SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms

0
votes
1answer
13 views

EC2 Load balancer and wildcard/multi-domain SSL certificates

I am running three sites through one load balancer (and 2 child-application servers) One of the site's has an SSL certificate, but I'd like to add a certificate for the other two sites What is my ...
0
votes
1answer
40 views

How do I determine where an SSL certificate is being served from?

I am having the same issue described in this question: IIS 7 Still Serving old SSL Certificate I have replaced an old SSL certificate with a new one and completely removed the old certificate from ...
1
vote
1answer
14 views

Is it possible to deploy SSL catch-all certificate on different servers?

I have a "catch-all certificate" that I would like to use on another server that resides in another VM. How can I achieve this? I haven't seen any docs that explain otherwise.
0
votes
1answer
103 views

Failed tls handshake. Does not contain any IP SANs

I'm trying to set up logstash forwarder, but I have issues with making a proper secure channel. Trying to configure this with two ubuntu (server 14.04) machines running in virtualbox. They are 100% ...
-1
votes
1answer
20 views

SSL certificate is not properly installed on Glassfish

I am an java developer not an web server/IT infra guy so i dont know wether I am asking this question correctly or not, So i apologies if I am wrong somewhere. Previously we are having an spring web ...
3
votes
1answer
20 views

RHEL6 httpd Root CA configuration

I'm setting up SSL on a RHEL6 box and I'm having problems finding information about configuring the Root CAs. I've got four files: cert.crt - My SSL certificate my_key.key - The key used to ...
2
votes
0answers
24 views

CA is repeated in IIS https response, what is the configuration section to be checked?

This is about the https of the payment service provider we're using. We've notified them about the problem which causes some android devices to show SSL error message when the browser is redirected to ...
-2
votes
1answer
33 views

Failed to bind to: /0.0.0.0:443 [closed]

I am having problems starting my play framework server on port 443,i am using scala play 2.20 and my play server running fine on port 9443 by following command ./start -Dhttps.port=9443 ...
0
votes
1answer
15 views

Exchange certificate - different issuer external to internal?

We have a GoDaddy signed SAN cert for our Exchange 2010 server, internally it works fine - issuer is GoDaddy and cert chain checks out. Externally the same SAN seems to be used (the domains are the ...
3
votes
1answer
26 views

How can I get an OID for a certificate template?

I'm using C# (or VBScript) to issue a certificate from an Enterprise CA. According to this answer, I need to specify the OID instead of the certificate name, and place it in an unexpected portion of ...
4
votes
1answer
43 views

ssl certificate installation on tomcat

I am trying to create a new certificate for my scala play framework on ubuntu but I cannot import my key with keytool. I haven't been able to figure out what is causing it so I thought I'd see here if ...
0
votes
1answer
30 views

Page can't be displayed with IIS and SSL

I have a single site hosted in IIS 8. I have two site bindings. One is for HTTP, the other is for HTTPS. HTTP is on port 80 with All Unassigned addresses, I left host name blank. HTTPS is on port 443 ...
0
votes
2answers
23 views

WHM/cPanel SSL certificate and two different subdomains per machine/IP

I have two servers with WHM/cPanel installed - server1.mydomain.com and server2.mydomain.com, and I would like to install WHM SSL certificate on both machines (different IPs). My question is do I ...
0
votes
0answers
31 views

Self Signed SSL Cert - Browser Warning

I generated a new self-signed cert for one of our intranet sites. The old cert expired today. I pushed the new cert out via GPO and deleted the old one. I can see on the client that the new cert has ...
0
votes
0answers
25 views

Have to reinstall certificate every so often

We call a web service which we have a mutual authentication set up. I have their certificate installed on my server in the "local computer" folder under "Third Party Root Cert Authorities". I call ...
-1
votes
0answers
31 views

Segmentation fault after installing mod_ssl in Centos 6 [duplicate]

I installed mod_ssl (# yum install mod_ssl) on my CentOS 6.4 server and when I executed the below command to check apache configuration, found Segmentation Fault error message as Output. # apachectl ...
0
votes
1answer
30 views

Extract key from JKS keystore to use with apache2 and tomcat

I have a keystore in JKS format and I want to use that with apache2. How can I export the key and the certificates (that i already chained) out the JKS in a easy way? I found many answers out there ...
-1
votes
0answers
26 views

Apache, vsftpd, postfix/dovecot ssl certificate issue

i have these services hosted on the same server for my website. each one is either www.domain.com, ftp.domain.com, or mail.domain.com. i have a multi-domain certificate install successfully. however, ...
0
votes
1answer
12 views

Set Up Of SSL Certificate COmmon Name to Protect Plesk Panel

A PCI Compliance scanner is balking that the self signed SSL certificate protecting secure access to Plesk Panel contains a name mismatch between the location of the Plesk Panel and the name on the ...
1
vote
1answer
58 views

Do I need to resign/regen a cert when moving IPs?

