SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

learn more… | top users | synonyms (1)

0
votes
1answer
8 views

Cannot load modules/mod_ssl.so into server: /etc/httpd/modules/mod_ssl.so: undefined symbol: ap_array_str_contains

I am trying to run Apache on Amazon Linux with SSL for my website and I configured all ssl prerequisites. But when I start the Apache it throws the error saying: Starting httpd: httpd: Syntax error ...
0
votes
2answers
27 views

Nginx redirects: enforce subdomain and SSL

There are a lot of questions on ServerFault that cover parts of this question, but I'm having a hard time piecing them together. I have a fresh nginx server with a Wildcard SSL cert installed. All ...
0
votes
0answers
26 views

How do I renew a domain SSL using Encrypt Now on Virtualmin? [on hold]

I am running Debian with Virtualmin 5.03 which has the ability to enable the Let's Encrypt SSL on a domain. The problem is that I didn't set the auto renew to a specific number of months. Being set to ...
2
votes
2answers
29 views

Centos7 don't trust certificate issued by lets encrypt

I have apache nginx server running with https:// correctly configured with letsencrypt certificate. I can connect with firefox, chrome, ie. All of them reports connection as secure. However centos7 ...
0
votes
1answer
24 views

Convert Crt and Key to Pfx

I made a new certificate with ZeroSSL and now I have a crt file and a Key file for the domain. I'm using no tools because I would like to get the process runing first by hand. To use it with IIS 8.5 ...
-1
votes
1answer
16 views

SyntaxError at phyton script [closed]

I try to run an python script but I get errors. File "./ics2owncloud.py", line 41 r = requests.put('%s/%s.ics' % (base_url, uid) verify=False), SyntaxError: invalid syntax How must i add the ...
0
votes
1answer
15 views

Certificate SAN support regexp stemming?

Searched on this, but can't find any clear answer - can a certificate SAN contain a name like "citrix*.domain.com", to permit use with citrixdirector.domain.com and citrixprod.domain.com, for example?
-2
votes
1answer
11 views

Certbot file '/etc/apache2/insert_cert_file_path' does not exist or is empty [closed]

I am trying to add ssl certificate in my VPS which runs Ubuntu 16.04 and LAMP. When i run Certbot the following error came up. The problem is when is try to go to rummillet-le-ssl.conf the file ...
0
votes
0answers
8 views

How to download Symantec Managed PKI ssl certificate using wget or any other unix command [closed]

I usually download the Symantec SSL certificate from Symantec Managed PKI site to my local machine and upload to the server. I would like to directly download SSL certificate from Symantec Managed PKI ...
1
vote
0answers
13 views

PCI Scan failed with SSL certificate with wrong name

I've an IIS server which is hosted around 250 + sites. I am running a PCI scan against one website and its failing with these 2 errors: Common name of SSL certificate presented on this server is for ...
0
votes
1answer
10 views

HTTP Strict Transport Security global cert refresh

So, I probably screwed up when I set up HSTS and didn't refresh my certificate in time. Browsers now have a cache of my old certificate and don't seem to be contacting my server to request a fresh ...
0
votes
2answers
13 views

Can I use Public-Key-Pins with LetsEncrypt?

Can I setup Public-Key-Pins when I setup a cronjob to renew the LetsEncrypt certificate every 30 days? If the certificate is renewed then the Public-Key-Pin is also renewed right?
-1
votes
1answer
36 views

This server's certificate chain is incomplete

After running a test on SSL Server Test, I got This server's certificate chain is incomplete. Later I read in orange: Chain issues Incomplete, Contains anchor. I tried to understand what was wrong ...
0
votes
0answers
20 views

Trust certificate for OCSP, but not for client certs?

According to the nginx docs, you can specify certificates to be trusted for both OCSP response and client certificate verification: ssl_trusted_certificate / ssl_client_certificate Specifies ...
2
votes
1answer
33 views

Using my own private key for Let's Encrypt's certbot due to HPKP

I am currently using certificates from StartCom for my hosted virtual server. Since StartCom's OCSP servers are quite unstable at times, I was considering moving to Let's Encrypt. Their service is ...
0
votes
1answer
44 views

Full end to end encryption with AWS Elastic Load Balancer, Nginx and SSL

You will see a lot of places on the web telling you the way to setup SSL with an AWS ELB is to set up a certificate on the load balancer and then forward traffic from port 443 to 80 so that traffic ...
-1
votes
0answers
12 views

apache on centos not asking for client certificates

I have apache 2.4 on CentOS 7, and I'm trying to use client certificates for authentication. I have the site using comodo positive SSL, and I want to use self signed certs for client authentication, ...
0
votes
0answers
30 views

