SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms

-1
votes
1answer
55 views

Packaging LAMP with ssl despite it being a crypto

I've come across this statement on the apache web site. The OpenSSL library is cryptographic software. The country in which you currently reside may have restrictions on the import, ...
1
vote
1answer
2k views

creating client certificates

I've got an SSL certificate from the 3rd party certificate authority. It's a .cer file. The certificate is installed and working properly in IIS7. The certificate displays its Intended Purposes as ...
0
votes
1answer
1k views

Internal and External IP Addresses with an SSL Certificate

I'm setting up a web server that has an internal IP address and an external IP address. e.g. Browsers on the network request mysite.example.com and get 192.168.200 Browsers outside the network ...
0
votes
1answer
510 views

Tomcat 6 using wrong SSL cert

I have IIS and Tomcat 6 running on the same box, both applications need SSL (on different ports). I have purchased and installed two SSL certs, one for IIS and one for Tomcat. Both certs are using ...
0
votes
2answers
214 views

One SSL cert two IIS6 web sites one domain

We have our main web site set up in IIS6 with an ssl cert for our domain "adomain.com". We have another web site that we need to place on the same server which will be accessible via ...
4
votes
3answers
20k views

Why does Window's SSL Cipher-Suite get restricted under certain SSL certificates?

Problem: Windows Server 2008 R2 will only support the following ssl cipher suites when using certain certificates on the server: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA ...
2
votes
3answers
283 views

GoDaddy SSL - What's the protocol for CSR files being shared for certificates?

I just got myself a Standard SSL Certificate from GoDaddy then realised I had credit to use on a Premium certificate. Now, before I make my request for that certificate, I would like to know, what's ...
2
votes
5answers
1k views

UCC or WildCard SSL?

We want to secure the following domains on a single server (1IP) with multiple virtual hosts: secure.ourapp.com (VHOST1) www.ourapp.com/login (VHOST2) www.ourapp.com/signup (VHOST2) After reading a ...
4
votes
3answers
12k views

SSL certificate for site on Amazon ec2 possible?

we're thinking of getting an application hosted on the ec2 service, and the application's documentation says that an SSL certificate can be installed for secure communication (https). Its not clear ...
1
vote
1answer
104 views

Do I need a domain pointing to my server before I can get a SSL certificate?

So I just followed this tutorial and set myself up a SSL certificate for my domain. Though, currently, the domain doesn't point to my server... Do I need the domain to point to my server before I can ...
2
votes
1answer
114 views

How to move SSL certificate to another EC2 Win 2008 instance

We have an EC2 Windows 2008 instance that crashed and would not reboot. We have now rebuilt the instance. We had an Entrust cert on that instance and need to move the cert to the new instance. How ...
1
vote
1answer
4k views

IIS 6.0 https not working “connection was reset”

Application Server Windows Server 2003 SP2 with IIS 6.0 IIS has a "Default Web Site" (port 18000, ssl 443, ID=1) with a certificate created by me. I have an specific site called "scj.galaxy.Weekly" ...
0
votes
1answer
429 views

is a wildcard SSL the only option in this multiple VHOST/1IP setup?

I have a web app set up that needs the following SSL encryption: secure.myapp.com -> SSL www.myapp.com/login -> SSL www.myapp.com/signup -> SSL If I'm correct, I could run one SSL ...
0
votes
4answers
2k views

Will Any Popular Root CA Sign a host.domain.local Certificate?

My boss refuses to allow private IP addresses into a public DNS definition. So I am unable to put the private SVN box IP (svn.ourcompany.com) into a .com DNS record. It exists only at ...
0
votes
2answers
1k views

Apache SSL Installation

I'm trying to install an SSL certificate on a Linux Apache 2.2.3 server. I've been browsing on-line to see how to install the certificate and most say to edit the 'httpd.conf' file. However, there are ...
2
votes
1answer
370 views

Mono add in many trusted certificates

I thought SSL on mono didnt work since it always reported a decode error. Now i realize by default mono doesnt trust anyone. How do i add many trusted certificates? I seen this page which explains ...
4
votes
2answers
100 views

How do I do SSL client certification in Apache?

