SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

1
vote
1answer
49 views

Certificate error: The name in the certificate does not match…, Outlook client using .local

We have recently had to decommission our .local certificate from Godaddy, as it will not be valid anymore. The new certificate contains the following names: mail.mydomain.com ...
0
votes
0answers
31 views

apache 2.4 don't find the SSL Certificate File

I try to configure SSL on my apache 2.4.12 Webserver. But apache2 can't find the Certificate and Key File in the corespondening ssl directory. I already checked file permissions but without success. ...
1
vote
0answers
6 views

Skip password authentication on Dovecot when client certificate provided

Using Dovecot version 2.1.7, I've gotten client certificates working with fairly little effort, and at this point I can choose between having password authentication after the certificate check or ...
1
vote
0answers
20 views

How do I change the expiration of CRLs with OpenSSL?

I am currently experimenting with my self signed CA. But in order for my devices to work I need a valid CRL. I set the CDP to one of the CDN hosting providers. As I have only 5 certificates issued I ...
2
votes
1answer
35 views

Possible causes of CRL validation error

What are the possible causes of CRL validation error? I run a network with my self-signed CA. But since three weeks ago, all of my RDP clients started saying that they had failed to validate the CRL. ...
0
votes
0answers
21 views

Apache Tomcat for Windows - cannot get https to work

Environment: Windows 2003 Server 64-bit Running on VMWare ESX 5.5 8GB of Ram Apache Tomcat 6.0.36 Server D:\Program Files\Java\jdk1.6.0_26\jre\bin\server\jvm.dll JDK 1.6 update: 26 Have been able ...
-2
votes
1answer
15 views

how many SSL certificate can be listed in SSLServercert?

I wanted to list more than one certificate in SSLServercert, so that websites can use either one of these certificates. i will use "SSLServercert label1 label2" in httpd.conf file. label1 has IP based ...
1
vote
0answers
7 views

IIS bindings keep being removed

I'm having a problem where the security certificate for a site is being periodically unbound from port 443 and replaced with another certificate which is sitting on the server. So whenever a user ...
0
votes
0answers
12 views

External clients get a certificate mismatch - but internal clients do not

I have a scenario where external clients are receiving a certificate that is different than the one that is bound to the IIS site. This is Win2008R2 / IIS, in the following configuration: ...
-1
votes
0answers
11 views

Failed to initialize SSL Subsystem: could not determine SSL certificate thumbprint [closed]

while we are trying to start the one of the service in services.msc the below error we are getting Failed to initialize SSL Subsystem: could not determine SSL certificate thumbprint
0
votes
1answer
53 views

Windows Server 2003 R2 / IIS6 & SHA-256 SSL Certificates

Was hoping someone could help me out with this one as there seems to be conflicting articles on the subject. I've got a legacy server running Windows Server 2003 R2 with IIS6 and need to generate an ...
0
votes
1answer
24 views

Is it normal for the identity of a host to change after enabling SSL?

I logged in to a known host - ssh username@example.com. I did a2enmod ssl and I generated a CSR to enable SSL on one of the virtual hosts on the server. From a separate terminal tab, I tried to do an ...
-1
votes
1answer
37 views

PEM File “CERTIFICATE” vs “PUBLIC KEY”

I have a PEM file that looks like: -----BEGIN CERTIFICATE----- ... -----END CERTIFICATE----- which I can convert to another PEM file using: openssl x509 -in key.crt -pubkey -noout. The new PEM file ...
0
votes
1answer
17 views

Issue with creating an SSL certificate

I am having the following issue: There is a Terminal Server name TERM-SRV.example.com running Windows Server 2012 that hosts a site "https://example.com/RDWeb". There was a certificate that recently ...
0
votes
0answers
10 views

Reconfigure Exchange 2010 to use public mail domain on private network

This question has been asked but solution offered did not work for me. I have Exchange 2010 and Outlook 2010 clients on my private network. AD domain established 17 years ago is just BBC (not it's not ...
2
votes
1answer
50 views

Is it possible to have a single SSL certificate with IP address and domain name?

We want to have a single SSL certificate for a web site so that the website can be accessed with a domain name and IP address. Is this possible?
6
votes
1answer
47 views

What is “Cisco STG” and why would it dynamically replace a wildcard certificate on port 5061?

