SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

learn more… | top users | synonyms (1)

0
votes
1answer
35 views

Certificate Not showing on the Web console

On a Windows 2008 R2, with an AD level of Windows 2008 R2 We need to create a cert to allow user/admin to enroll via the Web service page (https://CA/certsrv/) On CA, right-click Certificate template ...
1
vote
1answer
46 views

OpenSSL - Add Subject Alternate Name (SAN) when signing with CA

How can I add a Subject Alternate Name when signing a certificate request using OpenSSL (in Windows if that matters)? I've generated a basic certificate signing request (CSR) from the IIS interface. ...
0
votes
0answers
25 views

Squid SSL Bump and EV certificates

I have a Squid proxy, with SSL-bump enabled, and ssl_crtd running. I have then pushed a group policy so the CA root certificate has a "Certificate Policy" with a specific OID x, and then added this ...
0
votes
0answers
24 views

SSL Cipher Mismatch Tomcat RHEL

I'm deploying a Tomcat web server with an SSL certificate. I've created the keystore and have received and installed the certificate back from the certificate vendor. However, I receive '...
0
votes
1answer
94 views

openvpn certificate error prevents from connection

I try to connect with Tunnelblick to my private VPN, but I get the following error message. 2016-05-24 12:18:07 VERIFY ERROR: depth=1, error=unable to get issuer certificate: C=IL, O=StartCom Ltd., ...
0
votes
0answers
45 views

Parse Server SSL

I have setup Parse Server on Windows platform. I want to use SSL so that I can access Parse API using https. Is there a way to use SSL without using reverse proxy? I just want to cut one step to ...
0
votes
3answers
68 views

Should I use a single SSL certificate for example.com and www.example.com?

I have a website (hosted by Amazon S3) which redirects example.com to www.example.com. I am setting up an Amazon CloudFront distribution for this website, and would like the same redirection to work ...
0
votes
1answer
99 views

how do I covert a certificate with extension .cer to .asc

I have a certificate file (with extension .cer) that has content which looks something like this. -----BEGIN CERTIFICATE----- lots of data here -----END CERTIFICATE----- It is our signing ...
0
votes
0answers
50 views

Domain is issuing trust certificate instead of root authority

I was running into an issue on Windows Server 2012 R2 where any website I visited was throwing a untrusted certificate error. I circumvented this issue by copying the certifications from another ...
0
votes
1answer
70 views

Unable to get StartSSL trust chain to work

I received a free SSL certificate from StartSSL which I installed on my server. It works fine on desktop browsers and such but as soon as I open the website on my phone it says "NET::...
0
votes
1answer
141 views

MQTT certificates verification fails

I'm been desperately trying to get my MQTT clients to connect to my MQTT broker which is set up with a certificate from a CA (Letsencrypt). To be able to get the CA certificate, I've used the ...
0
votes
0answers
21 views

Can I perform delegation for azure cloud with wildcard domain certificate or i need a server sertificate?

I currently have a windows adfs server installed locally with wildcard domain certificate. I am planning to setup Azure Cloud ADFS with a sub-domain of the wildcard domain certificate that i own. ...
0
votes
0answers
38 views

Check if RHEL certs have been updated

I have a sample .pem file placed in /etc/pki/ca-trust/source/anchors, and I have run update-ca-trust, but I'm not sure how I can check if the command actually worked. I tried to cat /etc/pki/tls/certs/...
0
votes
2answers
238 views

Using Lets Encrypt certificates with openLDAP

I've been running an openLDAP server for several months now and we use it to authenticate for a number of applications. A previous staff member set up the server and it doesn't seem to be a standard ...
0
votes
0answers
41 views

Unable to change ssl settings for custom domain on app engine

When I attempt to change the ssl setting for my custom domains, the dash board were unable to load the "Select SSL serving mode", and the save button is disabled. I've also noticed in Inspector that ...
1
vote
1answer
195 views

Cloudflare SSL - CACert cert file?

I have decided to generate SSL for IIS. I have own CSR and private key. The SSL generated by CloudFlare is in pcks7 format. I would like to to combine it into one pfx formate in order to import it in ...
0
votes
0answers
17 views

How can I update certs on RHEL with cloud init?

