SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

-2
votes
2answers
259 views

How to generate a Self Signed SSL Certificate bound to IP address? [duplicate]

I have my application hosted in the cloud and while demoing to prospective clients, I would like to make sure that my browser doesn't complain due to the lack of trust. So I want to generate a self ...
1
vote
1answer
139 views

Problems configuring SSL certificate on Apache VirtualHosts

I am attempting to run multiple SSL connections off a single IP server running RHEL6. I have successfully configured one domain on SSL, however when I attempt to add a second, Apache fails to ...
4
votes
1answer
282 views

Have I referenced my website's SSL certificate chain correctly?

The SSL certificate chain for one of my websites is incomplete, and I learned that I should reference the intermediate certificate in the virtual hosts file. Comodo sent me two intermediate ...
-1
votes
1answer
84 views

Installing intermediate CA in Debian

The SSL tester at sslcheck.globalsign.com says: Server configuration does not include all intermediate certificates I found this page: ...
-1
votes
1answer
82 views

Where are SSL certificates installed?

Server: Windows Server 2008 R2 There are a lot of instructions on how to install a certificate and they seem very straightforward. However, I am having a hard time figuring out where a certificate is ...
0
votes
1answer
123 views

Apache SSLVerifyClient - exclude one URL

I am setting up Apache 2.2 as a reverse proxy. My need is to have certificate authentication for every reverse-proxied url except one (https://mailserver.com/Microsoft-Server-ActiveSync) that is used ...
1
vote
1answer
2k views

The certificate is not trusted because the issuer certificate is unknown. (Error code: sec_error_unknown_issuer) Firefox

A website wants to switch an SSL certificate from Network Solutions to Gandi. Everything seemed to be installed correctly except that there is an error being thrown in Firefox only. On Chrome and IE, ...
0
votes
2answers
21 views

SSL Certificate issue on renewal in IIS 7

I have an SSL certificate that expires on Februray 15, 2015. What if I install new certificate on my server on Feb 10, 2015. Will my certificate work with new renewed certificate on Feb 10 as my old ...
2
votes
0answers
32 views

Certificate can only be used by network service account

Issues : Our service is using one certification for partner service call. It worked well in IIS site which is running as network service account. But when we run test the code as administrator ...
1
vote
3answers
64 views

If a sub domain is secure with a SSL certificate, will the sub-subdomain also be secure?

I have a standard SSL certificate I just purchased from Godaddy. Now it won't let me use a wild card for issuing the certificate for my domain. It says that the * wild card is not included in my ...
0
votes
3answers
173 views

Client Outlook 2013 doesn't connect from outside the company to the Exchange 2013

I have exchange 2013 server within the company operates correctly: Owa it's OK Outlook it's Ok Send and receive emails without problems. Has generated self-signed certificates. When trying to access ...
2
votes
0answers
127 views

How do I make a Cisco Ironport appliance send “linked certificates” for HTTPS inspection?

I have a PKI tree, and the ironport is a CA at the second level of the PKI tree, (for issuing HTTPS inspection certs) Although I deployed the root certificate to all clients, and chrome/IE work ...
4
votes
1answer
1k views

Trying to setup SSL with Apache on Ubuntu 14.04

I have purchased a SSL certificate from namecheap.com. I am trying to install it on a server running Ubuntu 14.04 and Apache. I used the following tutorial to setup Apache ...
1
vote
0answers
338 views

PuppetDB: unable to get local issuer certificate

I'm attempting to use puppetdb on but I'm running into some issues. I have a node called puppet. It is the master as well as where I've installed puppetdb. It's also a node that puppet manages. ...
1
vote
1answer
64 views

How to secure only one page with SSL on Apache2?

My web server hosts many pages. However, I need to secure only one of them with SSL. I know how to create self-signed certificate and how to install it on Apache2. My problem is quite different: since ...
0
votes
0answers
156 views

SSTP VPN connection errors

We're testing an Amazon EC2 server for a cloud application server and I'm trying to configure VPN access to it. I've read that PPTP cannot be used due to the blocking of GRE port 47 and that the best ...
1
vote
1answer
75 views

Why are my config settings inherited to the subdomain server block?

