SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms

0
votes
0answers
5 views

Correct Apache reverse proxy config with SSL for Jenkins and Sonar

I am running two services behind an Apache server: Jenkins (Port 8080) and SonarQube (Port 9000). My apache config looks like this: <VirtualHost *:80> ServerName server Redirect permanent ...
1
vote
2answers
26 views

openssl verify error 7 at 1 depth lookup:certificate signature failure

I have installed OpenVPN server on CentOS. I have two clients - first under CentOS (all works), and trying connect Windows client now. I generated client's certificates with build-key utility. If I ...
1
vote
1answer
20 views

Thawte SSL123 SHA-2 Intermediate Certificate Chain, Broken?

I attempted to upgrade my one Web site, running nginx, from a SHA-1 SSL123 certificate to a SHA-2 one. Thawte's Web page with intermediate CAs has "RSA SHA-2 (under SHA-1 Root)" and "RSA SHA-2 ...
-1
votes
1answer
35 views

Can't login to dovecot using gmail as an email client

I've used this installation configure-email-server-using-postfix-dovecot When I try to use gmail as the email client (connecting to my server through port 993) I get this error Unable to establish ...
0
votes
0answers
11 views

How to get connected over IPP using SSL via AddPrinter() call?

I had three printers in my network. All of these three are using self-signed certificate. Only for one printer, I am getting error GetLastError() – 1797 – Printer Driver Unknown I had compared ...
1
vote
1answer
24 views

Squid: how to enable verification for SSL self-signed certificates

I'm using Squid 3.4.8 as a reverse proxy which is forwarding request to a specific server. The communication between Squid and the server is in HTTPS. The certificate used by the server is ...
1
vote
1answer
40 views

squid3 ssl bumping server-first with signed certificate

I'm trying to get Squid3.4 to do SSL Bumping with the server-first method. I followed this guide in alpinelinux. I'm working in explicit mode (browser configurer to Go to the proxy) and that works ...
1
vote
1answer
68 views

Block website with HTTPS?

I hope my question is on topic on Server Fault. If not, please excuse me and point me into the right direction. Is it possible to block a site with HTTPS? I have a website that I would like to make ...
-1
votes
0answers
31 views

What file to add to nginx certificate [migrated]

I got a RaspberryPi on which I want to host Owncloud. So I followed this tutorial and it works well except the SSL part. I don't want to use self signed. I set my own subdomain and it works without ...
1
vote
0answers
58 views

Are there any modern browser/machine that not accept class 1 SSL certificate

I'm considering to buy a SSL certificate from external Certificate Authority to my web service which does not involve e-commerce. So I was planning to request the simplest class 1 cert to eliminate ...
8
votes
2answers
366 views

HTTPS warning: works on desktop, warning on mobile

I installed a wildcard SSL certificate (*.vht.com) for my work and accessing the following website in chrome (or any desktop browser) https://tours.vht.com/fsviewer3/fss2.html works, but when trying ...
-3
votes
2answers
59 views

Accidently removed localhost.crt SSL in Centos 6 - what can i do?

So I just got my certificate issued from Digicert, and since there was other unused/old files in /etc/ssl/ i marked and removed, and accidently also removed localhost.crt. Now I cannot start my web ...
1
vote
0answers
27 views

SSL causes timeout, my fault or startSSL's?

I am currently using a free startSSL certificate for my webserver at https://website.co.uk/ but for some reason it gave me Error code: ERR_CONNECTION_TIMED_OUT (On chrome), assuming it was my fault I ...
15
votes
4answers
1k views

Where do companies typically store SSL certificates for future use?

We recently bought a wildcard SSL cert for our domain. We converted all of the certs to a Java keystore, but now we are asking ourselves where we should store these for later use. Do people use ...
5
votes
1answer
311 views

What SSL Certificate works WITHOUT an intermediate certificate?

We have a need to deploy a server app that has its own SSL certificate built in. This will get rolled to an unknown number of servers, that will go up and down. We can generate this certificate using ...
-3
votes
0answers
45 views

How to install a SSL certificate on Ubuntu Server?

