SSL certificates are used to encrypt and authenticate connections to web servers
0
votes
0answers
27 views
Is it possible to create a self-signed intermediate CA for ssl?
I am trying to create my own SSL hierarchy like:
MyRootCA
--MyIntermediateCA
----MyCert
I have installed MyRootCA and MyIntermediateCA, but windows points out that MyIntermediateCA ...
0
votes
2answers
42 views
How do I set up the DN for a SSL cert with a hostname of greater than 64 characters?
Everywhere I read says to have the server hostname in the commonName field and the subjectAltName field. The problem is that the hostname that I want to sign has greater than 64 characters. Therefore, ...
0
votes
0answers
36 views
SSL Error / RSA premaster secret error
anyone know what is the problem regarding the error that encountered in the PayPal sandbox?
It was working fine for months last time and we changed our server and IPN stopped working. We are not ...
0
votes
0answers
18 views
IIS6 SSL certificate installation
I am trying to install a SSL certificate on a website on a II6 web server following this guide on goddadys website: ...
0
votes
0answers
30 views
Apache to accept a (corrupt) certificate without a Subject?
I am using .htaccess to ask for a username and passphrase which authenticates against LDAP.
The problem is, that the certificate is corrupt, and so Apache of course won't allow users to login.
As ...
0
votes
1answer
38 views
Simple authentication via AD over LDAP for Tomcat-hosted app
We use a central AD server for authentication, and have several different webapps that connect to it via LDAP.
I'm trying to connect a simple webapp running on Tomcat 5.5 on Windows to the AD server ...
0
votes
1answer
29 views
Exchange wildcard certificate with openssl generated CSR
I've previously successfully set up Exchange 2010 with a wildcard certificate, but I remember it wasn't exactly straightforward. I'm also more familiar with generating CSRs with openssl than Windows ...
0
votes
0answers
26 views
No SSLRequireSSL when ssl negotiation already happen
I am running an non-sni supported Apache server (2.2.3). The first virtualhost will always handle the ssl negotiation. Once the request is decrypted Apache can fine do the vhost handling. if I want to ...
0
votes
1answer
34 views
certool vs openssl to generate private keys and csr [closed]
I've seen articles using either openssl or GNU certtool to generate private keys and CSR for SSL certificates.
Is there any preferred choice or effective reason to choose one over the other?
0
votes
1answer
20 views
nginx ssl with CA
I have a Premium SSL Cert with a provider and they sent me chain.cer, site.pem and site.cer. Do I need to do something special to avoid getting "The site's security certificate is not trusted!" when ...
0
votes
1answer
63 views
Error code: ssl_error_rx_record_too_long
I have nginx with the following setup:
server {
listen 80;
server_name site.com www.site.com;
root /home/site/public_html;
listen 443;
...
0
votes
1answer
21 views
Is it possible to allow only some client certificates in Apache to login?
In my virtual host I have something like that:
SSLEngine on
SSLCertificateKeyFile /etc/apache2/ssl/svn.XXXXX.me.key
SSLCertificateFile /etc/apache2/ssl/svn.XXXXX.me.crt
SSLProtocol ...
0
votes
0answers
27 views
How can I install an SSL certificate for all users on a Windows 2003 server
I'm not particularly familiar with Windows Server, so please bear with me.
I have about 10 users that all use Terminal Services to login to our Windows 2003 server, each with different user accounts. ...
0
votes
0answers
17 views
Exchange server 2007 SSL certficates
Hi everyone im abit puzzled over renewing my local exchange server certificates. I recently applied a CA certificate from GoDaddy.com for our mail website which covered the domains ...
0
votes
2answers
68 views
Using an SSL certificate in multiple locations
I have some issues with respect to using SSL Certificates. I have a website hosted in UK and I also have an organisation in South Africa hosting my company application online for web access.
The ...
0
votes
1answer
55 views
SSL error: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
ERROR:
SSL error: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
STEPS:
openssl genrsa -out SITE.TLD.key 2048
openssl req -new -key SITE.TLD.key -out ...
0
votes
1answer
32 views
Webmin ssl misconfiguration
I've done something wrong in my webmin/ssl configuration. All the websites are trying to load the same certificate when accessing with "https://". There is a virtual server with its own certificate ...
