SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms

0
votes
1answer
245 views

Page can't be displayed with IIS and SSL

I have a single site hosted in IIS 8. I have two site bindings. One is for HTTP, the other is for HTTPS. HTTP is on port 80 with All Unassigned addresses, I left host name blank. HTTPS is on port 443 ...
0
votes
2answers
80 views

WHM/cPanel SSL certificate and two different subdomains per machine/IP

I have two servers with WHM/cPanel installed - server1.mydomain.com and server2.mydomain.com, and I would like to install WHM SSL certificate on both machines (different IPs). My question is do I ...
0
votes
0answers
39 views

Self Signed SSL Cert - Browser Warning

I generated a new self-signed cert for one of our intranet sites. The old cert expired today. I pushed the new cert out via GPO and deleted the old one. I can see on the client that the new cert has ...
0
votes
0answers
35 views

Have to reinstall certificate every so often

We call a web service which we have a mutual authentication set up. I have their certificate installed on my server in the "local computer" folder under "Third Party Root Cert Authorities". I call ...
0
votes
1answer
52 views

Extract key from JKS keystore to use with apache2 and tomcat

I have a keystore in JKS format and I want to use that with apache2. How can I export the key and the certificates (that i already chained) out the JKS in a easy way? I found many answers out there ...
0
votes
1answer
31 views

Set Up Of SSL Certificate COmmon Name to Protect Plesk Panel

A PCI Compliance scanner is balking that the self signed SSL certificate protecting secure access to Plesk Panel contains a name mismatch between the location of the Plesk Panel and the name on the ...
2
votes
1answer
96 views

Do I need to resign/regen a cert when moving IPs?

Are these errors related to moving a site to a new IP and keeping the same SSL CERT? Will I need to regen/sign to fix this? [Sun Jun 22 07:13:11.054280 2014] [mpm_worker:notice] [pid 2775:tid ...
1
vote
0answers
350 views

Enabling SHA2 Certificate Support on Windows Server 2003

A little background information first. I have an SSIS package that runs inside a Windows Server 2003 SP2 32 bit environment. The package recently started failing with the following error during a ...
5
votes
2answers
51 views

How to tell if an (offline) SSL Certificate been revoked

I would like to know whether an SSL certificate was revoked. The website no longer serves up that certificate, I only have the domain name and the serial number. The SSL certificate was replaced 5 ...
0
votes
3answers
119 views

Install godaddy ssl certificate on amazon ec2

I'm new to setting up ssl certificate and csr, i want to use public ip instead domain name in ssl. i created a csr file using following command and info openssl req -new -newkey rsa:2048 -nodes ...
0
votes
1answer
194 views

Two domains, two SSL certificates, one IP

I'm trying to run two domains, one with a wildcard certificate and the other one with a regular certificate from one IP and one nginx. Setup: example1.com with wildcard certificate example2.com with ...
1
vote
1answer
100 views

Error 26101: SSL certificate common name invalid

I have 3 systems with similar configuration: Windows Server Datacenter 2008R2 MS System Center 2012 connected to a storage array On 2 systems I can add the storage provider from VMM without any ...
7
votes
3answers
258 views

Why is Windows 2012 R2 not trusting my self-signed certificate?

In a testing environment, I'm currently being held up from testing some things that need to be deployed soon (actually already, but you know how deadlines go...) because Windows refuses to trust the ...
0
votes
0answers
70 views

IIS Client Authentication without a CDP

I'm running IIS 7.5 on Win2k8, and am trying to configure 2-way SSL. I've turned Require Client Certificate on in IIS, I've installed a valid root certificate in my local machine's trusted root store, ...
0
votes
2answers
36 views

SSL certs or intermediate for DMZ

I've been tasked with deploying and managing load balancers covering internal servers and DMZ servers. I have no experience with this, and this is a first for my organization as well. Balancers are ...
0
votes
0answers
204 views

Unable to complete secure transaction - Nginx Opera browser

i have this nginx.conf file worker_processes 4; worker_priority 15; error_log logs/error.log notice; pid logs/nginx.pid; events { use kqueue; # event method, kqueue ...
1
vote
1answer
18 views

Extract Certs from Apache

Recently I've had to uninstall a single Self-Signed SSL Certificate from one of my Apache boxes, specifically for an outside party. That's not really a problem for me, since it was easy. What ...
1
vote
2answers
96 views

OwnCloud RSA certificate configured for SERVER- ISSUE, webpage has a redirect loop [closed]

I had Owncloud running on a server that had died, I remember installing being easy, I have migrated server and Owncloud is one of the last apps to install. Ok Just downloaded and installed the newest ...
0
votes
2answers
510 views

How to get around Unrecognized Certificate Authority signature on Domino 9.0.1 with Go Daddy SSL?

