SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

0
votes
4answers
568 views

What happens if you install an SSL certificate?

I recently developed an incentive website for a European bank, and one of the requirements was SSL - the website displays some personal customer data (though no financial or really sensitive data). ...
2
votes
1answer
1k views

Why might Windows falsely claim a self-signed root CA certificate is revoked?

I created a self-signed root CA cert for internal test use, using openssl. This has been successfully installed and used as a trusted CA on a number of machines and platforms (Windows, Linux, various ...
1
vote
1answer
899 views

How do I create a certificate with HP Systems Management Homepage with Windows 2008 R2

I'd like to get a trusted, or even better a "green bar" certificate from my Windows 2008 R2 CA to work with my Insight manger home page of https://host:2381 I tried importing the file ...
-2
votes
3answers
950 views

Untrusted Connection issue when running my site in https

I'm using cloudflare to manage my DNS. When I visit my site under https:// it displays an "Untrusted Connection". Is this most likely due to a DNS issue? Or, could it be happening because of a ...
0
votes
1answer
251 views

SSL Certificate failed install in IIS7

I can't seem to install my SSL in IIS7 because when I do it appears in the Server Certificates list but then if I navigate away from that page or refresh it then it disappears? I don't know if it has ...
0
votes
1answer
552 views

SSL Migration from NGINX proxy to Citrix NetScaler VPX problems

We migrated a bunch of our sites (changed static IP addresses) from an NGINX proxy to a Citrix NetScaler VPX instance. We tested our sites using every browser available, and they all appeared to be ...
3
votes
1answer
2k views

How do I require client certificates with a specific username / password in Apache?

I have several clients certificates that my Apache httpd server requires clients to have (made using the instructions at http://www.garex.net/apache/). I would like to have an authentication that also ...
3
votes
1answer
1k views

Why can't openSSL verify google's certificate?

When I run the command openssl -connect www.google.com:443 from a Debian VM, I get the following within the output: Verify return code: 20 (unable to get local issuer certificate) What's going ...
2
votes
1answer
374 views

ADFS 2.0 and Dynamics CRM 2011 SSL for what domain?

I have read that the best practice for an IFD Dynamics deployment is to use ADFS2.0 and lock it down with a wildcard SSL Certificate. The domain name I want to use for the Dynamics deployment is ...
0
votes
2answers
179 views

How can I make a private SSL certificate be trusted by end-users on two seperate ActiveDirectory domains

I have a web application that utilizes SSL. The website is not publicly facing, and is for private internal access only at our enterprise. For security reasons, we run two separate Active ...
1
vote
0answers
300 views

Configure OpenSCEP to grant certificate requests automatically

I am trying to setup an OpenSCEP server that can grant certificates automatically instead of me running scepgrant command every time there is a new request? Can someone let me know how to proceed with ...
0
votes
1answer
968 views

Configuring UCC GoDaddy SSL Certificate in IIS 7.5

PLATFORM We have a Windows Server 2008 R2 server with IIS7.5 and we host a number of our client's websites. OBJECTIVE We need to configure two domains: Acme.co.za and Contoso.com to make use of an ...
1
vote
1answer
111 views

SSL certificates with password encrypted key at hosting provider

We are a software company and offer hosting to our clients. We have a VPS at a large Dutch datacenter. For some of the applications, we need an SSL certificate which we'd like to encrypt with a ...
0
votes
1answer
103 views

Lower SpamAssassin scores when certificate verification fails

I’ve noticed that I’m getting junk mail from Norwegian companies that send from servers that Postfix says failed certificate verification. Is it possible to give these messages a lower spam score with ...
1
vote
1answer
816 views

Old SSL Certificate Cached on IE

We recently switched our SSL certificates on our web hosting environment and the old certificates are still showing up on certain computers with IE installed. It works perfectly fine in both Firefox ...
9
votes
3answers
383 views

Is it good practice to remove the password from a ssl cert?

