SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms

0
votes
2answers
46 views

How to check the connection to remote server with a digital certificate (client authentication)

I got a digital certificate with extensions for server and client authentication and a private key. Now I want to connect to a remote server (REST web services) which should accept my requests ...
1
vote
2answers
49 views

Apache2 not asking password on boot

I have set up a SSL protected site with Apache and PHP. For each service restart, Apache asks me the SSL key password in order to restart. My problem is, when I rebooted my server, Apache did not ...
0
votes
0answers
52 views

SSL Certificate error only on host server

I'm running Windows Server 2008 R2 with IIS 7.5. This is in a development environment. I have a self-signed certificate, and a second wildcard server authentication certificate which was issued by ...
0
votes
2answers
47 views

Does qmail-pop3s supports multiple SSL certificates?

Current setup: 1. I work for E-mail service provider company. 2. We have multiple mail servers on which we use qmail for mail delivery. 3. Each server is hosting multiple different domains for ...
0
votes
0answers
74 views

Java keystore - keytool error: java.lang.Exception: Failed to establish chain from reply

I am trying to import a cert into my java keystore. The cert is not signed with an intermediary cert, its signed from the root cert. I've imported the root cert into my keystore, however I am still ...
0
votes
0answers
71 views

SSL Client Certificates on Mobile

Has anyone gotten mobile devices to use client SSL certs with nginx? I have configured a private Certificate Authority and I'm using an intermediate cert to sign client certificates. Clients ...
-1
votes
1answer
37 views

Monitoring root certificate

For enterprise wide systems wherein SSL certs are utilized, what is the best way of monitoring root CAs or intermediate CAs? If the systems were on Linux OS. Are there nagios checks that can catch ...
1
vote
1answer
221 views

How to debug certificate chains with OpenSSL?

I am completely new to OpenSSL and I'm reading a tutorial on OpenSSL programming to connect to a server: www.rtfm.com/openssl-examples/part1.pdf www.rtfm.com/openssl-examples/part2.pdf Somehow ...
0
votes
1answer
130 views

CentoOs 6.5 SSL don't work cannot verify xxx certificate / javax.net.ssl.SSLHandshakeException

I have a strange problem (it's 100% server configuration problem,) for example I want to download something from Dropbox: Resolving dl.dropboxusercontent.com... 23.23.160.146, 50.17.227.107, ...
2
votes
0answers
114 views

Powershell Install-WindowsFeature Application-Server (and subfeatures) and assign certificate

I want to use a Powershell script to install Application Server on a windows 2012 server. When using the wizard, it prompts for you to select a certificate (for WS-Atomic Transactions) from the local ...
0
votes
1answer
123 views

Postfix still complains that “certificate verification failed” even when “smtp_tls_security_level = fingerprint”

I'm attempting to use Postfix (version 2.6.6 on RHEL6) to connect to and send mail via a mail relay on our internal network. I want to connect with STARTTLS on port 25 (port 465 is not available on ...
-2
votes
1answer
69 views

Multiple Domain names, Multiple Certificates, one IIS 7 server [closed]

I have 1 IIS server that is hosting 3 domains, for example, example1.com, example2.com and example3.com. Each has it's own certificate. How can I install a separate certificate for each of these sites ...
0
votes
0answers
43 views

Nginx configuration: continue sending request to application server on ssl_client_verify FAIL

I am currently using nginx/uwsgi, with nginx to check validity of client certificates (if one is provided). server { ... location /example { ... uwsgi_param SSL_CLIENT_VERIFY ...
1
vote
1answer
122 views

TLS Error on OpenVPN

Client: OpenVPN 2.3.4 64bit (Works fine connecting to my pfSense at home) Server: OpenVPN 2.2.2 installed via yum Followed this guide: ...
-1
votes
2answers
55 views

Basic, wildcard or multidomain SSL certificate? [closed]

I need to secure a domain example.com and subdomains, dash.example.com, sql.example.com, etc... I didn't set up the server so I don't really know the DNS entries. As you may notice I'm really new to ...
1
vote
1answer
180 views

setting up multiple ssl certificates on same server/ip on CENTOs with apache 2.2

I'm using this reference to setup multiple ssl ceritificates on same ip on CENTOS 6.3 with apache 2.2 <VirtualHost *:443> ServerAdmin webmaster@localhost ServerName ...
0
votes
2answers
106 views

EC2 Load balancer and wildcard/multi-domain SSL certificates

I am running three sites through one load balancer (and 2 child-application servers) One of the site's has an SSL certificate, but I'd like to add a certificate for the other two sites What is my ...
0
votes
1answer
64 views

How do I determine where an SSL certificate is being served from?

