SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

0
votes
1answer
18 views

Issue with creating an SSL certificate

I am having the following issue: There is a Terminal Server name TERM-SRV.example.com running Windows Server 2012 that hosts a site "https://example.com/RDWeb". There was a certificate that recently ...
0
votes
0answers
24 views

Reconfigure Exchange 2010 to use public mail domain on private network

This question has been asked but solution offered did not work for me. I have Exchange 2010 and Outlook 2010 clients on my private network. AD domain established 17 years ago is just BBC (not it's not ...
3
votes
1answer
59 views

Is it possible to have a single SSL certificate with IP address and domain name?

We want to have a single SSL certificate for a web site so that the website can be accessed with a domain name and IP address. Is this possible?
6
votes
1answer
88 views

What is “Cisco STG” and why would it dynamically replace a wildcard certificate on port 5061?

I have a lync client that is connecting to a Lync Edge server on port 5061. I get an invalid certificate error when connecting. When I run wireshark, during the TLS setup, and inside the ...
0
votes
1answer
74 views

Heroku is not switching certificates after adding custom

I have an app on Heroku and I bought my own certificate, valid for myapp.mydomain.de. I added it to Heroku using their addon, SSL Endpoint. I have a CNAME record which redirect from myapp.mydomain.de ...
0
votes
1answer
138 views

Ubuntu/apache2: cannot open port 443

I am trying to install a SSL certificat on my Ubuntu 14 server (using apache 2). For some reason the port 443 appears to be closed I installed and enable ssl /etc/apache2/ports.conf is as ...
-6
votes
2answers
79 views

Why are self-signed SSL certificates untrusted by browsers?

I have seen similar questions and answers, but none really answer my question effectively. There are 2 problems that SSL answers: Encryption and trust. Time for a truth table: ...
0
votes
1answer
85 views

Does the default self-signed cert break Exchange 2010 Activesync?

I have a customer who has been using a neglected Exchange 2003 server for at least 10 years. I'm in the middle of a migration to Exchange 2010. Pretty much done, actually. The only thing left on my ...
0
votes
1answer
22 views

SSL not working for the certain path

This is my configuration for ssl: <VirtualHost *:443> DocumentRoot /path/todirectory/ SSLEngine on SSLCertificateFile /etc/httpd/ssl/server.crt SSLCertificateKeyFile ...
-2
votes
1answer
60 views

Apache server config: how can I disable the certificate/SSL handshake on the WWW version only? [duplicate]

Serving a apache website via https:// => how can I disable the certificate/SSL handshake on the WWW version only? Hi we use SSL on the https://www version of our website Now I would like to disable ...
1
vote
0answers
77 views

Can I use both RSA and ECC certificates in apache?

If I simply use "SSLCertificateFile" and "SSLCertificateKeyFile" twice, the certificate chain is broken for the first one. Can I use both RSA and ECC certificate which is issued from different ...
0
votes
1answer
70 views

SSL Error for wildcard subdomain certificate

I have two SSL certificate one for *.sub.domain.com and one for *.domain.com. I don't have issues with domain level wildcard certificate. Meaning https://www.domain.com & https://domain.com works ...
0
votes
1answer
38 views

How to create a single SSL server certificate for domain AND www subdomain by the XCA tool

I use XCA (http://sourceforge.net/projects/xca/) for generating and managing server and client certs and keys. But there is one thing I don't really understand: How can I create a single certificate ...
0
votes
2answers
317 views

How to Make a Self-Signed SSL Certificate which uses TLS?

After upgrading Apache and PHP to the latest version on Ubuntu 12.01 LTS the SSL sites on it became inaccessible, stating error, "ssl_error_no_cypher_overlap". I have tried generating a new ...
-1
votes
1answer
82 views

What type of SSL certificate I need to create CA? [duplicate]

I've a task to create Certificate Authority for company use. Preferably using "valid" ( not self-signed) certificate. The goal is to issue individual certificates for subdomains, instead of wildcard, ...
0
votes
1answer
29 views

Export specific certificate from JKS using keytool

We're trying to configure Apache HTTPd to use an SSL cert from a JKS keystore file we have. Since we want only one of the certs out of the JKS (www.MySite.com) and not the others (such as ...
1
vote
1answer
57 views

How to specify a client certificate to psql?