I have read at several blogs now that one should remove passwords from SSL certificates in order to avoid password prompts during Apache restarts. Is this true and does this pose any security risks?
3
votes
2answers
149 views

Force SSL for IIS 6

What is the best way to force HTTP requests to HTTPS requests on IIS 6? For example, I have both a directory and a whole site that I need to force HTTPS on for two different servers. What is the ...
0
votes
1answer
95 views

Wildcard certificate with separate certificates for each host

We're using a wildcard certificate on several hosts, which right now means that we have to distribute the wildcard cert's private key to each machine, which is a security problem. On the other hand, ...
1
vote
1answer
318 views

HTTPS for server IP address shows as invalid certificate

I have a website, say www.foo.com with an IP address 1.2.3.4 I have an SSL certificate for www.foo.com and when I visit https://www.foo.com all is good. However if I visit https://1.2.3.4 it says the ...
0
votes
2answers
1k views

How can I install root or intermediate SSL certificates without restarting server?

For installation of a certificate I needed to install the root and intermediate certificates as well. This was recognized (after IIS reset) by Firefox and IIS at once, but not by IE, Opera or ...
0
votes
1answer
33 views

What type of errors will users encounter for subdomains that are not accepted by a wildcard certificate?

This is just a follow up clarification question to the one over here. I plan to buy the following wild card certificate for my domain: *.example.com (sample only) but I want to secure the ...
1
vote
3answers
2k views

StartSSL certificate on domain and subdomain + two different servers

I have created free StartSSL certificate (class 1, https://www.startssl.com/?app=1) for www.example.com which is also valid on subdomain dev.example.com. Can I use this certificate, if ...
0
votes
1answer
393 views

There is no certificate chain in portal certificate file

I am trying to install Mcafee EMM in a lab environment. I have created an enterprise CA and created a certificate. But while installing the EMM, its showing the error of there is no certificate ...
1
vote
2answers
1k views

Installed wildcard Certification not showing up in the IIS6 Available Certificates box

I've installed a GoDaddy wildcard certificate on my Win2003/IIS6 Server. It shows up in the Intermediate Certificate Authorities area of the MMC Certicates. All looks fine: Issued to: *.mydomain.com; ...
0
votes
1answer
3k views

Watchguard Firebox SSL certificate validation failed

I'm really stuck on this one! I have two Watchguard firebox firewalls. My SSL certificates expired and I bought two new wildcard certificates from RapidSSL. I couldn't get the certificate to install ...
1
vote
1answer
3k views

Creating a non-MD5 CSR for Verisgn?

When creating the CSR and sending it to Verisgn got this warning: "Alert: Your CSR has been signed using the MD5 hashing algorithm. While the MD5 hashing algorithm is not optimal it will not prevent ...
1
vote
0answers
216 views

Exchange 2010 TLS Cert questions

I'm trying to wrap my head around with enabling TLS for a specific domain on Exchange 2010 server but I have a few questions that I'm sure you guys have an answer to. I've gone through this guide ...
0
votes
2answers
1k views

SVN Trusted Certification Error [duplicate]

Possible Duplicate: SVN SSL Certificate Validation Error I am running RedHat Enterprise Linux 6 and have a subversion server installed (with Apache). I have just configured Apache to run ...
1
vote
1answer
547 views

openssl req -key server.key -out server.csr taking ages to complete

I am trying to generate my own self-signed ssl certificate with openssl so I can test them out on a dev server on nginx before I buy one. I have created the server.key but when I run the command ...
5
votes
1answer
8k views

Apache seems to be using old expired certificate even though new one is installed

Apache 2.2.3/mod_ssl/CentOS 5.5 VPS Our certificate expired on 2011-10-06, and even though we have seemingly installed the new one correctly, browsing to the site still shows an expired certificate! ...
1
vote
1answer
131 views

SSL common names for second-level-domains

While configuring SSL and certificates in my Apache server I had some troubles with second-level-domains like .com.pt. If I ask for a certificate for a www.xpto.com domain it will be issued for ...
2
votes
3answers
82 views

What's a “request” in context of SSL certificates and how do I get one?

I need to host a web service that would accept requests over https. Therefore I need an SSL certificate issues by some Serious Certificate Company. I asked our admins - they say I have to generate ...
2
votes
2answers
815 views

ISA 2006 does not allow traffic using FQDN

I experience an issue accessing Tomcat running over SSL with MS ISA 2006 in front. When I access using the internal IP address (e.g. https://10.0.42.136/...) everything works fine and ...
1
vote
2answers
769 views

Secure connections with Domain aliases running on IIS7

I have a site that can be accessed through example.com. I can secure traffic to and from this site by installing a certificate on the web server that is tied to the example domain. Now, I have ...
3
votes
1answer
597 views

Are there any way to check client certificate issuer in lighttpd?