I need to make the connection between my origin server and CDN (Akamai) secured. I generated and installed a self signed certificate at my origin server (which hosts www.something.com.au) using the ...
0
votes
1answer
54 views

I can't upload server certificate on AWS IAM

I got AWS iam working on my server, and trying to upload some certificates: aws iam upload-server-certificate --server-certificate-name domain2014 --certificate-body ...
2
votes
1answer
34 views

How to add an existing key to the certutil key database

I have created an SSL keypair with OpenSSL. I uploaded the Certificate Signing Request to my SSL Certificate provider and got my certificate files. I added my certificate and the required CA ...
2
votes
1answer
30 views

Dovecot SSL Certificate is not accepted

I have certificates issued from StartSSL, which is a trusted authority for certificates, and my websites work with its certificates with no problems and no complaints from all browsers about any trust ...
-2
votes
0answers
31 views

Why is this SSLerror coming on sending request to any subdomain like sandbox.example.com? [migrated]

>>> import requests >>> requests.get("https://api.example.com/index.php") <Response [200]> >>> requests.get("https://sandbox.example.com/index.php") Traceback (most ...
0
votes
1answer
27 views

How do I configure nginx on RHEL to recognize root SSL certificates of external sites?

Setup: I have a nginx reverse proxy that is a load balancer for ASP.NET applications. The problem is when ASP.NET application tries to access an external application, the SSL handshake fails. I think ...
0
votes
1answer
37 views

AWS EC2 SSL Server certificate does not match the URL

After uploading the certificate to iam, when I visit https://www.mywebsite.com I get this error The identity of this website has not been verified. • Server's certificate does not match the URL. ...
4
votes
1answer
64 views

How do I work out my certificate chain order manually?

Lets say I start with a certificate. Using openssl I can print it out like this: openssl x509 -in cert.pem -text -noout And I'll get some output such as Validity, Issuer and Subject along with ...
0
votes
2answers
63 views

Dockerfile separation of concerns for a secure apache httpd server with respect to SSL certification files

Issue: In a non-docker solution, the SSL certificates can be located in /etc/pki/CA/.... and with references to these in /etc/httpd/conf.d/*.conf files. How must these SSL certificates be ...
6
votes
1answer
628 views

Why does my wildcard SSL certificate cause a domain mismatch error on a second level subdomain?

I have a server https://www.groups.example.com - in FireFox I get the "This Connection is Untrusted" message and the "technical details" say www.groups.example.com uses an invalid security ...
2
votes
1answer
77 views

Two SSL virtualhosts on same IP with Apache

I have an apache server with one ip address. (on a debian server). I have several virtualhosts for http and one virtualhost for https one vhost, redirect traffic to the https vhost and this works ...
1
vote
2answers
74 views

Setting up SSL with a redundant connection

My situation: We have two servers, Server A and Server B. Server A has a proxy configured, which serves data (over SSL) from Server B. Server B is reachable via 1.1.1.1 (one.server.example.com) and ...
1
vote
1answer
21 views

OpenVPN client from multidomain SSL host

My server uses it's server certificate when connecting as a client to another server. webserver - server1.mydomain.com openvpnserver - server2.mydomain.com Server1 is a web server with SSL ...
1
vote
2answers
147 views

Curl with custom certificate

I 'd like curl to work with sites signed by goDaddy: If I call curl mypage.com/bla I am getting a certificate verification error. I tried getting the ca certificate with this snippet: echo | ...
0
votes
0answers
12 views

MissMatched Address Certificate Error

I have been trying to set up an Apache server for testing purposes in a virtual environment and I have been having some troubles. I want to set up SSL in Apache so I created my own certificate ...
0
votes
1answer
90 views

Can't get Network Solutions Certificate chain working with EC2 Elastic Load Balancer

I have a certificate file provided to me which is a wildcard domain name. It comes as both a key and a crt file. No other files were provided. I'm having trouble getting it to work correctly with ...
0
votes
0answers
26 views

Oracle Wallet Add Trusted Intermediate CA?

