0
votes
0answers
87 views

Rekey existing SSL certificate [closed]

Since the Heartbleed bug is in the wild I have to rekey a ssl cert of an e-commerce site. My current certificate doesn't contain information like country name, organization etc. It just has a common ...
0
votes
0answers
15 views

Let Postfix show the appropiate SSL Certificate for a variety of host names

i bought an SSL Certificate for domain host.domain.com so my GNU/Linux mail server can deal with secure connections appropriately. That's ok while clients connect to host.domain.com but when they ...
1
vote
2answers
73 views

openldap cacerts directory symbolic link to /etc/pki/tls/certs - Yes/No? Why?

Every single article/how-to/blog on openldap talks about putting the ldap cert for ldaps in the /etc/openldap/cacerts directory. I am wondering why not just put the cert(s) in /etc/pki/tls/certs and ...
0
votes
3answers
84 views

HTTPS and HTTP issue on server with SSL

I have a site www.example.com for which i purchased SSL cert and installed. And it was working fine, I also have a subdomain with app.example.com which was not on SSL. Both www.example.com and ...
-2
votes
1answer
108 views

Install ssl on linux centos 6 apache 2.2 server

I have to install SSL on my server centos 6 apache 2.2 server. First I have genetraeted CSR files as directed on below link http://www.hosting.com/support/ssl/generate-a-csr-on-a-linux-server and ...
2
votes
2answers
66 views

Possible to have 2 SSL certificates in Apache?

I would like to change the hostname of an Apache 2.2.15-28.el6 (CentOS6) webserver from https://old-domain.com to https://new-domain.com. If visitors right now type http://old-domain.com (normal ...
0
votes
2answers
225 views

Puppet client not connection to master - SSL connect Error

I installed the puppet master and agent on the same machine. When the client is started, I got the following error message. puppet agent --server=agent.com --no-daemonize --debug err: Could not ...
0
votes
0answers
73 views

Apache to accept a (corrupt) certificate without a Subject?

I am using .htaccess to ask for a username and passphrase which authenticates against LDAP. The problem is, that the certificate is corrupt, and so Apache of course won't allow users to login. As ...
0
votes
1answer
29 views

nginx ssl with CA

I have a Premium SSL Cert with a provider and they sent me chain.cer, site.pem and site.cer. Do I need to do something special to avoid getting "The site's security certificate is not trusted!" when ...
0
votes
1answer
2k views

Error code: ssl_error_rx_record_too_long

I have nginx with the following setup: server { listen 80; server_name site.com www.site.com; root /home/site/public_html; listen 443; ...
0
votes
1answer
782 views

SSL error: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch

ERROR: SSL error: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch STEPS: openssl genrsa -out SITE.TLD.key 2048 openssl req -new -key SITE.TLD.key -out ...
0
votes
1answer
192 views

varnish and SSL

Can you use varnish with SSL? What I currently have. Can I get SSL in here? backend default { .host = "127.0.0.1"; .port = "8080"; } # # Below is a commented-out copy of the default VCL logic. ...
1
vote
1answer
141 views

CA root certificate in pam_ldap configuration will not work without tls_checkpeer no

Systems are Debian Squeeze and Ubuntu Precise with identical configurations. Version of libpam-ldap is 184-8.5 on both distros. Everything works fine with the following configuration in ...
1
vote
1answer
117 views

How to include chain.cer in a keystore file?

I would like to create a keystore file with a certificate and a chain.cer file. # openssl pkcs12 -export -chain -CAfile chain.cer -in example.cer -inkey example.key -out keystore.jks -name tomcat ...
2
votes
2answers
250 views

Can an SSL certificate be on a single line in a file (no line breaks)?

SSL certificates by default have line breaks after 67 characters. I'm trying to create SSL certificate files using Chef. Essentially I want to create the entire certificate file from a string variable ...
1
vote
1answer
197 views

Renew SSL client certificates

For a internally used webbased software, which must be available from everywhere, I have created client certificates which are installed in the browsers of authorized consumers. Now, with 2012 being ...
1
vote
1answer
65 views

Check remote certificate - MySQL

I've found Save Remote SSL Certificate via Linux Command Line but in the case of MySQL (and thus TLS) it doesn't work. So the question is - how do I check remote certificate for TLS connection to ...
0
votes
1answer
75 views

SSL certificate error

New to SSL. I had a certificate signed and I am trying to get the cert I generated loaded into LiteSpeed. However I have one issue. 2012-11-01 20:30:33.121 NOTICE [PID: 28139]: start cgid: 28140, ...
0
votes
1answer
406 views

ssl_error_bad_cert_domain when accessing site by its ip address on https

i finally got my certificate verified from a trusted CA. now, i have edited my etc/httpd/conf.d/ssl.conf to locate my new certificate. i already included the ssl.conf in my etc/httpd/conf/httpd.conf. ...
1
vote
0answers
489 views

How to client authentication in SSL

I was trying to connect to my server over ssl. The server and client are made possible using Openssl. I made the code for study purpose only. I made self signed certificates for clients and servers ...
1
vote
1answer
81 views

setting up a developing environment to work with valid CA files, and valid SSL Certificates, also test revocation [closed]

