Tagged Questions

SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms

-4
votes
2answers
39 views

Security certificate only displays with HTTPS and not HTTP [closed]

I have a security certificate installed on my Ubuntu server, running Apache. When I visit my site using the HTTPS protocol, the green certificate appears at the start of the URL. However, when I use ...
0
votes
0answers
21 views

Generate .pb7 or .p12 certs from .pem

I'm trying to enable SSL for Boomi webservices. I've followed the instructions on their documentation to generate the CSR and sent it to CA for signing. I've received the signed certificate in .pem ...
-1
votes
1answer
88 views

How do I set up TLS-PSK with Tomcat [closed]

The Tomcat people won't help me, so I'm hoping someone here will come through. I can't figure out how to set up Tomcat to use pre-shared keys. All the SSL/TLS guides for it assume certificates. Please ...
1
vote
0answers
147 views

Unable to convert JKS keystore to Oracle Wallet using orapki

I have generated jks keystore using keytool and using the jks keystore I have csr. The same csr I have sent to Signing authority. The Signing authority have given the trusted ...
0
votes
0answers
21 views

OpenVPN and adding .p12 cert

Is there a way to add the .p12 type of cert to the openvpn config file? I've read and learned how to add the other files like so: <ca> -----BEGIN CERTIFICATE----- # insert base64 blob from ...
-1
votes
1answer
85 views

FreeRADIUS certificate is going to expired

Recently I've created a RADIUS server (Freeradius) that authenticate with Active Directory. I follow this link to create this server: Now, when I see the "server.cnf" file into /etc/raddb/cert , I ...
1
vote
4answers
103 views

How do I know if *.pem is password protected using ssh-keygen?

I have got a file myfile-privkey.pem. How do I check if the private key file is password protected using ssh-keygen?
0
votes
1answer
103 views

HAProxy SSL with new GoDaddy certs

I renewed my certificate from GoDaddy and I got back two files: gd_bundle-g2-g1.crt 27ec89cfaa7c28.crt I have the private.key. However I totally forgot how to use, or produce, a valid .pem file to ...
1
vote
1answer
105 views

Using GlassFish behind Nginx with SSL

We have a prototype setup where Nginx acts as a load balancer SSL terminator. Behind Nginx is GlassFish 3 running our REST Web Services over HTTP (without SSL) along with other application servers. ...
0
votes
1answer
34 views

Will the renewal/upgrade of the SSL certificate on a single Exchange 2010 Server affect Outlook or Mobile clients?

I'm doing a planned certificate upgrade on a single Exchange 2010 Server with no changes to the domain and wanted to know if the new certificate will require any client side action on my part. ...
0
votes
1answer
372 views

Node.js SSL Certificate Error

I'm trying to use my purchased SSL certificate in Node.js - this certificate works perfectly in Nginx and Apache without any errors. However, when I try to use it in Node.js, I get this error : ...
-1
votes
1answer
40 views

Is there a delay between the time you make an SSL cert config change and the time it takes effect?

That's all my question is. Is there a delay between the time you make an SSL cert config change and the time it takes effect, or are these kinds of changes immediate? I bought an SSL cert some time ...
0
votes
1answer
125 views

How to install/update/upgrade SSL certificate in Tomcat

I am about to install/update/upgrade a SSL certificate in one of the servers which has the following configuration Sever information: Sever version: Apache Tomcat/6.0.35 OS version: Linux ...
1
vote
0answers
22 views

Revoking client certificate two way authentication

can we revoke a client certificate by serial (we are using mutual authentication)? we tried revoking a certificate using the certificate file but the revocation date is not set to the current date . ...
4
votes
2answers
610 views

Do I have to buy a second wildcard certificate for a subdomain?

