SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

3
votes
2answers
1k views

SSL certificate for website - no legal company name?

I am launching my own social website and need SSL for the user login section. To get the SSL they require the CSR key, which requires an organization name, and this name it is mentioned should be ...
1
vote
2answers
2k views

403.16 - Client certificate is untrusted or invalid - IIS 6 - Windows Server 2003

i get the following error page if i try to open a https page on my server: "Client certificate is untrusted or invalid" The Server was already working, i had to renew the certificate because it ...
8
votes
1answer
4k views

Certificate does not have a name

I've successfully managed to install an ssl-certificate in IIS, however the 'Name' column is showing as blank even though I entered a friendly name. Is there any way to rectify this? The screenshot I ...
1
vote
3answers
1k views

IIS7.5 - Personal SSL certificates for multiple users

I want to get a security model implemented, but I'm not sure what terminology IIS/SSL uses in order to do that. Nor do I know how to make it happen in IIS7.5 The process I want to have ...
1
vote
1answer
731 views

Windows Mobile 6.1: Can't access internal site via https

Whe have several Motorola Symbols (don't remember the exact model) running Windows Mobile 6.1 They are used for entering data in the field, and then at the end of shift the employees come in and ...
0
votes
2answers
927 views

End to End SSL connection using Haproxy?

I want to know about how Haproxy reacts when I want to make the HTTPS connection over the server. In apache we have aj_proxy to make a ssl connection to tomcat server, so how that functionality can be ...
0
votes
1answer
795 views

Smartcard (USB Cryptostick) and Firefox

I am having a GPF-Cryptostick running on ubuntu 11.04 with firefox 5.0. Using a smartcard is such a great thing, but i did not found any good how-tos. Maybe it is just a lack of understanding. First: ...
0
votes
1answer
52 views

How many certificates are needed if to redirect non-www requests to www prefixed ones over https

If I want to redirect https://example.com to https://www.example.com, are two certificates needed? One is for example.com and the other for www.example.com?
0
votes
1answer
64 views

SSL Certificate with any webhost

Is it possible to buy an SSL certificate from verisign or comodo for exapmle, and use it with my shared webhosting in another company? if yes, how?
0
votes
1answer
808 views

Using several SSL certificates on same IP with IIS 7

I've got several domains (different sites with different domains. not sub-domains) which need SSL. I couldn't find a way to make it work - so that each domain will have its SSL certificate, but use ...
0
votes
1answer
445 views

Installing 123-SSL from 123-reg on Apache2

I've moved away from GoDaddy as I hated having to sign into their site and got a cheap ssl cert from 123-reg, however 123-reg's instructions are contradictory and their support seems to be ...
2
votes
4answers
279 views

Is there a provider that offers free SSL certificates that don't give a warning in Firefox 4?

I am looking to install SSL certificates for frequently used https services. I used to use StartSSL for this, but they "temporarily" stopped offering their services. I wonder if there are any other ...
1
vote
2answers
489 views

How do append a CA to an SSL certificate?

I am trying to setup an SSL cert for a domain on my Zimbra server. When I go to the place where it wants to me to paste the certs into the borwser windows it pops up a little warning message that ...
0
votes
1answer
67 views

Configuring apache with SSL

I am trying to configure apache with SSL. I am facing 2 issues: 1) If typed www.example.com it doesn't redirect to https://example.com (Though, i have written the rewrite rule). 2)And while running ...
7
votes
1answer
417 views

What happens to encrypted mails when CA certificate expires in my Windows Domain

does anybody know what will happen to encrypted /signed mails when a root authority certificate expires in my domain network? Can the certificate still be validated from the clients and will the ...
2
votes
1answer
3k views

Why can't I export a certificate that I imported as exportable?

On Windows 2008, I'm using OpenSSL to generate a self-signed certificate (the openssl.cfg file is empty): openssl.exe req -x509 -config openssl.cfg -days 10950 -subj ...
3
votes
3answers
3k views

SSL Certificates: Multiple Single Domain vs Wildcard?