I am having the same issue described in this question: IIS 7 Still Serving old SSL Certificate I have replaced an old SSL certificate with a new one and completely removed the old certificate from ...
1
vote
1answer
25 views

Is it possible to deploy SSL catch-all certificate on different servers?

I have a "catch-all certificate" that I would like to use on another server that resides in another VM. How can I achieve this? I haven't seen any docs that explain otherwise.
3
votes
3answers
1k views

Failed tls handshake. Does not contain any IP SANs

I'm trying to set up logstash forwarder, but I have issues with making a proper secure channel. Trying to configure this with two ubuntu (server 14.04) machines running in virtualbox. They are 100% ...
-1
votes
1answer
82 views

SSL certificate is not properly installed on Glassfish

I am an java developer not an web server/IT infra guy so i dont know wether I am asking this question correctly or not, So i apologies if I am wrong somewhere. Previously we are having an spring web ...
3
votes
1answer
51 views

RHEL6 httpd Root CA configuration

I'm setting up SSL on a RHEL6 box and I'm having problems finding information about configuring the Root CAs. I've got four files: cert.crt - My SSL certificate my_key.key - The key used to ...
2
votes
0answers
36 views

CA is repeated in IIS https response, what is the configuration section to be checked?

This is about the https of the payment service provider we're using. We've notified them about the problem which causes some android devices to show SSL error message when the browser is redirected to ...
-1
votes
1answer
233 views

Failed to bind to: /0.0.0.0:443 [closed]

I am having problems starting my play framework server on port 443,i am using scala play 2.20 and my play server running fine on port 9443 by following command ./start -Dhttps.port=9443 ...
0
votes
1answer
41 views

Exchange certificate - different issuer external to internal?

We have a GoDaddy signed SAN cert for our Exchange 2010 server, internally it works fine - issuer is GoDaddy and cert chain checks out. Externally the same SAN seems to be used (the domains are the ...
3
votes
1answer
106 views

How can I get an OID for a certificate template?

I'm using C# (or VBScript) to issue a certificate from an Enterprise CA. According to this answer, I need to specify the OID instead of the certificate name, and place it in an unexpected portion of ...
4
votes
1answer
261 views

ssl certificate installation on tomcat

I am trying to create a new certificate for my scala play framework on ubuntu but I cannot import my key with keytool. I haven't been able to figure out what is causing it so I thought I'd see here if ...
0
votes
1answer
588 views

Page can't be displayed with IIS and SSL

I have a single site hosted in IIS 8. I have two site bindings. One is for HTTP, the other is for HTTPS. HTTP is on port 80 with All Unassigned addresses, I left host name blank. HTTPS is on port 443 ...
0
votes
2answers
140 views

WHM/cPanel SSL certificate and two different subdomains per machine/IP

I have two servers with WHM/cPanel installed - server1.mydomain.com and server2.mydomain.com, and I would like to install WHM SSL certificate on both machines (different IPs). My question is do I ...
0
votes
0answers
44 views

Self Signed SSL Cert - Browser Warning

I generated a new self-signed cert for one of our intranet sites. The old cert expired today. I pushed the new cert out via GPO and deleted the old one. I can see on the client that the new cert has ...
0
votes
0answers
37 views

Have to reinstall certificate every so often

We call a web service which we have a mutual authentication set up. I have their certificate installed on my server in the "local computer" folder under "Third Party Root Cert Authorities". I call ...
0
votes
1answer
78 views

Extract key from JKS keystore to use with apache2 and tomcat

I have a keystore in JKS format and I want to use that with apache2. How can I export the key and the certificates (that i already chained) out the JKS in a easy way? I found many answers out there ...
0
votes
1answer
67 views

Set Up Of SSL Certificate COmmon Name to Protect Plesk Panel

A PCI Compliance scanner is balking that the self signed SSL certificate protecting secure access to Plesk Panel contains a name mismatch between the location of the Plesk Panel and the name on the ...
2
votes
1answer
118 views

Do I need to resign/regen a cert when moving IPs?