Just recently I found out a server can use a certification to check if a client is who they say they are. I know how to sign and enable server certifications but how do i have the server check if the ...
9
votes
2answers
1k views

Cost of getting in-house certificate authority trusted

My company has an in-house certificate authority that is currently self-signed. Since we want to start using it for external SSL and secure email to our customers, we need to get it trusted. Does ...
1
vote
2answers
103 views

CN to include www on domain cert

I generated my own certificate and used mysite.com as the common name. It works however if i go to www.mysite.com or any other subdomain i get a wrong domain msg. If i do *.mysite.com it works on all ...
13
votes
4answers
8k views

stop apache from asking for SSL password each restart [duplicate]

Using instructions from this site but varying them just a little i created a CA using -newca, i copied cacert.pem to my comp and imported as trusted issuer in IE. I then did -newreq and -sign (note: i ...
0
votes
2answers
186 views

confusion with ssl cert and apache

I created a self signed signature. I visited my site and saw that it was untrusted (in FF and IE). After accepting it i saw a msg in IE saying it was signed for a different domain. Come to think of it ...
1
vote
1answer
206 views

Sun Java keytool importing EV certificates into a single keystore

At my current job we are using tomcat, customers have custom web portals setup on their own local machines. EV certs are new to me, they have 2 part intermediary and a primary certificate. For our ...
1
vote
1answer
377 views

CRL Check Questions

Windows XP | IE 7 Hi guys, From time to time, I'm seeing the following error come up: Revocation information for the security certificate for this site is not available. Do you want to ...
7
votes
3answers
10k views

How to set up my own full-featured certificate authority?

I'd like to set up a certificate authority, which I can then import to all the company's browsers and systems to get rid of all those nasty client warnings when using HTTPS or SSL.
1
vote
1answer
379 views

What are the symlinks for in /etc/ssl/private ? (Ubuntu server)

I want to backup my certificates and I see that there are lot of symlinks in /etc/ssl/private and I'm not sure why they are here. Does anyone have an idea? I am running Ubuntu Server Jaunty 9.10 and ...
2
votes
3answers
506 views

Is this what I should request for my SSL certificate?

I need an SSL certificate for Exchange 2007 and For SharePoint 2010, can I use the same for both? My internal domain is xyz.int and my external is xyz.co.uk. I cannot get an SSL certificate granted ...
2
votes
3answers
168 views

where does https on apache get it's configuration?

So originally my host (mediatemple dv) has two default directories for the roots: 1)httpdocs/ 2)httpsdocs/ In the conf directory I changed the vhosts.conf and httpd.include and others to change from ...
3
votes
3answers
6k views

SSL peer was unable to negotiate an acceptable set of security parameters

I followed section 1B of this guide to create a certificate and sign it on my own and set up Apache to use that certificate, but whenever I try to view my website securely, Firefox spits out this ...
1
vote
1answer
781 views

ASN1 bad tag when completing ssl certificate request in IIS7

Consider a scenario of importing a .cer file for use in IIS 7. The CSR was NOT created on this machine. After receiving a .cer file from the CA, the Complete Certificate Request wizard prompts for ...
1
vote
2answers
163 views

Is it possible to buy SSL cert ONLY for one subdomain?

I want to deploy my application with following domains: domain.com, www.domain.com - no ssl required, static pages only sub.domain.com - ssl required Can I buy SSL cert only for sub.domain.com or ...
1
vote
1answer
82 views

SSL certificate problem

i have a vps with cpanel and whm, i've purchased an SSL certificate and i installed it successfully on a second ip address, but when i visit https://www.domain.com it doesn't work, because my domain ...
1
vote
1answer
934 views

Apache2, VirtualHosts, SSL, Mutli Domain Certificate

I have a debian server with one IP and three projects linking to the same folder. Within the VirtualHosts I have some different alliases. I now want to redirect some parts to HTTPS. For one project ...
2
votes
4answers
1k views

Apache rewrite rules and DNS settings for HTTPS sites

For a web application located at: https://www.domain.com/ With an SSL certificate issued to "www.domain.com", What is are the proper rewrite rules, DNS settings, or combination of both which makes ...
1
vote
1answer
244 views

Inspircd + Comodo InstantSSL - can it be done?

