SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

0
votes
0answers
4 views

Add Site Certificate for Java system wide

I have a server that uses java and if we try to access it complains about the certificate. The best approach is to download the cert and add it into Java's certificate exception list. This is being ...
0
votes
0answers
7 views

Letsencrypt ISPConfig 3 security error in Firefox

I have setup SSL certificates with letsencrypt and ISPConfig 3 (on a cheap hosting service). Installed letsencrypt on a Ubuntu desktop: git clone https://github.com/letsencrypt/letsencrypt cd ...
0
votes
0answers
11 views

Lync Certificates

I have been struggling trying to figure out the right way to do this. Here is my setup. I have 2 sangoma servers (Lync 2013 in a box) The Front End server is is the main server. The Reverse Proxy and ...
0
votes
0answers
4 views

IIS 8.5 Two SSL Certificates with two IP addresses assigned to Server

I have two websites. I have setup one of them with an SSL Certificate, I would like to do the same with the new site too. When I tried to do what I did with the first one, I got an error saynig ...
2
votes
1answer
54 views

Nginx setup, 443 open but no respons on https://

So i just integrated my certificate and my nginx conf verifies it when i restart. When i do a: netstat -anp | grep 443 it returns: tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN ...
3
votes
0answers
27 views

Curl: unable to get local issuer certificate. How to debug?

I’ve got an odd problem. Updated my LAMP dev machine (Debian) to PHP 7. Afterwards I cannot connect to a specific TLS encrypted API via Curl anymore. The SSL cert in question is signed by thawte. ...
0
votes
1answer
17 views

P7b file and cer file do I need them both

I'm trying to understand why I need the chain at all (p7b). I have imported certificates previously and I didn't need one. Can I bypass this somehow? Well I am getting an error - keytool error: ...
0
votes
2answers
9 views

openldap TLS error -8179:Peer's Certificate issuer is not recognized

tl;dr Does this error mean that I need to find my company's ldap server's public certificate and install it, or that my company's ldap server needs to install my public cert? If the former, how can I ...
0
votes
1answer
34 views

Can AWS Certificate Manager (ACM) Certificates be used on Elastic Load Balancer Instances in Regions other than us-east-1?

Amazon has recently announced their new AWS Certificate Manager (ACM) service. This looks promising, but it is currently only supported in the us-east-1 region. I have existing resources in the ...
3
votes
1answer
25 views

Bluehost claiming that an SSL certificate needs to be a wildcard certificate to cover a single subdomain?

I am new to SSL certification, and have just purchased a standard SSL certificate for a single sub-domain; however, when my server administrator installed it using cPanel on the main domain, HTTPS ...
-1
votes
1answer
48 views

Guidance for SSL Certificate for our domain services and installation [on hold]

I'm not well versed on SSL certificates and how to install them in your environment, we have always outsourced this but I am interested in getting a full understanding and being capable of doing this ...
0
votes
0answers
14 views

Adding SSL to Virtual Host takes down all sites [closed]

First question on here. Not fantastic with server side stuff but I have had to take it over at work. One of our servers has site that needs an SSL certificate. Now I have gone through all the ...
1
vote
0answers
17 views

HTTP to HTTPS redirect not working!? - Tried multiple methods

I purchased a Standard UCC SSL Up to 100 pack from Godaddy. I have installed all the required files on my server, and going to https://www.example.com works fine, but http://www.example.com is NOT ...
0
votes
0answers
24 views

Different behaviours of google chrome with my certificates

I have a problem with Google Chrome (Debian 7, installed with apt-get) accepting certificates for several of my domains. The funny thing is that the Windows,Mac,Android versions of Google Chrome do ...
0
votes
1answer
24 views

Geotrust SSL certification issue

I have an issue with curl (Centos 6 env) does not recognize Geotrust intermediary certificate: * Trying 192.168.6.6... connected * Connected to composer.graymatter.co.uk (192.168.6.6) port 443 (#0) ...
0
votes
1answer
28 views

Apache configuration using SNI and mix of SSL certs

Up to this point I've been using SNI in my ssl.conf file with Apache 2.2.31 I'm serving up different sites all in the same document root. For example: NameVirtualHost *:443 <VirtualHost *:443> ...
0
votes
2answers
23 views

