SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms

0
votes
0answers
6 views

How to specify a client certificate to psql?

I have a Postgres server with a user dev which requires a client certificate to log in. I'm using the command psql "sslmode=require user=dev host=db.prod", which gives me psql: FATAL: connection ...
0
votes
0answers
10 views

ocserv: How to identify a connecting user?

My ocserv auth mod is certificate. I knew from the sample config file that ocserv could provide a connect-script which has REASON, USERNAME, GROUPNAME, HOSTNAME, DEVICE, IP_REAL, IP_LOCAL, IP_REMOTE ...
0
votes
0answers
9 views

stuck on getting ssl to work on vps with centos 6 and plesk

I ordered an ssl certicate and installed it via plesk on the vps. the private key and certificate are in txt format which i pasted in the fields in plesk. I've 2 domains hosted on the vps on 1 ip, i ...
0
votes
0answers
12 views

win sbs 2011 and ssl certificate

I have an SBS 2011 that has a self signed certificate and RWA enabled. I have imported the certificate (found on c:\Users\Public\Public Downloads) on an outside computer and when I try to access ...
0
votes
1answer
27 views

Can't get Nginx to serve correct certificate chain

I'm trying to set up Nginx (1.4.6-1ubuntu3.1) with a StartSSL certificate. I've been following the documentation to get it working, but Nginx only serves the server certificate, not the intermediate. ...
0
votes
2answers
45 views

Renew vs. new purchase of SSL wildcard certificate

I have an existing SSL wildcard certificate at GoDaddy that expires in a few months. Traditionally we would renew this certificate and, in doing so, begin the countdown towards the existing ...
0
votes
0answers
20 views

SSL certificate for sql-server on ec2

I have an ec2 node provisioned to host mssql server. I'm trying to request and install an ssl certificate for this node so I can securely connect to it but I can't get the certificate to appear in the ...
0
votes
0answers
11 views

Using Windows Server 2012 CA to provide internal certificates

I want to use Windows AD CS in order to provide any web interface internal to my company with SSL encryption and trust certification. What I want is to make the HTTPS interfaces of webapps, switches ...
4
votes
3answers
121 views

Displaying a remote SSL certificate details using CLI tools

In Chrome, clicking on the green HTTPS lock icon opens a window with the certificate details: When I tried the same with cURL, I got only some of the information: $ curl -vvI https://gnupg.org * ...
0
votes
2answers
24 views

vsftpd does not give a valid certificate using CA cert.

When setting up vsftpd we have problems with it not providing a trusted connection us a basic pem certificate container using just our private key and certificate. We created our pem file with the ...
1
vote
0answers
29 views

HPOM Java GUI, multiple users connecting to different servers from Citrix sessions on the same server possible?

I have an app (HPOM Java GUI) running on a 2008 R2 Xenapp 6 box that employs client certificates for encrypting connections to the HPOM server. I have 2 different sets of users who will use this app ...
1
vote
1answer
33 views

selfsigned certificate with domain name for a webservice server

I have 2 web servers, A and B. A is a web site used by users and B is a bunch of web services used by server A. So I like to enable https for server B. Since no browsers are supposed to go here I ...
2
votes
1answer
23 views

How to get a list of sites in IIS 7.5 binded to a certain ssl certificate using command line

Situation: an IIS 7.5 server with 30+ sites and 10+ certificates and a few certificates may be obsolete. Obsolete means they're not binded to the ip:port of any site on IIS. I could check each site ...
1
vote
2answers
92 views

Should I need to provide a root certificate when setting SSL cert on nginx

In Qualys SSL test always warn me that the root certificate is an extra download and can be safely removed. However, from Comodo website, their guide on installing cert on nginx is NGINX Needed for ...
-2
votes
2answers
45 views

How to generate a Self Signed SSL Certificate bound to IP address? [duplicate]

I have my application hosted in the cloud and while demoing to prospective clients, I would like to make sure that my browser doesn't complain due to the lack of trust. So I want to generate a self ...
1
vote
1answer
67 views

Problems configuring SSL certificate on Apache VirtualHosts

I am attempting to run multiple SSL connections off a single IP server running RHEL6. I have successfully configured one domain on SSL, however when I attempt to add a second, Apache fails to ...
4
votes
1answer
258 views

Have I referenced my website's SSL certificate chain correctly?

