SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

learn more… | top users | synonyms (1)

2
votes
5answers
3k views

Default CA Cert Bundle Location

I need to add a .pem cert file to my default CA cert bundle but I don't know where the default CA Cert bundle is kept. I need to append my new .pem file to this default bundle. I'd rather do that ...
5
votes
1answer
10k views

Install existing SSL certificate on Dell iDRAC7

I've got some servers with iDRAC7 Enterprise and I want to add my existing wildcard SSL certificate for my domain so that when I load the iDRAC webpage I get a valid certificate. I've tried the "...
0
votes
3answers
820 views

Can a new domain name be easily added to an existing SAN SSL certificate?

I'm looking at getting an SSL certificate and I think the SAN type is what I need. However, Can I easily add further domain names to be covered by the certficate in the future. E.g. I have www.example....
0
votes
1answer
770 views

Error while converting der private key to pem

I have DER private key and certificate. I need to convert them to PEM format. Certificate converted normally, but when i try to convert key this error happens: # openssl x509 -in client-key.der -...
2
votes
2answers
1k views

Does an SSL certificate with the common name example.com work for example.com/app1/payment?

I am new to SSL certificates and their setup. I have not found any details regarding this so I am asking what may be simple question. I am going to order an SSL certificate so I want to know if an ...
0
votes
1answer
26 views

Traffic isseus when SSL is used

We started to use SSL (urls stayed the same, but we went from http to https) and we see a huge cutback in traffic. Is there any change that this is related? And if so, how come?
3
votes
3answers
1k views

One SSL Certificate for 3 Domain Controllers

How does one generate a self-signed (later a CSR for a real cert) SSL certificate for three domain controllers (dc1.example.com dc2.example.com dc3.example.com) for the Windows domain EXAMPLE.COM for ...
7
votes
4answers
694 views

What's the common practice of when to update a soon expiring SSL certificate?

Recently Windows Azure Storage SSL certificate expired and that causes a lot of problems. Now the certificate can be retrieved by any user and so everyone could have noticed that it was going to ...
1
vote
1answer
3k views

Installing SSL Thawte Certificates for tomcat from pre-generated Private Key

I have received a Bunch of SSL certificates that i need to install into tomcat servers, and normally this is easy enough. However, these certificates have had their private keys generated elsewhere ...
1
vote
2answers
2k views

Can you re-use a SSL certificate across platforms?

Let's say I want to buy a wildcard SSL that I can use for web servers, spanning across a multitude of different servers and platform. I could issue a CSR for each and every one of them, with their ...
0
votes
1answer
753 views

problems with nginx and serving ssl; possible certificate issue

I have a site that I haven't launched yet that is running all http traffic on production over ssl. The problem is that if a call is made to https://www.domain.com/homepage.html , there is also a call ...
0
votes
1answer
70 views

Redirect Email Bypassing Mx priority number - installing SSL

I have client website hosted on my server but they use a different mail server not hosted with us, so we basically have 1.MX entry to their mail server IP with priority 10 2.DNS A record to mail.xxx....
3
votes
1answer
2k views

Why do these two SSL cert offerings differ so much in price? [closed]

I'm shopping for a wildcard SSL certificate. I found the following one from a reseller for $84/year: http://www.namecheap.com/ssl-certificates/comodo/positivessl-wildcard-certificate.aspx Just out ...
0
votes
1answer
695 views

Would a self signed ssl cert significantly slow down ajax requests?

I have a site with a live scoring page that updates via ajax while games are going on. It was working fine when the site was running on http. We installed an ssl an its either self signed or ...
0
votes
1answer
2k views

How to install godaddy's ssl on apache

I'm setting up a mail server for a company, I've done everything, generated csr, everything is working, I just need to add godaddy's ssl, the instructions given by godaddy aren't clear, i need some ...
0
votes
2answers
613 views

What steps i need to configure ssl on haproxy/iis

I have two web server and one haproxy load balancer in front of them. I want to setup ssl connection for my login page. Can someone give me life cycle steps what i need to do? Can i make this with ...
0
votes
1answer
687 views

IIS7 SSL certificate caching

I changed certificate in IIS 7, changed bindings on websites, everything OK. But when I'm trying to set my old certificate (and I'm changed bindings too), I still get new certificate instead of old. I ...
3
votes
3answers
5k views

How to configure my Elastic Load Balancer to balance SSL traffic?

