SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

0
votes
1answer
157 views

installing ssl on a virtualserver a vps

My Problem: Installing SSL on VPS, for one domain. My server: Ubunutu / Apache / mod_ssl / openssl Using Virutalmin / Webmin Two IP address. I have four domains hosted on my vps, ...
1
vote
1answer
87 views

Drawbacks in use an internal CA for a production Exchange 2007/2010 SAN certificate

Is there any critical drawback in using an internal CA to release an Exchange 2007/2010 SAN certificate for a production environment?
2
votes
4answers
10k views

Assign CA certificate to Fortigate https WAN interface

I have a Fortigate 80C that allows remote administration via https. I access the URL and all fine but the one thing that really bugs me is that is brings up "untrusted connection" in chrome with the ...
3
votes
3answers
3k views

SSL 2048-bit certs, how to upgrade our web app without breaking legacy API customers?

The Problem SSL certificate providers are moving from certificates signed with 1024–bit RSA keys to the new 2048-bit RSA key standard. One article explaining the background and significance of the ...
4
votes
2answers
412 views

Is it possible to create an internal SSL certificate with Subject Alternative Names

Having just upgraded from Exchange 2003 to Exchange 2010, I'm attempting to create a certificate that can be used both internally and externally (by staff). Previously with exchange 2003, we didn't ...
34
votes
2answers
7k views

Should a wildcard SSL certificate secure both the root domain as well as the sub-domains?

I ask this question, because Comodo are telling me that a wildcard certificate for *.example.com will also secure the root domain example.com. So with a single certificate, both my.example.com and ...
0
votes
1answer
276 views

reverse proxy redirect and ssl

I need to clarify something that some experts would probably know better about. there is domain company.com, and there is a web server called server1.domain.com. This server is a dedicated web ...
0
votes
1answer
139 views

Understating certificate authority nesting

Given we have the following network/CA structure: Win2K8R2 - Root CA - no idea where its' certificate is? Win2K8R2 - Sub CA - obtained CA certificate from Root CA Win2K8R2 - OWA 2010 (Basically, a ...
0
votes
1answer
685 views

Renewing a OCSP and OWA certificates for Exchange 2010

We have been using an Exchange 2010 mail server for a year now. Today the certificates used in Exchange, as well as of Forefront TMG expired. We had the following certificate chain: Root CA issued a ...
5
votes
4answers
10k views

sec_error_unknown_issuer but only with Firefox and IE6

I recently renewed the SSL certificate on my site and while initially it seemed that the certificated was installed correctly, I was shocked to discover hours ago that the HTTPS connection no longer ...
2
votes
2answers
2k views

How do I use a Multi-SAN certificate on both Lync and Exchange servers?

I have a Multi-SAN certificate issued by Godaddy which has four subject alternate names. to use this in an Exchange environment, I have added the external hostname and internal hostnames of my ...
0
votes
2answers
324 views

Apache: Multiple Virtual Hosts w/ SSL Certificates?

I have an Ubuntu 11.04 Server with multiple Virtual Hosts running on a shared IP. Is it possible to have two (different) SSL certificates for each site? I remember hearing something about you only ...
1
vote
1answer
348 views

Linux Certification Authority signing Windows 2003 Server certificate requests

I've had some success using a Windows 2003 Server running as a Certification Authority signing certificates used in secure communications between Ubuntu Linux and Active Directory on Windows 2003 ...
1
vote
2answers
436 views

Setting up SSL certificates with Apache

I am trying to create my own CA and Server certificate for my apache server on windows. When ever I start apache I get "Failed to configure CA certificate chain!" The apache ssl conf settings are: ...
2
votes
1answer
1k views

IIS 7.5 HTTPAPI 404 error on HTTPS pages

I have run into an interesting problem with one of my web servers giving 404 errors on the HTTPS parts of the site. Here is how we have it setup, we have a single website setup on it that has no host ...
2
votes
1answer
340 views

Crypto key storage and recovery — best practices?

We have a bunch of SSH, GPG, SSL and other private keys that, obviously: must only be available to the smallest number of people possible can't be "lost" if a hard drive dies or the building burns ...
0
votes
1answer
814 views

How to create a proxy certificate?

