SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

learn more… | top users | synonyms (1)

0
votes
2answers
16 views

SSL wildcard pattern not working when prefixing URL with “www.”

If I have a certificate which is issued to *.abc.dk, I can get to the site with for example vm.abc.dk fine (changes automatically to https://www.vm.abc.dk) but when I try to write www.vm.abc.dk I get ...
0
votes
0answers
10 views

When is start to use a reverse proxy server my ssl certificate gets invalid,do i need a second ssl certificate for the reverse proxy? [on hold]

my site is protected by cloudflare,i have a ssl certificate from comodo ca. I have a server and from now a proxy server but when i switch my proxy on than cloudflar shows me error 523 what meen my ...
1
vote
1answer
38 views

Error in converting crt certificate to pem

I generated a CA certificate using easyRSA and I intend to use it with FreeRadius to use starttls, now I found that the FreeRadius uses pem format for certificates, but in my case the cert is in ...
-1
votes
1answer
27 views

Force use of new SSL certificate?

I recently let an ssl certificate expire. I then purchased and installed a new certificate (didn't renew the old one do to the cost of renewing an ev cert vs a new basic cert). Everything works fine, ...
-1
votes
1answer
16 views

Letsencrypt and SRV records

I have the following setup: A Domain example.com 2 Servers: server1.example.com and server2.example.com I would like to use srv records to have expressive domain names for each of my services. For ...
-1
votes
2answers
10 views

Apache SSL not working in Centos 6.5

I have a simple LAMP stack with httpd/Apache installed on Centos 6.5. I've set my vhost up in /etc/httpd/sites-available/acute.conf like so: <VirtualHost *:80> ServerName acutemedical.co ...
1
vote
0answers
14 views

Active Directory, wildcard security certificate, and remote access

Is there any way to secure an entire Active Directory (AD) domain using a single trusted, third-party Certification Authority (CA)-signed wildcard security certificate so that remote access will be ...
-3
votes
1answer
29 views

Wildcard certificate supporting both www and non-www domain

I have a GeoTrust wildcard certificate installed on my website www.example.com. It is working fine with https://www.example.com but it is not supporting https://example.com. It shows a security ...
-3
votes
0answers
25 views

Website responds slow after change to HTTPS [on hold]

My website used to be run without SSL security, but after changing to HTTPS, my server reacts slow. Every page change takes a few seconds to go, but works fine... Have i mis-set a setting? CentOS ...
2
votes
1answer
30 views

MySQL SSL Connection

I'm trying set ssl connection with MySQL Server. I've read this and many more articles https://dev.mysql.com/doc/refman/5.7/en/using-secure-connections.html There is one thing i still don't know, ...
-1
votes
0answers
20 views

Get SSL password key [on hold]

I want to install a certificat to a tomcat server, i use spring boot (tomcat). It's the first time i do that. I see in spring boot they tw server.ssl.key-store-password: your_password server.ssl.key-...
0
votes
2answers
22 views

Nginx working with SSL but Private Key mismatch error

Used to work I bought a Rapid SSL from name.com and used the below command to generate the .csr and .key files: sudo openssl req -nodes -days 365 -newkey rsa:2048 -keyout /etc/nginx/ssl/server.key -...
0
votes
0answers
14 views

Can't set up Let's Encrypt certificate with Apache 2.4, “invalid response” according to Chrome

I'm trying to set up Let's Encrypt certificates on my server, but so far everything that can go wrong has gone wrong. I downloaded the certificates without having the script mess with my Apache config ...
1
vote
0answers
26 views

Windows Server 2008 R2 w/ IIS 7.5 w/ Autodiscover.xml, but SAN-Certificate causes “Target Principle name is incorrect”

Outlook 365 finds the account through autodiscover without any problems, but warns about "Target Principle name is incorrect" (CN=eposthub.de), when adding an account like anything@nabil-redmann.de ...
5
votes
2answers
80 views

Why does OpenVPN give the error: “unsupported certificate purpose” for an intermediate certificate?