2
votes
2answers
194 views
SSL certificate. Can it apply to more domains in future?
What can I do if I have completed a CSR for "domainA.com" but later want it to also apply to "domainB.com"?
I'm assuming there aren't many options once the CA has issued the license, apart from ...
1
vote
1answer
139 views
Which FQDN hostname to use for SSL certificate signing request- when using a CNAME record?
We have a subdomain (https://portal.company.com) that is the alias for a different hostname (defined in a CNAME record).
This dynamic DNS hostname (https://portal.dlinkddns.com) resolves to the ...
0
votes
2answers
75 views
IIS 7.5 SSL certificate for web site that can be accessed from different IPs
I have a website what is now at development state and can be accessed by IP in two ways: at internal company network site can be accessed by 198.162.0.10/WebSite and from Internet ...
0
votes
0answers
42 views
How to change company info in a SSL cert in Parallels Plesk?
I have a problem with Company info in a SSL cert. I have created my .csr & .key files using openssl req -nodes -newkey rsa:2048 -keyout mykey.key -out mycsr.csr and entering all my company related ...
2
votes
1answer
44 views
Alternatives to a Trusted Root certificate
Given a SSL-protected site that was formerly whitelisted (Allow from x.x.x.x etc), and and a requirement from a customer to change the way authentication works, to use X.509 HTTPS Client verification. ...
1
vote
2answers
43 views
Interim way to handle https requests while SSL certificate is being arranged?
What can I do to handle https requests while an SSL certicate is being arranged?
The https requests are being made from a desktop app so there are no browsers involved.
Are there free certs I can ...
0
votes
1answer
29 views
Is there a way to make nginx only ask for a PEM pass phrase a single time?
I use nginx as a simple SSL proxy and have 7 virtual hosts configured (plus a default host). Interestingly, whenever I restart the server, I have to enter the PEM pass phrase for my private key 20(!) ...
0
votes
1answer
64 views
Renewing an SSL cert process mapped out. Sanity check?
Most documentation on initial SSL setup is pretty good, but what about a renewal for an existing SSL? I really dont want to fix anything that doesnt need fixing. I cant exactly test this out on a ...
1
vote
1answer
141 views
What determines the combination of ciphers available on an SSL server?
I have a site that has been bound to a new SSL certificate with SAN (4 additional names).
The certificate has a 2048-bit key.
The problem is that it works on some browser/OS combinations but not on ...
0
votes
0answers
133 views
How do I configure SharePoint 2013 Apps to respond using their wildcard ssl certificate
I have done this multiple times and ended up with the same result so I must be doing something wrong. I am configuring "Apps" for a new SharePoint 2013 farm. I can install SharePoint 2013 and I get ...
0
votes
1answer
40 views
SSL configuration for domain pointing to EC2 instance
I have my custom domain pointing to an EC2 instance.
Say mydomain.com -> [Elastic IP address for my EC2]
I would like to add SSL certificates so that I can access the site via https - ...
1
vote
0answers
58 views
How to properly replace CA certificate when clients get it bundled in PKCS#12 containers?
I'm about to regenerate a certificate of my CA (maintained by OpenSSL) used mostly to provide OpenVPN access to the intranet for my clients.
My question is related to this one — "Certification ...
0
votes
0answers
23 views
Local CA for remote web server
I have two domains and the one I am in has a certificate authority server. The domain I am not in doesn't have a CA server. I want to certify https on that server so that I can get there without the ...
0
votes
0answers
51 views
PortUnificationException in Glassfish after installing SSL cert
I've installed an SSL cert (incliding a GoDaddy root cert) into a brand new keystore (myks.jks) on Glassfish 3.1 and now when the server starts, I get this in the logs (and I can't access the admin ...
1
vote
0answers
79 views
Client Certificates not working with IIS7
I have been trying to get a webservice we are creating to require client certificates
for connections for several weeks and haven't been having much luck. I thought that
I would attempt to make a ...
1
vote
2answers
66 views
How to create client SSL certificates for staff using CaCert CA?
I would like to restrict the access of a homepage using client SSL certificates.
The most tutorials on the internet describe it like this:
create own key CA.key
create server key server.key ...