I'm my company we want to deploy SSL certificates to some websites we own, and our RADIUS server as well (Cisco ACS). What is the practical difference from acquiring 5-10 single host certificates or ...
0
votes
2answers
3k views

https proxying with squid and local CA produced site certificates

At the moment I redirect http(443) requests into squid configured https_port. It works as expected. It terminate ssl connection with the ssl certificate installed in Squid. And then proxies traffic. ...
1
vote
2answers
172 views

SSL with multiple servers and domains

Our current setup utilizes multiple VPS's along with multiple domains. ex (And yes I know these IPs are all fake and unusable in reality. All for example..) alpha.domain.com 66.555.555 ...
29
votes
5answers
2k views

Is a Self Signed SSL Certificate a False Sense of Security?

Is a Self Signed SSL certificate a false sense of security? If you are being eavesdropped, the user will simply accept the certificate like he/she always does.
0
votes
1answer
619 views

Using multiple SSL certificates in Tomcat 7 for a webapp

I've been using a wildcard SSL certificate in Apache Tomcat 7. But now that I have to renew, I see there are these EV (extended verification) SSL certificates where browsers show a nice green bar so ...
1
vote
1answer
396 views

SSL Cert Showing as Untrusted in FireFox 4.0.1

I pushed out a new EV SSL cert for our site, it is working in all browsers we have tested but not consistently in FireFox 4.0.1, Some users report the problem for that version of FireFox but some ...
1
vote
0answers
1k views

Debugging mutual-authentication SSL handshake

I've got a load balancer that is configured for mutual-authentication SSL. As far as I'm aware, the load balancer has been configured with an Entrust certificate, and has been installed with our own ...
7
votes
2answers
3k views

Migrating puppet clients to new puppetmaster

How can I migrate our existing puppet clients to point to a new puppetmaster server? I'd rather not manually go to each client box and generate a new certificate. When trying the obvious -- rsync all ...
3
votes
1answer
293 views

Create Self-Signed Root Level Certificate on Ubuntu

I have found tutorials in the past for creating self-signed certificates. Now for my personal website (on a virtual server), I want to use a self-signed SSL certificate for logging into my WordPress ...
1
vote
3answers
135 views

Virtualisation and multiple SSL, is it possible?

I'm totally new in virtualization but I was wondering if this was possible. I know using multiple SSL on one host is not simply possible (require wildcard ssl or some odd manipulation apparently not ...
5
votes
3answers
2k views

Can I purchase a certificate for my domain that can sign other certificates for subdomains?

I have written a small program to run on a Windows computer that serves SSL/TLS web pages through port 443 to visiting web browsers. I want it to be easy for non-technical people to install and run ...
0
votes
1answer
1k views

Remote Web in SBS 2011 Essentials (SSL Issue)

I am having an issue setting up Remote Web in SBS 2011 Essentials. Everything works except Remote Desktop, which keeps giving me SSL cert errors. Is there a way to override the TS Gateway's decision ...
0
votes
1answer
728 views

IIS 7.5 Unable to use self signed certificate on a per web site basis for https binding sharing port 443

I'm using SelfSSL7 to create a self signed certificate in IIS 7.5(Win Server 2K8 R2). I have 2 sites in IIS ( the default site and a test site). I ran the following to create the cert. SelfSSL7.exe ...
0
votes
1answer
1k views

SelfSSL7 for CN = localhost and MachineName

I'm trying to create a cert for the default web site on my local dev server using selfssl7 I ran the following and it generates a cert for the machiname ( visible under "server certificates" in IIS) ...
1
vote
1answer
256 views

How to dynamically add certificates on Amazon Cloud to enable multidomain SSL comunication?

I need to manage multiple SSL Certificates on Amazon ELC instances farm, running multiple domains on a Ruby on Rails application. The problem is that we need to dynamically add new certificates to ...
1
vote
1answer
201 views

Is including internal servers into ssl certificate a problem?

We deploy a web application (Dynamics CRM) on a single IIS server which should be reachable from the internet. The application is only accessible with HTTPS. Therefore we need a ssl-certificate, ...
4
votes
1answer
340 views

Apache ServerName uses AlternativeName instead of CommonName

I have recently purchased an SSL Certificate. The CommonName (CN) of the certificate is www.mydomain.com and has several AlternativeNames such as subdomain1.mydomain.com, subdomain2.mydomain.com etc. ...
2
votes
1answer
2k views

How can I use an SSL certificate generated with Java keytool with Nginx?