I have a Postgres server with a user dev which requires a client certificate to log in. I'm using the command psql "sslmode=require user=dev host=db.prod", which gives me psql: FATAL: connection ...
0
votes
0answers
71 views

ocserv: How to identify a connecting user?

My ocserv auth mod is certificate. I knew from the sample config file that ocserv could provide a connect-script which has REASON, USERNAME, GROUPNAME, HOSTNAME, DEVICE, IP_REAL, IP_LOCAL, IP_REMOTE ...
0
votes
0answers
63 views

win sbs 2011 and ssl certificate

I have an SBS 2011 that has a self signed certificate and RWA enabled. I have imported the certificate (found on c:\Users\Public\Public Downloads) on an outside computer and when I try to access ...
1
vote
1answer
141 views

Can't get Nginx to serve correct certificate chain

I'm trying to set up Nginx (1.4.6-1ubuntu3.1) with a StartSSL certificate. I've been following the documentation to get it working, but Nginx only serves the server certificate, not the intermediate. ...
0
votes
2answers
153 views

Renew vs. new purchase of SSL wildcard certificate

I have an existing SSL wildcard certificate at GoDaddy that expires in a few months. Traditionally we would renew this certificate and, in doing so, begin the countdown towards the existing ...
7
votes
3answers
1k views

SSL certificate invalid in Chrome

For the website scirra.com (click for SSL Labs Server Test Results) Google Chrome reports the following icon: It's an EV SSL, and it seems to work fine in Firefox and Internet Explorer, but ...
1
vote
0answers
45 views

SSL certificate for sql-server on ec2

I have an ec2 node provisioned to host mssql server. I'm trying to request and install an ssl certificate for this node so I can securely connect to it but I can't get the certificate to appear in the ...
0
votes
0answers
14 views

Using Windows Server 2012 CA to provide internal certificates

I want to use Windows AD CS in order to provide any web interface internal to my company with SSL encryption and trust certification. What I want is to make the HTTPS interfaces of webapps, switches ...
4
votes
3answers
185 views

Displaying a remote SSL certificate details using CLI tools

In Chrome, clicking on the green HTTPS lock icon opens a window with the certificate details: When I tried the same with cURL, I got only some of the information: $ curl -vvI https://gnupg.org * ...
0
votes
2answers
296 views

vsftpd does not give a valid certificate using CA cert.

When setting up vsftpd we have problems with it not providing a trusted connection us a basic pem certificate container using just our private key and certificate. We created our pem file with the ...
1
vote
0answers
78 views

HPOM Java GUI, multiple users connecting to different servers from Citrix sessions on the same server possible?

I have an app (HPOM Java GUI) running on a 2008 R2 Xenapp 6 box that employs client certificates for encrypting connections to the HPOM server. I have 2 different sets of users who will use this app ...
1
vote
1answer
97 views

selfsigned certificate with domain name for a webservice server

I have 2 web servers, A and B. A is a web site used by users and B is a bunch of web services used by server A. So I like to enable https for server B. Since no browsers are supposed to go here I ...
2
votes
1answer
50 views

How to get a list of sites in IIS 7.5 binded to a certain ssl certificate using command line

Situation: an IIS 7.5 server with 30+ sites and 10+ certificates and a few certificates may be obsolete. Obsolete means they're not binded to the ip:port of any site on IIS. I could check each site ...
4
votes
2answers
213 views

Should I need to provide a root certificate when setting SSL cert on nginx

In Qualys SSL test always warn me that the root certificate is an extra download and can be safely removed. However, from Comodo website, their guide on installing cert on nginx is NGINX Needed for ...
-2
votes
2answers
437 views

How to generate a Self Signed SSL Certificate bound to IP address? [duplicate]

I have my application hosted in the cloud and while demoing to prospective clients, I would like to make sure that my browser doesn't complain due to the lack of trust. So I want to generate a self ...
1
vote
1answer
166 views

Problems configuring SSL certificate on Apache VirtualHosts

I am attempting to run multiple SSL connections off a single IP server running RHEL6. I have successfully configured one domain on SSL, however when I attempt to add a second, Apache fails to ...
4
votes
1answer
285 views

Have I referenced my website's SSL certificate chain correctly?