AD LDS - Can't enable LDAP over SSL

I have basically read some kilometers of documentation and I still can't enable LDAPS on AD LDS... I installed a self-signed certificate and a certification authority following for instance this link ...
0
votes
0answers
53 views

Change of Server (IP Address) Affects Access to the server from Domain SSL Certificated by LetsEncrypt

According to many answers the Certificate is not bound to the IP address but bound to the domain. But still I can not reach the application by using the domain. Is there a way to notify the DNS that ...
1
vote
0answers
66 views

Squid reverse proxy with multiple SSL-certificates via SNI

Does squid Proxy Server offer the possibility to supply multiple SSL certificates to it? I have a server with various virtual machines running Apache web servers for different customers. As an ...
0
votes
2answers
33 views

SSL wildcard pattern not working when prefixing URL with “www.”

If I have a certificate which is issued to *.abc.dk, I can get to the site with for example vm.abc.dk fine (changes automatically to https://www.vm.abc.dk) but when I try to write www.vm.abc.dk I get ...
1
vote
1answer
48 views

Error in converting crt certificate to pem

I generated a CA certificate using easyRSA and I intend to use it with FreeRadius to use starttls, now I found that the FreeRadius uses pem format for certificates, but in my case the cert is in ...
-1
votes
1answer
32 views

Force use of new SSL certificate?

I recently let an ssl certificate expire. I then purchased and installed a new certificate (didn't renew the old one do to the cost of renewing an ev cert vs a new basic cert). Everything works fine, ...
-1
votes
1answer
19 views

Letsencrypt and SRV records

I have the following setup: A Domain example.com 2 Servers: server1.example.com and server2.example.com I would like to use srv records to have expressive domain names for each of my services. For ...
-1
votes
2answers
19 views

Apache SSL not working in Centos 6.5

I have a simple LAMP stack with httpd/Apache installed on Centos 6.5. I've set my vhost up in /etc/httpd/sites-available/acute.conf like so: <VirtualHost *:80> ServerName acutemedical.co ...
1
vote
1answer
61 views

Active Directory, wildcard security certificate, and remote access

Is there any way to secure an entire Active Directory (AD) domain using a single trusted, third-party Certification Authority (CA)-signed wildcard security certificate so that remote access will be ...
-4
votes
1answer
33 views

Wildcard certificate supporting both www and non-www domain [closed]

I have a GeoTrust wildcard certificate installed on my website www.example.com. It is working fine with https://www.example.com but it is not supporting https://example.com. It shows a security ...
2
votes
1answer
35 views

MySQL SSL Connection

I'm trying set ssl connection with MySQL Server. I've read this and many more articles https://dev.mysql.com/doc/refman/5.7/en/using-secure-connections.html There is one thing i still don't know, ...
0
votes
2answers
33 views

Nginx working with SSL but Private Key mismatch error

Used to work I bought a Rapid SSL from name.com and used the below command to generate the .csr and .key files: sudo openssl req -nodes -days 365 -newkey rsa:2048 -keyout /etc/nginx/ssl/server.key -...
0
votes
1answer
27 views

Can't set up Let's Encrypt certificate with Apache 2.4, “invalid response” according to Chrome

I'm trying to set up Let's Encrypt certificates on my server, but so far everything that can go wrong has gone wrong. I downloaded the certificates without having the script mess with my Apache config ...
1
vote
0answers
27 views

Windows Server 2008 R2 w/ IIS 7.5 w/ Autodiscover.xml, but SAN-Certificate causes “Target Principle name is incorrect”

Outlook 365 finds the account through autodiscover without any problems, but warns about "Target Principle name is incorrect" (CN=eposthub.de), when adding an account like anything@nabil-redmann.de ...
6
votes
2answers
154 views

Why does OpenVPN give the error: “unsupported certificate purpose” for an intermediate certificate?

