SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

1
vote
0answers
3 views

IIS8.5 Centralized Certificates: using more specific wildcard?

I've set up Centralized Certificates on my IIS 8.5 (Windows 2012 Standard). I have the following certificates available, among others: CN=*.dev2.pressero.com, OU=Domain Control Validated ...
2
votes
2answers
28 views

Windows server 2012 Root Enterprise Certification Authority issue certificates only with 2 years validity

I cannot make my Enterprise Root CA issue certificates with an expiration date more than 2 years. I've already set ValidityPeriodUnits and ValidityPeriod register keys with certutil.exe. I've ...
0
votes
1answer
22 views

Self-signed SSL certificate to match multiple subdomains

I have a bunch of sites served through nginx with SSL with self-signed certificates, each of which is on a subdomain, e.g.: https://app1.example.com https://app2.example.com My user base is small ...
1
vote
1answer
21 views

Apache's deprecated SSLCertificateChainFile directive (AH02559)

Recently I've upgraded Apache from 2.2 to 2.4 and I cannot figure out how to deprecate a SSLCertificateChainFile directive. The error: me@jessie:~$ sudo apache2ctl configtest AH02559: The ...
1
vote
1answer
25 views

User domain CA to create a UCC cert

We have 30+ RDS servers and use a hardware load balancer. I'm trying to figure out how to generate a UCC cert from our in house CA. Anyone point me in the right direction to do so? Need to alias all ...
0
votes
0answers
31 views

Squid 3.5.4: ssl bump: error - Error negotiating SSL connection on FD 10: Success (0)

I am trying to install squid 3.5.4 (on docker, running debian 8) and run it in ssl-bump mode. Compilation: ./configure --prefix=/opt/squid --srcdir=. --disable-maintainer-mode \ ...
2
votes
1answer
14 views

Command line to set up SNI on IIS for Windows 2012

I'm trying to complete the automated build script of my web server, which runs Windows 2012 and has two SSL websites, each with its own digital certificate. I am using SNI, which works fine when I ...
-1
votes
1answer
29 views

Which kinds of SSL certs there are?

When I visit eg. https://www.google.com, my web browser (IceWeasel) shows just a (grey) lock icon next to the URL. However, when I visit eg. https://www.cia.gov, a green lock and "Central Intelligence ...
0
votes
1answer
23 views

Nginx SSL cant connect to site

I just bought a SSL certicate for my website and tried to get it working with my nginx install, but uppon connection the browser refuses the connection with the website. Here is the relevant part of ...
2
votes
1answer
25 views

configuring ssl on nginx - is this ciphers list up to date?

I have bought a certificate from Comodo and I'm following an article on their site on how to configure the certificate on my nginx. The question is, is this configuration, mainly the ciphers list, up ...
-1
votes
0answers
42 views

Differences between Exchange's “default” SMTP certificate and others enabled for SMTP?

I know that: You can enable the SMTP service for multiple certificates in Exchange The last certificate enabled for SMTP becomes the "default SMTP certificate" My question: What are the ...
0
votes
0answers
18 views

Lync Server SSL Cert

I have a cert issued by the domain CA. The cert subject is the name of the server. The subject alternative name contains sip.domain sip.domain2 dialin, meet, admin, and the auto discover for ...
1
vote
0answers
16 views

Apache Signed certificate by know authority and client certificate self-signed

I've been investigating about this and it work with the apache SSL option SSLVerifyClient optional_no_ca I have the following virtualhost configuration. NameVirtualHost *:443 <VirtualHost ...
3
votes
2answers
48 views

Firefox sec_error_unknown_issuer after renewing root CA certificate [closed]

For our corporate network we use an internal CA, which directly signs some intranet server certificates. Now the root certificate is about to expire. I tried to renew it with the following OpenSSL ...
-1
votes
0answers
17 views

How to issue a Client Certificate with the Client's hostname using openssl?

I recently went through the process of securing a communication between two servers, one internal to my network, the other external. In order to accomplish this, I used openssl and went through the ...
1
vote
0answers
32 views

Outlook/Exchange certificate errors after setting clientaccessserver, etc… properties

After updating exchange 2010 using the commands for Set-ActiveSyncVirtualDirectory, Set-ClientAccessServer, Set-ECPVirtualDirectory, Set-OABVirtualDirectory, Set-OWAVirtualDirectory, & ...
2
votes
1answer
27 views

How to build a chained cert for Dovecot?