Are these errors related to moving a site to a new IP and keeping the same SSL CERT? Will I need to regen/sign to fix this? [Sun Jun 22 07:13:11.054280 2014] [mpm_worker:notice] [pid 2775:tid ...
1
vote
1answer
941 views

Enabling SHA2 Certificate Support on Windows Server 2003

A little background information first. I have an SSIS package that runs inside a Windows Server 2003 SP2 32 bit environment. The package recently started failing with the following error during a ...
5
votes
2answers
56 views

How to tell if an (offline) SSL Certificate been revoked

I would like to know whether an SSL certificate was revoked. The website no longer serves up that certificate, I only have the domain name and the serial number. The SSL certificate was replaced 5 ...
0
votes
3answers
240 views

Install godaddy ssl certificate on amazon ec2

I'm new to setting up ssl certificate and csr, i want to use public ip instead domain name in ssl. i created a csr file using following command and info openssl req -new -newkey rsa:2048 -nodes ...
0
votes
1answer
522 views

Two domains, two SSL certificates, one IP

I'm trying to run two domains, one with a wildcard certificate and the other one with a regular certificate from one IP and one nginx. Setup: example1.com with wildcard certificate example2.com with ...
1
vote
1answer
107 views

Error 26101: SSL certificate common name invalid

I have 3 systems with similar configuration: Windows Server Datacenter 2008R2 MS System Center 2012 connected to a storage array On 2 systems I can add the storage provider from VMM without any ...
7
votes
3answers
348 views

Why is Windows 2012 R2 not trusting my self-signed certificate?

In a testing environment, I'm currently being held up from testing some things that need to be deployed soon (actually already, but you know how deadlines go...) because Windows refuses to trust the ...
0
votes
0answers
93 views

IIS Client Authentication without a CDP

I'm running IIS 7.5 on Win2k8, and am trying to configure 2-way SSL. I've turned Require Client Certificate on in IIS, I've installed a valid root certificate in my local machine's trusted root store, ...
0
votes
2answers
43 views

SSL certs or intermediate for DMZ

I've been tasked with deploying and managing load balancers covering internal servers and DMZ servers. I have no experience with this, and this is a first for my organization as well. Balancers are ...
0
votes
0answers
467 views

Unable to complete secure transaction - Nginx Opera browser

i have this nginx.conf file worker_processes 4; worker_priority 15; error_log logs/error.log notice; pid logs/nginx.pid; events { use kqueue; # event method, kqueue ...
1
vote
1answer
18 views

Extract Certs from Apache

Recently I've had to uninstall a single Self-Signed SSL Certificate from one of my Apache boxes, specifically for an outside party. That's not really a problem for me, since it was easy. What ...
1
vote
2answers
140 views

OwnCloud RSA certificate configured for SERVER- ISSUE, webpage has a redirect loop [closed]

I had Owncloud running on a server that had died, I remember installing being easy, I have migrated server and Owncloud is one of the last apps to install. Ok Just downloaded and installed the newest ...
0
votes
2answers
1k views

How to get around Unrecognized Certificate Authority signature on Domino 9.0.1 with Go Daddy SSL?

I am a part-time administrator, at best, so I only get to do these things once every 2-3 years. I am reinstalling a Linux server that worked in 8.5.2. The SSL certificate is from GoDaddy. I have ...
0
votes
1answer
60 views

Is the decision to use SNI or IP based SSL made during cert purchase or cert installation?

It's time to renew an SSL cert - but the website will soon be moving from a dedicated machine with a fixed IP to a cloud based host behind a load balancer. When I renew or re-purchase my ssl cert do ...
0
votes
1answer
75 views

Why am I having trouble viewing HTTPS websites only using Chrome only on my employer's network? [closed]

I'm using Google Chrome on my new MacBook Pro that has been provided to me by my employer. Many of the HTTPS sites I visit do not work when I visit them using Google Crome while I am connected to my ...
0
votes
2answers
63 views

Does the server SSL certificate need to be kept private?

I understand that private key definitely does, but what about the certificate file? I also understand that the server sends (part of?) the certificate to a connecting client, but does it send the ...
5
votes
1answer
342 views

Windows 2012R2 seems to automatically download and install intermediate root certificates

Whilst preparing a new Windows 2012R2 server for production I needed to install a (GlobalSign Domain) SSL certificate for the website powering our application. I did this by generating a certificate ...