I have a Oracle Wallet for use with a Oracle HTTP Server. I am trying to update my Trusted Certs in the wallet as they have changed for my client authentication for DOD CACs (Smart Cards). I have ...
0
votes
0answers
21 views

Apache not checking crl for revoked certificates

I have the same problem as is described on question 23939112. I run my own CA authority. I created a certificate signed by my CA, with I can to login to web pages. Now, I'm testing revocation. I ...
1
vote
1answer
87 views

MySQL and SSL with -sha256

I'm trying to create some certificate to use with MySQL and everything works fine if I use the sha1 algorithm. If I add the -sha256 switch or -sha384 I can NOT connect to MySQL!. I get this error: ...
0
votes
1answer
54 views

IIS 7 Still showing old certificate

I installed an SSL certificate in my IIS 7 (Windows Server 2008). I deleted the expired certificate but still showing when i access from any browser. I deleted the expired certificate. I Installed ...
0
votes
0answers
38 views

VSFTP authentication with client certificate

I have a VPS Box running on CentOS 6.5 with vsftpd. I have setup a user account for login with username/password. My customer now sent me a id_rsa_2048.pub key which he wants to use for ...
0
votes
0answers
21 views

How Can I Test If Another Server Certificate is Trusted?

My certificate expired on my server (Server A) and I needed to generate a new one. I've verified the new certificate is updated on Server A, but now my CAS server is timing out when Server A attempts ...
0
votes
2answers
132 views

Nginx sslv3 poodle disable

I tried setup SSL cert without SSLv3 in my nginx, but SSL Labs say, my server have SSLv3 how to disable it. My config: add_header Strict-Transport-Security max-age=31536000; add_header ...
0
votes
4answers
119 views

My Certificate doesn't work on all machines

I installed Centos7 on my new brand server. I use LDAP as authentication. I deployed my certificate on all server and LDAPS is working with RHEL5, Debian or SOLARIS On Centos7, I 've got problem ...
-2
votes
1answer
54 views

SSL on Heroku, error add cert: “not valid. The 'Not After' date restriction on the certificate has passed.” [closed]

I purchased a wildcard SSL cert from Gandi.net many months ago, and used it immediately after purchase successfully on other hosting services than Heroku. I now need to secure a new subdomain on a ...
1
vote
0answers
34 views

Owncloud - Proxy changes certificate

I'm running an owncloud server 7.0.2 with apache(Ubuntu host) and configured it to use a self-signed ssl certificate. Everything works fine on my home-PC On an other machine I would like to use the ...
0
votes
1answer
38 views

Extract correct format of key and cert files from .p12 file for a SSL MEAN App?

I'm writing a MEAN app for my university department on my Mac development machine. I started with the boilerplate from mean.io. In the configuration file config/env/all.js, there is a section for ...
0
votes
1answer
72 views

Secure Domain.nl , Alias of SSL Certified Domain.com not working with .com's SSL Certificate [closed]

I have a .com site that is https with a Comodo certificate via Dreamhost. I also have https://cdn.domain.com with a unique ip address to make it play nice with MaxCDN. The site is run in two languages ...
0
votes
1answer
57 views

AH01896: Unable to determine list of acceptable CA certificates for client authentication in Apache v2.4 SSLCACertificatePath directive

I am using Apache v2.4 In ssl.conf file I am using SSLCACertificatePath directive with parameter like /var/dat/certificates/ssl.intermediate where ssl.intermediate is an empty directory with ...
0
votes
0answers
155 views

Enable secure port 9091 of Openfire server

Is it possible to import .crt and gd-g2_iis_intermediates.p7b certificates in to the keystore of Openfire 3.9.3 XMPP server in order to make SSL ports enabled. I received .crt and ...
2
votes
1answer
34 views

How can I install a certificate into IIS on machine the cert request wasn't generated from?

I generated a request from a production web server, then gave it to my boss who sent it off and then emailed me back the 4 .crt files he received. On another server (our staging server) I installed ...
6
votes
2answers
132 views

SSL Certificate management with Powershell DSC

I have a third-party issued certificate that I need to ensure is running on all targets in a given domain. Is there a way to ensure this certificate is installed by way of DSC?
0
votes
0answers
51 views

Install an SSL certificate for a subdomain on a server that already has an EV SSL certificate (CentOS 5.11)

I am maintaining a site on a server that is currently running: CentOS release 5.11 (Final) Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 PHP/5.3.28 The server is ...
0
votes
1answer
64 views

ELB and SSLInsecureRenegotiation

I currently have SSLInsecureRenegotiation set to off on my Apache 2.4 Amazon Linux server, but I am still failing over at SSLLabs (Secure Client-Initiated Renegotiation SUPPORTED). Do you know how ...
0
votes
1answer
44 views

ELB and Backend Authentication with Apache 2.4

I tried looking at AWS guides, and other things but can't seem to figure this one out. When using ELB there is a backend authentication option. I want to enable it, but I am not sure what ...