The SSL certificate chain for one of my websites is incomplete, and I learned that I should reference the intermediate certificate in the virtual hosts file. Comodo sent me two intermediate ...
-1
votes
1answer
30 views

Installing intermediate CA in Debian

The SSL tester at sslcheck.globalsign.com says: Server configuration does not include all intermediate certificates I found this page: ...
-1
votes
1answer
76 views

Where are SSL certificates installed?

Server: Windows Server 2008 R2 There are a lot of instructions on how to install a certificate and they seem very straightforward. However, I am having a hard time figuring out where a certificate is ...
0
votes
1answer
42 views

Apache SSLVerifyClient - exclude one URL

I am setting up Apache 2.2 as a reverse proxy. My need is to have certificate authentication for every reverse-proxied url except one (https://mailserver.com/Microsoft-Server-ActiveSync) that is used ...
0
votes
1answer
297 views

The certificate is not trusted because the issuer certificate is unknown. (Error code: sec_error_unknown_issuer) Firefox

A website wants to switch an SSL certificate from Network Solutions to Gandi. Everything seemed to be installed correctly except that there is an error being thrown in Firefox only. On Chrome and IE, ...
0
votes
2answers
17 views

SSL Certificate issue on renewal in IIS 7

I have an SSL certificate that expires on Februray 15, 2015. What if I install new certificate on my server on Feb 10, 2015. Will my certificate work with new renewed certificate on Feb 10 as my old ...
2
votes
0answers
27 views

Certificate can only be used by network service account

Issues : Our service is using one certification for partner service call. It worked well in IIS site which is running as network service account. But when we run test the code as administrator ...
1
vote
3answers
53 views

If a sub domain is secure with a SSL certificate, will the sub-subdomain also be secure?

I have a standard SSL certificate I just purchased from Godaddy. Now it won't let me use a wild card for issuing the certificate for my domain. It says that the * wild card is not included in my ...
0
votes
3answers
61 views

Client Outlook 2013 doesn't connect from outside the company to the Exchange 2013

I have exchange 2013 server within the company operates correctly: Owa it's OK Outlook it's Ok Send and receive emails without problems. Has generated self-signed certificates. When trying to access ...
2
votes
0answers
29 views

How do I make a Cisco Ironport appliance send “linked certificates” for HTTPS inspection?

I have a PKI tree, and the ironport is a CA at the second level of the PKI tree, (for issuing HTTPS inspection certs) Although I deployed the root certificate to all clients, and chrome/IE work ...
3
votes
1answer
125 views

Trying to setup SSL with Apache on Ubuntu 14.04

I have purchased a SSL certificate from namecheap.com. I am trying to install it on a server running Ubuntu 14.04 and Apache. I used the following tutorial to setup Apache ...
2
votes
0answers
41 views

PuppetDB: unable to get local issuer certificate

I'm attempting to use puppetdb on but I'm running into some issues. I have a node called puppet. It is the master as well as where I've installed puppetdb. It's also a node that puppet manages. ...
1
vote
1answer
43 views

How to secure only one page with SSL on Apache2?

My web server hosts many pages. However, I need to secure only one of them with SSL. I know how to create self-signed certificate and how to install it on Apache2. My problem is quite different: since ...
0
votes
0answers
54 views

SSTP VPN connection errors

We're testing an Amazon EC2 server for a cloud application server and I'm trying to configure VPN access to it. I've read that PPTP cannot be used due to the blocking of GRE port 47 and that the best ...
0
votes
1answer
24 views

How do I restrict certificate authentication to specific users on IIS 8.0?

I am using IIS 8.0 on a Windows Server 2012 box. This is not a domain joined machine so Active Directory is not available to me. I've successfully configured certificate authentication. When ...
0
votes
0answers
53 views

Login using client SSL certificates

I want users to be able to login to say, Jenkins using client SSL certificates without password. Let me rephrase it: The certificate part works fine. I want to find a way for apache to tell web ...
2
votes
1answer
50 views

Expired SSL certificate on mailserver

As daft as it sounds, I've let an SSL certificate expire -- or it will within the next 12 hours. My only real concern with this is a mailserver, which is configured to listen for encrypted (port ...
0
votes
0answers
29 views

cannot open assembly certmgr.exe

I'm trying to run a basic console app that calls a web services hosted on an external https endpoint using Mono. I keep getting errors about decrypting the response. Some googling has led me to ...
2
votes
1answer
230 views