I'm totally lost so I apologize if I'm not making sense. I need to create a load balancer in EC2 for our application servers. I'm trying make the ELB balance traffic over SSL (8443). However, it's ...
0
votes
1answer
93 views

Exchange 2010, multiple domains, multiple certificates bought, not possible to use them

We bought several certificates with 5 SAN on each for our several accepted domains on Exchange 2010. Now we realize that you can only have one certificate at a time for exchange services, which means ...
2
votes
1answer
984 views

What is the difference between Apache + OpenSSL and Apache + mod SSL

I am moving from self-signed certificates to a signed certificate. I am using namecheap and positive SSL. There are options for Apache + OpenSSL and Apache + mod SSL. It was my impression that mod ...
31
votes
2answers
26k views

How can I work around problems with certificate configuration in Remote Desktop Services?

I am setting up a Remote Desktop Services farm, and am having trouble configuring certificates for it to use. A demonstration of the problem I'm seeing can be found in Step #4. At this point I am ...
0
votes
1answer
69 views

handing out client certificates

I'm building a webapp and for the first time I need to look in to security, because some actions should only be done by registered users. of course these parts of the app operate trough https (...
-1
votes
1answer
1k views

SSL lock does not show in browser address bar when URL contains .php [closed]

I have installed SSL Certificate in my hosted machine. And Forced to redirect it to "https" location. It also work when it redirected to location containing .html ext. But total failed when ...
14
votes
2answers
19k views

How to combine various certificates into single .pem

I've just finished reading over this great thread explaining the different SSL formats. Now I'm essentially looking for the opposite of How to split a PEM file There's 4 files I want to consolidate, ...
0
votes
1answer
8k views

Subject Alternative Name not added to certificate

I'm trying to issue a new certificate using the additional attribues field within the Windows CertSrv Web-Enrollment Client. I added the CSR, picked the template and entered this into the attributes ...
0
votes
1answer
986 views

How to configure a host file to map an IP address to any SSL secured domain name?

i have a SSl secured link and I need an IP to be mapped against it, I tried with general mapping in hosts file by using below snippet: <IP Address> uploads.mydomain.com in above snippet ...
-1
votes
1answer
138 views

Where to append an SSL certificate? (Domainprovider or Hoster) [closed]

I have a domain hosted at Bluehost. The domain's DNS shows to another Hoster: Hetzner. When asking Bluehost they told me, that they can only give me an SSL certificate, when i host my site with them ...
0
votes
1answer
353 views

varnish and SSL

Can you use varnish with SSL? What I currently have. Can I get SSL in here? backend default { .host = "127.0.0.1"; .port = "8080"; } # # Below is a commented-out copy of the default VCL logic. ...
0
votes
3answers
75 views

2 ssl not working on same IP

I have 2 different domains with their respective certificates, but both are hosted on one single IP. problem is that when i enable one, then the SSL certificate is enabled for both sites. like SSL for ...
1
vote
1answer
209 views

Configuring a reverse proxy to an external server through SSL while tomcat also uses SSL

I have two Amazon EC2 instances, call them A and B. A runs Apache and Tomcat. On server A, Apache only uses plain HTTP. Tomcat listens on 8443, but I use iptables to redirect requests on 443 to 8443 ...
1
vote
1answer
756 views

CA root certificate in pam_ldap configuration will not work without tls_checkpeer no

Systems are Debian Squeeze and Ubuntu Precise with identical configurations. Version of libpam-ldap is 184-8.5 on both distros. Everything works fine with the following configuration in /etc/...
2
votes
1answer
818 views

How to force a browser to prompt for client certificate, even when one was already previously added

Any way to force the browser to prompt for a client certificate, even if another one was already installed? At that apache level? At the browser level? I'm totally cool with a solution that is ...
1
vote
2answers
11k views

Can't make httpd use correct SSL

I have a signed CA, issued by my university. I generated my CSR using their public key file as so: openssl genrsa -out myservername.key 2048 (new key) openssl req -new -key myservername.key -out ...
3
votes
1answer
43 views

Certificate issue causing code to fail

We have some code that connects to a website to call a web service. When I run the code on our server under my account (local admin) the code runs fine. When I run the code under a different user the ...
2
votes
1answer
1k views

LDAP expired SSL certificate

The SLL certificate on the LDAP server expired recently, making it impossible to ssh into other Linux machines who relay strictly on LDAP. Being a self-signed certificate, my understanding is that it ...
1
vote
1answer
2k views

Why Apache is returning a wrong certificate?