I use nginx with a ssl wildcard certificate like that: /etc/nginx/sites-enabled/example.com server { listen 443 default_server ssl; server_name 192.168.0.1 example.com; include ...
0
votes
1answer
57 views

How do I restrict certificate authentication to specific users on IIS 8.0?

I am using IIS 8.0 on a Windows Server 2012 box. This is not a domain joined machine so Active Directory is not available to me. I've successfully configured certificate authentication. When ...
0
votes
0answers
74 views

Login using client SSL certificates

I want users to be able to login to say, Jenkins using client SSL certificates without password. Let me rephrase it: The certificate part works fine. I want to find a way for apache to tell web ...
2
votes
1answer
62 views

Expired SSL certificate on mailserver

As daft as it sounds, I've let an SSL certificate expire -- or it will within the next 12 hours. My only real concern with this is a mailserver, which is configured to listen for encrypted (port ...
0
votes
0answers
65 views

cannot open assembly certmgr.exe

I'm trying to run a basic console app that calls a web services hosted on an external https endpoint using Mono. I keep getting errors about decrypting the response. Some googling has led me to ...
3
votes
1answer
1k views

Correct Apache reverse proxy config with SSL for Jenkins and Sonar

I am running two services behind an Apache server: Jenkins (Port 8080) and SonarQube (Port 9000). My apache config looks like this: <VirtualHost *:80> ServerName server Redirect permanent ...
1
vote
2answers
937 views

openssl verify error 7 at 1 depth lookup:certificate signature failure

I have installed OpenVPN server on CentOS. I have two clients - first under CentOS (all works), and trying connect Windows client now. I generated client's certificates with build-key utility. If I ...
1
vote
2answers
867 views

Thawte SSL123 SHA-2 Intermediate Certificate Chain, Broken?

I attempted to upgrade my one Web site, running nginx, from a SHA-1 SSL123 certificate to a SHA-2 one. Thawte's Web page with intermediate CAs has "RSA SHA-2 (under SHA-1 Root)" and "RSA SHA-2 ...
-1
votes
1answer
170 views

Can't login to dovecot using gmail as an email client

I've used this installation configure-email-server-using-postfix-dovecot When I try to use gmail as the email client (connecting to my server through port 993) I get this error Unable to establish ...
0
votes
0answers
70 views

How to get connected over IPP using SSL via AddPrinter() call?

I had three printers in my network. All of these three are using self-signed certificate. Only for one printer, I am getting error GetLastError() – 1797 – Printer Driver Unknown I had compared ...
1
vote
1answer
204 views

Squid: how to enable verification for SSL self-signed certificates

I'm using Squid 3.4.8 as a reverse proxy which is forwarding request to a specific server. The communication between Squid and the server is in HTTPS. The certificate used by the server is ...
1
vote
1answer
675 views

squid3 ssl bumping server-first with signed certificate

I'm trying to get Squid3.4 to do SSL Bumping with the server-first method. I followed this guide in alpinelinux. I'm working in explicit mode (browser configurer to Go to the proxy) and that works ...
1
vote
1answer
80 views

Block website with HTTPS?

I hope my question is on topic on Server Fault. If not, please excuse me and point me into the right direction. Is it possible to block a site with HTTPS? I have a website that I would like to make ...
1
vote
0answers
370 views

Are there any modern browser/machine that not accept class 1 SSL certificate

I'm considering to buy a SSL certificate from external Certificate Authority to my web service which does not involve e-commerce. So I was planning to request the simplest class 1 cert to eliminate ...
8
votes
2answers
424 views

HTTPS warning: works on desktop, warning on mobile

I installed a wildcard SSL certificate (*.vht.com) for my work and accessing the following website in chrome (or any desktop browser) https://tours.vht.com/fsviewer3/fss2.html works, but when trying ...
-2
votes
3answers
351 views

Accidently removed localhost.crt SSL in Centos 6 - what can i do?

So I just got my certificate issued from Digicert, and since there was other unused/old files in /etc/ssl/ i marked and removed, and accidently also removed localhost.crt. Now I cannot start my web ...
17
votes
4answers
1k views

Where do companies typically store SSL certificates for future use?

We recently bought a wildcard SSL cert for our domain. We converted all of the certs to a Java keystore, but now we are asking ourselves where we should store these for later use. Do people use ...
5
votes
1answer
425 views

What SSL Certificate works WITHOUT an intermediate certificate?

