SSL (Secure Sockets Layer) is a protocol that is used to encrypt and authenticate connections between clients and servers. Certificates are configured on the server so that the client can verify that the connection has not been hijacked, as well as verify that the connection is secure from end to ...
3
votes
0answers
26 views
OpenVPN failing on self-signed certificate over udp, works over tcp
I have the following server.conf:
# OpenVPN 2.x config
proto tcp
port 1194
dev tun-vpn
dev-type tun
server 10.8.0.0 255.255.0.0
push "route 172.16.0.0 255.255.0.0"
push "dhcp-option DOMAIN ...
1
vote
1answer
25 views
Broad SSL questions about certificates, domains & servers
I've only done basic stuff with signed certificates (basically follow the instructions from CA).
I have general questions moving forward that I hope someone can answer. There are so many different ...
1
vote
2answers
30 views
Domains and subdomains virtualhosts with different SSL certificates
I have a domain: www.example.com and I need this domain to be reachable both via https and http.I have a certificate (GeoTrust) that protects www.example.com and example.com.
I need to protect ...
0
votes
1answer
20 views
jboss wildcard cert import
I have a wildcard Cert from godaddy that is installed in our network on a 2008 R2 server running IIS. I have several windows servers now using this wildcard cert and importing into IIS was very ...
0
votes
1answer
33 views
Running multiple services on one Port 443 is possible?
I am new to network and firewall things,
In our 2008 R2 server i have configured WCF service on windows service with port 443 and later i found another windows service already using the same port ...
0
votes
1answer
34 views
ISA 2006 , two listeners on the same port with different certificates and methods of authentifications
I couldn't find an clear answer to the question :
-Does ISA 2006 support more than 1 listener on the same port (HTTPS /443 , with the same certificate / and different method of authentication - one ...
3
votes
1answer
96 views
Self Signed Certificate - Active Directory - Make it trustable to all users
I use Google Apps For Business + SingleSignOn, that means all my users login trough an internal interface instead of though gmail.com.
This SingleSignOn open source solution uses SAML protocol (i ...
3
votes
2answers
57 views
Do I need a dedicated IP address per sub domain for SSL?
I currently have a dedicated server with a domain name eg. domain.com which has its own dedicated IP address. I need to secure only one sub domain eg. secure.domain.com
Does this subdomain need its ...
1
vote
1answer
39 views
WinHttpCertCfg not importing certificate
I need to setup a deployment script that imports an SSL certificate that my service uses. I have tried importing with WinHttpCertCfg and with CertMgr to no avail.
Here are the command-line arguments ...
0
votes
1answer
78 views
Why is there a difference in the prices of code signing certificates [closed]
Beside the pricing what factor should I cosinder when buying a code signing certificate.
Per year in Comodo is about $100 , In Goddady about $200 and in Verisign is about $500
Why this high ...
1
vote
1answer
30 views
Exchange 2010 can't find SSL certificate that exists
I'm trying to set up TLS for the POP3 server in the Exchange CAS role.
I purchased a cert from NameCheap, and the CA path is fully trusted, and installed it within the Certificates MMC snap-in ...
3
votes
3answers
57 views
Do SSL certificates for email auto renew?
On my mac, I looked at the Mail Connection Doctor and one of the things I noticed was an expiration date for my Parallel Panel self-signed root certificate.
Is that something I have to renew or does ...
0
votes
0answers
18 views
Selected certificate was already installed on another server [closed]
IIS7
All sites had certificates installed and working.
Renewing them using the same CA.
Generated the CSR's and sent them on to the customer.
They sent them on to be signed.
The customer sent me on ...
1
vote
0answers
38 views
SSLRequire multiple OU validation
We are using client certificates with multiple OU fields. For example:
OU1= ZZZ(unique value)
OU2= XYZ(dynamic value)
OU3= ABC(dynamic value)
I need to write a rule only if the OU3 matches with the ...
5
votes
1answer
135 views
How do I match a certificate file to a key file?
I have a SSL certificate that the former sysadmin was issued (crt file.) Searching the filesystem I found several .key files. How do I match the crt to the key file and confirm that they match? ...
2
votes
2answers
101 views
How do I manually authenticate a CA signed SSL certificate
A service I am using is refreshing their SSL certificate and now my connections to their service fail. They were working before the change (as in, 1 hour before the change).
Their old and new server ...
