SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

0
votes
1answer
3k views

Watchguard Firebox SSL certificate validation failed

I'm really stuck on this one! I have two Watchguard firebox firewalls. My SSL certificates expired and I bought two new wildcard certificates from RapidSSL. I couldn't get the certificate to install ...
1
vote
1answer
3k views

Creating a non-MD5 CSR for Verisgn?

When creating the CSR and sending it to Verisgn got this warning: "Alert: Your CSR has been signed using the MD5 hashing algorithm. While the MD5 hashing algorithm is not optimal it will not prevent ...
1
vote
0answers
214 views

Exchange 2010 TLS Cert questions

I'm trying to wrap my head around with enabling TLS for a specific domain on Exchange 2010 server but I have a few questions that I'm sure you guys have an answer to. I've gone through this guide ...
0
votes
2answers
1k views

SVN Trusted Certification Error [duplicate]

Possible Duplicate: SVN SSL Certificate Validation Error I am running RedHat Enterprise Linux 6 and have a subversion server installed (with Apache). I have just configured Apache to run ...
1
vote
1answer
534 views

openssl req -key server.key -out server.csr taking ages to complete

I am trying to generate my own self-signed ssl certificate with openssl so I can test them out on a dev server on nginx before I buy one. I have created the server.key but when I run the command ...
5
votes
1answer
7k views

Apache seems to be using old expired certificate even though new one is installed

Apache 2.2.3/mod_ssl/CentOS 5.5 VPS Our certificate expired on 2011-10-06, and even though we have seemingly installed the new one correctly, browsing to the site still shows an expired certificate! ...
1
vote
1answer
130 views

SSL common names for second-level-domains

While configuring SSL and certificates in my Apache server I had some troubles with second-level-domains like .com.pt. If I ask for a certificate for a www.xpto.com domain it will be issued for ...
2
votes
3answers
82 views

What's a “request” in context of SSL certificates and how do I get one?

I need to host a web service that would accept requests over https. Therefore I need an SSL certificate issues by some Serious Certificate Company. I asked our admins - they say I have to generate ...
2
votes
2answers
805 views

ISA 2006 does not allow traffic using FQDN

I experience an issue accessing Tomcat running over SSL with MS ISA 2006 in front. When I access using the internal IP address (e.g. https://10.0.42.136/...) everything works fine and ...
1
vote
2answers
750 views

Secure connections with Domain aliases running on IIS7

I have a site that can be accessed through example.com. I can secure traffic to and from this site by installing a certificate on the web server that is tied to the example domain. Now, I have ...
3
votes
1answer
591 views

Are there any way to check client certificate issuer in lighttpd?

I have to check client certificate issuer in the Lighttpd but can't find any variable for that. Here is part of my config, related to ssl_mod: $SERVER["socket"] == ":443" { ssl.engine ...
0
votes
1answer
415 views

RapidSSL (freessl) certificate installation on red5

I bought a wildcard SSL certificate at rapidSSL which provided me web certificate and an intermediate certificate. i installed the web certificate using: keytool -import -alias root -keystore ...
2
votes
3answers
2k views

Multiple SSL on single IP with virtualmin

I am using Virtualmin (GPL) to manage my servers. I have multiple sites hosted on it binded to single IP address. I want to enable SSL for multiple servers hosted on it. Can I bind SSL for all such ...
2
votes
4answers
723 views

How to redirect subdomain to alternative server with SSL support?

I'm looking to redirect https://sub.domain.com to https://sub.otherdomain.com without changing the user's address bar. Is this even technically possible? I can imagine some certificate issues? We ...
2
votes
2answers
593 views

An SSL certificate for *.mydomain.com doesn't work for mydomain.com

I've created a self-signed certificate via openssl for *.mydomain.com, and it works e.g. for www.mydomain.com. However, when I go to mydomain.com directly in Chrome, I get an error (You are attempting ...
-2
votes
1answer
428 views

Getting around GoDaddy shared hosting SSL limitations [closed]

GoDaddy shared hosting apparently forces you to buy one of their SSL certs, i.e., you can't use StartSSL and then upload your own. Is there a way around that, perhaps using .htaccess as described ...
2
votes
3answers
2k views

Safari, IIS and optional Client Certificates

I've a ASP.Net Webapp running on IIS7.5. The Webserver is configured to accept Client Certifcates. Unfortunately Visitors with Safari Browser are unable to view the Page. Same Problem as described ...
2
votes
3answers
608 views

How do I configure an SSL only site, in a way that doesn't affect browser connection limits

The Yahoo Developer Best Practices recommend using multiple hosts (host1.company.com, host2.company.com, etc..) as a way of overcoming a webbrowsers built in limitation of only issuing two concurrent ...
0
votes
1answer
193 views

binding info for website with SSL running on IIS on Server 2008 R2?

