0
votes
0answers
27 views

Nginx proxy to back-end with SSL client certificate authentication

I have two servers, both have nginx. Server A is listening to 443 and is configured to authenticate with a Client SSL certificate. Server B has an internal process that needs to communicate to Server ...
0
votes
1answer
23 views

Using an EV SSL certificate for your site with non-EV SSL content

If I purchase an EV SSL certificate for a site that is using static content from a non-EV SSL site does that effect the EV SSL certificate presentation on the main www site? For example: ...
0
votes
2answers
61 views

SSL certificate for www. and non-www domain [duplicate]

What SSL certificate should I buy to get my domain work? I use nginx web server and want that all users requests go to https. http://example.com -> https://example.com http://www.example.com ...
0
votes
0answers
33 views

SSL Client Certificates on Mobile

Has anyone gotten mobile devices to use client SSL certs with nginx? I have configured a private Certificate Authority and I'm using an intermediate cert to sign client certificates. Clients ...
0
votes
0answers
17 views

Nginx configuration: continue sending request to application server on ssl_client_verify FAIL

I am currently using nginx/uwsgi, with nginx to check validity of client certificates (if one is provided). server { ... location /example { ... uwsgi_param SSL_CLIENT_VERIFY ...
0
votes
1answer
146 views

Two domains, two SSL certificates, one IP

I'm trying to run two domains, one with a wildcard certificate and the other one with a regular certificate from one IP and one nginx. Setup: example1.com with wildcard certificate example2.com with ...
0
votes
0answers
176 views

Unable to complete secure transaction - Nginx Opera browser

i have this nginx.conf file worker_processes 4; worker_priority 15; error_log logs/error.log notice; pid logs/nginx.pid; events { use kqueue; # event method, kqueue ...
1
vote
1answer
178 views

Installing SSL certs with nginx on Amazon EC2

I finally got a cert from an authority and am struggling to get things working. I've created the appropriate combined certificate (personal + intermediate + root) and nginx is pointing to it. I got ...
0
votes
0answers
58 views

Inject SSL client certificate in Nginx proxy

I have 2 Nginx instances, one is listening on 80 and has a proxy_pass https://second_nginx; The second instance is configured to listen on 443 with a self signed certificate, but also have the SSL ...
1
vote
1answer
101 views

If I get an invalid public key error does that mean I have an incorrectly installed certificate

I have created an API (running on an nginx server, let me know if there are any details that you think are relevant) for a client and they received this error when trying to call my service: Notice: ...
0
votes
1answer
103 views

SSL Certificate implementation for a stack that has varnish and multiple NGINX webservers

My current stack has Varnish -> NGINX (2 servers) running Drupal -> MySql. All static content is cached and served by Varnish over HTTP. However when a user signs-up and wants to purchase a plan the ...
0
votes
3answers
276 views

Some users receive untrusted SSL certificate warnings

I've been getting reports of users visiting our site getting "this certificate is not trusted" errors when visiting our site via https. I don't seem to ever have any problems, but two separate people ...
2
votes
2answers
180 views

Nginx issues between vhosts and SSL

I have two sites in the same IP with the follow configuration: site1.com Multiples subdomains (ie.: foo.site1.com, bar.site1.com) Everything listening on port 80, NOTHING in 443 ...
0
votes
1answer
938 views

Restart of nginx service fails because of /etc/nginx/nginx.conf test failure

Installing 3rd party SSL on DigitalOcean Droplet, Apache running Ubuntu 12.10. Following the instructions here: AlphaSSL on Apache Self signed SSL instructions from DigitalOcean So everything ...
0
votes
1answer
68 views

Check client certificate in nginx?

I can issue certificates without a problem and I can get nginx to force users to provide a certificate but how do I get nginx to give me information about the certificate? Information such as name and ...
2
votes
2answers
84 views

Specify nginx's ssl_certificate in location{} block

For a web service we have two certificates: myservice.com and api.myservice.com. Both have the same application (document root) but are serverd over HTTPS with different certificates. Unfortunately, ...
1
vote
1answer
69 views

Configuration of root ssl certificates

I wanted to install an SSL certificate for a domain. So I googled up and did some R&D and found this link https://www.symantec.com/page.jsp?id=roots. It says we can download and use without any ...
1
vote
1answer
666 views