0
votes
1answer
24 views
Amazon VPC cannot SSL creticiate error for every download url
in Amazon VPC, i have one public subnet, having one NAT gateway, and one private subnet with 2 servers. i have enabled NAT (port forwarding ) of ports 80 and 443 to inside server to access a website ...
1
vote
1answer
29 views
SSL cert for used by a trusted 3rd party on my subdomain
I own example.com, and I'd like to get an SSL cert. Normally I would simply buy a wildcard cert, so that I can add subdomains for future purposes.
However, I need to let a trusted 3rd party operate a ...
0
votes
2answers
143 views
How can I make apache request a client SSL certificate without needing to verify it against a known CA?
I'm using apache2 (2.2.3) to serve a site where I'd like to have clients authenticate with certificates. Since I only need to verify that a user presenting a particular certificate is the same user ...
1
vote
4answers
94 views
Do I really need client certificates to be signed by a trusted CA?
Suppose I have a site that I want users to be able to log into with client certificates. As I understand it, the client is presenting the site with the public half of a keypair and proving that they ...
1
vote
1answer
29 views
Apache ip-based hosting setup and httpd.conf directives
In apache, I would like to setup "ip-based" hosting for 2 sites and enable SSL for them. However, I'm not clear on how to configure httpd.conf file.
Questions:
1) Do I need a NameVirtualHost ...
1
vote
2answers
101 views
Why is my SSL certificate saying it's not totally secure?
I've just installed a SSL certificate on my web site, but when I view it in my browser (Chrome), the browser warns me that it's not totally secure:
What am I doing wrong, and how do I correct it?
1
vote
0answers
39 views
puppet certificate fingerprint changed before and after signature?
I am getting quite a weird trouble here with my puppet configuration.
On client and server (debian-squeeze), same version of puppet, clock synchronized.
Things were going great until I decided to ...
1
vote
1answer
40 views
We inadvertently changed our ssl certificate from https://www to https://, and Google remembers the old way?
We launched an ecommerce site a while back and got an ssl certificate for https://www.mysite.com. The site was abandoned for a while, and then recently resurrected. We got a new ssl certificate, but ...
2
votes
1answer
142 views
For enabling SSL for a single domain on a server with muliple vhosts, will this configuration work?
I just purchased an SSL certificate to secure/enable only ONE domain on a server with multiple vhosts. I plan on configuring as shown below (non SNI). In addition, I still want to access phpMyAdmin, ...
0
votes
3answers
25 views
Wildcard SSL certificate for a domain that may already have other certificates setup - any issues with that?
I'm thinking installing a wildcard cert for a site we are migrating from another company's server to our server.
The domain has many other subdomains, and I'm guessing some of them of single domain ...
1
vote
2answers
46 views
How to have a certificate which works with both example.com and subdomain.example.com in IIS?
I have an IIS server hosting several websites, like:
example.com
subdomain1.example.com
subdomain2.example.com
I want those websites to be able to use SSL.
If I install the certificate ...
1
vote
2answers
69 views
Why can't I use SSL certs imported via Server Admin in a custom Apache install?
I've got a couple of Mac OS X 10.6.8 Server web servers that run a custom AMP255 (Apache 2.x, MySQL 5.x, and PHP 5.x) stack installed using MacPorts. We've got a lot of Mac OS X Server servers and ...
5
votes
1answer
36 views
What's the basis for “automatically select the certificate store based on the type of certificate”?
When I import a certificate, I'm offered the option to "automatically select the certificate store based on the type of certificate".
What basis does Windows use? Which types of certificate end up in ...
1
vote
1answer
47 views
Can multiple services (on different ports) use the same SSL cert?
Can I use the same SSL certificate for a tomcat service on port 443, and for a seperate IIS service on some other port? Both services live on the same machine, on the same IP address and same DNS ...
0
votes
0answers
52 views
SSL, Nginx, X509_check_private_key:key values mismatch error
I have nginx server with the SSL.
I'm trying to submit ssl sertificate. After I restart nginx I'm getting error:
SSL_CTX_use_PrivateKey_file(".../example.com.key") failed (SSL: error:0B080074:x509 ...
2
votes
2answers
93 views
Different SSL Certificate Authorities for domains and subdomains?
Our main site www.example.com has a regular VeriSign SSL certificate. However, we need ssl for our dev environment for accurate testing. Is it possible to use another ssl from a different (cheaper) ...
