SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

learn more… | top users | synonyms (1)

1
vote
1answer
47 views

java keystore with multiple aliases on apache

A JKS file (Java key store), May contains many aliases, this means it may hold many private+public keys combinations, some aliases may be trusted, some not. When I define jetty to use SSL, as this ...
9
votes
3answers
1k views

Do I need a separate SSL certificate for a DNS redirect?

I am implementing a multi-tenant application where my application hosts and serves technical documentation for a tenant's product. Now, the approach that I was considering was - I host the ...
2
votes
1answer
22 views

SAN domain list SSL Certificate

When creating a SAN certificate you have your base domain that the certificate is for say www.domain.com and then alternate names of say download.domain.com and stream.domain.com. When creating the ...
1
vote
3answers
72 views

Can I purchase 2 wildcard certificates with the same subject from 2 different CA vendors?

Say I have an existing wildcard cert (*.example.com) from Vendor A (eg Symantec) licensed for 2 servers. And now I want to purchase the same subject (*.example.com) from Vendor B (eg. RapidSSL) for ...
2
votes
1answer
42 views

Generating certificate signing request for ESXi 5.5

I would like to replace the (self signed) SSL certs on various ESXi 5.5 hosts with ones generated by our own CA. I found docs on the VMware site on how to overwrite the key and cert files on the ESXi ...
1
vote
1answer
26 views

Multi-Level, Multi-Domain SSL Certificate Solutions?

I'm trying to find a large-scale solution for setting up multiple domains, and their sub-domains, with SSL certs. This is on the order of thousands of websites across a couple dozen load-balanced ...
1
vote
1answer
27 views

IIS and SSL Certificates

I have the following markup <html> <head> </head> <body> <a href="https://www.shoeshow.com/">www.shoeshow.com</a><br/><br/> <a href="https://...
1
vote
0answers
22 views

How to use your ssl certificate and key from your website with activemq console?

After enforcing strict transport security in a server, it is also forcing https into port 8161 for activemq which of course makes it fail. I followed this instructions to enable https on activemq ...
0
votes
0answers
13 views

IIS Automatically apply wildcard certificate to new subdomain

I've been trying to figure out how I could automatically apply a wildcard ssl cert to a subdomain on an app im building. for instance, sign up to use the app. you get companyname.example.com i see ...
0
votes
4answers
81 views

Using the same SSL Certificate of a Domain on different IIS Servers?

We have different Web Sites on different IIS Servers belonging to the same Domain as site1.example.com, site2.example.com, site3.example.com. However, we have no idea about how to use the same ...
-3
votes
1answer
50 views

Change SSL encryption to 128 bit from 256 bit

I have bought SSL using Godaddy and running nginx over an ubuntu machine. I have came to know that I am using 256 bit encryption with my SSL certificate. I want to downgrade it to 128 bit. How is it ...
0
votes
1answer
199 views

outlook 2016 for mac can't connect to Exchange 2013

We have 1 Mac (osx 10.11.1) user running Outlook 2016, and he is trying to connect to our Exchange 2013 server (Version 15.0 Build 847.32). After creating the account in outlook a yellow dot remains ...
-3
votes
1answer
24 views

what ssl solution allow Server IP so any domains pointed to that will ssled?

Is there any ssl solution based on Server IP so any domains pointed to that will be allowed? We allow client to run our app on their domain for whilelabling and our app also require ssl as well. So ...
1
vote
1answer
93 views

Mutual SSL authentication - client certificate vs server certificate

I am setting up a web application which will connect to a remote web service and is required to use a client certificate. My web app uses HTTPS to connect and I have it configured with my existing ...
1
vote
1answer
26 views

Tomcat SSL not available outside

I do have a Tomcat8 server running, currently in the development environment. It's been working for a while on the port we have picked (8085) and was available outside of our network (unblocked on the ...
2
votes
1answer
276 views

Server certificate does NOT include an ID which matches the server name

Our server was upgraded yesterday so it now has a more updated Ubuntu, Apache 2.4.10, PHP etc. After I put everything back, Apache started complaining about my configuration. The server hosts a site ...
0
votes
1answer
66 views

How to get Let's Encrypt to give challenge text for all domains at once?

