SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms

1
vote
1answer
30 views

How to secure only one page with SSL on Apache2?

My web server hosts many pages. However, I need to secure only one of them with SSL. I know how to create self-signed certificate and how to install it on Apache2. My problem is quite different: since ...
0
votes
0answers
10 views

SSTP VPN connection errors

We're testing an Amazon EC2 server for a cloud application server and I'm trying to configure VPN access to it. I've read that PPTP cannot be used due to the blocking of GRE port 47 and that the best ...
0
votes
1answer
17 views

How do I restrict certificate authentication to specific users on IIS 8.0?

I am using IIS 8.0 on a Windows Server 2012 box. This is not a domain joined machine so Active Directory is not available to me. I've successfully configured certificate authentication. When ...
0
votes
0answers
45 views

Login using client SSL certificates

I want users to be able to login to say, Jenkins using client SSL certificates without password. Let me rephrase it: The certificate part works fine. I want to find a way for apache to tell web ...
2
votes
1answer
42 views

Expired SSL certificate on mailserver

As daft as it sounds, I've let an SSL certificate expire -- or it will within the next 12 hours. My only real concern with this is a mailserver, which is configured to listen for encrypted (port ...
0
votes
0answers
13 views

cannot open assembly certmgr.exe

I'm trying to run a basic console app that calls a web services hosted on an external https endpoint using Mono. I keep getting errors about decrypting the response. Some googling has led me to ...
2
votes
1answer
48 views

Correct Apache reverse proxy config with SSL for Jenkins and Sonar

I am running two services behind an Apache server: Jenkins (Port 8080) and SonarQube (Port 9000). My apache config looks like this: <VirtualHost *:80> ServerName server Redirect permanent ...
1
vote
2answers
45 views

openssl verify error 7 at 1 depth lookup:certificate signature failure

I have installed OpenVPN server on CentOS. I have two clients - first under CentOS (all works), and trying connect Windows client now. I generated client's certificates with build-key utility. If I ...
1
vote
2answers
30 views

Thawte SSL123 SHA-2 Intermediate Certificate Chain, Broken?

I attempted to upgrade my one Web site, running nginx, from a SHA-1 SSL123 certificate to a SHA-2 one. Thawte's Web page with intermediate CAs has "RSA SHA-2 (under SHA-1 Root)" and "RSA SHA-2 ...
-1
votes
1answer
39 views

Can't login to dovecot using gmail as an email client

I've used this installation configure-email-server-using-postfix-dovecot When I try to use gmail as the email client (connecting to my server through port 993) I get this error Unable to establish ...
0
votes
0answers
12 views

How to get connected over IPP using SSL via AddPrinter() call?

I had three printers in my network. All of these three are using self-signed certificate. Only for one printer, I am getting error GetLastError() – 1797 – Printer Driver Unknown I had compared ...
1
vote
1answer
27 views

Squid: how to enable verification for SSL self-signed certificates

I'm using Squid 3.4.8 as a reverse proxy which is forwarding request to a specific server. The communication between Squid and the server is in HTTPS. The certificate used by the server is ...
1
vote
1answer
53 views

squid3 ssl bumping server-first with signed certificate

I'm trying to get Squid3.4 to do SSL Bumping with the server-first method. I followed this guide in alpinelinux. I'm working in explicit mode (browser configurer to Go to the proxy) and that works ...
1
vote
1answer
71 views

Block website with HTTPS?

I hope my question is on topic on Server Fault. If not, please excuse me and point me into the right direction. Is it possible to block a site with HTTPS? I have a website that I would like to make ...
-1
votes
0answers
31 views

What file to add to nginx certificate [migrated]

I got a RaspberryPi on which I want to host Owncloud. So I followed this tutorial and it works well except the SSL part. I don't want to use self signed. I set my own subdomain and it works without ...
1
vote
0answers
68 views

Are there any modern browser/machine that not accept class 1 SSL certificate

I'm considering to buy a SSL certificate from external Certificate Authority to my web service which does not involve e-commerce. So I was planning to request the simplest class 1 cert to eliminate ...
8
votes
2answers
373 views

HTTPS warning: works on desktop, warning on mobile

I installed a wildcard SSL certificate (*.vht.com) for my work and accessing the following website in chrome (or any desktop browser) https://tours.vht.com/fsviewer3/fss2.html works, but when trying ...
-3
votes
2answers
65 views

Accidently removed localhost.crt SSL in Centos 6 - what can i do?