Folks! I have a Windows Server 2008 R2 machine running IIS 7. I'm attempting to create a website that will use SSL. When I create the website, I choose "https" as 'type', "443" as Port and the ...
10
votes
9answers
72k views

SSL Error - unable to read server certificate from file

I've been setting up SSL for my domain today, and have struck another issue - I was hoping someone could shed some light on.. I keep receiving the following error messages: [error] Init: Unable to ...
1
vote
2answers
302 views

SSL certificate paths in a virtual host

I've recently purchased a wildcard SSL certificate for my domain, generated the CSR, and everything has been sent through OK. My question is quite straightforward, but following this - ...
2
votes
1answer
653 views

Commercial SSL Certificate and Self-Signed Certificate for Authentication

I have a apache 2 host running with a commercial (rapidssl) signed certificate and I need to generate client certificates for authentication. I created a CA (according to ...
1
vote
0answers
334 views

Switch stunnel from self-signed cert to signed by CA cert

We use stunnel configured to provide SSL-tunnel between SERVER A (where we have stunnel configured as client) and many SERVERS B (where we deployed stunnel configured to work in server mode). We use ...
2
votes
2answers
634 views

Using self signed SSL for mail

Rather than purchasing SSL I would create a SSL certificate. Of course my SSL certificate will not be useful that browsers show "Un-trusted SSL". Can I use Self Signed SSL to my mail server to send ...
-1
votes
2answers
112 views

Tracking down the admin contact of an expired GeoTrust certificate

One of our client's sites has an invalid certificate and we don't know who provided the certificate. All of our contacts with the client have since left the company. Is there something like a WHOIS ...
0
votes
1answer
648 views

Apache, SSL Client certificate, LDAP authorizations

High there, Is it possible to mix mod_ssl and mod_auth_ldap so that the authentication is done with the client certificate and authorizations with mod_auth_ldap (Require group)? If so, can you give me ...
1
vote
1answer
1k views

IE8 reports a GeoTrust SSL certificate as “not trusted”, other browsers fine

We've been using a GeoTrust SSL certificate, for some time now, and I just got a call that Internet Explorer warns its users that our certificate is not trusted. I really have no clue what's going on. ...
3
votes
1answer
7k views

What does “128 / 256 bit SSL and 2048 bit CSR encryption” mean in practical terms?

One of the SSL certificates mentioned here says "128 / 256 bit SSL and 2048 bit CSR encryption". Does that mean that the act of generating the certificate is uber-secure but the communications handled ...
-1
votes
1answer
747 views

Whm cPanel SSL Wildcard Error / Misconfiguration [closed]

I have a Whm cPanel VPS server running CentOS 5 for domain.com.au I have www.domain.com.au running on 192.168.0.1 with a GoDaddy EV SSL certificate I have the subdomains such as large.domain.com.au, ...
5
votes
3answers
5k views

Extracting SSL certificates from the network or pcap files

I will appreciate if someone can point me to a tool or approach to extract SSL/TLS certificates from live HTTPS connections (directly from the network) or from a network trace file (pcap file). I ...
2
votes
1answer
757 views

Drawbacks/Disadvantages UCC/UC Multiple Domain SSL Certificates?

I am thinking about transitioning a number of websites over to using a UC or Multiple Domain SSL certificate. I guess I'm just wondering what the drawbacks are. So far the only ones I can find are ...
1
vote
1answer
146 views

Can I have one self signed SSL certificate with alternate names for two different domains

I need one self signed certificate to cover multiple URLs, which could be represented by the following: *.foo.com *.faa.fii.bar.com Using alternate names I managed to create such a certificate, but ...
0
votes
2answers
341 views

Can you install a wildcard SSL and single EV SSL together for the same domain?