The SSL certificate chain for one of my websites is incomplete, and I learned that I should reference the intermediate certificate in the virtual hosts file. Comodo sent me two intermediate ...
-1
votes
1answer
95 views

Installing intermediate CA in Debian

The SSL tester at sslcheck.globalsign.com says: Server configuration does not include all intermediate certificates I found this page: ...
2
votes
1answer
279 views

Logstash-forwarder TLS handshake error - Server selected unsupported protocol version 301

I have the problem below just with windows. I tried with linux and it works fine. When I run: .\logstash-forwarder-master.exe -config .\logstash-forwarder2.conf With logstash-forwarder2.conf: { ...
-1
votes
1answer
85 views

Where are SSL certificates installed?

Server: Windows Server 2008 R2 There are a lot of instructions on how to install a certificate and they seem very straightforward. However, I am having a hard time figuring out where a certificate is ...
0
votes
1answer
138 views

Apache SSLVerifyClient - exclude one URL

I am setting up Apache 2.2 as a reverse proxy. My need is to have certificate authentication for every reverse-proxied url except one (https://mailserver.com/Microsoft-Server-ActiveSync) that is used ...
1
vote
1answer
3k views

The certificate is not trusted because the issuer certificate is unknown. (Error code: sec_error_unknown_issuer) Firefox

A website wants to switch an SSL certificate from Network Solutions to Gandi. Everything seemed to be installed correctly except that there is an error being thrown in Firefox only. On Chrome and IE, ...
0
votes
2answers
22 views

SSL Certificate issue on renewal in IIS 7

I have an SSL certificate that expires on Februray 15, 2015. What if I install new certificate on my server on Feb 10, 2015. Will my certificate work with new renewed certificate on Feb 10 as my old ...
2
votes
0answers
33 views

Certificate can only be used by network service account

Issues : Our service is using one certification for partner service call. It worked well in IIS site which is running as network service account. But when we run test the code as administrator ...
1
vote
3answers
70 views

If a sub domain is secure with a SSL certificate, will the sub-subdomain also be secure?

I have a standard SSL certificate I just purchased from Godaddy. Now it won't let me use a wild card for issuing the certificate for my domain. It says that the * wild card is not included in my ...
0
votes
3answers
211 views

Client Outlook 2013 doesn't connect from outside the company to the Exchange 2013

I have exchange 2013 server within the company operates correctly: Owa it's OK Outlook it's Ok Send and receive emails without problems. Has generated self-signed certificates. When trying to access ...
2
votes
1answer
146 views

How do I make a Cisco Ironport appliance send “linked certificates” for HTTPS inspection?

I have a PKI tree, and the ironport is a CA at the second level of the PKI tree, (for issuing HTTPS inspection certs) Although I deployed the root certificate to all clients, and chrome/IE work ...
5
votes
1answer
2k views

Trying to setup SSL with Apache on Ubuntu 14.04

I have purchased a SSL certificate from namecheap.com. I am trying to install it on a server running Ubuntu 14.04 and Apache. I used the following tutorial to setup Apache ...
1
vote
0answers
405 views

PuppetDB: unable to get local issuer certificate

I'm attempting to use puppetdb on but I'm running into some issues. I have a node called puppet. It is the master as well as where I've installed puppetdb. It's also a node that puppet manages. ...
1
vote
1answer
70 views

How to secure only one page with SSL on Apache2?

My web server hosts many pages. However, I need to secure only one of them with SSL. I know how to create self-signed certificate and how to install it on Apache2. My problem is quite different: since ...
0
votes
0answers
181 views

SSTP VPN connection errors

We're testing an Amazon EC2 server for a cloud application server and I'm trying to configure VPN access to it. I've read that PPTP cannot be used due to the blocking of GRE port 47 and that the best ...
1
vote
1answer
80 views

Why are my config settings inherited to the subdomain server block?

I use nginx with a ssl wildcard certificate like that: /etc/nginx/sites-enabled/example.com server { listen 443 default_server ssl; server_name 192.168.0.1 example.com; include ...
0
votes
1answer
69 views

How do I restrict certificate authentication to specific users on IIS 8.0?

I am using IIS 8.0 on a Windows Server 2012 box. This is not a domain joined machine so Active Directory is not available to me. I've successfully configured certificate authentication. When ...
0
votes
0answers
78 views

Login using client SSL certificates

I want users to be able to login to say, Jenkins using client SSL certificates without password. Let me rephrase it: The certificate part works fine. I want to find a way for apache to tell web ...