1
vote
2answers
134 views
SSL Certificate by GeoTrust not working
I have signed for an SSL Certificate (Quick SSL Premium) from Geotrust by my VPS provider (1&1). I, did exactly what it is indicated here, I added all of the directives at my subdomain's Virtual ...
2
votes
1answer
37 views
“Countersigning” a CA with openssl
I'm pretty used to creating the PKI used for x509 authentication for whatever reason, SSL Client Verification being the main reason for doing it. I've just started to dabble with OpenVPN (Which I ...
-1
votes
2answers
40 views
Implement SSL certificate for web server
I have questions about ssl certificate.
Right now i'm trying to implement it by using VeriSign.
If i'm not mistaken,we need to implemented in the web browser and web server respectively.
But i'm not ...
0
votes
1answer
60 views
Any open source web based X509 PKI tool?
Want to setup a CA, but it's hard to find a good web based X509 PKI tool, any recommend?
2
votes
1answer
34 views
How to restore a certificate from a backup
I have an authenticode certificate living in a backup created with Drive Snapshot, which is a byte level backup of the c: partition from my development machine.
I need to export that certificate.
I ...
0
votes
2answers
68 views
Apache https configurations
I am trying to setup my domain name with a self signed cert. I created the cert and placed the server.key and server.crt files into C:/apache/config/ Then I updated my httpd.confg host to include the ...
2
votes
3answers
181 views
Have a legitimate ssl certificate, but I fail at installing it
I'm running an Ubuntu 10.04 LTS server that has been running Apache2 with a self signed certificate up until now. I finally purchased a real certificate but I can't manage to install it. I received ...
6
votes
1answer
132 views
Safari users receive a prompt to select certificate when accessing my website
I have an ASP website on IIS6 that is equipped with a SSL certificate from godaddy.
The website requires secure channel (SSL) and is set to IGNORE client certificates.
In ran the SSL checker and ...
1
vote
2answers
79 views
Certificate Error on dropping www from https://www.example.com
I was looking at this blog and SO question These things prefer to drop www from their websites. But if you are running a website on SSL and you drop www, won't you get a certificate error? I use wild ...
0
votes
1answer
203 views
SSL Library Error: 218570875 error:0D07207B:asn1 encoding routines:ASN1_get_object:header too long
I am trying to install SSL certificate from a certificate authority into my httpd server in CentOS 5.x. When I configure it and start the server I am getting the following errors,
[error]Init: Unable ...
1
vote
1answer
41 views
Apache on linux with two real certificates (.com and .co.uk)
I can only configure one. when I try to configure the other I get httpd error with bad syntax.
any one know how to configure 2 certificates in apache?
this is what I have:
# ssl
LoadModule ...
0
votes
3answers
65 views
Moving SSL Certificate to new server
I'm moving an SSL crt and key from one server to a new one. The old one was on a box with cpanel and the new one is just a LAMP Ubuntu box.
I've been following tutorials and instructions for hours ...
2
votes
1answer
79 views
Requiring client certificate issued by a specific intermediate CA in Apache
I have a CA hierarchy like this:
Root-CA
________|_____________
| |
TEST-CA PRODUCTION-CA
_____|_____ ...
4
votes
2answers
229 views
SSL Certificate Class 2 vs Class 3 vs Class 4
I just got a "Premium EV SSL Certificate" form GoDaddy.com. Apparently as of 8 months ago GoDaddy doesn't provide Class 3 Certificates. ...
2
votes
1answer
144 views
Apache2 ssl + virtualhosts of the same domain
My webserver hosts several subdomains (vhosts) of a website, say sub1.example.com and sub2.example.com. The only difference between these vhosts is the documentroot. Everything else is shared across ...
0
votes
3answers
57 views
SSL URL gives a 404
I have recently created an SSL cert on my server *.key and a *csr file.
I then created the *crt and the *.ca-bundle with Comodo.
I have 2 current vhosts:
vhost for - http://www.example.com
...
3
votes
4answers
91 views
How do certificates improve security?
I am trying to get my head round server certificates. Am I right in saying:
A certificate binds to the requester (ie client), to prove their identity. The certificate at the time of creation is for a ...
2
votes
0answers
41 views
Definition of Rejected and Failed in Support Cipher Suite
When I using SSLSCAN to check the cipher suites of my server, I found that there are three status: Accepted, Rejected and Failed. After that, I tried to disable the ciphers of RC2(40bits). I created a ...
