SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

learn more… | top users | synonyms (1)

1
vote
1answer
16 views

Client Cetificate IIS

I have a dev server where I set up SSL and a client certificate using this guide form Microsoft My problem is I'm not sure what the steps are for getting a client certificate for my production server....
1
vote
0answers
61 views

nginx SSL client certificate handshake very slow for domain and paths

I have a server with some subdomains publicly accessible while on one subdomain a client side certificate is required. Not only that, paths on that subdomain point to different applications. I.e that ...
3
votes
1answer
123 views

Nginx letsencrypt OCSP stappling

I have set up nginx with SSL and letsencrypt certificates. However I am unable to get OCSP stappling to work. From what I found in the web, it should work with the following configuration, ...
0
votes
1answer
28 views

How can I install an SSL certificate using Amazon Certificate Manager to a VirtualHost?

I'm using Elastic Beanstalk and a t2.micro instance to host a few of my websites. For one of the websites specifically, I want to enable https. How do I go about doing this? I have each domain ...
0
votes
0answers
29 views

VPN revocation error?

I have managed to successfully configure a SSTP VPN connection on my internal client PC, but only through registry fixes. I keep getting this error relating to checking to see if the server has been ...
1
vote
1answer
1k views

LetsEncrypt certificate renewal failure

I tried to renew the certificate of my server. The current one has expired 1 month ago, but I didn't took care of it until now. I tried to use the letsencrypt-auto renew command but got a failure: ...
0
votes
0answers
39 views

Azure Web App Service - Installed SSLcert from SSLs.com OK, but nothing works

I successfully deployed my .net webapplication to Azure App Services (WebApp), access to http ://mywebappAAA.azurewebsites.net and https ://mywebappAAA.azurewebsites.net are working properly. I ...
3
votes
1answer
533 views

How to fix issues with LetsEncrypt certificate chains on Windows Server?

I've been using LetsEncrypt to generate certificates for my sites on Windows 2012 R2 server. It worked great, until recently when I renewed the certificates. LetsEncrypt made a recent change where ...
1
vote
1answer
21 views

blue zone ftp: change protocol from SSLv3 to TLS

If one is changing the ftp protocol from SSLv3 to TLS, are there changes to the command line for individual ftp transfers? Or is it done using certificates only, and if so, are there any known ...
1
vote
1answer
32 views

Install Comodo SSL Cert for AWS Elastic Beanstalk Instance

I purchased a wildcard SSL cert from Comodo SSL, but am really confused on how to install it to use with my AWS Elastic Beanstalk instance. The files they sent me are: STAR_setheroapp_com.crt ...
0
votes
2answers
36 views

Apache different SSL certificates for public and private IP

I have a web server that can be accessed via (1) internal private IP address 192.168.0.1 ; (2) public domain (its public IP is NAT-mapped to internal private IP 192.168.0.1). I have my default-ssl....
0
votes
0answers
21 views

CSR created for unrequested domains

Trying to create csr for domain.com only. Key first: # openssl genrsa -out domain.com.key 2048 Generating RSA private key, 2048 bit long modulus .........................................................
1
vote
1answer
49 views

java keystore with multiple aliases on apache

A JKS file (Java key store), May contains many aliases, this means it may hold many private+public keys combinations, some aliases may be trusted, some not. When I define jetty to use SSL, as this ...
9
votes
3answers
1k views

Do I need a separate SSL certificate for a DNS redirect?

I am implementing a multi-tenant application where my application hosts and serves technical documentation for a tenant's product. Now, the approach that I was considering was - I host the ...
2
votes
1answer
23 views

SAN domain list SSL Certificate

When creating a SAN certificate you have your base domain that the certificate is for say www.domain.com and then alternate names of say download.domain.com and stream.domain.com. When creating the ...
1
vote
3answers
73 views

Can I purchase 2 wildcard certificates with the same subject from 2 different CA vendors?

Say I have an existing wildcard cert (*.example.com) from Vendor A (eg Symantec) licensed for 2 servers. And now I want to purchase the same subject (*.example.com) from Vendor B (eg. RapidSSL) for ...
2
votes
1answer
45 views

Generating certificate signing request for ESXi 5.5

I would like to replace the (self signed) SSL certs on various ESXi 5.5 hosts with ones generated by our own CA. I found docs on the VMware site on how to overwrite the key and cert files on the ESXi ...
1
vote
1answer
28 views

Multi-Level, Multi-Domain SSL Certificate Solutions?

