SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms

3
votes
1answer
141 views

If I get a certificate signed for ECDSA will older browsers be able to use RSA?

I'm looking into using ECDHE-ECDSA and there are a lot of great articles on why (https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/) and ...
1
vote
1answer
30 views

Single IIS, 2 applications, 2 IP addresses, 2 Domains, 2 SSLs

I know there are many questions out there, but none seemed to address specifically what I am after. I have one instance of IIS, with two separate applications on it. Each application works on its ...
0
votes
1answer
98 views

Apache fails to start with new ssl certificate

I'm running RHEL 6.4 and my trusted certificate has expired recently, so I decided to renew it. I've obtained a new certificate from StartSSL. After downloading and putting the certificate file on the ...
0
votes
2answers
62 views

S/MIME certificate to minimize email bounce

I have a website hosted in a vps that sends informative emails to my clientes, maybe 20-40 emails per day. Since few weeks ago some sent emails are bouncing with the following error: This message ...
0
votes
0answers
28 views

Windows 2012 - Certificate Issue

My application runs as a WCF web-server in a Windows service. It uses https/ssl protocol and binds it's certificate with its port number. During the Service start, I am seeing this error in Windows ...
-1
votes
1answer
25 views

Only allow a specific client to talk to a server

I have the following situation: have a server (ubuntu) running an application. I have a client (only the one client) requesting stuff from that server. To execute the requests, the client has to ...
0
votes
0answers
48 views

Chef SSL authentication using enterprise CA

I am trying to configure Chef in our environment. My understanding regarding the Chef SSL configuration is as below. While installing chef-client in nodes using knife bootstrap command, ...
5
votes
2answers
1k views

Can't upload certificate to AWS

I'm doing: aws iam upload-server-certificate --server-certificate-name MysiteCertificate --certificate-body Downloads/mysite/mysite.crt --private-key mysite.pem --certificate-chain ...
0
votes
1answer
43 views

IIS 7 filling disk with millions of certificate files

I've got an ASP.NET website running on IIS 7. Using PA File Sight, I've proven that it is creating 2 to 3 new files in the C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys folder every minute. PA ...
14
votes
1answer
665 views

How does this kind of SSL work?

"Issued to" and "Domain Name" doesn't match but still valid and accepted by all major browsers without any warning. While previewing my blog post in Blogger, I noticed that my blog was previewed via ...
0
votes
1answer
205 views

StartSSL.com SSL Class2 Certificate and Postfix

currently my Postfix 2.11 instance runs TLS on a GoDaddy SSL Certificate but as i would like to be able to access my server from smtp.example.com as well as imap.example.com, example.com or ...
2
votes
2answers
124 views

Nginx issues between vhosts and SSL

I have two sites in the same IP with the follow configuration: site1.com Multiples subdomains (ie.: foo.site1.com, bar.site1.com) Everything listening on port 80, NOTHING in 443 ...
9
votes
2answers
413 views

Does it matter where the CSR and key files for SSL certification are generated?

I have to create a CSR for a wildcard SSL certificate. Some FAQs from SSL providers say that I should generate the CSR file on the machine where I want to install the certificate? My understanding is ...
0
votes
1answer
54 views

MDM Server Apple Certificate: Certificate Signature Verification failed

I want to create a MDM server to manage my iOS devices. I have enrolled in iOS Enterprise Developer program. And executed the following openSSL commands "1. Creating Certificate Authority (CA)" ...
0
votes
1answer
68 views

How can I renew the SSL certificate used on our Exchange server?

According to the MSDN article Renew an Exchange Certificate, I'm supposed to use Get-ExchangeCertificate -Thumbprint 'AD19B141228C7CF98B5F78DCED978B7C45E15434' | New-ExchangeCertificate ...
0
votes
0answers
182 views

Config Manager 2012 Application Download stuck at 0%

We have a Config Manager 2012 R2 setup with 2 Distribution Points on remote sites. In the remote site the Applications don't get downloaded, the status remains on 'downloading (0% complete)' In the ...
0
votes
0answers
19 views

Let Postfix show the appropiate SSL Certificate for a variety of host names

i bought an SSL Certificate for domain host.domain.com so my GNU/Linux mail server can deal with secure connections appropriately. That's ok while clients connect to host.domain.com but when they ...
-2
votes
1answer
147 views