I have a lync client that is connecting to a Lync Edge server on port 5061. I get an invalid certificate error when connecting. When I run wireshark, during the TLS setup, and inside the ...
0
votes
1answer
21 views

Heroku is not switching certificates after adding custom

I have an app on Heroku and I bought my own certificate, valid for myapp.mydomain.de. I added it to Heroku using their addon, SSL Endpoint. I have a CNAME record which redirect from myapp.mydomain.de ...
0
votes
1answer
26 views

Ubuntu/apache2: cannot open port 443

I am trying to install a SSL certificat on my Ubuntu 14 server (using apache 2). For some reason the port 443 appears to be closed I installed and enable ssl /etc/apache2/ports.conf is as ...
-6
votes
2answers
61 views

Why are self-signed SSL certificates untrusted by browsers?

I have seen similar questions and answers, but none really answer my question effectively. There are 2 problems that SSL answers: Encryption and trust. Time for a truth table: ...
0
votes
1answer
32 views

Does the default self-signed cert break Exchange 2010 Activesync?

I have a customer who has been using a neglected Exchange 2003 server for at least 10 years. I'm in the middle of a migration to Exchange 2010. Pretty much done, actually. The only thing left on my ...
0
votes
1answer
19 views

SSL not working for the certain path

This is my configuration for ssl: <VirtualHost *:443> DocumentRoot /path/todirectory/ SSLEngine on SSLCertificateFile /etc/httpd/ssl/server.crt SSLCertificateKeyFile ...
-2
votes
1answer
39 views

Apache server config: how can I disable the certificate/SSL handshake on the WWW version only? [duplicate]

Serving a apache website via https:// => how can I disable the certificate/SSL handshake on the WWW version only? Hi we use SSL on the https://www version of our website Now I would like to disable ...
1
vote
0answers
19 views

Can I use both RSA and ECC certificates in apache?

If I simply use "SSLCertificateFile" and "SSLCertificateKeyFile" twice, the certificate chain is broken for the first one. Can I use both RSA and ECC certificate which is issued from different ...
0
votes
1answer
51 views

SSL Error for wildcard subdomain certificate

I have two SSL certificate one for *.sub.domain.com and one for *.domain.com. I don't have issues with domain level wildcard certificate. Meaning https://www.domain.com & https://domain.com works ...
0
votes
1answer
24 views

How to create a single SSL server certificate for domain AND www subdomain by the XCA tool

I use XCA (http://sourceforge.net/projects/xca/) for generating and managing server and client certs and keys. But there is one thing I don't really understand: How can I create a single certificate ...
0
votes
2answers
186 views

How to Make a Self-Signed SSL Certificate which uses TLS?

After upgrading Apache and PHP to the latest version on Ubuntu 12.01 LTS the SSL sites on it became inaccessible, stating error, "ssl_error_no_cypher_overlap". I have tried generating a new ...
-1
votes
1answer
57 views

What type of SSL certificate I need to create CA? [duplicate]

I've a task to create Certificate Authority for company use. Preferably using "valid" ( not self-signed) certificate. The goal is to issue individual certificates for subdomains, instead of wildcard, ...
0
votes
1answer
14 views

Export specific certificate from JKS using keytool

We're trying to configure Apache HTTPd to use an SSL cert from a JKS keystore file we have. Since we want only one of the certs out of the JKS (www.MySite.com) and not the others (such as ...
1
vote
1answer
19 views

How to specify a client certificate to psql?

I have a Postgres server with a user dev which requires a client certificate to log in. I'm using the command psql "sslmode=require user=dev host=db.prod", which gives me psql: FATAL: connection ...
0
votes
0answers
29 views

ocserv: How to identify a connecting user?

My ocserv auth mod is certificate. I knew from the sample config file that ocserv could provide a connect-script which has REASON, USERNAME, GROUPNAME, HOSTNAME, DEVICE, IP_REAL, IP_LOCAL, IP_REMOTE ...
-1
votes
0answers
20 views

stuck on getting ssl to work on vps with centos 6 and plesk [closed]

I ordered an ssl certicate and installed it via plesk on the vps. the private key and certificate are in txt format which i pasted in the fields in plesk. I've 2 domains hosted on the vps on 1 ip, i ...
0
votes
0answers
41 views

win sbs 2011 and ssl certificate

I have an SBS 2011 that has a self signed certificate and RWA enabled. I have imported the certificate (found on c:\Users\Public\Public Downloads) on an outside computer and when I try to access ...
1
vote
1answer
59 views