SubjectAlternativeName Add to Existing Certificate

i have an existing cert with 15 SubjectAlternativeName entries. How can I use keytool to add several more SubjectAlternativeName entries to the keystore's certificate without invalidating it. I'm ...
0
votes
1answer
9 views

How do I enable server certificates option in iis7

I'm administrator on a Windows box with IIS7 installed (specifically, 7.5). I'm trying to set up a self-signed certificate, so I can enable https for a web application I've set up within an IIS ...
-1
votes
2answers
42 views

SSL encryption with CNAME redirect

Here is my current architecture: I have a simple site hosted in the cloud that needs to be served from my company. Thus, mysite.com has a CNAME redirect to 1234.cloud.com. I understand that the SSL ...
0
votes
0answers
62 views

VeriSign G5 Root Certificate - PayPal IPN

We're using Windows Server 2008 R2 and IIS. We need to make sure that we can send POST requests to the PayPal IPN sandbox URL: https://www.sandbox.paypal.com/cgi-bin/webscr SSL Report: ...
0
votes
0answers
76 views

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

I have set up my SSL configuration in an Azure Ubuntu VM using Tomcat8. The service seems to be running on port 8443. I have created an endpoint on Azure from public port 443 to 8443. However, when ...
0
votes
0answers
9 views

Multiple Wildcard SSL binding issue in IIS 7.5

I have a requirement for a second Wildcard SSL *.domain2.com to be installed on Win2008 R2, IIS 7.5 . The server currently has one NIC and one IP installed. When I try to bind the test.domain2.com ...
0
votes
1answer
35 views

SSL Cert G2 to G5 for PayPal IPN

We have several Rackspace Windows servers (2008 R2), each running 4/5 e-commerce websites, each with their own SSL certificates from Go Daddy. We accept PayPal payments on these websites and use IPN ...
0
votes
1answer
40 views

Certificate not trusted by only a single browser

We have a site that uses a signed cert from thwarte and we have an A rating for the cert across multiple checking tools. However, we have a user that complained that her browser does not trust the ...
0
votes
1answer
77 views

Can I use the new free SSL/TLS AWS certificates without ELB or Beanstalk on plain EC2?

AWS just announced free SSL/TLS certificates here: https://aws.amazon.com/blogs/aws/new-aws-certificate-manager-deploy-ssltls-based-apps-on-aws/ Mainly: SSL/TLS certificates provisioned through ...
0
votes
0answers
44 views

Windows server 2012 R2: Adding support on new cipher

Environment Description I have a VM (hosted in Azure) cluster (one of many identical machines) that I'm using for running my application. I have noticed that some webpages are cannot be loaded in ...
-2
votes
1answer
25 views

Use a Mac to create a CSR for another server

I have a website hosted on Bluemix. I want to set up an SSL certificate, I am following this guide: https://developer.ibm.com/bluemix/2014/09/28/ssl-certificates-bluemix-custom-domains/ I placed an ...
0
votes
0answers
27 views

Uploading A Server certificate AWS, A client error (MalformedCertificate).

I have been trying to upload server certificates for the last 2 days but I keep getting this error every time A client error (MalformedCertificate) occurred when calling the UploadServerCertificate ...
-1
votes
1answer
46 views

HTTPS certificate not working on WWW, but is on NON-WWW

I bought an SSL certificate from SSLMate and it's working fine on my Nginx server when I access http://example.com, but not when I access http:// www.example.com I believe the problem has to do with ...
2
votes
1answer
44 views

Completing certificate request via command line in Windows Server

I administrate a number of Windows Servers (mostly 2008 R2 or 2012 R2) and I have to process a lot of SSL certificate renewals. When we renew from our vendor, Globalsign, they automatically generate ...
2
votes
1answer
82 views

Generate subdomain certificate from valid wildcard certificate

Giving the nature of SSL certificates and keys which can be chained, can I (myself) generate a certificate for a subdomain based on the main domain certificate and key which are issued for wildcard ...
0
votes
4answers
46 views

SSL certificate for CNAME redirected domain

I have a webservice which provides simple site constructor functionality with payment page. User can select purchase domain e.g. user.com, select some template and point this domain with CNAME to my ...
0
votes
1answer
102 views

Let's Encrypt — “DNS … query timed out looking up CAA for …”

I have been using Let's Encrypt on a few domains for a couple of months now, and it generally has been working. I was going through renewing the certs, and for one of the domains I get the following ...
0
votes
2answers
66 views