Why openssl s_client and gnutls-cli deliver different certificates (own server)

on my server i have multiple virtual hosts with apache2. Some with domain *.example-one.org and some whith *.example-two.org. Each domain has it's own wildcard certificate. When I fetch the ...
1
vote
2answers
89 views

Does a domain computer trust certs from domain CA

I have investigated this but have been unable to find a definitive answer to my question. I have never used certificate services in active directory before so am unsure of its possible ...
0
votes
1answer
238 views

version 0.9.7a of openssl reports “certificate signature failed”, but version 0.9.8e is happy

I am trying to construct an openssl certificate chain that will work with a standard CentOS 4 install as client. (I know it's very old, but it's what our client is using so we need to support it). ...
0
votes
1answer
91 views

Will renewing a wildcard SSL certificate on one server invalidate the certificate on other servers?

We have a wildcard SSL certificate that is due to expire in a few weeks. I currently have this certificate installed on six servers. I'd like to renew it on one server first, test it out, and then ...
0
votes
1answer
445 views

Restart of nginx service fails because of /etc/nginx/nginx.conf test failure

Installing 3rd party SSL on DigitalOcean Droplet, Apache running Ubuntu 12.10. Following the instructions here: AlphaSSL on Apache Self signed SSL instructions from DigitalOcean So everything ...
0
votes
1answer
22 views

Certificates/SSL via SSL-Proxy vs. real certificate for a server

While researching the different certificate types I've come across hosters that offer what they call SSL-Proxy type installations for their servers. I'm concerned about this idea, as it defeats what I ...
0
votes
0answers
6 views

Apache: Pass phrase incorrect SSLPassPhraseDialog [duplicate]

On one of my servers I observe the following problem with SSL passphrase: some certs are passing it without asking for a password, while some others keep asking for it. I have set it up globally: ...
0
votes
1answer
100 views

SSL Cert Expire or Caching issue, don't understand [closed]

If I visit BT's site in Chrome I get this ... http://imgur.com/b05alsX It looks like the cert has expired. (Similar in Firefox) BT claim it isn't. https://twitter.com/BTCare/status/440405157999030272 ...
1
vote
1answer
197 views

How do I properly generate a keystore for ssl?

I'm trying to get an ssl certificate from godaddy for use with jetty. These are my steps: keytool -keystore keystore -alias jetty -genkey -keyalg RSA -keysize 2048 What is your first and last name?: ...
0
votes
0answers
332 views

openssl s_client -connect: 20 error with server signed certificate for client

What I want I want to connect to a server using a given signed certificate (by the company running the server) What I have Ubuntu 12.04 LTS My key and CSR files A signed certificate. It was signed ...
1
vote
1answer
115 views

Installing StartSSL certificate in ProFTPD

I am currently experiencing some trouble installing a StartSSL certificate in ProFTPD. These are the files I have: cert.pem - certificate file cert.key - ...
0
votes
1answer
45 views

how renew a ssl certificate for exchange 2007

my certificate was expired thus I bought a new one. But when configure the panel of ssl provider it give me the following error (I mean, when I put the csr in the form): Common name is already ...
0
votes
2answers
19 views

which ssl certificate for exchange

I want buy a ssl certificate for exchange 2007. I have different choices: 1) protect 1 website 2) protect multiple websites (multiple domain ucc) Thus I have microsoft exchange on AD domain I think I ...
3
votes
2answers
753 views

Discerning GoDaddy SSL Certificate Types

I'm following these instructions for installing a GoDaddy Certificate in Apache Tomcat: ...
0
votes
0answers
23 views

Problems with self-signed certificate for exchange

my ssl exchange certificate for exchange 2007 was expired today. Just for few days I want make and install a self signed certicate. But I have some problems. The first step I've done is create a new ...
0
votes
0answers
57 views

Apache SSL Certificate and Basic Auth combination - password if no certificate

Is it possible, to force apache to ask for password only if user don't have client-certificate installed? I'm almost sure, that this is possible, but I'm not able to find any confirmation anywhere. ...
1
vote
1answer
35 views

When I install the certificate from a client who is using windows 2003 on my linux system the serial shows as negative

I'm not sure why I see a negative value in the serial number when I install the client's certificate. If anyone has any leads or information on this, that would help me greatly. Serial Number: ...
1
vote
2answers
92 views

Avoid Man in Middle AWS load balancer

I have a load balancer configurated with the port 443 to port 80 of the ec2 servers and with a sniffer like Burtsuite can I edit the request. How can configure the ELB to avoid this type of attack?. ...
0
votes
1answer
46 views

Check client certificate in nginx?