I'm using Let's Encrypt for my Google App Engine site, so I'm generating certificates only, and while it's working, the process for verifying multiple domains seems clunky. I presume I'm doing ...
-3
votes
1answer
48 views

I get other website's tls certificate when visiting my website [closed]

i have a weird issue while visiting my website using https... I can't track how often this happens, but sometimes T get a TLS certificate of another website.... and the browser warns me that the ...
1
vote
1answer
52 views

Reinstalling a godaddy certificate on node/express server?

Copied from here I'm looking at a server on behalf of a client and was wondering what the cert actually is and where it comes from in this example: require('https').createServer({ key: fs....
0
votes
1answer
60 views

Install SSL certificate on server (before switching the doimain's dns to point to the server)

As part of a major revamp of our site: retiring old server (no ssl) setting up new server (with ssl amongst other changes) switching the domain's dns once the new server is ready Is it possible to ...
2
votes
1answer
53 views

Redirect in web.config because of certificate issues

I'm running some websites on a IIS 7.5 with one UCC SSL certificate, where 10 domains are secured. most of them are something.company.ch, some are something.anothercompany.ch we have a redirect rule ...
1
vote
1answer
106 views

Let's Encrypt certificate not recognized by Nginx

I successfully created some LE SSL certs, using this guide. However, when I updated my nginx config to use the certs and redirect all port 80 traffic to 443. http successfully redirects to https, the ...
0
votes
0answers
21 views

IIS 8 - Default SSL Site Breaks SNI

We have the following scenario in testing SNI on Windows Server 2012 R2 with IIS 8. Domain names and IP addresses listed below are fake and for example only. WEB SITE NAME IP ADDRESS Host ...
0
votes
1answer
36 views

SSL certificate installation to establish SSL connectivity between 2 servers

I want to establish SSL connectivity between 2 servers, and I understood that I need to install the SSL certificate of server A into server B's Java keystore and vice-versa. So, that server A can call ...
-2
votes
2answers
193 views

Powershell New-SelfSignedCertificate missing -NotBefore in Windows 2012r2

My 2008 powershell script is not working correctly in 2012r2. The command New-SelfSignedCertificate -DnsName test.testdomain.com -NotBefore [datetime]::now.AddYears(10) comes back with: New-...
0
votes
0answers
21 views

OpenSSL certificate shows “Issued to: Administrator” as Common Name

I'm trying to issue a certificate which was generated by openssl. $ openssl req -out vpn_certrequest.csr -key vpn_key.key -new -sha256 You are about to be asked to enter information that will be ...
0
votes
1answer
47 views

Can I prohibit IIS from fetching intermediate SSL certificates via AIA?

According to this answer IIS can use Authority Information Access certificate extension to retrieve missing issuer certificate. Here's the scenario. There's an IIS installation with an HTTPs endpoint ...
0
votes
1answer
18 views

Should I use multiple-domain SSL certificate for subdomains with EV?

I have a web-site - for instance, https://website.com - and I need to provide an SSL certificate for this web-site and a couple subdomains - for instance, https://subdomain.website.com and https://my....
1
vote
1answer
116 views

NGINX does not prompt for client ssl certificate

On our setup we want to promt a user for a client ssl certificate. All certificates are issued by StartSSL. The problem is that even though ssl_verify_client on; is set 'on', the website / browser ...
1
vote
1answer
101 views

IIS 7.5 - can't configure two SSL Certificates under one IP-adress?

We're setting up HTTPS for all our websites. Unfortunately I'm not really experienced in IIS. I have two certificates, one is a EV-UCC-Certificate with 10 subdomains included. the subdomains are ...
0
votes
0answers
35 views

Verify complete certificate chain being sent by Apache

I have configured my Apache web server to send out the complete SSL certificate chain and now I want to verify that the the complete chain is, in fact, being sent. I would normally use something like ...
0
votes
2answers
43 views

different ssl cerfiticate for subdomain [duplicate]

Since I can't afford buying a wildcard ssl, I want to purchase another ssl certificate for m.mysite.com, so mysite.com and www.mysite.com will have the a different ssl certificate than m.mysite.com ...
0
votes
2answers
36 views

Create exchange certificate from linux CA

I am setting up exchange 2013 in a lab, where we are trying to replace Windows hosts with Linux hosts. We have exchange up and running, but connections complain that we need a valid certificate. I'...
0
votes
0answers
59 views