I have a Dovecot default certificate "dovecot.pem" which is for localhost. My email client uses "domain1" and "domain2" as email hosts. Herefore I have two more self-signed certificates "domain1.crt" ...
0
votes
1answer
50 views

Installing SSL certificate on nginx server

I am trying to install a positivessl certificate on my server without success. I started creating a mydomain.key file on my server and requested the certificate. I bundled the files using cat ...
1
vote
1answer
38 views

the same certificates are sold at different prices?

I've encountered so many times with this situation. For example everybody know if I buy a Positive SSL for a year from a reseller, its price is about $5.95 . If I buy the certificate from CA ...
1
vote
0answers
23 views

How to install SSL Certificate into Service Bus 1.1 on Windows Server

For test cases and evaluation we installed 2 nodes with "Azure Service Bus 1.1" on Windows Server 2012 R2 machines. The installation process installs the https endpoints with a self-signed ...
-1
votes
0answers
45 views

Application does on open upon Installing SSL on Glassfish v3

I have been trying to install Comodo 90-day SSL certificates, but could not get it to work. Application link does not open. I did the following: I reset the master password using asadmin ...
0
votes
1answer
42 views

SSL certificate for CNAME [closed]

We have added CNAME for AWS Amazon S3 domain. Like below test.domain.com IN CNAME d5f29cy3a2ai3ip.cloudfront.net. We already have the SSL certificate for the domain "www.domain.com". But don't have ...
5
votes
2answers
230 views

Change Key exchange mechanism in IIS 8

We are using RSA key exchange mechanism for SSL certificate. How can i change that to DHE_RSA or ECDHE_RSA? Due to using RSA, we are getting the below warning in chrome “Your connection to website is ...
3
votes
1answer
731 views

The site is using outdated security settings that may prevent future versions of Chrome from being able to safely access it

We're using an AWS ELB to do SSL termination and are having an issue where Chrome is displaying "https" in red with a strikethrough. It says "The site is using outdated security settings that may ...
0
votes
2answers
47 views

Apache:mod_ssl:Error: Private key not found

I'm installing a SSL certificate to serve HTTPS. I'm using Apache 2.4 in Amazon Linux and got the certificate in Startssl. My Vhost config is the following: <IfModule mod_ssl.c> ...
0
votes
0answers
49 views

Squid transparent https certificate error: ssl_error_bad_cert_domain

I have a squid transparent proxy (squid 3.4 in pfsense 2.1) with ssl_bump for https, all my clients trusts squid as CA and many sistes are well working... However I have some problem with websites ...
-1
votes
1answer
24 views

https connection can't established behind a gre tunnel

I have a network topological graph like this: Local box GateWay box +---------------+ +--------------------------+ |192.168.1.200 | -> |192.168.1.2 10.2.10.2 | ...
1
vote
0answers
35 views

SHA-2 issues with Verisign root on OS 10.9 Mavericks?

I'm using a Secure Site Pro with EV certificate from Verisign/Symantec, with a full SHA-2 root chain. Everything is great - except for Mac OS 10.9 (Mavericks), that complains the certificate is ...
0
votes
1answer
20 views

IIS: logging client certificate's thumbprint

On IIS 7.5, with client authentication by certificate, how to enable logging of client certificate's thumbprint (or serial, or subject dn) to IIS log?
0
votes
1answer
62 views

Root Certificate Update Solution - Windows Server 2008

We have an application attempting to run licensing checks via http over the web. The machines this software resides on are Server 2008 vm's with no domain configured. While tracking what is ...
1
vote
0answers
48 views

Why do apache SSL certificate and key need to be in /etc/pki/tls/private/?

I have an Apache 2.2 web server running on CentOS 6.6. I have a certificate and key file that functions when the files are in this directory: SSLCertificateFile ...
0
votes
1answer
52 views

SBS 2008 CSR remove .local

SBS 2008 server the third party SSL certificate has just expired!! trying to renew with a two year, SAN/Multi-Domain SSL going through the SBS Console Adding a new cert and get the CSR copy/paste ...
0
votes
0answers
28 views

HTTPS Config for symfony2

I have followed this tutorial for setting up https on an ubuntu server: https://www.digitalocean.com/community/tutorials/how-to-create-a-ssl-certificate-on-apache-for-ubuntu-14-04 I have ended up ...
0
votes
0answers
17 views