I'm trying to find a large-scale solution for setting up multiple domains, and their sub-domains, with SSL certs. This is on the order of thousands of websites across a couple dozen load-balanced ...
1
vote
1answer
27 views

IIS and SSL Certificates

I have the following markup <html> <head> </head> <body> <a href="https://www.shoeshow.com/">www.shoeshow.com</a><br/><br/> <a href="https://...
1
vote
0answers
24 views

How to use your ssl certificate and key from your website with activemq console?

After enforcing strict transport security in a server, it is also forcing https into port 8161 for activemq which of course makes it fail. I followed this instructions to enable https on activemq ...
0
votes
0answers
13 views

IIS Automatically apply wildcard certificate to new subdomain

I've been trying to figure out how I could automatically apply a wildcard ssl cert to a subdomain on an app im building. for instance, sign up to use the app. you get companyname.example.com i see ...
0
votes
4answers
85 views

Using the same SSL Certificate of a Domain on different IIS Servers?

We have different Web Sites on different IIS Servers belonging to the same Domain as site1.example.com, site2.example.com, site3.example.com. However, we have no idea about how to use the same ...
-3
votes
1answer
52 views

Change SSL encryption to 128 bit from 256 bit

I have bought SSL using Godaddy and running nginx over an ubuntu machine. I have came to know that I am using 256 bit encryption with my SSL certificate. I want to downgrade it to 128 bit. How is it ...
0
votes
1answer
254 views

outlook 2016 for mac can't connect to Exchange 2013

We have 1 Mac (osx 10.11.1) user running Outlook 2016, and he is trying to connect to our Exchange 2013 server (Version 15.0 Build 847.32). After creating the account in outlook a yellow dot remains ...
-3
votes
1answer
24 views

what ssl solution allow Server IP so any domains pointed to that will ssled?

Is there any ssl solution based on Server IP so any domains pointed to that will be allowed? We allow client to run our app on their domain for whilelabling and our app also require ssl as well. So ...
1
vote
1answer
136 views

Mutual SSL authentication - client certificate vs server certificate

I am setting up a web application which will connect to a remote web service and is required to use a client certificate. My web app uses HTTPS to connect and I have it configured with my existing ...
1
vote
1answer
30 views

Tomcat SSL not available outside

I do have a Tomcat8 server running, currently in the development environment. It's been working for a while on the port we have picked (8085) and was available outside of our network (unblocked on the ...
2
votes
1answer
385 views

Server certificate does NOT include an ID which matches the server name

Our server was upgraded yesterday so it now has a more updated Ubuntu, Apache 2.4.10, PHP etc. After I put everything back, Apache started complaining about my configuration. The server hosts a site ...
0
votes
1answer
70 views

How to get Let's Encrypt to give challenge text for all domains at once?

I'm using Let's Encrypt for my Google App Engine site, so I'm generating certificates only, and while it's working, the process for verifying multiple domains seems clunky. I presume I'm doing ...
-3
votes
1answer
48 views

I get other website's tls certificate when visiting my website [closed]

i have a weird issue while visiting my website using https... I can't track how often this happens, but sometimes T get a TLS certificate of another website.... and the browser warns me that the ...
1
vote
1answer
57 views

Reinstalling a godaddy certificate on node/express server?

Copied from here I'm looking at a server on behalf of a client and was wondering what the cert actually is and where it comes from in this example: require('https').createServer({ key: fs....
0
votes
1answer
64 views

Install SSL certificate on server (before switching the doimain's dns to point to the server)

As part of a major revamp of our site: retiring old server (no ssl) setting up new server (with ssl amongst other changes) switching the domain's dns once the new server is ready Is it possible to ...
2
votes
1answer
56 views

Redirect in web.config because of certificate issues

I'm running some websites on a IIS 7.5 with one UCC SSL certificate, where 10 domains are secured. most of them are something.company.ch, some are something.anothercompany.ch we have a redirect rule ...
1
vote
1answer
144 views

Let's Encrypt certificate not recognized by Nginx

I successfully created some LE SSL certs, using this guide. However, when I updated my nginx config to use the certs and redirect all port 80 traffic to 443. http successfully redirects to https, the ...
0
votes
0answers
25 views