I have a new Inspircd server setup for some gaming clans and I want to use a Comodo InstantSSL cert for the GnuTLS connections. I noticed that in the config files you can point to the certs so it ...
1
vote
1answer
144 views

Eliminate default SSL certificate

I'm setting up a server for local access. I created a CA and have SSL certs signed and working on other domains. The problem is I'm trying to create a cert for a domain name that is the same as the ...
2
votes
1answer
417 views

Generating my own SQL Server SSL Certificate

I hear it's possible to make myself a test certificate with MakeCert from Windows SDK, but the beast is 1.5 GB, which I feel reluctant to download for a half-megabyte program. I do, however, have ...
2
votes
2answers
3k views

How to set up an SSL Cert with Subject Alternative Name

To test a specific embedded client, I need to set up a web server serving a couple of SSL (HTTPS) sites, say "main.mysite.com" and "alternate.mysite.com". These should be handled by the same ...
1
vote
2answers
1k views

Silent Outlook popups regarding self-signed certificate when connecting to pop3-ssl server

When MS Outlook (2003/2007/2010) connect to pop3-ssl server and the server certificate is selfsigned it opens a dialog whether or not user wants to accept it. Is it possible to suppress this message ...
1
vote
1answer
652 views

IIS 6 getting “Page Not Found” after applying SSL

I am setting up SSL certificates on a development environment using IIS 6 on W2k3. I have a directory called login with a single page login.asp which I would like only viewable over SSL. So before ...
0
votes
1answer
1k views

How to generate a CSR for Verisign for use with FileZilla (in Windows)

I need to get a certificate from VeriSign to use in FileZilla (FTPS, FTP over SSL), to get the certificate, Verisign asks for a CSR file, FileZilla doesn't seem to have a way to generate those CSR ...
1
vote
2answers
3k views

SSL certificate for FTPS, is it the same as for HTTPS?

This question is about "FTP over SSL", if I understand correctly FTPS and HTTPS are just the standard FTP and HTTP protocols running on top of SSL, is this correct? The actual question is: is the ...
2
votes
3answers
2k views

SSL stops working on IIS7 after a reboot

I have a Windows 2008 Server with IIS7. Every time the server reboots, SSL stops working. Normal HTTP requests work fine, but any request to an HTTPS address gives the typical error message in the ...
6
votes
2answers
4k views

Certificates in SQL Server 2008

I need to implement SSL for transmissions between my application and Sql Server 2008. I am using Windows 7, Sql Server 2008, Sql Server Management Studio, and my application is written in c#. I was ...
0
votes
2answers
484 views

Multi Domain ssl certificates - Single IP or multiple IP's

I have a server with multiple IP addresses, Each address hosts a single website, Each website has a different domain name ( the company has a few divisions, each with its own branding) Will a multi ...
1
vote
3answers
2k views

Local SSL connections are causing redirect loop (after Ubuntu update)

Following a recent Ubuntu update, my local websites are no longer serving their pages over SSL. For example, my .htaccess file attempts to ensure /sign-in is always served over HTTPS: RewriteEngine ...
2
votes
1answer
2k views

How do I resolve certificate errors on HP blade center

I'm trying to sort out the ssl certificate errors that we get when trying to manage our HP c7000 blade enclosures. To that end I have created a signing certificate and imported it into the browser. In ...
3
votes
1answer
868 views

Is there any way to configure Windows 7 RDP to require a client certificate to login

Is there any way to configure a Windows 7 RDP to require a client certificate to login. So user need to use the certificate and password (just like SSH or client-side certificates in HTTP) If there ...
2
votes
3answers
383 views

Outlook Security Alert following Exchange 2007 upgrade to SP2

Following an update to Exchange 2007 sp2 (yes I know very belated) I have an issues when logging onto Outlook. I see the below message... I also had a simlar issues with web access and as I am at ...
0
votes
1answer
1k views

IIS 7 with verisign certificate, invalid certificate returned

We have IIS7 on windows 2008 and we installed verisign certificate and bound it to https. Certificate seems fine. Chain: mysite.com - not expired VeriSign international server CA class 3 - not ...
5
votes
6answers
271 views

Buying a certificate - what to spend and where

My boss wants to buy a certificate for his SBS so external connection can be made. they access on an IP number. What should he spend on the certificate? Where should he buy from? Verisign seems like ...