The cloud-init documentation says that this syntax ca-certs: trusted: - | -----BEGIN CERTIFICATE----- THIS IS A TEST -----END CERTIFICATE----- will update certs. This code works just ...
0
votes
1answer
89 views

ServerAlias without www not working on SSL virtualhost

I'm moving a site from a server to another, and using its current and still valid SSL certificate. The machine I'm working on is a Ubuntu 14.04 server. I've set up my usual virtual host file, let's ...
2
votes
0answers
56 views

Installing apache2 ssl - ubuntu

I need to install a ssl in my apache2 ubuntu, and do not know what I'm wrong, but the fact is that I do not get ... I have the relevant files: one .key file and two .crt files. At first, when editing ...
30
votes
1answer
2k views

Trusting an untrustworthy CA - Can I restrict how system trusts it?

(Posted to ServerFault instead of StackOverflow because I feel it concerns OS configuration more than programming code). I'm currently responsible for maintaining a system which connects to a third-...
1
vote
1answer
58 views

Installing SSL Certificate

I am trying to install an SSL certificate on my Apache server that's hosted on an EC2 instance from AWS. I originally intended to go with AWS Certificate Manager and put the SSL on a Load Balancer but ...
2
votes
2answers
323 views

Renew Letsencrypt certificate

I am trying to renew my letsencrypt certificate by the next command: ./letsencrype-auto renew but I receive this error message: configuration file /etc/letsencrypt/renewal/domain.conf produced ...
1
vote
0answers
36 views

Import Windows 2008R2 .p12 certificate into Samba4 SDC

In our firm we need to migrate our existing infrastructure from Windows 2008R2 to Samba 4. To do this we already managed to add the Samba machine as a secondary domain controller. The next step would ...
1
vote
2answers
76 views

Do web Servers send the certificate chain to the Web Client?

If my web server (latest Apache) has a valid (not expired or revoked) Verisign certificate chain (root -> intermediate -> leaf/my server), then does the server send the entire(?) chain to the client? ...
0
votes
0answers
55 views

Google App Engine The SSL certificate provided could not be inserted. xn- domain

I try installing Comodo Certificate that I ordered in SSLs.com on Google App Engine Custom Domain. But I have error: The SSL certificate provided could not be inserted. I checked that my key is ...
0
votes
1answer
31 views

Adding a second SSL for a second domain on a server - second domain is still using the first SSL Cert

I need to add an ssl cert to a second domain on my server (AWS Amazon Linux) I thought I enabled SNI correctly? although probably not... domain1 already has a functioning SSL cert. First attempt I ...
0
votes
1answer
37 views

Ensure client compatibility before https certificate change on server if you don't have access to all clients

In the next months we plan/need to refresh our https certificate and update our server OS version. We are thinking about switching to Let's Encrypt. It would be inacceptable, if clients could not ...
1
vote
0answers
22 views

Certificate is not showing up in SQL Server

I need to say first that I am not a DBA and so, my problem is getting SQL Server Configuration Manager to recognize a certificate. I have 3 SQL Instances I work on, 2 are on the same network, the ...
1
vote
1answer
161 views

Let's Encrypt SSL Certificate File Not Found Error, but still working

I'm running SSL Certificates from Let's Encrypt. I've got them installed on my Ubuntu machine running Apache. The setup works fine and I can launch the website, see the green padlock and even got an A+...
0
votes
1answer
28 views

importing self signed certificates mysql/mariadb and tomcat how to?

trying to use certs for securing connections between Tomcat 8.x and mysql/mariadb. I'm going to use a self-signed cert. What follows is what i think i should be going and appreciate you to jump in and ...
1
vote
1answer
15 views

Migrate an SSL certificate from Heroku

I have a functioning SSL certificate for a site I'm currently hosting on Heroku. I set it up myself once a year and a half ago but I've only ever done it that one time. I'm in the process of migrating ...
3
votes
1answer
136 views

gitlab SSL configuration / certificate verification failed

I have my own gitlab server, now secured with an letsencrypt SSL certificate. Now, I want to publish some packages via packagist. But when I enter the git repository url in packagist, I got the ...
0
votes
0answers
16 views

Accessing self signed SSL website in iis remotely shows error in ie

I have created a self signed SSL in IIS for the default website. I have used the solution here to get rid of certificate error while accessing the site locally however the requirement is that the ...
2
votes
1answer
24 views

Verifying RADIUS server is sending the correct certificates?