IIS 8 - Default SSL Site Breaks SNI

We have the following scenario in testing SNI on Windows Server 2012 R2 with IIS 8. Domain names and IP addresses listed below are fake and for example only. WEB SITE NAME IP ADDRESS Host ...
0
votes
1answer
41 views

SSL certificate installation to establish SSL connectivity between 2 servers

I want to establish SSL connectivity between 2 servers, and I understood that I need to install the SSL certificate of server A into server B's Java keystore and vice-versa. So, that server A can call ...
-2
votes
2answers
270 views

Powershell New-SelfSignedCertificate missing -NotBefore in Windows 2012r2

My 2008 powershell script is not working correctly in 2012r2. The command New-SelfSignedCertificate -DnsName test.testdomain.com -NotBefore [datetime]::now.AddYears(10) comes back with: New-...
0
votes
0answers
28 views

OpenSSL certificate shows “Issued to: Administrator” as Common Name

I'm trying to issue a certificate which was generated by openssl. $ openssl req -out vpn_certrequest.csr -key vpn_key.key -new -sha256 You are about to be asked to enter information that will be ...
0
votes
1answer
48 views

Can I prohibit IIS from fetching intermediate SSL certificates via AIA?

According to this answer IIS can use Authority Information Access certificate extension to retrieve missing issuer certificate. Here's the scenario. There's an IIS installation with an HTTPs endpoint ...
0
votes
1answer
18 views

Should I use multiple-domain SSL certificate for subdomains with EV?

I have a web-site - for instance, https://website.com - and I need to provide an SSL certificate for this web-site and a couple subdomains - for instance, https://subdomain.website.com and https://my....
1
vote
1answer
144 views

NGINX does not prompt for client ssl certificate

On our setup we want to promt a user for a client ssl certificate. All certificates are issued by StartSSL. The problem is that even though ssl_verify_client on; is set 'on', the website / browser ...
1
vote
1answer
119 views

IIS 7.5 - can't configure two SSL Certificates under one IP-adress?

We're setting up HTTPS for all our websites. Unfortunately I'm not really experienced in IIS. I have two certificates, one is a EV-UCC-Certificate with 10 subdomains included. the subdomains are ...
0
votes
0answers
36 views

Verify complete certificate chain being sent by Apache

I have configured my Apache web server to send out the complete SSL certificate chain and now I want to verify that the the complete chain is, in fact, being sent. I would normally use something like ...
0
votes
2answers
43 views

different ssl cerfiticate for subdomain [duplicate]

Since I can't afford buying a wildcard ssl, I want to purchase another ssl certificate for m.mysite.com, so mysite.com and www.mysite.com will have the a different ssl certificate than m.mysite.com ...
0
votes
2answers
37 views

Create exchange certificate from linux CA

I am setting up exchange 2013 in a lab, where we are trying to replace Windows hosts with Linux hosts. We have exchange up and running, but connections complain that we need a valid certificate. I'...
0
votes
0answers
63 views

Self-signed certificate error with exim: CA is unknown

I added ssl support to my exim smtp server. Now I'm trying it with a Thunderbird client, first of all I imported my self signed certificate to thunderbird keystore and than I tried to connect. It ...
1
vote
2answers
51 views

Client-side certificate signing

One of my partners wanted to do client side SSL certificate authentication. They wanted us to sign the certificate using a recognized CA. I was under the impression that for client side SSL ...
1
vote
0answers
58 views

Exchange 2013 - IMAP with Wildcard Cert - Error when Set-ImapSettings

Trying to get a wildcard cert working on Exchange 2013 for IMAP purposes. Unable to add in ECP (receives error about it not having a FQDN since its a wildcard) So then I try to run: Set-...
0
votes
1answer
30 views

SNI: Can I find out which hosts share the same IP? [closed]

The setup is the following: I know that a host uses SNI (e.g. universal.at on IP 91.236.122.125, the test says so). I know that I can find out one other host that is also hosted on the same IP ...
0
votes
1answer
241 views

How to disable SSL on Apache 2.4.18 running on Windows Server 2008

I have Apache 2.4.18 running on Windows Server 2008 R2. I want to stop SSL on that environment altogether. How can I disable it? Here is what I done in attempt to disable it In the httpd.conf file ...