We already have a wildcard certificate for *.mycompany.com. Our network has hosts that are only reachable internally. All of them belong to the internal.mycompany.com subdomain. There is a private ...
0
votes
1answer
194 views

Comodo PositiveSSL + Windows 2008R2 / IIS7.5: error on Android only

I have an SSL certificate, which is correctly working with all major desktop browsers (IE, Chrome, FF), and on Windows Phone and iOS, but on Android. I guess I've installed my certificate in the ...
0
votes
0answers
135 views

tlsv1 alert internal error - SSL certificate misconfiguration on Tomcat7

I have configured a certificate on my tomcat7 a few weeks ago and, after having an issue using a facebook plugin on my website, the Facebook Plataform Team pointed that: 'this issue is caused by an ...
0
votes
2answers
45 views

How to manage third-party issued certificates in a Windows environment with Active Directory Certificate Services

I have a wildcard SSL certificate (*.ourdomain.com) + chain of trust that was issued from a public third-party CA that I have deployed on to all of our Windows servers in the domain. But our ...
1
vote
0answers
15 views

Auditing connections using certificates

We would like to have clients connect using client certificates from a trusted (internal) issuer and then log which user connected. Unfortunately, the following limitations are preventing success: ...
0
votes
1answer
94 views

Why is my self-signed wildcard certificate not working?

I have successfully created and used a self-signed certificate on my development machine (IIS 7.5 - Windows 7). To do this I generated a self signed cert with a common name (CN) = app.localhost and ...
0
votes
0answers
47 views

SSL Error in IIS 7.5

We run an analytics application called Spotfire. Typically, it has an Application Server and a Web server running on different VMs. In this case, we have a public and private server so that we can ...
0
votes
2answers
54 views

Cannot choose new SSL certificate in Plesk

The current SSL certificate for my domain is about to expire, so I created a new SSL certificate. I've installed it, and you can see it under Websites and Domains > Secure Your Sites. However, when I ...
0
votes
1answer
398 views

ssl_crtd helpers are crashing too rapidly in squid

I am using the sslBump and Dynamic SSL Certificate Generation features of squid, below is my configuration for the sslBump sslcrtd_program /usr/lib64/squid/ssl_crtd -s ...
0
votes
1answer
530 views

Redirect non-www to www over SSL with Nginx

I'm having an error when trying to redirect https://example.com to https://www.example.com. When I go to https://example.com, it doesn't redirect and returns the page/200 status. I don't want this, ...
2
votes
3answers
105 views

Steps to produce a self-signed certficate(s) that, after being trusted, will work for two different IPs without a security warning

We have a test server that I'm trying to change over to HTTPS/SSL, and it has both an internal IP and an external IP. We have to use self-signed certificates for this particular server. There was ...
0
votes
0answers
40 views

using multiple IP addresses with a single ssl certificate

I have a secure website sitting on IIS 7. We are having issues with the current provider's service. We have got a second provider that we can add to the server link using a spare ethernet port that we ...
1
vote
1answer
329 views

Dovecot Certificate Authentication

After implementing certificate authentication on Nginx web server, I would like to do the same on Dovecot mail server. The idea is to create your own CA and manage certificates (both issuing and ...
-2
votes
4answers
70 views

Issue TLS without cname

The person that issues TLS certs is telling me he needs the CName of my server to issue a cert after I just gave him the IP address of the webserver. It's an internal project so we didn't get a domain ...
1
vote
3answers
429 views

Nginx proxy to back-end with SSL client certificate authentication

I have two servers, both have nginx. Server A is listening to 443 and is configured to authenticate with a Client SSL certificate. Server B has an internal process that needs to communicate to Server ...
0
votes
1answer
33 views

Multiple wildcard certificates on one IIS site?

We already have an SSL certificate for *.foo.com pointing to an IIS site. Now we want to point *.bar.co.nz point to the same web application and will purchase another wildcard certificate. Is it ...
0
votes
0answers
27 views

SSL cert issued to and SAN attribute

I have added a cert to my application cacerts file. The new cert is issued to one DNS(abc.com) and they have added few other DNS(XYZ.com, TEST.com) to the SAN attribute while creating. I tried ...
0
votes
2answers
1k views

Why does Android Chrome say my site's security certificate is not trusted?