Are these errors related to moving a site to a new IP and keeping the same SSL CERT? Will I need to regen/sign to fix this? [Sun Jun 22 07:13:11.054280 2014] [mpm_worker:notice] [pid 2775:tid ...
1
vote
0answers
68 views

Enabling SHA2 Certificate Support on Windows Server 2003

A little background information first. I have an SSIS package that runs inside a Windows Server 2003 SP2 32 bit environment. The package recently started failing with the following error during a ...
4
votes
2answers
38 views

How to tell if an (offline) SSL Certificate been revoked

I would like to know whether an SSL certificate was revoked. The website no longer serves up that certificate, I only have the domain name and the serial number. The SSL certificate was replaced 5 ...
0
votes
3answers
45 views

Install godaddy ssl certificate on amazon ec2

I'm new to setting up ssl certificate and csr, i want to use public ip instead domain name in ssl. i created a csr file using following command and info openssl req -new -newkey rsa:2048 -nodes ...
0
votes
1answer
69 views

Two domains, two SSL certificates, one IP

I'm trying to run two domains, one with a wildcard certificate and the other one with a regular certificate from one IP and one nginx. Setup: example1.com with wildcard certificate example2.com with ...
1
vote
0answers
86 views

Error 26101: SSL certificate common name invalid

I have 3 systems with similar configuration: Windows Server Datacenter 2008R2 MS System Center 2012 connected to a storage array On 2 systems I can add the storage provider from VMM without any ...
7
votes
3answers
160 views

Why is Windows 2012 R2 not trusting my self-signed certificate?

In a testing environment, I'm currently being held up from testing some things that need to be deployed soon (actually already, but you know how deadlines go...) because Windows refuses to trust the ...
0
votes
0answers
32 views

IIS Client Authentication without a CDP

I'm running IIS 7.5 on Win2k8, and am trying to configure 2-way SSL. I've turned Require Client Certificate on in IIS, I've installed a valid root certificate in my local machine's trusted root store, ...
0
votes
2answers
22 views

SSL certs or intermediate for DMZ

I've been tasked with deploying and managing load balancers covering internal servers and DMZ servers. I have no experience with this, and this is a first for my organization as well. Balancers are ...
0
votes
0answers
76 views

Unable to complete secure transaction - Nginx Opera browser

i have this nginx.conf file worker_processes 4; worker_priority 15; error_log logs/error.log notice; pid logs/nginx.pid; events { use kqueue; # event method, kqueue ...
1
vote
1answer
16 views

Extract Certs from Apache

Recently I've had to uninstall a single Self-Signed SSL Certificate from one of my Apache boxes, specifically for an outside party. That's not really a problem for me, since it was easy. What ...
1
vote
2answers
58 views

OwnCloud RSA certificate configured for SERVER- ISSUE, webpage has a redirect loop [closed]

I had Owncloud running on a server that had died, I remember installing being easy, I have migrated server and Owncloud is one of the last apps to install. Ok Just downloaded and installed the newest ...
0
votes
2answers
147 views

How to get around Unrecognized Certificate Authority signature on Domino 9.0.1 with Go Daddy SSL?

I am a part-time administrator, at best, so I only get to do these things once every 2-3 years. I am reinstalling a Linux server that worked in 8.5.2. The SSL certificate is from GoDaddy. I have ...
0
votes
1answer
33 views

Is the decision to use SNI or IP based SSL made during cert purchase or cert installation?

It's time to renew an SSL cert - but the website will soon be moving from a dedicated machine with a fixed IP to a cloud based host behind a load balancer. When I renew or re-purchase my ssl cert do ...
0
votes
1answer
48 views

Why am I having trouble viewing HTTPS websites only using Chrome only on my employer's network? [closed]

I'm using Google Chrome on my new MacBook Pro that has been provided to me by my employer. Many of the HTTPS sites I visit do not work when I visit them using Google Crome while I am connected to my ...
0
votes
2answers
59 views

Does the server SSL certificate need to be kept private?

