SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms

0
votes
1answer
628 views

how do i set up ssl cert for my website running on ubuntu server in amazon aws?

I have never set up ssl cert before. I have 2 different domains hosted on the same instance in amazon ec2. I need to set up ssl certs for both domains. I suspect the steps are the same for both. ...
1
vote
2answers
155 views

SSL encryption standards by browser

Does anyone have a table of the default levels of encryption which the various browsers out there support? For instance I know that IE5 and lower struggle even to cope with 40 bit encryption but the ...
0
votes
1answer
250 views

lighttpd with multiple IPs, each with a UCC certificate and many hostnames

I'd like to get lighttpd working with UCC certificates, but I can't seem to figure out the correct syntax. Essentially, for each IP address, I have one UCC certificate and a bunch of hostnames. ...
0
votes
2answers
102 views

Root CA's: Is there an agreed upon standard of CA's?

I know that the Root CA bundles differ between OS/browsers/applications. However, it seems like Verisign is always included. How did this become the case? Is there some sort of standard? I'm just ...
1
vote
2answers
122 views

Check procedure SSL & CA Certificate by using browser

The SSL certification limit is comming so I'd like to upgrade these certifications. Is there any solutions that check the certifications withought server proxy's cache? We have to been under proxy ...
1
vote
1answer
1k views

Export SSL Cert from IIS and import into GlassFish keystore

What I need: I have an existing SSL certificate installed on IIS 6. On the same machine, I have GlassFish installed and would like to share the same certificate since they both share the same ...
0
votes
1answer
155 views

SSL Certificate in ISA Server 2004

I have a ssl certificate for Exchange which has been installed on IIS for OWA but in order for this certificate to be presented to the user when they login, i.e. visit OWA, it has to be installed also ...
0
votes
2answers
453 views

Can I use a single SSLCertificateFile for all my VirtualHosts instead of creating one of it for each VirtualHost?

I have many Apache VirtualHosts for each of which I use a dedicated SSLCertificateFile. This is an configuration example of a VirtualHost: <VirtualHost *:443> ServerName ...
2
votes
1answer
329 views

Two SSL certificates required for two Apache servers using mod_proxy to serve HTTPS?

Our application originally used a single Apache server with mod_perl installed to serve up all HTTPS requests. Due to memory issues I've added a lighter Apache installation and used ProxyPass to hand ...
0
votes
3answers
315 views

SSL Certificate

I have a mail-server running and I want to buy a SSL-Certificate as they are pretty cheap now. I use mail.domain.com as reverse-DNS, POP3 and SMTP clients use mail.domain.com (some use pop3.domain.com ...
0
votes
1answer
813 views

A non interactive alternative to makecert

I have a need to create a self signed certificate non interactively. Unfortunately, the only tool that I know of (makecert) is interactive - it uses GUI to ask for a password. My OS is Windows (from ...
4
votes
1answer
929 views

certutil -ping fails with 30 seconds timeout - what to do?

The certificate store on my Win7 box is constantly hanging. Observe: C:\>1.cmd C:\>certutil -? | findstr /i ping -ping -- Ping Active Directory Certificate Services Request ...
3
votes
2answers
3k views

Getting 401 when using client certificate with IIS 7.5

I'm trying to configure a web site hosted under IIS 7.5 so that requests to a specific location require client certificate authentication. With my current setup, I still get a "401 - Unauthorized: ...
0
votes
1answer
270 views

Install/import SSL certificate on Windows Server 2003/IIS 6.0

A couple of months ago we ordered an SSL certificate for a client's server using the request guide in IIS 6.0. This worked fine and the guide was completed when we received the certificate. But about ...
1
vote
3answers
2k views

What SSL cert do I need for my Exchange setup?