I have to check client certificate issuer in the Lighttpd but can't find any variable for that. Here is part of my config, related to ssl_mod: $SERVER["socket"] == ":443" { ssl.engine ...
0
votes
1answer
423 views

RapidSSL (freessl) certificate installation on red5

I bought a wildcard SSL certificate at rapidSSL which provided me web certificate and an intermediate certificate. i installed the web certificate using: keytool -import -alias root -keystore ...
2
votes
3answers
2k views

Multiple SSL on single IP with virtualmin

I am using Virtualmin (GPL) to manage my servers. I have multiple sites hosted on it binded to single IP address. I want to enable SSL for multiple servers hosted on it. Can I bind SSL for all such ...
2
votes
4answers
741 views

How to redirect subdomain to alternative server with SSL support?

I'm looking to redirect https://sub.domain.com to https://sub.otherdomain.com without changing the user's address bar. Is this even technically possible? I can imagine some certificate issues? We ...
2
votes
2answers
595 views

An SSL certificate for *.mydomain.com doesn't work for mydomain.com

I've created a self-signed certificate via openssl for *.mydomain.com, and it works e.g. for www.mydomain.com. However, when I go to mydomain.com directly in Chrome, I get an error (You are attempting ...
-2
votes
1answer
432 views

Getting around GoDaddy shared hosting SSL limitations [closed]

GoDaddy shared hosting apparently forces you to buy one of their SSL certs, i.e., you can't use StartSSL and then upload your own. Is there a way around that, perhaps using .htaccess as described ...
2
votes
3answers
2k views

Safari, IIS and optional Client Certificates

I've a ASP.Net Webapp running on IIS7.5. The Webserver is configured to accept Client Certifcates. Unfortunately Visitors with Safari Browser are unable to view the Page. Same Problem as described ...
2
votes
3answers
613 views

How do I configure an SSL only site, in a way that doesn't affect browser connection limits

The Yahoo Developer Best Practices recommend using multiple hosts (host1.company.com, host2.company.com, etc..) as a way of overcoming a webbrowsers built in limitation of only issuing two concurrent ...
0
votes
1answer
194 views

binding info for website with SSL running on IIS on Server 2008 R2?

Folks! I have a Windows Server 2008 R2 machine running IIS 7. I'm attempting to create a website that will use SSL. When I create the website, I choose "https" as 'type', "443" as Port and the ...
11
votes
9answers
76k views

SSL Error - unable to read server certificate from file

I've been setting up SSL for my domain today, and have struck another issue - I was hoping someone could shed some light on.. I keep receiving the following error messages: [error] Init: Unable to ...
1
vote
2answers
305 views

SSL certificate paths in a virtual host

I've recently purchased a wildcard SSL certificate for my domain, generated the CSR, and everything has been sent through OK. My question is quite straightforward, but following this - ...
2
votes
1answer
663 views

Commercial SSL Certificate and Self-Signed Certificate for Authentication

I have a apache 2 host running with a commercial (rapidssl) signed certificate and I need to generate client certificates for authentication. I created a CA (according to ...
1
vote
0answers
340 views

Switch stunnel from self-signed cert to signed by CA cert

We use stunnel configured to provide SSL-tunnel between SERVER A (where we have stunnel configured as client) and many SERVERS B (where we deployed stunnel configured to work in server mode). We use ...
2
votes
2answers
657 views

Using self signed SSL for mail

Rather than purchasing SSL I would create a SSL certificate. Of course my SSL certificate will not be useful that browsers show "Un-trusted SSL". Can I use Self Signed SSL to my mail server to send ...
-1
votes
2answers
112 views

Tracking down the admin contact of an expired GeoTrust certificate

One of our client's sites has an invalid certificate and we don't know who provided the certificate. All of our contacts with the client have since left the company. Is there something like a WHOIS ...
0
votes
1answer
659 views

Apache, SSL Client certificate, LDAP authorizations

High there, Is it possible to mix mod_ssl and mod_auth_ldap so that the authentication is done with the client certificate and authorizations with mod_auth_ldap (Require group)? If so, can you give me ...