I have created an ssl-based server that I need to now create a proxy certificate for. (the second part of the school project). I have found these lines on the OpenSSL Project: openssl req -new ...
3
votes
1answer
3k views

Where Is an SSL Private Key Stored?

My particular situation applies to Windows but I welcome knowing how this would differ from other practical applications. The subsets contain information that I'm basing my logic on, please correct ...
1
vote
2answers
192 views

Multiple SSL certificates on the same Apache site with different IP addresses

I have two different domains - thisdomain.com and otherdomain.com, we can't do anything with wildcards here. The domains have their own SSL certificates. The domains both have their own separate IP ...
7
votes
2answers
16k views

Stunnel won't work with SSLv3 from some hosts

I'm trying to set up Stunnel to server as SSL cache. Everything was smooth, and mostly it works as designed. Then I encountered errors in log files: SSL_accept: 1408F10B: error:1408F10B:SSL ...
1
vote
3answers
863 views

Moving SSL certificate to another Apache server

We just setup new Windows machine as a web server, with Apache 2.2.19 with openssl installed and we want to move our existing web including the SSL certificate (Verisign) from the old setup, Linux, ...
3
votes
2answers
6k views

Exporting SSL Cert private keys in IIS 7.0

In IIS 6 on Server 2003, I can go to a web site's properties and walk through the wizard to generate a new cert request. Once I complete the request and have the cert installed on the web site, I can ...
5
votes
2answers
5k views

openssl keeps giving me “unknown option” errors

I'm trying to create an SSL cert for the first time. I have no idea how this works and am simply following some instructions provided to me. first command works fine: openssl genrsa -des3 -out ...
2
votes
1answer
168 views

Can I obtain trusted SSL certificates without giving out personal information?

I am launching a site that will require secure (ssl) account login, no payments or credit cards involved. Self signed certificates gives annoying warnings in browsers, so I want to get a trusted SSL ...
0
votes
1answer
61 views

setup own web server

I want to setup my own web server for one of my websites. the site will be in php. I got the server configuration. there will be a linux(red hat) server with apache and mysql installed. I have some ...
0
votes
1answer
331 views

ssl domain problem for signed asterisk certificates

I have two hosts set on apache server with signed ssl certs. Both virtual hosts have correct configuration I believe. First is sub.domain.com witch is working correctly and browsers don't complain ...
2
votes
2answers
227 views

Certificate Authority impersonation

My question is what would prevent a person from taking a certificate and using it to make their fake site look legit. Say you log onto Amazon and your browser grabs that certificate. Then that person ...
1
vote
1answer
104 views

Renewing a certificate with Geotrust - a general question

First off, allow me to explain that I'm the middleman in the process looking for clarification. I have a client who wants to renew one of their SSL certificates (Geotrust) on a website that we host on ...
0
votes
3answers
4k views

SSL troubles - Generate .key from .crt? (AlphaSSL)

This is greatly troubling me, I have generated a .csr and .key file to send to dynadot (which sends that to AlphaSSL) with this command: openssl req -out foo.com.csr -new -newkey rsa:2048 -nodes ...
1
vote
1answer
87 views

Can I apply SSL to all my virtual hosts with this?

I've been wanting SSL for one portion of my website, which is one single domain name on my VPS. As most certificates look fairly expensive, I had looked at my domain name provider and had found a ...
3
votes
2answers
83 views

how to sign web pages

using https for websites ensures that the communication is encrypted and comes from and goes to the right server. BUT https is really slow compared to http, it also breaks the http cache protocol. ...
1
vote
1answer
815 views

Apache sending wrong SSL certificate on some connections / browsers

I have a bit of a strange problem and I hope someone can help! I have just moved servers (both Linux running Apache 2.2) and re-installed everything and pretty much everything is back up and running, ...
1
vote
2answers
1k views

Apache Client Certificate Authentication

How can I configure Apache 2 (on Ubuntu 10.04) to use Client Certificate Authentication where my domain (secure.somedomain.com) is secured by a third party trusted SSL certificate, and the client ...
0
votes
1answer
2k views

getting HTTP Error 403.7 - Forbidden: SSL client certificate is required

-1 down vote favorite Created a CA using: makecert -r -pe -n CN=WingCA -sr CurrentUser -a sha1 -sky signature -cy authority -sv WingCA.pvk WingCA.cer imported it to root: certmgr -add -all -c ...
0
votes
1answer
125 views

Configure the Web Application to Require Client Certificates

I created a SelfSigned certificate for the webserver using selfssl. installed it on trusted root and personal. cretaed a selfsigned certificate for the client from clients machine, installed it on ...
0
votes
1answer
36 views

Why does WHM require a user to be specified when installing an SSL certificate?