Using Exchange 2010. I have a single-domain cert for mail.mydomain.com now and I know I need more than that. I want to get a wildcard cert but I've got a guy that's telling me that wildcard certs ...
0
votes
1answer
77 views

Redirecting URLs with mod_rewrite

I am trying to setup a website where we would like to redirect the URL for a couple of different cases. The cases are below: If port 80 then force port 443 If URL = support.example.com then force ...
0
votes
1answer
207 views

Wildcard CSR generation through IIS6

What is hopefully an easy question for someone familiar with generating CSRs from IIS6: When generating the CSR, do I just select any SINGLE site in IIS that the wildcard certificate will be used for ...
2
votes
1answer
780 views

Create Valid SSL cert for computer short & fully qualifed domain name on Windows Server 2008

I have setup a Windows Server 2008 Active Directory Controller. As part of the installation, I've also added the role of Certificate Authority to my Windows Server 2008 Domain Controller. (This box ...
5
votes
2answers
3k views

Secure LDAP Authentication with Active Directory

We are working on a web project where we need to be able to bind to an active directory domain and then pass the user's credentials to the domain to make sure the user has successfully authenticated ...
1
vote
1answer
288 views

Can't get self-signed SSL certificate to work

I am getting a "Unable to connect" error message when I try to load the https version of a website in Firefox. There is no error message in the log file, only: [Thu Dec 09 16:55:24 2010] [warn] ...
0
votes
1answer
916 views

Exchange 2010 - SSL Certificate

I've generated free certificate at StartCom for external OWA usage remote.domain.com. Problem is after installing it in Exchange, local users started getting errors from Outlook that ...
1
vote
3answers
568 views

SSL Certificate for local domain

I'm working in our test lab. All the machines in our test lab are on the .foo.bar.baz.com domain. I can install our server with an SSL certificate with the common name of *.foo.bar.baz.com and it ...
1
vote
2answers
8k views

Deploying internal certificate via GPO - will this only work for IE?

I am contemplating adding AD CA role to our server and using GPO to add a self signed, trusted certificate to all internal clients (to ease testing)... Some of the related questions regarding this ...
1
vote
3answers
6k views

Generating self-signed, wildcard certificate for IIS 7.5 on .local domain

Is it possible to generate self signed, wild-card ssl certificate for internal domain on IIS 7.5 for testing purposes. For example I'd like common name to be *.domain.local Similar question for IIS 6 ...
3
votes
1answer
2k views

Moving SSL Certificate from one Apache server to another

I just moved hosts and I looked for a decent guide on how to move my SSL certificate from my old host to the new one. I am amazed on how many 'guides' or 'tutorials' which are simply useless are out ...
0
votes
1answer
49 views

Help with Setting Certain Links to HTTP and HTTPS

I have an newly installed SSL certificate on my website and I am trying to figure out how to make some pages point specifically to https and other point only to http. For example, if someone is on my ...
4
votes
1answer
2k views

SSL enabled webpage does not prompt for client certificate

Summary: We have two different Windows Server + II6 environments that are SSL enabled. Where one behaves the way we want and the other does not. Server Configurations: Windows Server 2003 SP2 IIS ...
1
vote
1answer
3k views

IIS 7.0 install two SSL certificates with two different host headers

I have two sites: sub1.example.org sub2.example.org I have two SSL certificates for each of the above domains. When install certificate #2 for sub2.example.org, it tells me: At least one other ...
0
votes
1answer
866 views

XCA Signing Problem

I am trying to make a self-signed SSL Certificate for Sun WebServer 6.1 using the XCA Certificate GUI. Here is my process: Login to Sun Webserver admin console. Use the "Generate CSR" function to ...
2
votes
2answers
204 views

Create an TLS CA that's restricted to a domain?

I'm looking at building a root-CA for use with something I'm putting together. Each customer would register their own server with me and I'd sign their cert as the holder of (id).example.com. Each ...
2
votes
1answer
758 views

Recovering SSL key from a dead computer

When a server won't boot but you still have a functioning hard drive, you still should be able to extract the stored SSL certificates and keys, right? The information is all there after all. The ...
1
vote
2answers
633 views

Redirect HTTPS With No Cert In Place

https:/ /SSLSite.com http:/ /NoSSLSite.com I need https:/ /NoSSLSite.com to redirect to https:/ /SSLSite.com . Is this possible? IIS webserver Back story - We made some major changes ...
0
votes
1answer
236 views

Apache Virtual Host and CA Intermediate File

Listed below is an example from an Apache virtual host file. I was curious if there was a particular order that the SSLCertificate, SSLCertificateKeyFile, and the SSLCACertificateFile should be in? ...
0
votes
2answers
147 views

IIS7 Certificate recovery

One of my servers has just failed. I am unable to get it to boot. I have built a replacement server on new hardware, but I have just discovered that the SSL cerrtificate we purchased through VeriSign ...
1
vote
0answers
192 views

Should the “subject alternative name” property of an X509 certificate be set to critical?