My site is https://blendbee.com. It's using a PositiveSSL certificate that is valid. In Windows 8 Chrome the certificate is fine (green lock in top left corner). But...on my Android, it's not so ...
0
votes
1answer
38 views

Using an EV SSL certificate for your site with non-EV SSL content

If I purchase an EV SSL certificate for a site that is using static content from a non-EV SSL site does that effect the EV SSL certificate presentation on the main www site? For example: ...
3
votes
1answer
114 views

wget fetching wrong ssl certificate

If I go to this URL https://solarpaces2014.pse.de/typo3/fileadmin/template/images/banner.jpg go looking for the ssl certificates, then I see a valid (wildcard) certificate for our domain pse.de. If I ...
-2
votes
2answers
79 views

How can I scan a IP & Port range to get information about all SSL certificates in use

From a Linux system, for a given IP range I need to check each open port to see if an SSL certificate is in use. For example, I would like to check ports 1 - 9999 on the address range ...
0
votes
1answer
46 views

Using different certificate for one domain

I currently have Apache setup to use a certificate on all my domains using these settings in ssl.conf: <VirtualHost _default_:443> SSLEngine on SSLCertificateFile /etc/httpd/conf/mycert.crt ...
0
votes
3answers
74 views

One IP Address two websites and servers SSL

All right I have the following: ONE External Ip Address. TWO websites on their own physical servers (IIS). (They are separate and they have to remain that way). No virtual hosts. TWO SSL ...
-3
votes
1answer
41 views

Firefox throws error for WWW in-url despite redirects

I recently installed SSL on a website and set it up so that http(s)://www.my-url.com redirects to https://my-url.com . I confirmed that this is working in Chrome. Unfortunately, if a Firefox visitor ...
0
votes
2answers
1k views

Exchange 2010 - Certificate error on internal Outlook 2013 connections

I have an Exchange 2010 and Outlook 2003. The exchange server has a wildcard SSL certificate installed *.domain.com, (for use with autodiscover.domain.com and mail.domain.com). The local fqdn of the ...
0
votes
1answer
43 views

Solution for SSL client certificates with user self service

I'm administrating a linux-based small business network. User information is centrally stored in an OpenLDAP directory. There is an existing CA which is currently used to sign server certificates. It ...
0
votes
2answers
267 views

SSL certificate for www. and non-www domain [duplicate]

What SSL certificate should I buy to get my domain work? I use nginx web server and want that all users requests go to https. http://example.com -> https://example.com http://www.example.com ...
0
votes
2answers
98 views

How to check the connection to remote server with a digital certificate (client authentication)

I got a digital certificate with extensions for server and client authentication and a private key. Now I want to connect to a remote server (REST web services) which should accept my requests ...
1
vote
2answers
65 views

Apache2 not asking password on boot

I have set up a SSL protected site with Apache and PHP. For each service restart, Apache asks me the SSL key password in order to restart. My problem is, when I rebooted my server, Apache did not ...
0
votes
0answers
64 views

SSL Certificate error only on host server

I'm running Windows Server 2008 R2 with IIS 7.5. This is in a development environment. I have a self-signed certificate, and a second wildcard server authentication certificate which was issued by ...
0
votes
2answers
58 views

Does qmail-pop3s supports multiple SSL certificates?

Current setup: 1. I work for E-mail service provider company. 2. We have multiple mail servers on which we use qmail for mail delivery. 3. Each server is hosting multiple different domains for ...
0
votes
0answers
116 views

Java keystore - keytool error: java.lang.Exception: Failed to establish chain from reply

I am trying to import a cert into my java keystore. The cert is not signed with an intermediary cert, its signed from the root cert. I've imported the root cert into my keystore, however I am still ...
0
votes
0answers
107 views

SSL Client Certificates on Mobile

Has anyone gotten mobile devices to use client SSL certs with nginx? I have configured a private Certificate Authority and I'm using an intermediate cert to sign client certificates. Clients ...
-1
votes
1answer
44 views

Monitoring root certificate

For enterprise wide systems wherein SSL certs are utilized, what is the best way of monitoring root CAs or intermediate CAs? If the systems were on Linux OS. Are there nagios checks that can catch ...
1
vote
1answer
692 views

How to debug certificate chains with OpenSSL?

I am completely new to OpenSSL and I'm reading a tutorial on OpenSSL programming to connect to a server: www.rtfm.com/openssl-examples/part1.pdf www.rtfm.com/openssl-examples/part2.pdf Somehow ...
0
votes
1answer
164 views

CentoOs 6.5 SSL don't work cannot verify xxx certificate / javax.net.ssl.SSLHandshakeException

I have a strange problem (it's 100% server configuration problem,) for example I want to download something from Dropbox: Resolving dl.dropboxusercontent.com... 23.23.160.146, 50.17.227.107, ...