We have an in house project that needs to allow USB token based authentication. We managed to understand how this works, and how to setup our environment (Apache, HTTPS support, ask for SSL verified ...
2
votes
5answers
2k views

Setting up SSL on apache on linux ubuntu

I'm trying to get SSL to run on my apache web server. I do not have the DNS for the domain setup yet is that an issue? How do I setup SSL on my web server? When I start apache it fails. ...
-1
votes
1answer
680 views

Install GoDaddy SSL to AWS EC2 Instance Linux Server

I have got the ssl certificate(.crt) from the GoDaddy. What are the steps to follow to install the SSL certificate to AWS EC2 Linux(Apache 2.2.22) Server?
4
votes
1answer
531 views

For enabling SSL for a single domain on a server with muliple vhosts, will this configuration work?

I just purchased an SSL certificate to secure/enable only ONE domain on a server with multiple vhosts. I plan on configuring as shown below (non SNI). In addition, I still want to access phpMyAdmin, ...
1
vote
1answer
76 views

Apache on linux with two real certificates (.com and .co.uk)

I can only configure one. when I try to configure the other I get httpd error with bad syntax. any one know how to configure 2 certificates in apache? this is what I have: # ssl LoadModule ...
2
votes
1answer
127 views

What is “certs” in openssl.conf for?

In the openssl.conf can I e.g. see [ CA_default ] dir = $ENV::KEY_DIR # Where everything is kept certs = $dir # Where the issued certs are kept crl_dir ...
1
vote
0answers
198 views

Configure OpenSCEP to grant certificate requests automatically

I am trying to setup an OpenSCEP server that can grant certificates automatically instead of me running scepgrant command every time there is a new request? Can someone let me know how to proceed with ...
1
vote
1answer
2k views

Failed to configure CA certificate chain

I'm trying to setup SSL on fedora with apache. In my vhost... SSLCertificateFile /your/path/to/crt.crt SSLCertificateKeyFile /your/path/to/key.key SSLCertificateChainFile ...
0
votes
1answer
290 views

How to generate new CSRs for TLS use in sendmail?

SendMail 8.13.8 | CentOS 5.x Hi Guys, I'm using ca-signed TLS certificates on my sendmail server and they are up for renewal soon. Our new CA doesn't like our old CSR so I need to generate a new ...
0
votes
4answers
546 views

Possible locations of ssl.conf and httpd.conf

I'm trying to write a script in python that takes a certificate file and the private key, and installs the SSL certificate on the Apache server. The ssl.conf file on my machine is located in the ...
1
vote
3answers
205 views

EV SSL Custom green bar

I am interested in purchasing a SSL/TSL certificate for my website and I would like to know which retailer allows me to add my custom message in the green address bar like in this image: ...
1
vote
2answers
103 views

CN to include www on domain cert

I generated my own certificate and used mysite.com as the common name. It works however if i go to www.mysite.com or any other subdomain i get a wrong domain msg. If i do *.mysite.com it works on all ...
0
votes
2answers
183 views

confusion with ssl cert and apache

I created a self signed signature. I visited my site and saw that it was untrusted (in FF and IE). After accepting it i saw a msg in IE saying it was signed for a different domain. Come to think of it ...
7
votes
3answers
10k views

How to set up my own full-featured certificate authority?

I'd like to set up a certificate authority, which I can then import to all the company's browsers and systems to get rid of all those nasty client warnings when using HTTPS or SSL.
2
votes
3answers
641 views

Multiple websites each with an SSL certificate of its own

We run cent os, plesk with apache and php, mysql. There are around 25 sites and each of them need an SSL certificate now. The host cannot have more than 16 IPs on the same server. Is it possible to ...
0
votes
1answer
503 views

SSL certificates work fine from command line but fails in script

I'm trying to setup email notifications for my continuous integration server. I have a script which uses nail to send the email when the build works: #!/bin/bash echo "Build Worked!" | nail -A myisp ...
10
votes
2answers
4k views

Save Remote SSL Certificate via Linux Command Line

Can you think of any linux command-line method for saving the certificate presented by a HTTPS server? Something along the lines of having curl/wget/openssl make a SSL connection and save the cert ...
1
vote
2answers
961 views

Unable to verify SSL certificate issuer for LDAP server

I have just setup SSL on my LDAP server by following this guide - http://www.linux.com/archive/feature/114087 I have made a self signed certificate using openSSL and set it up. When something tries ...
-1
votes
1answer
89 views

Automate SSL purchase and install process

We have a PHP/MySQL application that we deploy from a central source to a number of different servers - all CentOS 5 running with WHM/cPanel. Our deployment process allows us to roll out new clones of ...
6
votes
1answer
5k views

SSL Certificate Location on UNIX/Linux

Is there any standard or convention for where SSL certificates and associated private keys should go on the UNIX/Linux filesystem? Thanks.
1
vote
1answer
5k views

Unable to locally verify issuer's authority?

We have strange problem where IE7 shows no signs of error, but Firefox and Linux tools do. For example, a wget test one might use in monitoring SSL availability for systems (Public DNS and IP ...