.0:80, and on *:443, so http connections are allowed from localhost only, while anyone from the net will have to use SSL. (This part is no problem). Also, i ...
0
votes
0answers
148 views

Postfix email ssl/tls error “[postfix/smtpd] SSL_accept error from”

I created my own CA certificate then used it to create a server cert for postfix, this has been working for sending and receiving email from gmail/google and i thought everything was working fine, ...
0
votes
0answers
11 views

IIS routes to wrong https site

We are running a Microsoft Server 2008 R2 with 2 IP addresses: .1 .2 and IIS 7.5 as the webserver. On this server there is a website configures to use the domain A.Company.com on port 80 with IP ...
0
votes
1answer
31 views

Unable to use https on Amazon loadbalancer

I have a wild card certificate for a domain and have configured it on a load balancer. The load balancer has an EC2 instance assigned. I am using the domain name to point to the load balancer through ...
1
vote
0answers
72 views

SSL certificate is reported as invalid by iDRAC7

I'm trying to install a wildcard certificate (*.my.example.com) to an iDRAC6 - this cerificate was provided by RapidSSL (a subsidiary of GeoTrust) and is used across our ubuntu/apache webservers and ...
0
votes
1answer
33 views

Can Subject Alternative Name(SAN) Certificate install on different Web Server or OS? [closed]

Let say: application.house.com apache tomcat : physical server email.house.com apache tomcat : virtual finance.house.com Oracle Wallet Manager : physical server ...
-4
votes
2answers
35 views

Security certificate only displays with HTTPS and not HTTP [closed]

I have a security certificate installed on my Ubuntu server, running Apache. When I visit my site using the HTTPS protocol, the green certificate appears at the start of the URL. However, when I use ...
0
votes
0answers
15 views

Generate .pb7 or .p12 certs from .pem

I'm trying to enable SSL for Boomi webservices. I've followed the instructions on their documentation to generate the CSR and sent it to CA for signing. I've received the signed certificate in .pem ...
-1
votes
2answers
58 views

How do I set up TLS-PSK with Tomcat [closed]

The Tomcat people won't help me, so I'm hoping someone here will come through. I can't figure out how to set up Tomcat to use pre-shared keys. All the SSL/TLS guides for it assume certificates. Please ...
1
vote
0answers
108 views

Unable to convert JKS keystore to Oracle Wallet using orapki

I have generated jks keystore using keytool and using the jks keystore I have csr. The same csr I have sent to Signing authority. The Signing authority have given the trusted ...
0
votes
0answers
14 views

OpenVPN and adding .p12 cert

Is there a way to add the .p12 type of cert to the openvpn config file? I've read and learned how to add the other files like so: <ca> -----BEGIN CERTIFICATE----- # insert base64 blob from ...
-1
votes
1answer
60 views

FreeRADIUS certificate is going to expired

Recently I've created a RADIUS server (Freeradius) that authenticate with Active Directory. I follow this link to create this server: Now, when I see the "server.cnf" file into /etc/raddb/cert , I ...
1
vote
4answers
64 views

How do I know if *.pem is password protected using ssh-keygen?

I have got a file myfile-privkey.pem. How do I check if the private key file is password protected using ssh-keygen?
0
votes
1answer
70 views

HAProxy SSL with new GoDaddy certs

I renewed my certificate from GoDaddy and I got back two files: gd_bundle-g2-g1.crt 27ec89cfaa7c28.crt I have the private.key. However I totally forgot how to use, or produce, a valid .pem file to ...
1
vote
1answer
77 views

Using GlassFish behind Nginx with SSL

We have a prototype setup where Nginx acts as a load balancer SSL terminator. Behind Nginx is GlassFish 3 running our REST Web Services over HTTP (without SSL) along with other application servers. ...
0
votes
1answer
24 views

Will the renewal/upgrade of the SSL certificate on a single Exchange 2010 Server affect Outlook or Mobile clients?

I'm doing a planned certificate upgrade on a single Exchange 2010 Server with no changes to the domain and wanted to know if the new certificate will require any client side action on my part. ...
0
votes
1answer
144 views

Node.js SSL Certificate Error

I'm trying to use my purchased SSL certificate in Node.js - this certificate works perfectly in Nginx and Apache without any errors. However, when I try to use it in Node.js, I get this error : ...
-1
votes
1answer
39 views

Is there a delay between the time you make an SSL cert config change and the time it takes effect?

That's all my question is. Is there a delay between the time you make an SSL cert config change and the time it takes effect, or are these kinds of changes immediate? I bought an SSL cert some time ...
0
votes
1answer
85 views

How to install/update/upgrade SSL certificate in Tomcat

I am about to install/update/upgrade a SSL certificate in one of the servers which has the following configuration Sever information: Sever version: Apache Tomcat/6.0.35 OS version: Linux ...
1
vote
0answers
16 views

Revoking client certificate two way authentication

can we revoke a client certificate by serial (we are using mutual authentication)? we tried revoking a certificate using the certificate file but the revocation date is not set to the current date . ...
4
votes
2answers
595 views

Do I have to buy a second wildcard certificate for a subdomain?

We already have a wildcard certificate for *.mycompany.com. Our network has hosts that are only reachable internally. All of them belong to the internal.mycompany.com subdomain. There is a private ...
0
votes
1answer
165 views

Comodo PositiveSSL + Windows 2008R2 / IIS7.5: error on Android only

I have an SSL certificate, which is correctly working with all major desktop browsers (IE, Chrome, FF), and on Windows Phone and iOS, but on Android. I guess I've installed my certificate in the ...
0
votes
0answers
64 views

tlsv1 alert internal error - SSL certificate misconfiguration on Tomcat7

I have configured a certificate on my tomcat7 a few weeks ago and, after having an issue using a facebook plugin on my website, the Facebook Plataform Team pointed that: 'this issue is caused by an ...
0
votes
2answers
41 views

How to manage third-party issued certificates in a Windows environment with Active Directory Certificate Services

I have a wildcard SSL certificate (*.ourdomain.com) + chain of trust that was issued from a public third-party CA that I have deployed on to all of our Windows servers in the domain. But our ...
1
vote
0answers
14 views

Auditing connections using certificates

We would like to have clients connect using client certificates from a trusted (internal) issuer and then log which user connected. Unfortunately, the following limitations are preventing success: ...
0
votes
1answer
76 views

Why is my self-signed wildcard certificate not working?

I have successfully created and used a self-signed certificate on my development machine (IIS 7.5 - Windows 7). To do this I generated a self signed cert with a common name (CN) = app.localhost and ...
0
votes
0answers
40 views

SSL Error in IIS 7.5

We run an analytics application called Spotfire. Typically, it has an Application Server and a Web server running on different VMs. In this case, we have a public and private server so that we can ...