I am a part-time administrator, at best, so I only get to do these things once every 2-3 years. I am reinstalling a Linux server that worked in 8.5.2. The SSL certificate is from GoDaddy. I have ...
0
votes
1answer
46 views

Is the decision to use SNI or IP based SSL made during cert purchase or cert installation?

It's time to renew an SSL cert - but the website will soon be moving from a dedicated machine with a fixed IP to a cloud based host behind a load balancer. When I renew or re-purchase my ssl cert do ...
0
votes
1answer
70 views

Why am I having trouble viewing HTTPS websites only using Chrome only on my employer's network? [closed]

I'm using Google Chrome on my new MacBook Pro that has been provided to me by my employer. Many of the HTTPS sites I visit do not work when I visit them using Google Crome while I am connected to my ...
0
votes
2answers
62 views

Does the server SSL certificate need to be kept private?

I understand that private key definitely does, but what about the certificate file? I also understand that the server sends (part of?) the certificate to a connecting client, but does it send the ...
5
votes
1answer
303 views

Windows 2012R2 seems to automatically download and install intermediate root certificates

Whilst preparing a new Windows 2012R2 server for production I needed to install a (GlobalSign Domain) SSL certificate for the website powering our application. I did this by generating a certificate ...
1
vote
1answer
189 views

Installing SSL certs with nginx on Amazon EC2

I finally got a cert from an authority and am struggling to get things working. I've created the appropriate combined certificate (personal + intermediate + root) and nginx is pointing to it. I got ...
0
votes
0answers
249 views

SSL Connection Error

I have purchased a comodo ssl cert and have submitted the Certificate Signing Request (CSR) generated by my server to the ssl management site. With the 3 files it returned me with, - ...
0
votes
0answers
233 views

The OCSP server has no status for the certificate. (Error code: sec_error_ocsp_unknown_cert)

Just set up a website (Apache/Centos) with SSL where the free cert came from startssl. I've used startssl before, and never had any problems. I have no problems accessing the site from IE and ...
2
votes
3answers
226 views

How to decide where to purchase a wildcard SSL certificate? [closed]

Recently I needed to purchase a wildcard SSL certificate (because I need to secure a number of subdomains), and when I first searched for where to buy one I was overwhelmed with the number of choices, ...
0
votes
0answers
62 views

Inject SSL client certificate in Nginx proxy

I have 2 Nginx instances, one is listening on 80 and has a proxy_pass https://second_nginx; The second instance is configured to listen on 443 with a self signed certificate, but also have the SSL ...
4
votes
2answers
80 views

Can't provision SSL certificate for my subdomain [closed]

Are only specific TLD's available for SSL certification? I'm trying to provision an SSL certificate for my subdomain, (I own the root domain but can't afford a wildcard SSL yet) but I can't find an ...
2
votes
1answer
75 views

Multiple SSL certs for wildcard domain

I would like to set up an EV SSL certifcate for a few subdomains like blog.domain.com and www.domain.com. I also need to set up a wildcard PositiveSSl cert for *.domain.com, excluding blog.domain.com ...
1
vote
1answer
243 views

Root certificate authority works windows/linux but not mac osx - (malformed)

I have created a self-signed root certificate authority which if I install onto windows, linux, or even using the certificate store in firefox (windows/linux/macosx) will work perfectly with my ...
2
votes
1answer
154 views

How to install (update) SSL certificate for a website in Windows NLB cluster

I wanted to ask what the proper procedure for installing an SSL certificate onto two servers running IIS6 that are in an NLB load balancing configuration. Yesterday I installed the certificates ...
0
votes
2answers
246 views

Chef Server 11.4 SSL certificate failure when bootstrapping a node

I'm trying to bootstrap a RHEL 5 server with Chef 11 Chef-Client using my Chef 11 Work station through a Chef Server 11.4. However, I am receiving the error below. ...
0
votes
1answer
204 views