Nginx “ssl_stapling” ignored, no OCSP responder URL in the certificate

I'm trying to setup OCSP stapling on Nginx because I ran a test and it suggested the idea and well, you know. https://sslcheck.globalsign.com/en_GB/sslcheck?host=aj2jewellers.co.uk#176.58.103.165 ...
0
votes
1answer
330 views

SSL Certificate error in IE8 (It's OK in IE10, Chrome and Firefox)

We have a SSL offloader (nginx) with different certificates for different machines and subdomains. It encrypts and redirects all the traffic to the corresponding machines. It works OK with all ...
0
votes
0answers
348 views

nginx SSL Client Certificate verification; force server to list accepted certificates

I have nginx 1.4.3 installed on two servers: RHEL 5.10 Debian 6.0.7 (squeeze) I have configured a portion of each server to require client SSL authentication via ssl_client_certificate and ...
4
votes
3answers
1k views

Multiple SSL vhosts using wildcard certificate in nginx

I have two hostnames sharing the same domain name which I want to serve over HTTPs. I've got a wildcard-SSL certificate and created two vhost configs: Host A listen 127.0.0.1:443 ssl; ...
0
votes
1answer
89 views

RapidSSL nginx Certificate issuer is me

I have baught the SSL certificate from RapidSSL. I have concatenated the chain files of RapidSSL CA and GeoTrust Global CA But when I check it on http://www.sslshopper.com/ I have this : The ...
2
votes
1answer
1k views

Restarting nginx keeps asking PEM pass phrase

I'm trying to reload nginx, I have a wildcard certificate for one domain which I got from namecheap, now I have moved it to my server, and assigned a nginx configuration rule with this: ...
-1
votes
1answer
115 views

Create self signed SSL certificate - nginx

I want to create a self signed SSL sertificate for my website. I will not use it for accessing the website itself but for other services i am going to be using (roundcube, phpmyadmin etc). I want to ...
1
vote
2answers
338 views

nginx permission denied to certificate files for ssl configuration

I'm installing an nginx ssl proxy on my Fedora server. I've created a cert and key pair under /etc/nginx. They look like this: ls -l /etc/nginx/ total 84 ... -rw-r--r--. 1 root root 1346 Sep 20 ...
0
votes
1answer
48 views

wildcard setup with 2 nginx servers

I just need a bit of help with https config for nginx using a wildcard domain name across 2 servers. we have the wildcard domain lets call it *.mydomain.com We currently have a server ...
1
vote
1answer
79 views

nginx ssl basic setup

Im relatively new to the server side and have very little idea about configuration so please excuse me if the question seems really basic I have a nginx+uwsgi server up and running an i would like to ...
0
votes
2answers
187 views

-bash: www.mydomain.com.pem: Permission denied

I have these three files in /etc/nginx/ssl folder: www.mydomain.com.csr www.mydomain.com.key www.midomain.com.key.nopass I bought and downloaded the positive ssl certs in ...
0
votes
1answer
30 views

nginx ssl with CA

I have a Premium SSL Cert with a provider and they sent me chain.cer, site.pem and site.cer. Do I need to do something special to avoid getting "The site's security certificate is not trusted!" when ...
1
vote
1answer
3k views

Error code: ssl_error_rx_record_too_long

I have nginx with the following setup: server { listen 80; server_name site.com www.site.com; root /home/site/public_html; listen 443; ...
0
votes
1answer
102 views

Is there a way to make nginx only ask for a PEM pass phrase a single time?

I use nginx as a simple SSL proxy and have 7 virtual hosts configured (plus a default host). Interestingly, whenever I restart the server, I have to enter the PEM pass phrase for my private key 20(!) ...
0
votes
1answer
262 views

problems with nginx and serving ssl; possible certificate issue

I have a site that I haven't launched yet that is running all http traffic on production over ssl. The problem is that if a call is made to https://www.domain.com/homepage.html , there is also a call ...
0
votes
1answer
266 views

NGINX Refusing Connection on SSL

Got a problem where when I try to access https://betterexaminations.ie, I get connection refused, but when I try by the ip, it works fine, (https://) 46.137.41.29. Any ideas what the problem could ...
0
votes
1answer
515 views

How to fix the TLS Server Name Indication issue under Windows XP on Nginx using a different IP