I can issue certificates without a problem and I can get nginx to force users to provide a certificate but how do I get nginx to give me information about the certificate? Information such as name and ...
5
votes
1answer
123 views

How do I configure AD CS to support Name Constraints (4.2.1.11 in RFC 2459)?

I am trying to figure out how to do Qualified Subordination with the critical extension set, but I'm unable to figure out how to do this in MSFT AD CS. For a given certificate, how do I make sure ...
0
votes
2answers
84 views

How to redirect from FR to COM when using HTTPS [duplicate]

I have two domains : my-domain.com and my-domain.fr I want to redirect traffic as followed : my-domain.com:80 -> my-domain.com:443 my-domain.fr:80 -> my-domain.com:443 my-domain.fr:443 -> ...
1
vote
1answer
199 views

Turning on ssl_verify_client in Nginx causes Gitlab user identification to fail

We have a private Gitlab instance that we plan on exposing externally, in order to ensure that only employees can connect to the website I have rolled out a small internal CA with user certs in order ...
2
votes
2answers
71 views

Specify nginx's ssl_certificate in location{} block

For a web service we have two certificates: myservice.com and api.myservice.com. Both have the same application (document root) but are serverd over HTTPS with different certificates. Unfortunately, ...
0
votes
1answer
46 views

Download root CA certificate in browser

I have a Apache server installed on CentOS 6. I have created a trusted self sign certificate. For that I had created root CA certificate and using it I have signed my self signed certificate. Now I ...
6
votes
1answer
145 views

What does this intention with random numbers mean in a SSL certificate?

I was looking at this site, and out of interest, I was having a look at the certificate in Chrome 32, on Windows 8.1, and I had a look at the certificate. I saw this really strange intention, Apart ...
9
votes
3answers
347 views

Why issue a SSL certificate that expires in 2037?

In Firefox, if I view the Verisign Universal Root Certificate Authority, I notice that it expires in 2037. (Settings tab -> advanced -> view certificates -> VeriSign Universal Root Certification ...
0
votes
1answer
45 views

Unable to update service communication certificate

We have added a self-signed certificate when setting up AD FS, and now want to update the service communications certificate to our domain's wildcard cert. Following these instructions: ...
0
votes
1answer
537 views

How to install SSL Certificate on Windows Server 2012 R2 without IIS

I have a Windows Server 2012 R2 server running SQL Server 2012 with Reporting Services. I want to be able to use the Reporting Services Report Manager over HTTPS instead of the default HTTP. How can ...
-1
votes
1answer
157 views

File server access via IIS 8 WebDAV using SSL and cert-based auth

I have: A hole in the corporate firewall allowing me to accept incoming connections on ports 80 and 443 Exactly one domain name for external web access No access to corporate DNS settings An onsite ...
1
vote
0answers
72 views

Can't make Koji Work on A Centos6 server

I setup the koji build environment in a Centos6 Machine server as suggested by the documentation (http://fedoraproject.org/wiki/Koji/ServerHowTo). I could properly access the Koji Web using http. Yet ...
0
votes
1answer
82 views

Cheapest SSL by GoDaddy that is good enough for Facebook Tab?

GoDaddy is way too confusing . Period. One of my clients has specifically asked us to buy SSL from godaddy as both domain and server (shared hosting) have been bought on GoDaddy. So here is my ...
2
votes
1answer
86 views

SSL/TLS cert: Get alternative name to work with LAN IP

I have created my own CA and imported its root certificate on my devices. I use a signed SSL certificate to provide myself with remote access to my NAS. When I access my NAS over the proper URL (e.g. ...
0
votes
1answer
104 views

CACert.org certificate giving sec_error_unknown_issuer

I have used cacert.org to issue class 1 certificates for my website. I made sure that the subdomain name is correct and that the e-mail address is there, but yet I keep getting the certificate problem ...