SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

learn more… | top users | synonyms (1)

1
vote
0answers
21 views

How to use your ssl certificate and key from your website with activemq console?

After enforcing strict transport security in a server, it is also forcing https into port 8161 for activemq which of course makes it fail. I followed this instructions to enable https on activemq ...
0
votes
0answers
12 views

IIS Automatically apply wildcard certificate to new subdomain

I've been trying to figure out how I could automatically apply a wildcard ssl cert to a subdomain on an app im building. for instance, sign up to use the app. you get companyname.example.com i see ...
0
votes
4answers
77 views

Using the same SSL Certificate of a Domain on different IIS Servers?

We have different Web Sites on different IIS Servers belonging to the same Domain as site1.example.com, site2.example.com, site3.example.com. However, we have no idea about how to use the same ...
-3
votes
1answer
43 views

Change SSL encryption to 128 bit from 256 bit

I have bought SSL using Godaddy and running nginx over an ubuntu machine. I have came to know that I am using 256 bit encryption with my SSL certificate. I want to downgrade it to 128 bit. How is it ...
-1
votes
1answer
94 views

outlook 2016 for mac can't connect to Exchange 2013

We have 1 Mac (osx 10.11.1) user running Outlook 2016, and he is trying to connect to our Exchange 2013 server (Version 15.0 Build 847.32). After creating the account in outlook a yellow dot remains ...
-3
votes
1answer
23 views

what ssl solution allow Server IP so any domains pointed to that will ssled?

Is there any ssl solution based on Server IP so any domains pointed to that will be allowed? We allow client to run our app on their domain for whilelabling and our app also require ssl as well. So ...
1
vote
1answer
42 views

Mutual SSL authentication - client certificate vs server certificate

I am setting up a web application which will connect to a remote web service and is required to use a client certificate. My web app uses HTTPS to connect and I have it configured with my existing ...
1
vote
1answer
21 views

Tomcat SSL not available outside

I do have a Tomcat8 server running, currently in the development environment. It's been working for a while on the port we have picked (8085) and was available outside of our network (unblocked on the ...
2
votes
1answer
118 views

Server certificate does NOT include an ID which matches the server name

Our server was upgraded yesterday so it now has a more updated Ubuntu, Apache 2.4.10, PHP etc. After I put everything back, Apache started complaining about my configuration. The server hosts a site ...
0
votes
1answer
57 views

How to get Let's Encrypt to give challenge text for all domains at once?

I'm using Let's Encrypt for my Google App Engine site, so I'm generating certificates only, and while it's working, the process for verifying multiple domains seems clunky. I presume I'm doing ...
-3
votes
1answer
46 views

I get other website's tls certificate when visiting my website [closed]

i have a weird issue while visiting my website using https... I can't track how often this happens, but sometimes T get a TLS certificate of another website.... and the browser warns me that the ...
1
vote
1answer
33 views

Reinstalling a godaddy certificate on node/express server?

Copied from here I'm looking at a server on behalf of a client and was wondering what the cert actually is and where it comes from in this example: require('https').createServer({ key: ...
0
votes
1answer
59 views

Install SSL certificate on server (before switching the doimain's dns to point to the server)

As part of a major revamp of our site: retiring old server (no ssl) setting up new server (with ssl amongst other changes) switching the domain's dns once the new server is ready Is it possible to ...
2
votes
1answer
49 views

Redirect in web.config because of certificate issues

I'm running some websites on a IIS 7.5 with one UCC SSL certificate, where 10 domains are secured. most of them are something.company.ch, some are something.anothercompany.ch we have a redirect rule ...
1
vote
1answer
78 views

Let's Encrypt certificate not recognized by Nginx

I successfully created some LE SSL certs, using this guide. However, when I updated my nginx config to use the certs and redirect all port 80 traffic to 443. http successfully redirects to https, the ...
0
votes
0answers
15 views

IIS 8 - Default SSL Site Breaks SNI

We have the following scenario in testing SNI on Windows Server 2012 R2 with IIS 8. Domain names and IP addresses listed below are fake and for example only. WEB SITE NAME IP ADDRESS Host ...
0
votes
1answer
34 views