I have a server that is using two different domains with two different certificates. Everithing work fine except IE8 on Windows XP because the TLS Server Name Indication is not supported there. In ...
1
vote
1answer
134 views

SSL certificates and whether a wildcard common name will support domain.com

I purchased an inexpensive SSL Cert from GoDaddy. Right now everything on production is hosted off of www.domain.com. When specifying the common name would a wildcard (i.e. *.domain.com) cover the ...
1
vote
2answers
330 views

Exchange 2010 certificate errors

I have a problem with my newly setup Exchange environment for our hosted customers. First off, when configuring the outlook client, it gives a certificate warning although the certificate has been ...
1
vote
2answers
126 views

Sharing two SSL wildcard certificates in memory in nginx

I have an nginx server running with two IP addresses, say 1.2.3.4 and 4.3.2.1. Besides there are two wildcard SSL certificates for *.example.net (i.e. wc1, pointing to 1.2.3.4) and *.sub.example.net ...
5
votes
1answer
2k views

nginx ssl certificate issue key values mismatch

I am have been trying to setup an ssl certificate for a few days now, I am buying it from Namecheap.com and I am buying a rapid ssl wildcard certificate I am doing the following: Generate a csr - ...
0
votes
2answers
277 views

InstantSSL's certificate no different than a self signed certificate under Nginx with an IP accessed address

I ordered an ssl certificate from InstantSSL and got the following pair of files: my_ip.ca-bundle, my_ip.crt I also previously generated my own key and crt files using openssl. I concatenated ...
1
vote
2answers
243 views

First SSL pageload slow on NGINX

I have recently purchased a QuickSSL certificate from GeoTrust, and I am using it on NGINX. Everything is fine, but there is a nasty second before the page actually loads. If I look at other SSL ...
5
votes
1answer
448 views

ssl client cert verification fails in nginx

I am trying to setup ssl client authentication in nginx. I crated a self-signed root CA. Using that, I created a sub-CA. I used this sub-CA to create a certificate for a client. I concatenated the ...
1
vote
1answer
1k views

SSL, Nginx, X509_check_private_key:key values mismatch error

I have Nginx server with the SSL. I'm trying to submit a SSL certificate. After I restart Nginx I'm getting the error: SSL_CTX_use_PrivateKey_file(".../example.com.key") failed (SSL: ...
1
vote
1answer
1k views

IE8 reports a GeoTrust SSL certificate as “not trusted”, other browsers fine

We've been using a GeoTrust SSL certificate, for some time now, and I just got a call that Internet Explorer warns its users that our certificate is not trusted. I really have no clue what's going on. ...
2
votes
1answer
2k views

How can I use an SSL certificate generated with Java keytool with Nginx?

I used the Java keytool to generate a "keystore": keytool -genkey -alias example.com -keyalg RSA -keystore example.com.keystore Then I generated a CSR (Certificate Signing Request): keytool ...
2
votes
1answer
1k views

nginx ssl wildcard cert issues

We currently have a single nginx server running as a backend proxy for 4-5 Apache servers. my problem is that after installing the ssl certificate i get the following error when testing the ssl ...
4
votes
3answers
2k views

Can I use the same SSL certificate for smtp, imap, pop3 and http?

So far I'm using self-signed certificates, but decided to at least consider getting the "real" one. So far I noticed that internal formats of the certificated are a bit different, that is: http ...
2
votes
2answers
1k views

Does any Certificate Authority support both SAN and wildcards?

My basic quandry is that wildcard certificates don't support subdomains of subdomains, nor do they help with alternate domain names. Basically, if my CN is example.com, I want a Subject Alternative ...
0
votes
1answer
279 views

Installing httpssl module on a running NGINX server

New to NGINX, we inherited a project that runs Django/FCGI/NGINX on a hosted RHEL box. A requirement has come in that the site now needs to have ssl enabled. Client was pretty sure the person who had ...
1
vote
1answer
357 views

nginx /w star ssl cert from register.com

I'm having some weird ssl issues with nginx and my cert from register.com. Most browsers work with it, but some aren't able to verify the cert. I want to verify that I set things up properly. When ...
0
votes
3answers
362 views

ssl “works” with both www and no subdomain, but not correctly

So I have a website (I'm using nginx). I can connect to https://example.com just fine. But if I connect to https://www.example.com then it says something about the connection is encrypted but there is ...