We have a need to deploy a server app that has its own SSL certificate built in. This will get rolled to an unknown number of servers, that will go up and down. We can generate this certificate using ...
0
votes
1answer
659 views

I can't upload server certificate on AWS IAM

I got AWS iam working on my server, and trying to upload some certificates: aws iam upload-server-certificate --server-certificate-name domain2014 --certificate-body ...
2
votes
1answer
138 views

How to add an existing key to the certutil key database

I have created an SSL keypair with OpenSSL. I uploaded the Certificate Signing Request to my SSL Certificate provider and got my certificate files. I added my certificate and the required CA ...
3
votes
1answer
120 views

Dovecot SSL Certificate is not accepted

I have certificates issued from StartSSL, which is a trusted authority for certificates, and my websites work with its certificates with no problems and no complaints from all browsers about any trust ...
0
votes
1answer
37 views

How do I configure nginx on RHEL to recognize root SSL certificates of external sites?

Setup: I have a nginx reverse proxy that is a load balancer for ASP.NET applications. The problem is when ASP.NET application tries to access an external application, the SSL handshake fails. I think ...
2
votes
1answer
123 views

AWS EC2 SSL Server certificate does not match the URL

After uploading the certificate to iam, when I visit https://www.mywebsite.com I get this error The identity of this website has not been verified. • Server's certificate does not match the URL. ...
4
votes
1answer
297 views

How do I work out my certificate chain order manually?

Lets say I start with a certificate. Using openssl I can print it out like this: openssl x509 -in cert.pem -text -noout And I'll get some output such as Validity, Issuer and Subject along with ...
1
vote
2answers
362 views

Dockerfile separation of concerns for a secure apache httpd server with respect to SSL certification files

Issue: In a non-docker solution, the SSL certificates can be located in /etc/pki/CA/.... and with references to these in /etc/httpd/conf.d/*.conf files. How must these SSL certificates be ...
7
votes
1answer
1k views

Why does my wildcard SSL certificate cause a domain mismatch error on a second level subdomain?

I have a server https://www.groups.example.com - in FireFox I get the "This Connection is Untrusted" message and the "technical details" say www.groups.example.com uses an invalid security ...
1
vote
1answer
6k views

Google Chrome Returns err_connection_aborted, all other browsers display site

We're hosting a website with IIS on Windows Server 2012. Normally, the site is accessible from any browser. We're seeing the site intermittently accessible on campus when using Google Chrome. The ...
2
votes
1answer
994 views

Two SSL virtualhosts on same IP with Apache

I have an apache server with one ip address. (on a debian server). I have several virtualhosts for http and one virtualhost for https one vhost, redirect traffic to the https vhost and this works ...
1
vote
2answers
99 views

Setting up SSL with a redundant connection

My situation: We have two servers, Server A and Server B. Server A has a proxy configured, which serves data (over SSL) from Server B. Server B is reachable via 1.1.1.1 (one.server.example.com) and ...
1
vote
1answer
35 views

OpenVPN client from multidomain SSL host

My server uses it's server certificate when connecting as a client to another server. webserver - server1.mydomain.com openvpnserver - server2.mydomain.com Server1 is a web server with SSL ...
1
vote
2answers
972 views

Curl with custom certificate

I 'd like curl to work with sites signed by goDaddy: If I call curl mypage.com/bla I am getting a certificate verification error. I tried getting the ca certificate with this snippet: echo | ...
0
votes
0answers
16 views

MissMatched Address Certificate Error

I have been trying to set up an Apache server for testing purposes in a virtual environment and I have been having some troubles. I want to set up SSL in Apache so I created my own certificate ...
1
vote
2answers
1k views

Can't get Network Solutions Certificate chain working with EC2 Elastic Load Balancer

I have a certificate file provided to me which is a wildcard domain name. It comes as both a key and a crt file. No other files were provided. I'm having trouble getting it to work correctly with ...
0
votes
0answers
90 views

Oracle Wallet Add Trusted Intermediate CA?

I have a Oracle Wallet for use with a Oracle HTTP Server. I am trying to update my Trusted Certs in the wallet as they have changed for my client authentication for DOD CACs (Smart Cards). I have ...