0
votes
0answers
51 views
Sonatype Nexus + SSL client authentication
Context:
We have a Sonatype Nexus on which we deploy iOS apps (.ipa) files. We'd like to allow people from the company to install these apps directly from their device. We're pretty close, but by now ...
0
votes
1answer
99 views
Keytool ServerAlternateName
I'm trying to get the certificates just right for our Jira/Confluence deployments in house. People access them differently, either from the hostname or the FQDN. I'm using Java 7's keytool so I have ...
0
votes
1answer
39 views
See who changed a certificate on Windows server 2008
I usually log into my server using RDC. Recently the certificate changed (got a popup while loggin in) and I don't know who changed it. We have a self issued certificate but none of the admins ...
0
votes
1answer
37 views
SSL Certificate for sites hosted locally [closed]
I am trying to install two diaspora instances on my computer. I am setting up virtual host to do this and now I am trying to do one server and its server name is testing.com
Diaspora requires a SSL ...
0
votes
3answers
86 views
How to set Load Balancers onto EC2 (installed Apache with SSL)?
I am running several EC2 instances behind ELB load balancers.
Can I insert my SSL certificate into Apache server without insert my cert into the load balancers?
How should I set for the load ...
0
votes
2answers
58 views
Default CA Cert Bundle Location
I need to add a .pem cert file to my default CA cert bundle but I don't know where the default CA Cert bundle is kept.
I need to append my new .pem file to this default bundle. I'd rather do that ...
0
votes
1answer
178 views
Install existing SSL certificate on Dell iDRAC7
I've got some servers with iDRAC7 Enterprise and I want to add my existing wildcard SSL certificate for my domain so that when I load the iDRAC webpage I get a valid certificate.
I've tried the ...
0
votes
2answers
36 views
Can a new domain name be easily added to an existing SAN SSL certificate?
I'm looking at getting an SSL certificate and I think the SAN type is what I need. However, Can I easily add further domain names to be covered by the certficate in the future. E.g. I have ...
0
votes
2answers
122 views
Error while converting der private key to pem
I have DER private key and certificate. I need to convert them to PEM format. Certificate converted normally, but when i try to convert key this error happens:
# openssl x509 -in client-key.der ...
1
vote
2answers
122 views
Does an SSL certificate with the common name example.com work for example.com/app1/payment?
I am new to SSL certificates and their setup. I have not found any details regarding this so I am asking what may be simple question.
I am going to order an SSL certificate so I want to know if an ...
0
votes
0answers
82 views
Is it possible to tell whether a server allows TLS/SSL3 without having access to it?
I apologize in advance if this question is a little confusing, my knowledge of SSL certificates is limited.
Basically there are 2 third party servers that I would make a call to over TLS. This worked ...
0
votes
1answer
25 views
Traffic isseus when SSL is used
We started to use SSL (urls stayed the same, but we went from http to https) and we see a huge cutback in traffic. Is there any change that this is related? And if so, how come?
2
votes
3answers
268 views
One SSL Certificate for 3 Domain Controllers
How does one generate a self-signed (later a CSR for a real cert) SSL certificate for three domain controllers (dc1.example.com dc2.example.com dc3.example.com) for the Windows domain EXAMPLE.COM for ...
0
votes
0answers
20 views
Issue while loading contents using HTTPS in IIS
I have a website in which i have enabled HTTPS. The Website is hosted in IIS 7 and has a Loadbalancer also.
While on my testing phase it was on HTTP and it was working very smoothly and very fast. ...
6
votes
4answers
296 views
What's the common practice of when to update a soon expiring SSL certificate?
Recently Windows Azure Storage SSL certificate expired and that causes a lot of problems. Now the certificate can be retrieved by any user and so everyone could have noticed that it was going to ...
1
vote
1answer
189 views
Installing SSL Thawte Certificates for tomcat from pre-generated Private Key
I have received a Bunch of SSL certificates that i need to install into tomcat servers, and normally this is easy enough. However, these certificates have had their private keys generated elsewhere ...
0
votes
2answers
129 views
Can you re-use a SSL certificate across platforms?
Let's say I want to buy a wildcard SSL that I can use for web servers, spanning across a multitude of different servers and platform.
I could issue a CSR for each and every one of them, with their ...