I used the Java keytool to generate a "keystore": keytool -genkey -alias example.com -keyalg RSA -keystore example.com.keystore Then I generated a CSR (Certificate Signing Request): keytool ...
2
votes
1answer
2k views

nginx ssl wildcard cert issues

We currently have a single nginx server running as a backend proxy for 4-5 Apache servers. my problem is that after installing the ssl certificate i get the following error when testing the ssl ...
2
votes
2answers
3k views

suppress warnings from windows live mail untrusted cerficate ssl

Hi we have setup our own mailserver using ssl. Each time I start up windows live mail, in comes up with an annoying message that "The server you are connected to is using a security certificate that ...
0
votes
2answers
1k views

Installing Private and Public Key Certificates On IIS7

I'm not an expert on IIS but every year I really struggle getting a certificate onto an IIS7 server that hosts our ecommerce website. I buy my certificates via 123-reg and I get a GlobalSign private ...
3
votes
4answers
123 views

Enabling SSL for a website

I want to enable SSL on my local computer for an asp.net 4.0 web site. What steps do I need to take? I want to use a free SSL certificate.
3
votes
2answers
4k views

Exchange 2010 SSL certificate requirements for multiple domains

I've read this, and I'm still not 100% on this. If our Exchange server is hosting email for multiple authoritative domains, do I need matching SAN names on the SSL certificate for each one? In our ...
1
vote
1answer
122 views

SSL certificate on server change

I had purchased a SSL certificate from Godaddy for my server. Now I changed my server and copied the key and csr files over to new server but they are being perceived as self signed. Do I need to ...
0
votes
1answer
855 views

IIS 7.x client certificate mapping to ApplicationPoolIdentity

In IIS 6 I was able to use the following technique: Turn on requirement for client certificates Using adsutil.vbs figure out what IUSR_Server user password is Create a one-to-one mapping of the ...
0
votes
2answers
175 views

Apache SSL - self signed certificate

I know this might be a very newbee question, but I couldn't find anywhere how to solve this. I managed to create a self signed certificate for my production environment (apache) and activated SSL, ...
1
vote
2answers
3k views

Adding an RP to ADFS 2

I'm trying to add a Trusted Relying Party using the ADFS 2 wizard. My dev site (IIS hosted) has an HTTP binding at port 61080 while the HTTPS binding is on port 61443. I've got a self signed .PFX ...
2
votes
3answers
478 views

is wildcard ssl insecure?

Is there anything inherently more insecure about using a wildcard SSL certificate over a regular SSL certificate? We are looking to implement a subdomained web application (a la FreshBooks and ...
2
votes
1answer
731 views

Wildcard SSL certificate not working with Chrome's built-in Flash player

I'm currently working on a system that has a Flash Client talking to a remote application server via RTMPS. The Flash Client and the app server handshake using an SSL wildcard certificate. For ...
0
votes
1answer
103 views

Self-generated SSL Certificate Not Working with Apache

I've tried to follow a tutorial on self-generating a SSL Certificate. I've created a file "www.mysite.com.csr" and a file "www.mysite.com.key". However, when I restart apache, it doesn't prompt me ...
0
votes
1answer
53 views

Will this situaton generate a warning from the browser?

I need to set up a domain/server/page with a ssl certificate. let's call it https://page.domain1.com this will contain in an iframe content from https://page2.domain2.com Will this situation ...
2
votes
1answer
1k views

SSL Certificate doesn't work on IIS 6

I have been trying to install a UCC SSL certificate from Godaddy on our servers. I have been able to successfully create the CSR on the main server (IIS6) and had it approved by Godaddy. Then for ...
1
vote
2answers
217 views

Advice regarding Exchange 2010 topology and certificates

By chance, I've been asked to do some research on a migration from Exchange 2003 to 2010. I've been working with Exchange 2007 for some years but without any formal certification or the likes. I've ...
3
votes
1answer
447 views

Setup self signed SSL on Mac OS X

I'm trying to setup a self signed SSL certificate with this tutorial, but I'm getting these errors at the last step of certificate creation (with the sign.sh script) error 18 at 0 depth lookup:self ...