-1
votes
1answer
38 views

FreeRADIUS certificate is going to expired

Recently I've created a RADIUS server (Freeradius) that authenticate with Active Directory. I follow this link to create this server: Now, when I see the "server.cnf" file into /etc/raddb/cert , I ...
0
votes
1answer
53 views

How to install/update/upgrade SSL certificate in Tomcat

I am about to install/update/upgrade a SSL certificate in one of the servers which has the following configuration Sever information: Sever version: Apache Tomcat/6.0.35 OS version: Linux ...
-2
votes
2answers
50 views

How can I scan a IP & Port range to get information about all SSL certificates in use

From a Linux system, for a given IP range I need to check each open port to see if an SSL certificate is in use. For example, I would like to check ports 1 - 9999 on the address range ...
0
votes
2answers
46 views

How to check the connection to remote server with a digital certificate (client authentication)

I got a digital certificate with extensions for server and client authentication and a private key. Now I want to connect to a remote server (REST web services) which should accept my requests ...
-1
votes
1answer
37 views

Monitoring root certificate

For enterprise wide systems wherein SSL certs are utilized, what is the best way of monitoring root CAs or intermediate CAs? If the systems were on Linux OS. Are there nagios checks that can catch ...
1
vote
1answer
122 views

TLS Error on OpenVPN

Client: OpenVPN 2.3.4 64bit (Works fine connecting to my pfSense at home) Server: OpenVPN 2.2.2 installed via yum Followed this guide: ...
2
votes
1answer
118 views

Do I need to resign/regen a cert when moving IPs?

Are these errors related to moving a site to a new IP and keeping the same SSL CERT? Will I need to regen/sign to fix this? [Sun Jun 22 07:13:11.054280 2014] [mpm_worker:notice] [pid 2775:tid ...
1
vote
1answer
127 views

If I get an invalid public key error does that mean I have an incorrectly installed certificate

I have created an API (running on an nginx server, let me know if there are any details that you think are relevant) for a client and they received this error when trying to call my service: Notice: ...
0
votes
0answers
22 views

Let Postfix show the appropiate SSL Certificate for a variety of host names

i bought an SSL Certificate for domain host.domain.com so my GNU/Linux mail server can deal with secure connections appropriately. That's ok while clients connect to host.domain.com but when they ...
1
vote
2answers
221 views

openldap cacerts directory symbolic link to /etc/pki/tls/certs - Yes/No? Why?

Every single article/how-to/blog on openldap talks about putting the ldap cert for ldaps in the /etc/openldap/cacerts directory. I am wondering why not just put the cert(s) in /etc/pki/tls/certs and ...
0
votes
3answers
89 views

HTTPS and HTTP issue on server with SSL

I have a site www.example.com for which i purchased SSL cert and installed. And it was working fine, I also have a subdomain with app.example.com which was not on SSL. Both www.example.com and ...
-1
votes
1answer
295 views

Install ssl on linux centos 6 apache 2.2 server

I have to install SSL on my server centos 6 apache 2.2 server. First I have genetraeted CSR files as directed on below link http://www.hosting.com/support/ssl/generate-a-csr-on-a-linux-server and ...
2
votes
2answers
69 views

Possible to have 2 SSL certificates in Apache?

I would like to change the hostname of an Apache 2.2.15-28.el6 (CentOS6) webserver from https://old-domain.com to https://new-domain.com. If visitors right now type http://old-domain.com (normal ...
0
votes
2answers
428 views

Puppet client not connection to master - SSL connect Error

I installed the puppet master and agent on the same machine. When the client is started, I got the following error message. puppet agent --server=agent.com --no-daemonize --debug err: Could not ...
0
votes
0answers
81 views

Apache to accept a (corrupt) certificate without a Subject?