So I just got my certificate issued from Digicert, and since there was other unused/old files in /etc/ssl/ i marked and removed, and accidently also removed localhost.crt. Now I cannot start my web ...
1
vote
0answers
28 views

SSL causes timeout, my fault or startSSL's?

I am currently using a free startSSL certificate for my webserver at https://website.co.uk/ but for some reason it gave me Error code: ERR_CONNECTION_TIMED_OUT (On chrome), assuming it was my fault I ...
15
votes
4answers
1k views

Where do companies typically store SSL certificates for future use?

We recently bought a wildcard SSL cert for our domain. We converted all of the certs to a Java keystore, but now we are asking ourselves where we should store these for later use. Do people use ...
5
votes
1answer
312 views

What SSL Certificate works WITHOUT an intermediate certificate?

We have a need to deploy a server app that has its own SSL certificate built in. This will get rolled to an unknown number of servers, that will go up and down. We can generate this certificate using ...
-3
votes
0answers
51 views

How to install a SSL certificate on Ubuntu Server?

I need to make the connection between my origin server and CDN (Akamai) secured. I generated and installed a self signed certificate at my origin server (which hosts www.something.com.au) using the ...
0
votes
1answer
71 views

I can't upload server certificate on AWS IAM

I got AWS iam working on my server, and trying to upload some certificates: aws iam upload-server-certificate --server-certificate-name domain2014 --certificate-body ...
2
votes
1answer
35 views

How to add an existing key to the certutil key database

I have created an SSL keypair with OpenSSL. I uploaded the Certificate Signing Request to my SSL Certificate provider and got my certificate files. I added my certificate and the required CA ...
2
votes
1answer
32 views

Dovecot SSL Certificate is not accepted

I have certificates issued from StartSSL, which is a trusted authority for certificates, and my websites work with its certificates with no problems and no complaints from all browsers about any trust ...
-2
votes
0answers
31 views

Why is this SSLerror coming on sending request to any subdomain like sandbox.example.com? [migrated]

>>> import requests >>> requests.get("https://api.example.com/index.php") <Response [200]> >>> requests.get("https://sandbox.example.com/index.php") Traceback (most ...
0
votes
1answer
27 views

How do I configure nginx on RHEL to recognize root SSL certificates of external sites?

Setup: I have a nginx reverse proxy that is a load balancer for ASP.NET applications. The problem is when ASP.NET application tries to access an external application, the SSL handshake fails. I think ...
0
votes
1answer
38 views

AWS EC2 SSL Server certificate does not match the URL

After uploading the certificate to iam, when I visit https://www.mywebsite.com I get this error The identity of this website has not been verified. • Server's certificate does not match the URL. ...
4
votes
1answer
75 views

How do I work out my certificate chain order manually?

Lets say I start with a certificate. Using openssl I can print it out like this: openssl x509 -in cert.pem -text -noout And I'll get some output such as Validity, Issuer and Subject along with ...
0
votes
2answers
76 views

Dockerfile separation of concerns for a secure apache httpd server with respect to SSL certification files

Issue: In a non-docker solution, the SSL certificates can be located in /etc/pki/CA/.... and with references to these in /etc/httpd/conf.d/*.conf files. How must these SSL certificates be ...
6
votes
1answer
640 views

Why does my wildcard SSL certificate cause a domain mismatch error on a second level subdomain?

I have a server https://www.groups.example.com - in FireFox I get the "This Connection is Untrusted" message and the "technical details" say www.groups.example.com uses an invalid security ...
2
votes
1answer
87 views

Two SSL virtualhosts on same IP with Apache

I have an apache server with one ip address. (on a debian server). I have several virtualhosts for http and one virtualhost for https one vhost, redirect traffic to the https vhost and this works ...
1
vote
2answers
74 views

Setting up SSL with a redundant connection

My situation: We have two servers, Server A and Server B. Server A has a proxy configured, which serves data (over SSL) from Server B. Server B is reachable via 1.1.1.1 (one.server.example.com) and ...
1
vote
1answer
21 views

OpenVPN client from multidomain SSL host

My server uses it's server certificate when connecting as a client to another server. webserver - server1.mydomain.com openvpnserver - server2.mydomain.com Server1 is a web server with SSL ...
1
vote
2answers
158 views