I have foo.es site with a SSL wildcard certificate running since 2 years ago. Now I want to install another certificate for "*.foo.com" in the same server. I've copied the new foo_com.crt and foo_com....
1
vote
2answers
2k views

How to fix from the server side: ERROR: The certificate of ‘www.example.org’ is not trusted

I am managing a website which uses a SSL/TLS Certificate from a well known issuer (GoDaddy in this case, although this same error appears with certificates from other issuers). The website is hosted ...
30
votes
2answers
12k views

Must CSRs be generated on the server that will host the SSL certificate?

Is it necessary to generate the CSR (Certificate Signing Request) on the same machine that will host my web application and SSL certificate? This page on SSL Shopper says so, but I'm not sure if that'...
1
vote
3answers
21k views

SSL certificate not found in the drop down list - IIS 7

With IIS 7 I succeeded to import a new SSL certificate to the Trusted Root Certification Authority store, and then to the Personal store. In the web site binding properties in IIS manager, I wanted to ...
0
votes
1answer
102 views

Exchange certificate not accepted in intranet

I bought a SSL certificate for Exchange OWA, I installed this cert in Exchange and it works properly with internet access... however now i get some trouble with intranet access by Outlook, i always ...
1
vote
1answer
608 views

How to include chain.cer in a keystore file?

I would like to create a keystore file with a certificate and a chain.cer file. # openssl pkcs12 -export -chain -CAfile chain.cer -in example.cer -inkey example.key -out keystore.jks -name tomcat -...
3
votes
2answers
2k views

Can an SSL certificate be on a single line in a file (no line breaks)?

SSL certificates by default have line breaks after 67 characters. I'm trying to create SSL certificate files using Chef. Essentially I want to create the entire certificate file from a string variable ...
0
votes
1answer
66 views

Conventional place to store ceritificates and keys in Ubuntu 12.04

I am migrating a server I inherited; it has a signed certificate. The server is a "LERP"-stack (Linux Nginx Rails Passenger). The previous maintainer stored the certificates under /etc/nginx/; I ...
3
votes
1answer
98 views

Is there a reason a wildcard cert won't work vs. single?

Caveat: I'm a developer by trade (so please use small words). A vendor hosts a secure site for us that is branded with our name/domain, orders.oursite.com. Since original setup we've purchased a ...
1
vote
1answer
1k views

How to install UCC GoDaddy SSL Certificate on Amazon EC2 ELB

I've read through this: Install SSL on Amazon Elastic Load Balancer with GoDaddy Wildcard Certificate but am still a bit unsure. I have a subdomain: platform.mysite.com that is pointed to an ELB in ...
0
votes
1answer
171 views

Why does an invalid system time cause a SSL-webapplication to fail?

Question: We have a asp.net login page (SSL), with username and password. You enter them, you click ok, if the credentials are OK, you get redirected to the navigation page. If the credentials are ...
0
votes
2answers
165 views

Multiple SSL based IPs on lighttpd

I have lighttpd as web server and on it I have installed IP-based SSL certificates. I want to have a way to have multiple SSL certificates on each new IP that the server may get. For example, at the ...
0
votes
1answer
270 views

Converting .cer to .pem errors

I realize that there are multiple posts about converting .cer to .pem, but none actually mention issues regarding the coversion. I have a cert named Cert.cer (original, I know) that I'm trying to ...
0
votes
1answer
238 views

Local proxy for SSL service

I am trying to set up a local proxy for an SSL-based (HTTPS) service. The proxy will need access to the clear-text of the content going in both directions (for compliance reasons). I have control ...
1
vote
2answers
118 views

How do I automate exporting a DER encoded certificate for a site?

I'd like to automate the following process with the openssl command: Open browser, go to https://www.google.com Inspect ssl cert Export it locally in DER format I've been working along the lines ...