How can I see the TLS (SSL) certificates that my RADIUS server is using, to make sure it is sending the correct certificate and chain? I am implementing 802.1x authentication with a RADIUS server, ...
2
votes
1answer
35 views

mod ssl error during ssl installation

Server Environment AWS EC2, Ubuntu 14.04LTS, LAMP 443 Port is enabled from security group. Server is listening to 443 port. I have purchased SSL from cheapsslsecurity.com and followed following step....
1
vote
1answer
54 views

Intermittent API/SSL Issue

I've been working with an API for some time now with which calls work for the majority of the time however occasionally (1 to 2 times a day for around an hour, although it's completely unpredictable ...
0
votes
0answers
33 views

SSL Certificate works except for with z-push

I have Ubuntu 14.04, LAMP, Dovecot, Postfix, and z-push-2.2.9. The email is setup direct on example.com. When I use this z-push setting: define('IMAP_OPTIONS', '/ssl/notls/norsh'); I get the ...
0
votes
0answers
60 views

EssentialSSL Intermediate CA

Where can i find the EssentialSSL Intermediate CA? I downloaded the bundle from https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/979/108/domain-validation-sha-2 , then ...
1
vote
0answers
115 views

Apache, Tomcat : How to use multiple SSL certificates on a single server

I am working on our Debian X64 server which is the endpoint for 5 domain-names. One of the domain-names is utilized by a web-project running on Apache web server. The remaining 4 domains have ...
1
vote
2answers
112 views

how to re-direct from http(s)://(www.)example.com to https://example.com using Nginx?

Just as the title states. I found another helpful Q/A, but it does not show how to do it correctly in Nginx settings, I mean the parameters. He might mean that https://exmaple.com should have a valid ...
0
votes
2answers
76 views

Can I use the same SSL certificate on the CDN and the origin

It's pretty straightforward question, I have a certificate issued by DigiCert, already installed it on my origin, and I want to use it for the CDN. I'm starting to configure Akamai CDN in front of my ...
3
votes
1answer
69 views

(Self-signed) certificate with wildcards for localhost IPs (127…)

Is there a way to create a (self-signed) certificate that will cover all localhost IPs such as the full range for 127? I tried both 127.* and 127.*.*.* but neither worked; I still got SSL error pages ...
0
votes
0answers
10 views

Client Certificate Authentication with IIS from a guest account

I have an IIS 7.5 server that uses client certificate authentication. A typical setup is to create a local user and import the client ssl certificate to that profiles user store. This process works ...
8
votes
3answers
2k views

How can an SSL certificate work for some clients only?

My hosting provider has recently re-issued and re-installed an SSL certificate for my domain, after they let the old one expire by mistake. I am now able to browse the website over HTTPS again, and ...
2
votes
1answer
44 views

Centralize the update of Internet Root Certificates

I would like the client machines in my organization to update the Root Certificates from a centralized location INSIDE the organization. This used to work with WSUS, but Microsoft left this way aside ...
0
votes
0answers
18 views

Windows: Verifying intermediate CA on dark network with keystore (.kdb)

Background: We have Windows Server 2012's (Server A and B) whose Internet Explorer (IE) connects to RHEL's Apache server (IBM HTTP Server). PKI: Apache serves a certificate whose intermediate CA was ...
0
votes
1answer
90 views

Apache2 - SSL is not working

I am currently trying to install an SSL certificate issued through Namecheap by Comodo. I am however currently having issues. In the error log, I have this error: [Sun Apr 10 17:59:06.567045 2016] [...
-2
votes
2answers
123 views

How long does it take to renew an SSL certificate?

I rent a managed dedicated server from a hosting company. A year ago, they added SSL support to one of my domains at my request. Last night, however, the certificate expired: yourdomain uses an ...
1
vote
1answer
85 views

Wordpress hosted behind a load balancer that provides SSL

Clean Wordpress website located behind loadpalancer proxy that provides wildcard SSL for wp.mydomain.com but I'm not involved into its configuration. WP server based on CentOS 7.1 with Apache ...
0
votes
0answers
37 views

Is there any way to disable at least TLS 1.0 in GCE HTTPS Load Balancer?

I'm trying to pass the Trustwave pci DSS scan but i can't because it fails in "TLSv1.0 supported" and i think the problem is in GCE HTTPS loadbalancer that enables TLSv 1.0, 1.1 and 1.2 by default (...