Curl with custom certificate

I 'd like curl to work with sites signed by goDaddy: If I call curl mypage.com/bla I am getting a certificate verification error. I tried getting the ca certificate with this snippet: echo | ...
0
votes
0answers
12 views

MissMatched Address Certificate Error

I have been trying to set up an Apache server for testing purposes in a virtual environment and I have been having some troubles. I want to set up SSL in Apache so I created my own certificate ...
0
votes
1answer
114 views

Can't get Network Solutions Certificate chain working with EC2 Elastic Load Balancer

I have a certificate file provided to me which is a wildcard domain name. It comes as both a key and a crt file. No other files were provided. I'm having trouble getting it to work correctly with ...
0
votes
0answers
30 views

Oracle Wallet Add Trusted Intermediate CA?

I have a Oracle Wallet for use with a Oracle HTTP Server. I am trying to update my Trusted Certs in the wallet as they have changed for my client authentication for DOD CACs (Smart Cards). I have ...
0
votes
0answers
22 views

Apache not checking crl for revoked certificates

I have the same problem as is described on question 23939112. I run my own CA authority. I created a certificate signed by my CA, with I can to login to web pages. Now, I'm testing revocation. I ...
1
vote
1answer
98 views

MySQL and SSL with -sha256

I'm trying to create some certificate to use with MySQL and everything works fine if I use the sha1 algorithm. If I add the -sha256 switch or -sha384 I can NOT connect to MySQL!. I get this error: ...
0
votes
1answer
57 views

IIS 7 Still showing old certificate

I installed an SSL certificate in my IIS 7 (Windows Server 2008). I deleted the expired certificate but still showing when i access from any browser. I deleted the expired certificate. I Installed ...
0
votes
0answers
38 views

VSFTP authentication with client certificate

I have a VPS Box running on CentOS 6.5 with vsftpd. I have setup a user account for login with username/password. My customer now sent me a id_rsa_2048.pub key which he wants to use for ...
0
votes
0answers
21 views

How Can I Test If Another Server Certificate is Trusted?

My certificate expired on my server (Server A) and I needed to generate a new one. I've verified the new certificate is updated on Server A, but now my CAS server is timing out when Server A attempts ...
0
votes
2answers
139 views

Nginx sslv3 poodle disable

I tried setup SSL cert without SSLv3 in my nginx, but SSL Labs say, my server have SSLv3 how to disable it. My config: add_header Strict-Transport-Security max-age=31536000; add_header ...
0
votes
4answers
124 views

My Certificate doesn't work on all machines

I installed Centos7 on my new brand server. I use LDAP as authentication. I deployed my certificate on all server and LDAPS is working with RHEL5, Debian or SOLARIS On Centos7, I 've got problem ...
-2
votes
1answer
56 views

SSL on Heroku, error add cert: “not valid. The 'Not After' date restriction on the certificate has passed.” [closed]

I purchased a wildcard SSL cert from Gandi.net many months ago, and used it immediately after purchase successfully on other hosting services than Heroku. I now need to secure a new subdomain on a ...
1
vote
0answers
34 views

Owncloud - Proxy changes certificate

I'm running an owncloud server 7.0.2 with apache(Ubuntu host) and configured it to use a self-signed ssl certificate. Everything works fine on my home-PC On an other machine I would like to use the ...
0
votes
1answer
41 views

Extract correct format of key and cert files from .p12 file for a SSL MEAN App?

I'm writing a MEAN app for my university department on my Mac development machine. I started with the boilerplate from mean.io. In the configuration file config/env/all.js, there is a section for ...
0
votes
1answer
75 views

Secure Domain.nl , Alias of SSL Certified Domain.com not working with .com's SSL Certificate [closed]

I have a .com site that is https with a Comodo certificate via Dreamhost. I also have https://cdn.domain.com with a unique ip address to make it play nice with MaxCDN. The site is run in two languages ...
0
votes
1answer
60 views

AH01896: Unable to determine list of acceptable CA certificates for client authentication in Apache v2.4 SSLCACertificatePath directive

I am using Apache v2.4 In ssl.conf file I am using SSLCACertificatePath directive with parameter like /var/dat/certificates/ssl.intermediate where ssl.intermediate is an empty directory with ...