I am using .htaccess to ask for a username and passphrase which authenticates against LDAP. The problem is, that the certificate is corrupt, and so Apache of course won't allow users to login. As ...
0
votes
1answer
31 views

nginx ssl with CA

I have a Premium SSL Cert with a provider and they sent me chain.cer, site.pem and site.cer. Do I need to do something special to avoid getting "The site's security certificate is not trusted!" when ...
1
vote
1answer
4k views

Error code: ssl_error_rx_record_too_long

I have nginx with the following setup: server { listen 80; server_name site.com www.site.com; root /home/site/public_html; listen 443; ...
0
votes
2answers
1k views

SSL error: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch

ERROR: SSL error: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch STEPS: openssl genrsa -out SITE.TLD.key 2048 openssl req -new -key SITE.TLD.key -out ...
0
votes
1answer
247 views

varnish and SSL

Can you use varnish with SSL? What I currently have. Can I get SSL in here? backend default { .host = "127.0.0.1"; .port = "8080"; } # # Below is a commented-out copy of the default VCL logic. ...
1
vote
1answer
256 views

CA root certificate in pam_ldap configuration will not work without tls_checkpeer no

Systems are Debian Squeeze and Ubuntu Precise with identical configurations. Version of libpam-ldap is 184-8.5 on both distros. Everything works fine with the following configuration in ...
1
vote
1answer
148 views

How to include chain.cer in a keystore file?

I would like to create a keystore file with a certificate and a chain.cer file. # openssl pkcs12 -export -chain -CAfile chain.cer -in example.cer -inkey example.key -out keystore.jks -name tomcat ...
2
votes
2answers
391 views

Can an SSL certificate be on a single line in a file (no line breaks)?

SSL certificates by default have line breaks after 67 characters. I'm trying to create SSL certificate files using Chef. Essentially I want to create the entire certificate file from a string variable ...
1
vote
1answer
340 views

Renew SSL client certificates

For a internally used webbased software, which must be available from everywhere, I have created client certificates which are installed in the browsers of authorized consumers. Now, with 2012 being ...
1
vote
1answer
74 views

Check remote certificate - MySQL

I've found Save Remote SSL Certificate via Linux Command Line but in the case of MySQL (and thus TLS) it doesn't work. So the question is - how do I check remote certificate for TLS connection to ...
0
votes
1answer
96 views

SSL certificate error

New to SSL. I had a certificate signed and I am trying to get the cert I generated loaded into LiteSpeed. However I have one issue. 2012-11-01 20:30:33.121 NOTICE [PID: 28139]: start cgid: 28140, ...
0
votes
1answer
537 views

ssl_error_bad_cert_domain when accessing site by its ip address on https

i finally got my certificate verified from a trusted CA. now, i have edited my etc/httpd/conf.d/ssl.conf to locate my new certificate. i already included the ssl.conf in my etc/httpd/conf/httpd.conf. ...
1
vote
0answers
863 views

How to client authentication in SSL

I was trying to connect to my server over ssl. The server and client are made possible using Openssl. I made the code for study purpose only. I made self signed certificates for clients and servers ...
1
vote
1answer
86 views

setting up a developing environment to work with valid CA files, and valid SSL Certificates, also test revocation [closed]

We have an in house project that needs to allow USB token based authentication. We managed to understand how this works, and how to setup our environment (Apache, HTTPS support, ask for SSL verified ...
2
votes
5answers
3k views

Setting up SSL on apache on linux ubuntu

I'm trying to get SSL to run on my apache web server. I do not have the DNS for the domain setup yet is that an issue? How do I setup SSL on my web server? When I start apache it fails. ...
-1
votes
1answer
863 views

Install GoDaddy SSL to AWS EC2 Instance Linux Server

I have got the ssl certificate(.crt) from the GoDaddy. What are the steps to follow to install the SSL certificate to AWS EC2 Linux(Apache 2.2.22) Server?
4
votes
1answer
602 views

For enabling SSL for a single domain on a server with muliple vhosts, will this configuration work?

I just purchased an SSL certificate to secure/enable only ONE domain on a server with multiple vhosts. I plan on configuring as shown below (non SNI). In addition, I still want to access phpMyAdmin, ...
1
vote
1answer
77 views

Apache on linux with two real certificates (.com and .co.uk)

I can only configure one. when I try to configure the other I get httpd error with bad syntax. any one know how to configure 2 certificates in apache? this is what I have: # ssl LoadModule ...
2
votes
1answer
165 views

What is “certs” in openssl.conf for?