SSL certificate installation to establish SSL connectivity between 2 servers

I want to establish SSL connectivity between 2 servers, and I understood that I need to install the SSL certificate of server A into server B's Java keystore and vice-versa. So, that server A can call ...
-2
votes
2answers
64 views

Powershell New-SelfSignedCertificate missing -NotBefore in Windows 2012r2

My 2008 powershell script is not working correctly in 2012r2. The command New-SelfSignedCertificate -DnsName test.testdomain.com -NotBefore [datetime]::now.AddYears(10) comes back with: ...
0
votes
0answers
15 views

OpenSSL certificate shows “Issued to: Administrator” as Common Name

I'm trying to issue a certificate which was generated by openssl. $ openssl req -out vpn_certrequest.csr -key vpn_key.key -new -sha256 You are about to be asked to enter information that will be ...
0
votes
1answer
42 views

Can I prohibit IIS from fetching intermediate SSL certificates via AIA?

According to this answer IIS can use Authority Information Access certificate extension to retrieve missing issuer certificate. Here's the scenario. There's an IIS installation with an HTTPs endpoint ...
0
votes
1answer
14 views

Should I use multiple-domain SSL certificate for subdomains with EV?

I have a web-site - for instance, https://website.com - and I need to provide an SSL certificate for this web-site and a couple subdomains - for instance, https://subdomain.website.com and ...
1
vote
1answer
64 views

NGINX does not prompt for client ssl certificate

On our setup we want to promt a user for a client ssl certificate. All certificates are issued by StartSSL. The problem is that even though ssl_verify_client on; is set 'on', the website / browser ...
1
vote
1answer
62 views

IIS 7.5 - can't configure two SSL Certificates under one IP-adress?

We're setting up HTTPS for all our websites. Unfortunately I'm not really experienced in IIS. I have two certificates, one is a EV-UCC-Certificate with 10 subdomains included. the subdomains are ...
0
votes
0answers
31 views

Verify complete certificate chain being sent by Apache

I have configured my Apache web server to send out the complete SSL certificate chain and now I want to verify that the the complete chain is, in fact, being sent. I would normally use something like ...
0
votes
2answers
38 views

different ssl cerfiticate for subdomain [duplicate]

Since I can't afford buying a wildcard ssl, I want to purchase another ssl certificate for m.mysite.com, so mysite.com and www.mysite.com will have the a different ssl certificate than m.mysite.com ...
0
votes
2answers
30 views

Create exchange certificate from linux CA

I am setting up exchange 2013 in a lab, where we are trying to replace Windows hosts with Linux hosts. We have exchange up and running, but connections complain that we need a valid certificate. ...
0
votes
0answers
36 views

Self-signed certificate error with exim: CA is unknown

I added ssl support to my exim smtp server. Now I'm trying it with a Thunderbird client, first of all I imported my self signed certificate to thunderbird keystore and than I tried to connect. It ...
1
vote
2answers
47 views

Client-side certificate signing

One of my partners wanted to do client side SSL certificate authentication. They wanted us to sign the certificate using a recognized CA. I was under the impression that for client side SSL ...
1
vote
0answers
28 views

Exchange 2013 - IMAP with Wildcard Cert - Error when Set-ImapSettings

Trying to get a wildcard cert working on Exchange 2013 for IMAP purposes. Unable to add in ECP (receives error about it not having a FQDN since its a wildcard) So then I try to run: ...
0
votes
1answer
28 views

SNI: Can I find out which hosts share the same IP? [closed]

The setup is the following: I know that a host uses SNI (e.g. universal.at on IP 91.236.122.125, the test says so). I know that I can find out one other host that is also hosted on the same IP ...
0
votes
1answer
186 views

How to disable SSL on Apache 2.4.18 running on Windows Server 2008

I have Apache 2.4.18 running on Windows Server 2008 R2. I want to stop SSL on that environment altogether. How can I disable it? Here is what I done in attempt to disable it In the httpd.conf file ...
1
vote
1answer
93 views

client SSL certificate verify error: (27:certificate not trusted)

I'm having some difficulty with nginx's client authentication while using an intermediate CA (self-created). Although the same certificate bundle (intermediate + root certificates in a single .pem ...
2
votes
1answer
101 views

Apache Extension Error

I have an Apache 2.4.18 with OpenSSL 1.0.2f configuration here with dual (RSA 4096 + ECC 384) certificate configuration. I also provide certificate transparency through TLS extension. When using ...
2
votes
1answer
58 views

Intel vPro on AWS EC2 T2?