Sending to gmail with TLS and self signed certificate

Since many provider switched to TLS only connections, I cannot deliver to gmail anymore with a default plaintext postfix setup. My question is, can I use valid TLS / does google accept TLS with a ...
0
votes
0answers
298 views

Where to locate certificates and keys on Centos 6.5

Looking at my Centos 6.5 /etc/pki/ directory, I see the following system generated directories: [root@vps ~]# ls /etc/pki CA ca-trust java nssdb rpm-gpg rsyslog tls [root@vps ~]# ls /etc/pki/CA ...
2
votes
1answer
128 views

Outlook: Name on security certificate invalid

Our end users are receiving the following dialog box in Outlook which refers to an incorrect internal domain name (domain.internal). No dialog box is received if using Outlook Anywhere. Clicking ...
1
vote
1answer
2k views

Postfix and OpenSSL: “Unable to get local issuer certificate”

I bought a certicifate for my mail server and configured it in Postfix like so: smtpd_tls_security_level=may smtpd_tls_CAfile = /etc/ssl/certs/ca-certificates.crt smtpd_tls_cert_file = ...
1
vote
0answers
119 views

SSL Returning Blank Page, No Catalina Errors

This is my second, maybe third, time configuring SSL with Tomcat. Earlier I had created a self signed, which worked, and now using my signed is proving fruitless. I am using Tomcat, operating from ...
1
vote
2answers
157 views

Do I need wildcard SSL for the www subdomain

I own example.com, example.net, and example.biz. I use Apache to rewrite example.net and example.biz to example.com. Based on this rewriting, it is my understanding that I would only need a ...
-1
votes
1answer
118 views

intermediate certificate not sent by WAMP

I have a strange problem that noone can help me with. I will really appreciate any help figuring this out. I have a wamp installation running apache 2.4.4 and latest openssl (which i downloaded and ...
0
votes
0answers
96 views

Unable to get private key, path is correct, file readable

When testing Cyrus IMAPs connection, the connection fails with: May 12 21:03:16 mail cyrus/imaps[25758]: executed May 12 21:03:16 mail cyrus/imaps[25758]: accepted connection May 12 21:03:16 mail ...
6
votes
2answers
571 views

How to find out if an OpenSSL certificate was created by a certain private key?

I have an OpenSSl certificate. I also need the private key. I was told it is located somewhere on the server, and true enough, I found multiple SSL key files. Before I try them all by brute force: Is ...
-1
votes
1answer
45 views

ssl address mismatch on purchased ssl cert [closed]

i've bought a "Protect 1 Website" ssl from godaddy http://www.godaddy.com/ssl/ssl-certificates.aspx , and requested and downloaded a cert for domain "example.com", but when i access dev.example.com, ...
1
vote
1answer
91 views

Issuer Subject Policy in Self-Signed CA Certificate

When I build a self-signed certificate for an internal CA, should I make the issuer DN match the DN in the request, should they be different, or is there no convention for one or the other?
0
votes
0answers
69 views

Using SSLCACertificatePath in httpd

I am trying to use the SSLCACertificatePath directive in httpd to point to a collection of roots and intermediates for client certificate validation. I am able to use a full, concatenated ...
2
votes
0answers
1k views

SSL verification error with git (on github) on Ubuntu 14.04

I'm trying to clone the atom repository that just went fully open-source and I've run into some trouble. Attempting to git clone the repository is producing an SSL error: wug@wugputer:/src/test$ git ...
1
vote
1answer
110 views

If I get an invalid public key error does that mean I have an incorrectly installed certificate

I have created an API (running on an nginx server, let me know if there are any details that you think are relevant) for a client and they received this error when trying to call my service: Notice: ...
0
votes
1answer
64 views

Why do we need to list our CAS servers as SANs in Exchange 2010's UCC certificate?

We currently have a few CAS/Hub servers behind a hardware balancer. We were told by Microsoft and Digicert that we may not need them listed as SANs in our UCC cert since we do not publicize their ...
1
vote
1answer
50 views

SSL Certificate Not Getting Refreshed

I am trying to change the SSL Certificate for my website. I got the new certificate issued by Comodo and installed it on my web servers. My servers are running IIS7.0. I also binded the https ...
10
votes
1answer
131 views

Find out how many browsers reject SSL certificate

I'd like to find out how many browsers reject our SSL certificate when making HTTP requests to our webserver. We're using a free CA which now seems to be recognised by most modern browsers, but I'd ...