The question's in the title! What is the benefit/purpose of supplying a user when installing the certificate? Is specifying a user of "nobody" less secure than "jon"?
4
votes
1answer
496 views

What is the maximum strength of a wildcard SSL certificate

i had an interesting conversation with a bank IT security employee, and they raised a few questions. What is the maximum strength/bit length of a wildcard domain certificate? Are they as secure? (in ...
0
votes
1answer
836 views

Self-Signed Certificate and IIS 6.0, How to generate a Client Certificate

I am looking at generating a self-signed certificate, and only allow users who has client certificate installed on my web server. I am using IIS 6.0 with selfSSL to generate my .pfx web server ...
3
votes
2answers
1k views

SSL certificate for website - no legal company name?

I am launching my own social website and need SSL for the user login section. To get the SSL they require the CSR key, which requires an organization name, and this name it is mentioned should be ...
1
vote
2answers
2k views

403.16 - Client certificate is untrusted or invalid - IIS 6 - Windows Server 2003

i get the following error page if i try to open a https page on my server: "Client certificate is untrusted or invalid" The Server was already working, i had to renew the certificate because it ...
9
votes
1answer
4k views

Certificate does not have a name

I've successfully managed to install an ssl-certificate in IIS, however the 'Name' column is showing as blank even though I entered a friendly name. Is there any way to rectify this? The screenshot I ...
1
vote
3answers
1k views

IIS7.5 - Personal SSL certificates for multiple users

I want to get a security model implemented, but I'm not sure what terminology IIS/SSL uses in order to do that. Nor do I know how to make it happen in IIS7.5 The process I want to have ...
1
vote
1answer
756 views

Windows Mobile 6.1: Can't access internal site via https

Whe have several Motorola Symbols (don't remember the exact model) running Windows Mobile 6.1 They are used for entering data in the field, and then at the end of shift the employees come in and ...
0
votes
2answers
951 views

End to End SSL connection using Haproxy?

I want to know about how Haproxy reacts when I want to make the HTTPS connection over the server. In apache we have aj_proxy to make a ssl connection to tomcat server, so how that functionality can be ...
0
votes
1answer
813 views

Smartcard (USB Cryptostick) and Firefox

I am having a GPF-Cryptostick running on ubuntu 11.04 with firefox 5.0. Using a smartcard is such a great thing, but i did not found any good how-tos. Maybe it is just a lack of understanding. First: ...
0
votes
1answer
52 views

How many certificates are needed if to redirect non-www requests to www prefixed ones over https

If I want to redirect https://example.com to https://www.example.com, are two certificates needed? One is for example.com and the other for www.example.com?
0
votes
1answer
64 views

SSL Certificate with any webhost

Is it possible to buy an SSL certificate from verisign or comodo for exapmle, and use it with my shared webhosting in another company? if yes, how?
0
votes
1answer
843 views

Using several SSL certificates on same IP with IIS 7

I've got several domains (different sites with different domains. not sub-domains) which need SSL. I couldn't find a way to make it work - so that each domain will have its SSL certificate, but use ...
0
votes
1answer
453 views

Installing 123-SSL from 123-reg on Apache2

I've moved away from GoDaddy as I hated having to sign into their site and got a cheap ssl cert from 123-reg, however 123-reg's instructions are contradictory and their support seems to be ...
2
votes
4answers
279 views

Is there a provider that offers free SSL certificates that don't give a warning in Firefox 4?

I am looking to install SSL certificates for frequently used https services. I used to use StartSSL for this, but they "temporarily" stopped offering their services. I wonder if there are any other ...