I'm writing a tool to generate self-signed X509 certificates and X509 certificate requests and I'm wondering how the "critical" property of the SubjectAlternativeName (OID 2.5.29.17) should be ...
5
votes
5answers
4k views

Multiple wildcard names in a certificate

I would like to have a single webserver with a single certificate that hosts the following domains: onenameofthecompany.com othernameofthecompany.com www.onenameofthecompany.com ...
1
vote
1answer
7k views

Install Certificate in RDP-TCP properties

I'm trying to get certificates to work on our Windows 2008 Terminal server. Currently when we log on using RDP 6.1 client we get an certificate warning saying that the rdp.geas.local certificate is ...
0
votes
1answer
67 views

How to secure SSl certificates on a server

Where do you usually store SSL certificates on your server ? who are the user and group owners of the certificates folder what are the folder permissions Thanks
1
vote
1answer
381 views

nginx /w star ssl cert from register.com

I'm having some weird ssl issues with nginx and my cert from register.com. Most browsers work with it, but some aren't able to verify the cert. I want to verify that I set things up properly. When ...
2
votes
1answer
2k views

What's a SSL certificate bundle?

I've just generated a SSL certificate with go daddy and I've downloaded the files: mydomain.com.crt gd_bundle.crt I'm now going to combine them but it is not clear what's the 2nd certificate is. ...
2
votes
3answers
215 views

Which SSL certificate to use for non-financial application

Based on the answers to this question, I'd like to secure my website using SSL. Now there are several types of certificates and I don't know which one to choose. My application doesn't include any ...
3
votes
1answer
151 views

Should I encrypt an SSL Certificate Request before emailing it?

I need to send a client an SSL Certificate Request (from IIS 6.0) They have requested that it ONLY be sent encrypted using an app like Winzip. My question is. Is this actually an issue? My very ...
0
votes
2answers
468 views

How to create SSL certificate locally and move to windows 2003 server for IIS ASP.Net website?

How can I create a SSL certificate, for testing purposes, on my local machine in a portable file such that I can move it to the Windows Server 2003 machine and install it there for a ASP.Net website? ...
0
votes
1answer
466 views

Installing a geotrust SSL cert on tomcat

I am trying to install a geotrust chain cert in tomcat. The problem is, the cert was created using a key generated using openssl, and so it is not the same key as that in the existing keystore. I ...
1
vote
1answer
62 views

Establishing which version(s) of SSL a webserver supports

I run several web servers and would like to establish which of my web servers support different types of SSL. e.g TLS/SSL, SSL v2, SSLv3 etc. Does anyone know of a tool (whether web based or ...
0
votes
2answers
6k views

Can you install multiple SSL certificates on IIS?

Wondering what is the right way to install a UCC certificate on IIS? I have to request a UCC certificate from GoDaddy that allows up to 5 host names. The certificate they will provide will be a single ...
0
votes
1answer
3k views

Axway Tumbleweed Desktop Validator unable to validate certificate?

Anyone use or know anything about Axway Validation Authority Suite? I am currently googling the heck out of this and not finding an answer. It looks like I will have to read the Administration ...
0
votes
1answer
945 views

Apache, SSL, Self signed, Multidomain Certificates

Target: Generate a single SSL Certificate thats valid for domain1.com *.domain1.com domain2.com *.domain2.com Let it be self signed or a locally-generated CA signed. Scenario 1 # ssl.conf [ ...
0
votes
2answers
204 views

Installing Exchange 2003 IIS certificate

I'm having a bit of problem. I've went and registered new certificate for my domain mail.company.com at StartCom. This is free one year certificate. I've created it from scratch on website and haven't ...
0
votes
1answer
461 views

Restore the pass phrase for my SSL certificate?

I forgot the pass phrase for my certificate. Is there a way to restore the pass phrase?