Can't get Nginx to serve correct certificate chain

I'm trying to set up Nginx (1.4.6-1ubuntu3.1) with a StartSSL certificate. I've been following the documentation to get it working, but Nginx only serves the server certificate, not the intermediate. ...
0
votes
2answers
64 views

Renew vs. new purchase of SSL wildcard certificate

I have an existing SSL wildcard certificate at GoDaddy that expires in a few months. Traditionally we would renew this certificate and, in doing so, begin the countdown towards the existing ...
6
votes
3answers
552 views

SSL certificate invalid in Chrome

For the website scirra.com (click for SSL Labs Server Test Results) Google Chrome reports the following icon: It's an EV SSL, and it seems to work fine in Firefox and Internet Explorer, but ...
1
vote
0answers
30 views

SSL certificate for sql-server on ec2

I have an ec2 node provisioned to host mssql server. I'm trying to request and install an ssl certificate for this node so I can securely connect to it but I can't get the certificate to appear in the ...
0
votes
0answers
13 views

Using Windows Server 2012 CA to provide internal certificates

I want to use Windows AD CS in order to provide any web interface internal to my company with SSL encryption and trust certification. What I want is to make the HTTPS interfaces of webapps, switches ...
4
votes
3answers
152 views

Displaying a remote SSL certificate details using CLI tools

In Chrome, clicking on the green HTTPS lock icon opens a window with the certificate details: When I tried the same with cURL, I got only some of the information: $ curl -vvI https://gnupg.org * ...
0
votes
2answers
51 views

vsftpd does not give a valid certificate using CA cert.

When setting up vsftpd we have problems with it not providing a trusted connection us a basic pem certificate container using just our private key and certificate. We created our pem file with the ...
1
vote
0answers
50 views

HPOM Java GUI, multiple users connecting to different servers from Citrix sessions on the same server possible?

I have an app (HPOM Java GUI) running on a 2008 R2 Xenapp 6 box that employs client certificates for encrypting connections to the HPOM server. I have 2 different sets of users who will use this app ...
1
vote
1answer
52 views

selfsigned certificate with domain name for a webservice server

I have 2 web servers, A and B. A is a web site used by users and B is a bunch of web services used by server A. So I like to enable https for server B. Since no browsers are supposed to go here I ...
2
votes
1answer
30 views

How to get a list of sites in IIS 7.5 binded to a certain ssl certificate using command line

Situation: an IIS 7.5 server with 30+ sites and 10+ certificates and a few certificates may be obsolete. Obsolete means they're not binded to the ip:port of any site on IIS. I could check each site ...
4
votes
2answers
177 views

Should I need to provide a root certificate when setting SSL cert on nginx

In Qualys SSL test always warn me that the root certificate is an extra download and can be safely removed. However, from Comodo website, their guide on installing cert on nginx is NGINX Needed for ...
-2
votes
2answers
91 views

How to generate a Self Signed SSL Certificate bound to IP address? [duplicate]

I have my application hosted in the cloud and while demoing to prospective clients, I would like to make sure that my browser doesn't complain due to the lack of trust. So I want to generate a self ...
1
vote
1answer
94 views

Problems configuring SSL certificate on Apache VirtualHosts

I am attempting to run multiple SSL connections off a single IP server running RHEL6. I have successfully configured one domain on SSL, however when I attempt to add a second, Apache fails to ...
4
votes
1answer
264 views

Have I referenced my website's SSL certificate chain correctly?

The SSL certificate chain for one of my websites is incomplete, and I learned that I should reference the intermediate certificate in the virtual hosts file. Comodo sent me two intermediate ...
-1
votes
1answer
49 views

Installing intermediate CA in Debian

The SSL tester at sslcheck.globalsign.com says: Server configuration does not include all intermediate certificates I found this page: ...
-1
votes
1answer
78 views

Where are SSL certificates installed?

Server: Windows Server 2008 R2 There are a lot of instructions on how to install a certificate and they seem very straightforward. However, I am having a hard time figuring out where a certificate is ...
0
votes
1answer
79 views

Apache SSLVerifyClient - exclude one URL

I am setting up Apache 2.2 as a reverse proxy. My need is to have certificate authentication for every reverse-proxied url except one (https://mailserver.com/Microsoft-Server-ActiveSync) that is used ...