I currently have a EV Premium SSL from godaddy.com for www.mydomain.com Is it possible to install a wildcard SSL together with a EV Premium SSL? www.mydomain.com is my main SSL as customers see it ...
2
votes
2answers
1k views

SSL & Load Balancing

I use Amazon's Elastic Load Balancer (ELB) to route traffic between several web servers that host multiple websites (virtual hosts). The web servers act as front-ends (drones) and pull data off of ...
0
votes
1answer
159 views

installing ssl on a virtualserver a vps

My Problem: Installing SSL on VPS, for one domain. My server: Ubunutu / Apache / mod_ssl / openssl Using Virutalmin / Webmin Two IP address. I have four domains hosted on my vps, ...
1
vote
1answer
87 views

Drawbacks in use an internal CA for a production Exchange 2007/2010 SAN certificate

Is there any critical drawback in using an internal CA to release an Exchange 2007/2010 SAN certificate for a production environment?
2
votes
4answers
10k views

Assign CA certificate to Fortigate https WAN interface

I have a Fortigate 80C that allows remote administration via https. I access the URL and all fine but the one thing that really bugs me is that is brings up "untrusted connection" in chrome with the ...
3
votes
3answers
3k views

SSL 2048-bit certs, how to upgrade our web app without breaking legacy API customers?

The Problem SSL certificate providers are moving from certificates signed with 1024–bit RSA keys to the new 2048-bit RSA key standard. One article explaining the background and significance of the ...
4
votes
2answers
420 views

Is it possible to create an internal SSL certificate with Subject Alternative Names

Having just upgraded from Exchange 2003 to Exchange 2010, I'm attempting to create a certificate that can be used both internally and externally (by staff). Previously with exchange 2003, we didn't ...
35
votes
2answers
7k views

Should a wildcard SSL certificate secure both the root domain as well as the sub-domains?

I ask this question, because Comodo are telling me that a wildcard certificate for *.example.com will also secure the root domain example.com. So with a single certificate, both my.example.com and ...
0
votes
1answer
280 views

reverse proxy redirect and ssl

I need to clarify something that some experts would probably know better about. there is domain company.com, and there is a web server called server1.domain.com. This server is a dedicated web ...
0
votes
1answer
140 views

Understating certificate authority nesting

Given we have the following network/CA structure: Win2K8R2 - Root CA - no idea where its' certificate is? Win2K8R2 - Sub CA - obtained CA certificate from Root CA Win2K8R2 - OWA 2010 (Basically, a ...
0
votes
1answer
709 views

Renewing a OCSP and OWA certificates for Exchange 2010

We have been using an Exchange 2010 mail server for a year now. Today the certificates used in Exchange, as well as of Forefront TMG expired. We had the following certificate chain: Root CA issued a ...
5
votes
4answers
11k views

sec_error_unknown_issuer but only with Firefox and IE6

I recently renewed the SSL certificate on my site and while initially it seemed that the certificated was installed correctly, I was shocked to discover hours ago that the HTTPS connection no longer ...
2
votes
2answers
2k views

How do I use a Multi-SAN certificate on both Lync and Exchange servers?

I have a Multi-SAN certificate issued by Godaddy which has four subject alternate names. to use this in an Exchange environment, I have added the external hostname and internal hostnames of my ...
0
votes
2answers
331 views

Apache: Multiple Virtual Hosts w/ SSL Certificates?

I have an Ubuntu 11.04 Server with multiple Virtual Hosts running on a shared IP. Is it possible to have two (different) SSL certificates for each site? I remember hearing something about you only ...
1
vote
1answer
355 views

Linux Certification Authority signing Windows 2003 Server certificate requests

I've had some success using a Windows 2003 Server running as a Certification Authority signing certificates used in secure communications between Ubuntu Linux and Active Directory on Windows 2003 ...
1
vote
2answers
441 views

Setting up SSL certificates with Apache

I am trying to create my own CA and Server certificate for my apache server on windows. When ever I start apache I get "Failed to configure CA certificate chain!" The apache ssl conf settings are: ...
2
votes
1answer
1k views

IIS 7.5 HTTPAPI 404 error on HTTPS pages

I have run into an interesting problem with one of my web servers giving 404 errors on the HTTPS parts of the site. Here is how we have it setup, we have a single website setup on it that has no host ...
2
votes
1answer
343 views

Crypto key storage and recovery — best practices?

We have a bunch of SSH, GPG, SSL and other private keys that, obviously: must only be available to the smallest number of people possible can't be "lost" if a hard drive dies or the building burns ...