Redirecting www to non-www (apache, letsencrypt )

Ubuntu 14.04 Apache 2.4.18 I have set up a SSL certificate using letsencrypt. It works well but in order to work, I cannot have multiple vhost defined in one virtualhost configuration file. Each ...
0
votes
2answers
57 views

SSL certificate complication for aws eb

I am using Digicert for buying SSL certificate and its giving me different files on demand as DigiCertCA .crt .pem star_evercam_io .crt .pem TrustedRoot .crt .pem am totally unaware that how ...
1
vote
1answer
19 views

Combine CSR with CA response in mmc

I created a certificate request in Windows MMC certificates snap-in. I sent the request to a CA and got a response. How do I merge the response with my CSR to create a full certificate with private ...
0
votes
1answer
26 views

Apache webserver : SSL certificate not understood

I am trying to specify an SSL certificate to Apache webserver, but I am getting some strange errors. Unfortunately, I don't know that much about SSL. Can someone kindly help me out. Error log in ...
1
vote
0answers
28 views

Samba4 DC cannot enable TLS encryption

I've created my SSL certificate through an intermediate and have attached the certificate, key and (chain) CA to the Samba4 config under [General]. Upon restarting Samba though, the LDAP server is no ...
0
votes
1answer
33 views

GoDaddy A record and SSL Handshake error

I have pointed A record to my server IP in GOoDaddty as ns1.example.com and it is working.But I am confused with SSL error. I have generated SSL certificate with CN as ns1.example.com. When I try to ...
6
votes
1answer
67 views

Can I get anSHA-256 certificate when the CSR is for SHA-1?

I've read: By default, OpenSSL cryptographic tools are configured to make SHA1 signatures. for example, if you want to generate a SHA256-signed certificate request (CSR) , add in the command ...
0
votes
1answer
28 views

Loading whole cert chain into keystore for Tomcat 7

Environment: Tomcat 7.0 on Windows 2008 R2 What to accomplish Get Tomcat 7.0 to use a specific wildcard certificate with accompanying cert chain so customers' browsers do not throw errors. The ...
1
vote
0answers
32 views

hMail Server SSL Certificate Verify Issue | TLS/SSL handshake failed

I will tell you my situation step by step and ask me any necessary questions and help me to fix hmail certificate issue. First of all : 1- i am using a windows server 2008 - r2 2- latest hmail ...
0
votes
1answer
28 views

Enforcing client verification in Apache just for a specific client certificate

I want to make my Apache web server accept SSL connections ONLY IF the client presents itself with a specific SSL client certificate. In other words, only ONE client is allowed and it MUST use a ...
0
votes
1answer
32 views

Generate CSR considering root domain and www version

I have purchased a SSL certificate (NOT wildcard), that as I found out was issued for example.com only and did not include the www version so I was getting warning, as I posted in this question when ...
2
votes
1answer
49 views

Can I use a Comodo Wildcard-Subdomain Cert for RDP on Win10?

I followed Using CA certificate for Remote Desktop Connection Configure custom SSL certificate for RDP on Windows Server 2012 in Remote Administration mode? to secure RDP with a proper cert ...
0
votes
2answers
56 views

Avoid SSL warning when certificate is issued for root domain only [duplicate]

I am having the following issue, trying to set up the SSL certificate. When opening the root domain name example.com the browser shows the green sign and all is fine. However trying to open with www ...
0
votes
2answers
49 views

Security measures of Linux 'certificate store'

I know that windows is using a kind of master key for encrypting private keys which are stored in the certificate store of the OS. Moreover I found out that the certificates and keys in linux are not ...
1
vote
0answers
19 views

Enable x509 Authentication in Tomcat on Openshift

I have a web application deployed on Tomcat 7 running on Openshift. I managed to enable HTTP-to-HTTPS redirection on the server (instruction). I don't have valid certificate. So I have to use the ...
0
votes
1answer
30 views

NGinx - muliple SSL domains, single .conf file

I have the need to support blah.domain1.com and blah.domain2.com in the same configuration file under SSL. I have wildcard SSL certs for *.domain1.com and *.domain2.com (this is a multi-tenant ...
3
votes
0answers
31 views

How well does haproxy scale for handling client certificate authentication?

As this is a performance-based question about a security issue, some folks at Information Security suggested I post here: My IoT company would like to use client certificate authentication to secure ...