EDIT: I'm really sorry to have to say that the problem has magically fixed itself and I have no idea why. In response to one of the answers, I removed all EKU from the CA chain and it didn't work. ...
0
votes
0answers
16 views

setting virtualmin SSL certificates for Dovecot and PostFix fo each domain

In Virtualmin, If I apply one of the domain's certificates to dovecot or PostFix via Server configuration > Mange SSL Certificates > Copy to Dovecot / PostFix, The certificate is copied to the ...
0
votes
1answer
51 views

ldapsearch can't connect to ldaps

I am using a Centos 6.6 and i'm trying to use ldapsearch to connect to my windows ad server and i can't connect using port 636. I exported the CA root certificate of my ad server in base64 and added ...
0
votes
1answer
16 views

Composer is having ssl issues with private repository on osx

there are many similar questions but nothing that helps my cas. We are using a custom self hosted composer repo, for internal libraries. It all worked perfectly fine untill we updated the SSL ...
0
votes
0answers
18 views

Automate SSL certificate signing with Microsoft Active Directory Certificate Services

I would like to sign SSL certificates from a script with Microsoft Active Directory Certificate Services. For authentication I managed to make GSSAPI/kerberos to work. kinit myuser@EXAMPLE.COM curl -...
0
votes
1answer
28 views

How can i resolve this SSL report score?

Report: The server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mitigate. The server supports only older protocols, but not the current best TLS 1.2. The server accepts RC4 ...
0
votes
1answer
56 views

Signing/Generating SSL Certificates for ElasticSearch (search-guard)

I am trying to build my own ElasticSearch cluster and I decided to use an open source plugin called Search Guard. It requires generation of client and host/node certificates. In its demo there is a ...
0
votes
0answers
25 views

Internal Hosting of SSL Certificates

I have a number of SSL certificates (*.mydomain.com, myotherdomain.com), currently when setting up new environments / products I am manually adding the SSL certificate to store on the new server and ...
1
vote
1answer
76 views

E-mail address for Certificate Signing Request

Should an e-mail address in a Certificate Signing Request (CSR) for a server with a domain name aaa.bbb.ccc.ddd contain exactly all domain zones or it can be MyName@ccc.ddd (in other words, just an ...
0
votes
1answer
57 views

Error during openssl s_client connection, SSL alert number 48

I am attempting to connect to a third party via CURL/PHP mainly, but since it doesn't work, am resorting to more verbose tools to diagnose the problem. If I try the following, on Ubuntu 14.04 LTS: ...
1
vote
1answer
51 views

Two different SSL Sites with same name possible in Apache?

I just upgraded from debian 7 to debian 8 (apache 2.4) box called debian.domain.com I have Request Tracker, a helpdesk software, and i want to run it from https://helpdesk.domain.com (i have a valid ...
0
votes
0answers
51 views

stunnel won't verify client certificate as expected

I'm trying to set up stunnel to provide a TLS wrapper to an HTTP service that doesn't natively support TLS. I have this working well without using TLS client certificates. When adding the client ...
0
votes
0answers
12 views

Maintenance access for HTTPS addresses without a certificate

I have an Apache configured to show a status 500 page when a virtual host is disabled, and this is working correctly for port 80:HTTP But I get this error for HTTPS AH02240: Server should be SSL-...
0
votes
1answer
30 views

Disabled RC4 and SSL v3 with existing cert from letsencrypt

I can renew a cert like this: certbot-auto renew --apache but what parameters do I pass when I want to disable the less secure RC4 and SSL v3? I would assume the information I need is here, but I ...
0
votes
0answers
20 views

Haproxy with mixed modes: SSL offloading and passthrough

I would like to implement the following simple scenario, all the tests I have done unfortunately have failed (bad SSL requests, error 502...): Using SSL passthrough for the top level domain (...
0
votes
0answers
32 views

How install SSL on two sites running on port 80 in IIS 7

I have a website running a simple PHP page in IIS and I have another program installed in windows. This other program is installed as a service and also runs on port 80 and can also be accessed using ...
0
votes
2answers
31 views

After Setting Up SSL for one vhost https://sitename.com shows Apache 2 Test Page

Thank you in advance for your support! We have been working on this for a couple days, lots of research and no luck with a solution. Our web server is running on centos6 with apache (httpd-2.2.15-53)...
0
votes
1answer
15 views

Should I worry about outages upon auto-rollover of ADFS token certificates?

As far as I understand ADFS self-manages the token signing and decryption certificates unless configured otherwise so in my current situation (see attached picture) there should be no need to do ...
0
votes
1answer
32 views

Certificate Not showing on the Web console

On a Windows 2008 R2, with an AD level of Windows 2008 R2 We need to create a cert to allow user/admin to enroll via the Web service page (https://CA/certsrv/) On CA, right-click Certificate template ...