In the openssl.conf can I e.g. see [ CA_default ] dir = $ENV::KEY_DIR # Where everything is kept certs = $dir # Where the issued certs are kept crl_dir ...
1
vote
0answers
246 views

Configure OpenSCEP to grant certificate requests automatically

I am trying to setup an OpenSCEP server that can grant certificates automatically instead of me running scepgrant command every time there is a new request? Can someone let me know how to proceed with ...
1
vote
3answers
3k views

Failed to configure CA certificate chain

I'm trying to setup SSL on fedora with apache. In my vhost... SSLCertificateFile /your/path/to/crt.crt SSLCertificateKeyFile /your/path/to/key.key SSLCertificateChainFile ...
0
votes
1answer
318 views

How to generate new CSRs for TLS use in sendmail?

SendMail 8.13.8 | CentOS 5.x Hi Guys, I'm using ca-signed TLS certificates on my sendmail server and they are up for renewal soon. Our new CA doesn't like our old CSR so I need to generate a new ...
0
votes
4answers
794 views

Possible locations of ssl.conf and httpd.conf

I'm trying to write a script in python that takes a certificate file and the private key, and installs the SSL certificate on the Apache server. The ssl.conf file on my machine is located in the ...
1
vote
3answers
218 views

EV SSL Custom green bar

I am interested in purchasing a SSL/TSL certificate for my website and I would like to know which retailer allows me to add my custom message in the green address bar like in this image: ...
1
vote
2answers
104 views

CN to include www on domain cert

I generated my own certificate and used mysite.com as the common name. It works however if i go to www.mysite.com or any other subdomain i get a wrong domain msg. If i do *.mysite.com it works on all ...
0
votes
2answers
191 views

confusion with ssl cert and apache

I created a self signed signature. I visited my site and saw that it was untrusted (in FF and IE). After accepting it i saw a msg in IE saying it was signed for a different domain. Come to think of it ...
8
votes
3answers
11k views

How to set up my own full-featured certificate authority?

I'd like to set up a certificate authority, which I can then import to all the company's browsers and systems to get rid of all those nasty client warnings when using HTTPS or SSL.
2
votes
3answers
682 views

Multiple websites each with an SSL certificate of its own

We run cent os, plesk with apache and php, mysql. There are around 25 sites and each of them need an SSL certificate now. The host cannot have more than 16 IPs on the same server. Is it possible to ...
0
votes
1answer
536 views

SSL certificates work fine from command line but fails in script

I'm trying to setup email notifications for my continuous integration server. I have a script which uses nail to send the email when the build works: #!/bin/bash echo "Build Worked!" | nail -A myisp ...
10
votes
2answers
5k views

Save Remote SSL Certificate via Linux Command Line

Can you think of any linux command-line method for saving the certificate presented by a HTTPS server? Something along the lines of having curl/wget/openssl make a SSL connection and save the cert ...
1
vote
2answers
1k views

Unable to verify SSL certificate issuer for LDAP server

I have just setup SSL on my LDAP server by following this guide - http://www.linux.com/archive/feature/114087 I have made a self signed certificate using openSSL and set it up. When something tries ...
-1
votes
1answer
90 views

Automate SSL purchase and install process

We have a PHP/MySQL application that we deploy from a central source to a number of different servers - all CentOS 5 running with WHM/cPanel. Our deployment process allows us to roll out new clones of ...
6
votes
1answer
7k views

SSL Certificate Location on UNIX/Linux

Is there any standard or convention for where SSL certificates and associated private keys should go on the UNIX/Linux filesystem? Thanks.
1
vote
1answer
6k views

Unable to locally verify issuer's authority?

We have strange problem where IE7 shows no signs of error, but Firefox and Linux tools do. For example, a wget test one might use in monitoring SSL availability for systems (Public DNS and IP ...