Correct Apache reverse proxy config with SSL for Jenkins and Sonar

I am running two services behind an Apache server: Jenkins (Port 8080) and SonarQube (Port 9000). My apache config looks like this: <VirtualHost *:80> ServerName server Redirect permanent ...
1
vote
2answers
210 views

openssl verify error 7 at 1 depth lookup:certificate signature failure

I have installed OpenVPN server on CentOS. I have two clients - first under CentOS (all works), and trying connect Windows client now. I generated client's certificates with build-key utility. If I ...
1
vote
2answers
114 views

Thawte SSL123 SHA-2 Intermediate Certificate Chain, Broken?

I attempted to upgrade my one Web site, running nginx, from a SHA-1 SSL123 certificate to a SHA-2 one. Thawte's Web page with intermediate CAs has "RSA SHA-2 (under SHA-1 Root)" and "RSA SHA-2 ...
-1
votes
1answer
57 views

Can't login to dovecot using gmail as an email client

I've used this installation configure-email-server-using-postfix-dovecot When I try to use gmail as the email client (connecting to my server through port 993) I get this error Unable to establish ...
0
votes
0answers
29 views

How to get connected over IPP using SSL via AddPrinter() call?

I had three printers in my network. All of these three are using self-signed certificate. Only for one printer, I am getting error GetLastError() – 1797 – Printer Driver Unknown I had compared ...
1
vote
1answer
60 views

Squid: how to enable verification for SSL self-signed certificates

I'm using Squid 3.4.8 as a reverse proxy which is forwarding request to a specific server. The communication between Squid and the server is in HTTPS. The certificate used by the server is ...
1
vote
1answer
147 views

squid3 ssl bumping server-first with signed certificate

I'm trying to get Squid3.4 to do SSL Bumping with the server-first method. I followed this guide in alpinelinux. I'm working in explicit mode (browser configurer to Go to the proxy) and that works ...
1
vote
1answer
72 views

Block website with HTTPS?

I hope my question is on topic on Server Fault. If not, please excuse me and point me into the right direction. Is it possible to block a site with HTTPS? I have a website that I would like to make ...
1
vote
0answers
186 views

Are there any modern browser/machine that not accept class 1 SSL certificate

I'm considering to buy a SSL certificate from external Certificate Authority to my web service which does not involve e-commerce. So I was planning to request the simplest class 1 cert to eliminate ...
8
votes
2answers
389 views

HTTPS warning: works on desktop, warning on mobile

I installed a wildcard SSL certificate (*.vht.com) for my work and accessing the following website in chrome (or any desktop browser) https://tours.vht.com/fsviewer3/fss2.html works, but when trying ...
-2
votes
2answers
104 views

Accidently removed localhost.crt SSL in Centos 6 - what can i do?

So I just got my certificate issued from Digicert, and since there was other unused/old files in /etc/ssl/ i marked and removed, and accidently also removed localhost.crt. Now I cannot start my web ...
1
vote
0answers
46 views

SSL causes timeout, my fault or startSSL's?

I am currently using a free startSSL certificate for my webserver at https://website.co.uk/ but for some reason it gave me Error code: ERR_CONNECTION_TIMED_OUT (On chrome), assuming it was my fault I ...
15
votes
4answers
1k views

Where do companies typically store SSL certificates for future use?

We recently bought a wildcard SSL cert for our domain. We converted all of the certs to a Java keystore, but now we are asking ourselves where we should store these for later use. Do people use ...
5
votes
1answer
332 views

What SSL Certificate works WITHOUT an intermediate certificate?

We have a need to deploy a server app that has its own SSL certificate built in. This will get rolled to an unknown number of servers, that will go up and down. We can generate this certificate using ...
0
votes
1answer
185 views

I can't upload server certificate on AWS IAM

I got AWS iam working on my server, and trying to upload some certificates: aws iam upload-server-certificate --server-certificate-name domain2014 --certificate-body ...
2
votes
1answer
46 views

How to add an existing key to the certutil key database

I have created an SSL keypair with OpenSSL. I uploaded the Certificate Signing Request to my SSL Certificate provider and got my certificate files. I added my certificate and the required CA ...