I have purchased an SSL certificate to use for a site running on an AWS EC2 t2.micro instance. I have to specify whether my certificate is for Intel vPro or not. I can't seem to find a definitive ...
2
votes
1answer
80 views

Stunnel TLS authentication with multiple Authorities

I am trying to secure a rethinkdb cluster behind stunnel. The service needs to support multiple Certificate Authorities (CA). Currently I concat the accepted CAs into one file (/certs/ca.pem) but it ...
0
votes
1answer
50 views

How to handle a private key SSL certificate with Ansible

I'd like to deploy my webserver config with copy. Is there any way to keep the SSL cert private key encrypted, and to decrypt it when the playbook is started? The reason is that I want to to use ...
0
votes
1answer
15 views

Apache2 wildcard cert www and non-www domain trouble

I've run into a bit of an issue with my SSL. I have a CA-signed wildcard cert by Digicert. I have installed it properly and am attempting to use it to access my sites, comp.org and www.comp.org via ...
0
votes
0answers
37 views

Disable SSL verification on Hsts

When i try to run openssl s_client -connect www.merdincz.com:443 -debug command i'm getting; SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error On SSLLabs ...
0
votes
1answer
53 views

Multiple ssl hosts on nginx

I have multiple ssl sites on one server with nginx, and the virtual hosting works like this: root /var/www/html/$host; But in the certificate section, the $host variable don't works: ...
0
votes
1answer
96 views

Can an AWS Certificate Manager SSL certificate be installed on EC2 in IIS?

I have a certificate from the AWS Certificate Manager (ACM) for my site. I need to establish a HTTPS connection from my load balancer to my EC2 instances, as the application that I have on there ...
1
vote
1answer
32 views

SHA-2 with TLS below 1.1 or lower

I have a call to a 3rd party webservice that uses HTTPs for transport security. The 3rd party are due to upgrade their certificate to SHA-2, withdrawing SHA-1. Does my call need to be able to use ...
0
votes
1answer
29 views

Error in parsing adding TLS support to Exim4 server

I want to add TLS to my Exim4 server. I followed this tutorial: http://mindref.blogspot.it/2011/03/exim4-ssl-tls.html When I try to connet with TLS on port 25 i log this error: TLS error on ...
1
vote
1answer
27 views

Certificate status still pending even after completion

I have exchange 2013 on Azure VM which is also a DC. for using services like autodiscover etc I need to get a valid 3rd Party certificate which I got from STARTSSL, I generated the request and got the ...
1
vote
1answer
138 views

How can I find the installation date of a certificate in windows?

I see the valid dates and such but I'm looking for the date it was actually installed. Thanks.
2
votes
3answers
165 views

SSL Certificate on Load balancer or server

I have a load balancer distributing traffic between two servers, the public facing urls are all https prefixed. I want to generate a wildcard ssl certificate but I am not sure if is better to place ...
0
votes
0answers
8 views

Add Site Certificate for Java system wide

I have a server that uses java and if we try to access it complains about the certificate. The best approach is to download the cert and add it into Java's certificate exception list. This is being ...
-1
votes
1answer
134 views

Letsencrypt ISPConfig 3 security error in Firefox

I have setup SSL certificates with letsencrypt and ISPConfig 3 (on a cheap hosting service). Installed letsencrypt on a Ubuntu desktop: git clone https://github.com/letsencrypt/letsencrypt cd ...
0
votes
1answer
32 views

Lync Certificates

I have been struggling trying to figure out the right way to do this. Here is my setup. I have 2 sangoma servers (Lync 2013 in a box) The Front End server is is the main server. The Reverse Proxy and ...
0
votes
0answers
11 views

IIS 8.5 Two SSL Certificates with two IP addresses assigned to Server

I have two websites. I have setup one of them with an SSL Certificate, I would like to do the same with the new site too. When I tried to do what I did with the first one, I got an error saynig ...
2
votes
1answer
75 views

Nginx setup, 443 open but no respons on https://

So i just integrated my certificate and my nginx conf verifies it when i restart. When i do a: netstat -anp | grep 443 it returns: tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN ...