SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms

0
votes
0answers
11 views

SSL Error in IIS 7.5

We run an analytics application called Spotfire. Typically, it has an Application Server and a Web server running on different VMs. In this case, we have a public and private server so that we can ...
0
votes
1answer
13 views

Cannot choose new SSL certificate in Plesk

The current SSL certificate for my domain is about to expire, so I created a new SSL certificate. I've installed it, and you can see it under Websites and Domains > Secure Your Sites. However, when I ...
0
votes
0answers
12 views

ssl_crtd helpers are crashing too rapidly in squid

I am using the sslBump and Dynamic SSL Certificate Generation features of squid, below is my configuration for the sslBump sslcrtd_program /usr/lib64/squid/ssl_crtd -s ...
0
votes
1answer
55 views

Redirect non-www to www over SSL with Nginx

I'm having an error when trying to redirect https://example.com to https://www.example.com. When I go to https://example.com, it doesn't redirect and returns the page/200 status. I don't want this, ...
2
votes
3answers
88 views

Steps to produce a self-signed certficate(s) that, after being trusted, will work for two different IPs without a security warning

We have a test server that I'm trying to change over to HTTPS/SSL, and it has both an internal IP and an external IP. We have to use self-signed certificates for this particular server. There was ...
0
votes
0answers
18 views

using multiple IP addresses with a single ssl certificate

I have a secure website sitting on IIS 7. We are having issues with the current provider's service. We have got a second provider that we can add to the server link using a spare ethernet port that we ...
1
vote
1answer
35 views

Dovecot Certificate Authentication

After implementing certificate authentication on Nginx web server, I would like to do the same on Dovecot mail server. The idea is to create your own CA and manage certificates (both issuing and ...
-1
votes
0answers
21 views

HTTPS with XAMPP on Amazon EC2 over Route 53 [closed]

I have a Windows Server Instance running on EC2, I set up XAMPP and installed my php/mysql application-backend on it. I bought a domain and linked it to the Elastic IP address of my instance via Route ...
0
votes
0answers
15 views

Using SSL on MailEnable Enterprise

I am hosting my client web sites and email accounts on my dedicated server on which Windows Server 2012 is installed with MailEnable Enterprise Premium. And also, hosting panel is Plesk 12. I am ...
-2
votes
4answers
52 views

Issue TLS without cname

The person that issues TLS certs is telling me he needs the CName of my server to issue a cert after I just gave him the IP address of the webserver. It's an internal project so we didn't get a domain ...
0
votes
0answers
44 views

Nginx proxy to back-end with SSL client certificate authentication

I have two servers, both have nginx. Server A is listening to 443 and is configured to authenticate with a Client SSL certificate. Server B has an internal process that needs to communicate to Server ...
0
votes
1answer
19 views

Multiple wildcard certificates on one IIS site?

We already have an SSL certificate for *.foo.com pointing to an IIS site. Now we want to point *.bar.co.nz point to the same web application and will purchase another wildcard certificate. Is it ...
0
votes
0answers
15 views

SSL cert issued to and SAN attribute

I have added a cert to my application cacerts file. The new cert is issued to one DNS(abc.com) and they have added few other DNS(XYZ.com, TEST.com) to the SAN attribute while creating. I tried ...
0
votes
2answers
51 views

Why does Android Chrome say my site's security certificate is not trusted?

My site is https://blendbee.com. It's using a PositiveSSL certificate that is valid. In Windows 8 Chrome the certificate is fine (green lock in top left corner). But...on my Android, it's not so ...
0
votes
1answer
23 views

Using an EV SSL certificate for your site with non-EV SSL content

If I purchase an EV SSL certificate for a site that is using static content from a non-EV SSL site does that effect the EV SSL certificate presentation on the main www site? For example: ...
3
votes
1answer
29 views

wget fetching wrong ssl certificate

If I go to this URL https://solarpaces2014.pse.de/typo3/fileadmin/template/images/banner.jpg go looking for the ssl certificates, then I see a valid (wildcard) certificate for our domain pse.de. If I ...
-2
votes
2answers
41 views

How can I scan a IP & Port range to get information about all SSL certificates in use

From a Linux system, for a given IP range I need to check each open port to see if an SSL certificate is in use. For example, I would like to check ports 1 - 9999 on the address range ...
0
votes
1answer
33 views

Using different certificate for one domain

I currently have Apache setup to use a certificate on all my domains using these settings in ssl.conf: <VirtualHost _default_:443> SSLEngine on SSLCertificateFile /etc/httpd/conf/mycert.crt ...
0
votes
3answers
61 views

One IP Address two websites and servers SSL

All right I have the following: ONE External Ip Address. TWO websites on their own physical servers (IIS). (They are separate and they have to remain that way). No virtual hosts. TWO SSL ...
-3
votes
1answer
28 views

Firefox throws error for WWW in-url despite redirects

I recently installed SSL on a website and set it up so that http(s)://www.my-url.com redirects to https://my-url.com . I confirmed that this is working in Chrome. Unfortunately, if a Firefox visitor ...
0
votes
2answers
92 views

Exchange 2010 - Certificate error on internal Outlook 2013 connections

I have an Exchange 2010 and Outlook 2003. The exchange server has a wildcard SSL certificate installed *.domain.com, (for use with autodiscover.domain.com and mail.domain.com). The local fqdn of the ...
0
votes
1answer
31 views

Solution for SSL client certificates with user self service

I'm administrating a linux-based small business network. User information is centrally stored in an OpenLDAP directory. There is an existing CA which is currently used to sign server certificates. It ...
0
votes
2answers
82 views

SSL certificate for www. and non-www domain [duplicate]

What SSL certificate should I buy to get my domain work? I use nginx web server and want that all users requests go to https. http://example.com -> https://example.com http://www.example.com ...
0
votes
2answers
35 views

How to check the connection to remote server with a digital certificate (client authentication)

I got a digital certificate with extensions for server and client authentication and a private key. Now I want to connect to a remote server (REST web services) which should accept my requests ...
1
vote
2answers
37 views

Apache2 not asking password on boot

I have set up a SSL protected site with Apache and PHP. For each service restart, Apache asks me the SSL key password in order to restart. My problem is, when I rebooted my server, Apache did not ...
0
votes
0answers
44 views

SSL Certificate error only on host server

I'm running Windows Server 2008 R2 with IIS 7.5. This is in a development environment. I have a self-signed certificate, and a second wildcard server authentication certificate which was issued by ...
0
votes
2answers
37 views

Does qmail-pop3s supports multiple SSL certificates?

Current setup: 1. I work for E-mail service provider company. 2. We have multiple mail servers on which we use qmail for mail delivery. 3. Each server is hosting multiple different domains for ...
0
votes
0answers
42 views

Java keystore - keytool error: java.lang.Exception: Failed to establish chain from reply

I am trying to import a cert into my java keystore. The cert is not signed with an intermediary cert, its signed from the root cert. I've imported the root cert into my keystore, however I am still ...
0
votes
0answers
42 views

SSL Client Certificates on Mobile

Has anyone gotten mobile devices to use client SSL certs with nginx? I have configured a private Certificate Authority and I'm using an intermediate cert to sign client certificates. Clients ...
-1
votes
1answer
34 views

Monitoring root certificate

For enterprise wide systems wherein SSL certs are utilized, what is the best way of monitoring root CAs or intermediate CAs? If the systems were on Linux OS. Are there nagios checks that can catch ...
1
vote
1answer
75 views

How to debug certificate chains with OpenSSL?

I am completely new to OpenSSL and I'm reading a tutorial on OpenSSL programming to connect to a server: www.rtfm.com/openssl-examples/part1.pdf www.rtfm.com/openssl-examples/part2.pdf Somehow ...
0
votes
1answer
85 views

CentoOs 6.5 SSL don't work cannot verify xxx certificate / javax.net.ssl.SSLHandshakeException

I have a strange problem (it's 100% server configuration problem,) for example I want to download something from Dropbox: Resolving dl.dropboxusercontent.com... 23.23.160.146, 50.17.227.107, ...
2
votes
0answers
59 views

Powershell Install-WindowsFeature Application-Server (and subfeatures) and assign certificate

I want to use a Powershell script to install Application Server on a windows 2012 server. When using the wizard, it prompts for you to select a certificate (for WS-Atomic Transactions) from the local ...
0
votes
1answer
71 views

Postfix still complains that “certificate verification failed” even when “smtp_tls_security_level = fingerprint”

I'm attempting to use Postfix (version 2.6.6 on RHEL6) to connect to and send mail via a mail relay on our internal network. I want to connect with STARTTLS on port 25 (port 465 is not available on ...
-2
votes
1answer
45 views

Multiple Domain names, Multiple Certificates, one IIS 7 server [closed]

I have 1 IIS server that is hosting 3 domains, for example, example1.com, example2.com and example3.com. Each has it's own certificate. How can I install a separate certificate for each of these sites ...
0
votes
0answers
23 views

Nginx configuration: continue sending request to application server on ssl_client_verify FAIL

I am currently using nginx/uwsgi, with nginx to check validity of client certificates (if one is provided). server { ... location /example { ... uwsgi_param SSL_CLIENT_VERIFY ...
1
vote
1answer
70 views

TLS Error on OpenVPN

Client: OpenVPN 2.3.4 64bit (Works fine connecting to my pfSense at home) Server: OpenVPN 2.2.2 installed via yum Followed this guide: ...
-1
votes
2answers
48 views

Basic, wildcard or multidomain SSL certificate? [closed]

I need to secure a domain example.com and subdomains, dash.example.com, sql.example.com, etc... I didn't set up the server so I don't really know the DNS entries. As you may notice I'm really new to ...
1
vote
1answer
91 views

setting up multiple ssl certificates on same server/ip on CENTOs with apache 2.2

I'm using this reference to setup multiple ssl ceritificates on same ip on CENTOS 6.3 with apache 2.2 <VirtualHost *:443> ServerAdmin webmaster@localhost ServerName ...
0
votes
2answers
69 views

EC2 Load balancer and wildcard/multi-domain SSL certificates

I am running three sites through one load balancer (and 2 child-application servers) One of the site's has an SSL certificate, but I'd like to add a certificate for the other two sites What is my ...
0
votes
1answer
60 views

How do I determine where an SSL certificate is being served from?

I am having the same issue described in this question: IIS 7 Still Serving old SSL Certificate I have replaced an old SSL certificate with a new one and completely removed the old certificate from ...
1
vote
1answer
23 views

Is it possible to deploy SSL catch-all certificate on different servers?

I have a "catch-all certificate" that I would like to use on another server that resides in another VM. How can I achieve this? I haven't seen any docs that explain otherwise.
2
votes
3answers
872 views

Failed tls handshake. Does not contain any IP SANs

I'm trying to set up logstash forwarder, but I have issues with making a proper secure channel. Trying to configure this with two ubuntu (server 14.04) machines running in virtualbox. They are 100% ...
-1
votes
1answer
55 views

SSL certificate is not properly installed on Glassfish

I am an java developer not an web server/IT infra guy so i dont know wether I am asking this question correctly or not, So i apologies if I am wrong somewhere. Previously we are having an spring web ...
3
votes
1answer
38 views

RHEL6 httpd Root CA configuration

I'm setting up SSL on a RHEL6 box and I'm having problems finding information about configuring the Root CAs. I've got four files: cert.crt - My SSL certificate my_key.key - The key used to ...
2
votes
0answers
30 views

CA is repeated in IIS https response, what is the configuration section to be checked?

This is about the https of the payment service provider we're using. We've notified them about the problem which causes some android devices to show SSL error message when the browser is redirected to ...
-1
votes
1answer
145 views

Failed to bind to: /0.0.0.0:443 [closed]

I am having problems starting my play framework server on port 443,i am using scala play 2.20 and my play server running fine on port 9443 by following command ./start -Dhttps.port=9443 ...
0
votes
1answer
29 views

Exchange certificate - different issuer external to internal?

We have a GoDaddy signed SAN cert for our Exchange 2010 server, internally it works fine - issuer is GoDaddy and cert chain checks out. Externally the same SAN seems to be used (the domains are the ...
3
votes
1answer
70 views

How can I get an OID for a certificate template?

I'm using C# (or VBScript) to issue a certificate from an Enterprise CA. According to this answer, I need to specify the OID instead of the certificate name, and place it in an unexpected portion of ...
4
votes
1answer
155 views

ssl certificate installation on tomcat

I am trying to create a new certificate for my scala play framework on ubuntu but I cannot import my key with keytool. I haven't been able to figure out what is causing it so I thought I'd see here if ...