I understand that private key definitely does, but what about the certificate file? I also understand that the server sends (part of?) the certificate to a connecting client, but does it send the ...
5
votes
1answer
238 views

Windows 2012R2 seems to automatically download and install intermediate root certificates

Whilst preparing a new Windows 2012R2 server for production I needed to install a (GlobalSign Domain) SSL certificate for the website powering our application. I did this by generating a certificate ...
1
vote
1answer
110 views

Installing SSL certs with nginx on Amazon EC2

I finally got a cert from an authority and am struggling to get things working. I've created the appropriate combined certificate (personal + intermediate + root) and nginx is pointing to it. I got ...
0
votes
0answers
129 views

SSL Connection Error

I have purchased a comodo ssl cert and have submitted the Certificate Signing Request (CSR) generated by my server to the ssl management site. With the 3 files it returned me with, - ...
0
votes
0answers
88 views

The OCSP server has no status for the certificate. (Error code: sec_error_ocsp_unknown_cert)

Just set up a website (Apache/Centos) with SSL where the free cert came from startssl. I've used startssl before, and never had any problems. I have no problems accessing the site from IE and ...
0
votes
2answers
98 views

How to decide where to purchase a wildcard SSL certificate?

Recently I needed to purchase a wildcard SSL certificate (because I need to secure a number of subdomains), and when I first searched for where to buy one I was overwhelmed with the number of choices, ...
0
votes
0answers
49 views

Inject SSL client certificate in Nginx proxy

I have 2 Nginx instances, one is listening on 80 and has a proxy_pass https://second_nginx; The second instance is configured to listen on 443 with a self signed certificate, but also have the SSL ...
4
votes
2answers
65 views

Can't provision SSL certificate for my subdomain [closed]

Are only specific TLD's available for SSL certification? I'm trying to provision an SSL certificate for my subdomain, (I own the root domain but can't afford a wildcard SSL yet) but I can't find an ...
2
votes
1answer
47 views

Multiple SSL certs for wildcard domain

I would like to set up an EV SSL certifcate for a few subdomains like blog.domain.com and www.domain.com. I also need to set up a wildcard PositiveSSl cert for *.domain.com, excluding blog.domain.com ...
1
vote
1answer
142 views

Root certificate authority works windows/linux but not mac osx - (malformed)

I have created a self-signed root certificate authority which if I install onto windows, linux, or even using the certificate store in firefox (windows/linux/macosx) will work perfectly with my ...
2
votes
1answer
76 views

How to install (update) SSL certificate for a website in Windows NLB cluster

I wanted to ask what the proper procedure for installing an SSL certificate onto two servers running IIS6 that are in an NLB load balancing configuration. Yesterday I installed the certificates ...
0
votes
1answer
104 views

Chef Server 11.4 SSL certificate failure when bootstrapping a node

I'm trying to bootstrap a RHEL 5 server with Chef 11 Chef-Client using my Chef 11 Work station through a Chef Server 11.4. However, I am receiving the error below. ...
0
votes
1answer
110 views

Sending to gmail with TLS and self signed certificate

Since many provider switched to TLS only connections, I cannot deliver to gmail anymore with a default plaintext postfix setup. My question is, can I use valid TLS / does google accept TLS with a ...
0
votes
0answers
138 views

Where to locate certificates and keys on Centos 6.5

Looking at my Centos 6.5 /etc/pki/ directory, I see the following system generated directories: [root@vps ~]# ls /etc/pki CA ca-trust java nssdb rpm-gpg rsyslog tls [root@vps ~]# ls /etc/pki/CA ...
2
votes
1answer
55 views

Outlook: Name on security certificate invalid

Our end users are receiving the following dialog box in Outlook which refers to an incorrect internal domain name (domain.internal). No dialog box is received if using Outlook Anywhere. Clicking ...
0
votes
0answers
455 views

Postfix and OpenSSL: “Unable to get local issuer certificate”

I bought a certicifate for my mail server and configured it in Postfix like so: smtpd_tls_security_level=may smtpd_tls_CAfile = /etc/ssl/certs/ca-certificates.crt smtpd_tls_cert_file = ...