When trying to connect an OpenVPN client (Android or Windows 7/10) to my test server, I receive the following error: VERIFY ERROR: depth=1, error=unsupported certificate purpose: C=CA, ST=QC, L=...
0
votes
0answers
10 views

setting virtualmin SSL certificates for Dovecot and PostFix fo each domain

In Virtualmin, If I apply one of the domain's certificates to dovecot or PostFix via Server configuration > Mange SSL Certificates > Copy to Dovecot / PostFix, The certificate is copied to the ...
-1
votes
0answers
18 views

My website is being redirected to http automatically [on hold]

After I installed a standard godaddy SSL certificate, and even if I started my URL with https, the website will immediately and automatically redirected to the http version of my website. I tried to ...
0
votes
1answer
19 views

ldapsearch can't connect to ldaps

I am using a Centos 6.6 and i'm trying to use ldapsearch to connect to my windows ad server and i can't connect using port 636. I exported the CA root certificate of my ad server in base64 and added ...
0
votes
1answer
13 views

Composer is having ssl issues with private repository on osx

there are many similar questions but nothing that helps my cas. We are using a custom self hosted composer repo, for internal libraries. It all worked perfectly fine untill we updated the SSL ...
0
votes
0answers
13 views

Automate SSL certificate signing with Microsoft Active Directory Certificate Services

I would like to sign SSL certificates from a script with Microsoft Active Directory Certificate Services. For authentication I managed to make GSSAPI/kerberos to work. kinit myuser@EXAMPLE.COM curl -...
0
votes
1answer
23 views

How can i resolve this SSL report score?

Report: The server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mitigate. The server supports only older protocols, but not the current best TLS 1.2. The server accepts RC4 ...
0
votes
1answer
21 views

Signing/Generating SSL Certificates for ElasticSearch (search-guard)

I am trying to build my own ElasticSearch cluster and I decided to use an open source plugin called Search Guard. It requires generation of client and host/node certificates. In its demo there is a ...
0
votes
0answers
25 views

Internal Hosting of SSL Certificates

I have a number of SSL certificates (*.mydomain.com, myotherdomain.com), currently when setting up new environments / products I am manually adding the SSL certificate to store on the new server and ...
1
vote
1answer
73 views

E-mail address for Certificate Signing Request

Should an e-mail address in a Certificate Signing Request (CSR) for a server with a domain name aaa.bbb.ccc.ddd contain exactly all domain zones or it can be MyName@ccc.ddd (in other words, just an ...
0
votes
1answer
27 views

Error during openssl s_client connection, SSL alert number 48

I am attempting to connect to a third party via CURL/PHP mainly, but since it doesn't work, am resorting to more verbose tools to diagnose the problem. If I try the following, on Ubuntu 14.04 LTS: ...
1
vote
1answer
49 views

Two different SSL Sites with same name possible in Apache?

I just upgraded from debian 7 to debian 8 (apache 2.4) box called debian.domain.com I have Request Tracker, a helpdesk software, and i want to run it from https://helpdesk.domain.com (i have a valid ...
0
votes
0answers
28 views

stunnel won't verify client certificate as expected

I'm trying to set up stunnel to provide a TLS wrapper to an HTTP service that doesn't natively support TLS. I have this working well without using TLS client certificates. When adding the client ...
0
votes
0answers
11 views

Maintenance access for HTTPS addresses without a certificate

I have an Apache configured to show a status 500 page when a virtual host is disabled, and this is working correctly for port 80:HTTP But I get this error for HTTPS AH02240: Server should be SSL-...
0
votes
1answer
19 views

Disabled RC4 and SSL v3 with existing cert from letsencrypt

I can renew a cert like this: certbot-auto renew --apache but what parameters do I pass when I want to disable the less secure RC4 and SSL v3? I would assume the information I need is here, but I ...
0
votes
0answers
17 views

Haproxy with mixed modes: SSL offloading and passthrough

I would like to implement the following simple scenario, all the tests I have done unfortunately have failed (bad SSL requests, error 502...): Using SSL passthrough for the top level domain (...
0
votes
0answers
32 views

How install SSL on two sites running on port 80 in IIS 7

I have a website running a simple PHP page in IIS and I have another program installed in windows. This other program is installed as a service and also runs on port 80 and can also be accessed using ...
0
votes
2answers
27 views

After Setting Up SSL for one vhost https://sitename.com shows Apache 2 Test Page

Thank you in advance for your support! We have been working on this for a couple days, lots of research and no luck with a solution. Our web server is running on centos6 with apache (httpd-2.2.15-53)...
0
votes
1answer
12 views

Should I worry about outages upon auto-rollover of ADFS token certificates?