Self-signed certificate error with exim: CA is unknown

I added ssl support to my exim smtp server. Now I'm trying it with a Thunderbird client, first of all I imported my self signed certificate to thunderbird keystore and than I tried to connect. It ...
1
vote
2answers
49 views

Client-side certificate signing

One of my partners wanted to do client side SSL certificate authentication. They wanted us to sign the certificate using a recognized CA. I was under the impression that for client side SSL ...
1
vote
0answers
47 views

Exchange 2013 - IMAP with Wildcard Cert - Error when Set-ImapSettings

Trying to get a wildcard cert working on Exchange 2013 for IMAP purposes. Unable to add in ECP (receives error about it not having a FQDN since its a wildcard) So then I try to run: Set-...
0
votes
1answer
30 views

SNI: Can I find out which hosts share the same IP? [closed]

The setup is the following: I know that a host uses SNI (e.g. universal.at on IP 91.236.122.125, the test says so). I know that I can find out one other host that is also hosted on the same IP ...
0
votes
1answer
232 views

How to disable SSL on Apache 2.4.18 running on Windows Server 2008

I have Apache 2.4.18 running on Windows Server 2008 R2. I want to stop SSL on that environment altogether. How can I disable it? Here is what I done in attempt to disable it In the httpd.conf file ...
1
vote
1answer
166 views

client SSL certificate verify error: (27:certificate not trusted)

I'm having some difficulty with nginx's client authentication while using an intermediate CA (self-created). Although the same certificate bundle (intermediate + root certificates in a single .pem ...
2
votes
1answer
148 views

Apache Extension Error

I have an Apache 2.4.18 with OpenSSL 1.0.2f configuration here with dual (RSA 4096 + ECC 384) certificate configuration. I also provide certificate transparency through TLS extension. When using ...
2
votes
1answer
64 views

Intel vPro on AWS EC2 T2?

I have purchased an SSL certificate to use for a site running on an AWS EC2 t2.micro instance. I have to specify whether my certificate is for Intel vPro or not. I can't seem to find a definitive ...
2
votes
1answer
138 views

Stunnel TLS authentication with multiple Authorities

I am trying to secure a rethinkdb cluster behind stunnel. The service needs to support multiple Certificate Authorities (CA). Currently I concat the accepted CAs into one file (/certs/ca.pem) but it ...
0
votes
1answer
68 views

How to handle a private key SSL certificate with Ansible

I'd like to deploy my webserver config with copy. Is there any way to keep the SSL cert private key encrypted, and to decrypt it when the playbook is started? The reason is that I want to to use ...
0
votes
1answer
18 views

Apache2 wildcard cert www and non-www domain trouble

I've run into a bit of an issue with my SSL. I have a CA-signed wildcard cert by Digicert. I have installed it properly and am attempting to use it to access my sites, comp.org and www.comp.org via ...
0
votes
0answers
41 views

Disable SSL verification on Hsts

When i try to run openssl s_client -connect www.merdincz.com:443 -debug command i'm getting; SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error On SSLLabs https://www.ssllabs.com/...
0
votes
1answer
63 views

Multiple ssl hosts on nginx

I have multiple ssl sites on one server with nginx, and the virtual hosting works like this: root /var/www/html/$host; But in the certificate section, the $host variable don't works: ...
0
votes
1answer
146 views

Can an AWS Certificate Manager SSL certificate be installed on EC2 in IIS?

I have a certificate from the AWS Certificate Manager (ACM) for my site. I need to establish a HTTPS connection from my load balancer to my EC2 instances, as the application that I have on there ...
1
vote
1answer
35 views

SHA-2 with TLS below 1.1 or lower

I have a call to a 3rd party webservice that uses HTTPs for transport security. The 3rd party are due to upgrade their certificate to SHA-2, withdrawing SHA-1. Does my call need to be able to use ...
0
votes
1answer
43 views

Error in parsing adding TLS support to Exim4 server

I want to add TLS to my Exim4 server. I followed this tutorial: http://mindref.blogspot.it/2011/03/exim4-ssl-tls.html When I try to connet with TLS on port 25 i log this error: TLS error on ...
1
vote
1answer
30 views

Certificate status still pending even after completion

I have exchange 2013 on Azure VM which is also a DC. for using services like autodiscover etc I need to get a valid 3rd Party certificate which I got from STARTSSL, I generated the request and got the ...