Setting up mail server that can handle multiple users for side project

I want to set up a mail server that can handle multiple users. Basically, the end application will assign each user an address, say example1@testdomain.com. The users can send emails to this address, ...
0
votes
1answer
12 views

Exchange 2013 Certificate replacement

I have an Exchange 2013 server which works just fine (almost) with all the basic functions and it uses a SAN certificate from GoDaddy. I will have to add a new name to the cert so I will have to ...
0
votes
0answers
9 views

Missing CA certificates on OpenShift WordPress cartridge [migrated]

I am trying to use a WordPress theme named "X" on an OpenShift WordPress cartridge. While installing an "Extension" through the "X" theme configuration page I get the following error: Downloading ...
0
votes
1answer
52 views

Proper method to generate a secure self-signed certificate

I have several websites on which I want to install a self-signed SSL certificate. I tried following various guides, such as this one (all provided more or less the exact same instructions). The given ...
1
vote
2answers
182 views

Postfix: Should I use snakeoil cert or my https cert?

I run a site and have a valid wildcard certificate installed for serving HTTPS pages. I just set up postfix on my Ubuntu host and by default its configuration includes: ...
0
votes
0answers
26 views

IPSEC for RDP Connections

I am stuck with a wired problem, I am trying to achieve a functionality in which if a certificate is not installed on a system that system won't able to remote desktop the server, he won't even see ...
1
vote
0answers
24 views

Nginx user uploaded SSL Certificates

I'm wondering what's the best way to let users upload their SSL certificates. I have a multitenant application based on rails/passenger/nginx and I need each user to use his own domain with his SSL ...
0
votes
1answer
52 views

TLS/SSL mail server Certificate installation for Postfix/Dovecot Mail Server Setup

I have tried to setup a my own web-server with mail server, (I am not a linux export just following some tutorials), webserver setup with Nginx,PHP-fpm and MySQL seems to be successful, then i moved ...
0
votes
2answers
128 views

Can't import certificate into Exchange 2013: Private Key Missing (I know it's there.)

I know this question has been asked before and I've gone through countless threads on here (as well as google) trying all of them. Unfortunately, I think I'm having an unrelated issue to what others ...
-2
votes
2answers
38 views

Creating a self signed certificate for demonstration purposes on Centos 7 server

I have setup my default tomcat website (tomcat 8.0.3) on a server inside my company LAN. From my work computer if I try to access the website by typing it into google chrome it is not working. The IP ...
1
vote
0answers
38 views

curl error 51 - of multiple requesting machines, only one has the issue

I have an SSL cURL request that fails from a single machine with the following error: curl: (51) SSL peer certificate or SSH remote key was not OK This error seems to have popped up overnight, and ...
1
vote
1answer
28 views

One SSL certificate for load balancing amazon instances

As the title says I want to have one SSL certificate for multiple instances in amazon AWS. The multiple instances are connected to the internet through an load balancer. To make an SSL certificate and ...
2
votes
0answers
50 views

OpenSSL cannot convert PKCS12 exported from Cisco ASA 55xx

I have exported an existing certificate+key from an ASA 5510: asa5510(config)# crypto ca export MYTRUSTSTORE pkcs12 MYPASSWORD Saved the output in a file (vpn-cisco.pkcs12), and now I am trying to ...
0
votes
1answer
38 views

Which L1K entrust certificates should be kept private?

One of our client has made an update to his SSL certificate and he did send us a procedure to update the certificate on our side. They also provided the L1Kchain.txt (that should be converted to a ...
0
votes
1answer
47 views

SSL Certificates from nginx only works in Windows IE and Chrome

I have a wildcard certificate and got it signed by AlphaSSL. I followed the steps from here: http://nginx.org/en/docs/http/configuring_https_servers.html#chains to set it up on my nginx server which ...
0
votes
0answers
20 views

Forward SSL client certification information from httpd1 to httpd2

I have two Apaches running (on the same host), one serving as a reverse proxy, and the 2nd one is my app webserver. I'm doing some kind of authentication on the proxy based on SSL Client certificate ...
0
votes
1answer
27 views

Signed SSL certificates on Zyxel USG60 web interface?

I know that you can add SSH certificates for client/server authentication for the web interface and SSL VPN, but is there a way to change the SSL cert that the web interface sends to the browser just ...