As far as I understand ADFS self-manages the token signing and decryption certificates unless configured otherwise so in my current situation (see attached picture) there should be no need to do ...
0
votes
1answer
26 views

Certificate Not showing on the Web console

On a Windows 2008 R2, with an AD level of Windows 2008 R2 We need to create a cert to allow user/admin to enroll via the Web service page (https://CA/certsrv/) On CA, right-click Certificate template ...
1
vote
1answer
35 views

OpenSSL - Add Subject Alternate Name (SAN) when signing with CA

How can I add a Subject Alternate Name when signing a certificate request using OpenSSL (in Windows if that matters)? I've generated a basic certificate signing request (CSR) from the IIS interface. ...
0
votes
0answers
21 views

Squid SSL Bump and EV certificates

I have a Squid proxy, with SSL-bump enabled, and ssl_crtd running. I have then pushed a group policy so the CA root certificate has a "Certificate Policy" with a specific OID x, and then added this ...
0
votes
0answers
15 views

SSL Cipher Mismatch Tomcat RHEL

I'm deploying a Tomcat web server with an SSL certificate. I've created the keystore and have received and installed the certificate back from the certificate vendor. However, I receive '...
0
votes
1answer
43 views

openvpn certificate error prevents from connection

I try to connect with Tunnelblick to my private VPN, but I get the following error message. 2016-05-24 12:18:07 VERIFY ERROR: depth=1, error=unable to get issuer certificate: C=IL, O=StartCom Ltd., ...
0
votes
0answers
27 views

Parse Server SSL

I have setup Parse Server on Windows platform. I want to use SSL so that I can access Parse API using https. Is there a way to use SSL without using reverse proxy? I just want to cut one step to ...
0
votes
3answers
65 views

Should I use a single SSL certificate for example.com and www.example.com?

I have a website (hosted by Amazon S3) which redirects example.com to www.example.com. I am setting up an Amazon CloudFront distribution for this website, and would like the same redirection to work ...
0
votes
1answer
68 views

how do I covert a certificate with extension .cer to .asc

I have a certificate file (with extension .cer) that has content which looks something like this. -----BEGIN CERTIFICATE----- lots of data here -----END CERTIFICATE----- It is our signing ...
0
votes
0answers
47 views

Domain is issuing trust certificate instead of root authority

I was running into an issue on Windows Server 2012 R2 where any website I visited was throwing a untrusted certificate error. I circumvented this issue by copying the certifications from another ...
0
votes
1answer
63 views

Unable to get StartSSL trust chain to work

I received a free SSL certificate from StartSSL which I installed on my server. It works fine on desktop browsers and such but as soon as I open the website on my phone it says "NET::...
0
votes
1answer
94 views

MQTT certificates verification fails

I'm been desperately trying to get my MQTT clients to connect to my MQTT broker which is set up with a certificate from a CA (Letsencrypt). To be able to get the CA certificate, I've used the ...
0
votes
0answers
20 views

Can I perform delegation for azure cloud with wildcard domain certificate or i need a server sertificate?

I currently have a windows adfs server installed locally with wildcard domain certificate. I am planning to setup Azure Cloud ADFS with a sub-domain of the wildcard domain certificate that i own. ...
0
votes
0answers
37 views

Check if RHEL certs have been updated

I have a sample .pem file placed in /etc/pki/ca-trust/source/anchors, and I have run update-ca-trust, but I'm not sure how I can check if the command actually worked. I tried to cat /etc/pki/tls/certs/...
0
votes
2answers
140 views

Using Lets Encrypt certificates with openLDAP

I've been running an openLDAP server for several months now and we use it to authenticate for a number of applications. A previous staff member set up the server and it doesn't seem to be a standard ...
0
votes
0answers
41 views

Unable to change ssl settings for custom domain on app engine

When I attempt to change the ssl setting for my custom domains, the dash board were unable to load the "Select SSL serving mode", and the save button is disabled. I've also noticed in Inspector that ...
1
vote
1answer
122 views

Cloudflare SSL - CACert cert file?

I have decided to generate SSL for IIS. I have own CSR and private key. The SSL generated by CloudFlare is in pcks7 format. I would like to to combine it into one pfx formate in order to import it in ...
0
votes
0answers
15 views

How can I update certs on RHEL with cloud init?

The cloud-init documentation says that this syntax ca-certs: trusted: - | -----BEGIN CERTIFICATE----- THIS IS A TEST -----END CERTIFICATE----- will update certs. This code works just ...