SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms

0
votes
0answers
21 views

Let Postfix show the appropiate SSL Certificate for a variety of host names

i bought an SSL Certificate for domain host.domain.com so my GNU/Linux mail server can deal with secure connections appropriately. That's ok while clients connect to host.domain.com but when they ...
-2
votes
1answer
217 views

Why openssl s_client and gnutls-cli deliver different certificates (own server)

on my server i have multiple virtual hosts with apache2. Some with domain *.example-one.org and some whith *.example-two.org. Each domain has it's own wildcard certificate. When I fetch the ...
1
vote
2answers
162 views

Does a domain computer trust certs from domain CA

I have investigated this but have been unable to find a definitive answer to my question. I have never used certificate services in active directory before so am unsure of its possible ...
1
vote
1answer
402 views

version 0.9.7a of openssl reports “certificate signature failed”, but version 0.9.8e is happy

I am trying to construct an openssl certificate chain that will work with a standard CentOS 4 install as client. (I know it's very old, but it's what our client is using so we need to support it). ...
0
votes
1answer
116 views

Will renewing a wildcard SSL certificate on one server invalidate the certificate on other servers?

We have a wildcard SSL certificate that is due to expire in a few weeks. I currently have this certificate installed on six servers. I'd like to renew it on one server first, test it out, and then ...
0
votes
1answer
1k views

Restart of nginx service fails because of /etc/nginx/nginx.conf test failure

Installing 3rd party SSL on DigitalOcean Droplet, Apache running Ubuntu 12.10. Following the instructions here: AlphaSSL on Apache Self signed SSL instructions from DigitalOcean So everything ...
0
votes
1answer
25 views

Certificates/SSL via SSL-Proxy vs. real certificate for a server

While researching the different certificate types I've come across hosters that offer what they call SSL-Proxy type installations for their servers. I'm concerned about this idea, as it defeats what I ...
0
votes
1answer
118 views

SSL Cert Expire or Caching issue, don't understand [closed]

If I visit BT's site in Chrome I get this ... http://imgur.com/b05alsX It looks like the cert has expired. (Similar in Firefox) BT claim it isn't. https://twitter.com/BTCare/status/440405157999030272 ...
1
vote
1answer
262 views

How do I properly generate a keystore for ssl?

I'm trying to get an ssl certificate from godaddy for use with jetty. These are my steps: keytool -keystore keystore -alias jetty -genkey -keyalg RSA -keysize 2048 What is your first and last name?: ...
0
votes
0answers
999 views

openssl s_client -connect: 20 error with server signed certificate for client

What I want I want to connect to a server using a given signed certificate (by the company running the server) What I have Ubuntu 12.04 LTS My key and CSR files A signed certificate. It was signed ...
1
vote
1answer
161 views

Installing StartSSL certificate in ProFTPD

I am currently experiencing some trouble installing a StartSSL certificate in ProFTPD. These are the files I have: cert.pem - certificate file cert.key - ...
0
votes
1answer
51 views

how renew a ssl certificate for exchange 2007

my certificate was expired thus I bought a new one. But when configure the panel of ssl provider it give me the following error (I mean, when I put the csr in the form): Common name is already ...
0
votes
2answers
19 views

which ssl certificate for exchange

I want buy a ssl certificate for exchange 2007. I have different choices: 1) protect 1 website 2) protect multiple websites (multiple domain ucc) Thus I have microsoft exchange on AD domain I think I ...
3
votes
2answers
1k views

Discerning GoDaddy SSL Certificate Types

I'm following these instructions for installing a GoDaddy Certificate in Apache Tomcat: ...
0
votes
0answers
28 views

Problems with self-signed certificate for exchange

my ssl exchange certificate for exchange 2007 was expired today. Just for few days I want make and install a self signed certicate. But I have some problems. The first step I've done is create a new ...
0
votes
0answers
77 views

Apache SSL Certificate and Basic Auth combination - password if no certificate

Is it possible, to force apache to ask for password only if user don't have client-certificate installed? I'm almost sure, that this is possible, but I'm not able to find any confirmation anywhere. ...
1
vote
1answer
40 views

When I install the certificate from a client who is using windows 2003 on my linux system the serial shows as negative

I'm not sure why I see a negative value in the serial number when I install the client's certificate. If anyone has any leads or information on this, that would help me greatly. Serial Number: ...
1
vote
2answers
106 views

Avoid Man in Middle AWS load balancer

I have a load balancer configurated with the port 443 to port 80 of the ec2 servers and with a sniffer like Burtsuite can I edit the request. How can configure the ELB to avoid this type of attack?. ...
0
votes
1answer
71 views

Check client certificate in nginx?

I can issue certificates without a problem and I can get nginx to force users to provide a certificate but how do I get nginx to give me information about the certificate? Information such as name and ...
5
votes
1answer
168 views

How do I configure AD CS to support Name Constraints (4.2.1.11 in RFC 2459)?

I am trying to figure out how to do Qualified Subordination with the critical extension set, but I'm unable to figure out how to do this in MSFT AD CS. For a given certificate, how do I make sure ...
0
votes
2answers
86 views

How to redirect from FR to COM when using HTTPS [duplicate]

I have two domains : my-domain.com and my-domain.fr I want to redirect traffic as followed : my-domain.com:80 -> my-domain.com:443 my-domain.fr:80 -> my-domain.com:443 my-domain.fr:443 -> ...
1
vote
1answer
270 views

Turning on ssl_verify_client in Nginx causes Gitlab user identification to fail

We have a private Gitlab instance that we plan on exposing externally, in order to ensure that only employees can connect to the website I have rolled out a small internal CA with user certs in order ...
2
votes
2answers
85 views

Specify nginx's ssl_certificate in location{} block

For a web service we have two certificates: myservice.com and api.myservice.com. Both have the same application (document root) but are serverd over HTTPS with different certificates. Unfortunately, ...
0
votes
1answer
57 views

Download root CA certificate in browser

I have a Apache server installed on CentOS 6. I have created a trusted self sign certificate. For that I had created root CA certificate and using it I have signed my self signed certificate. Now I ...
6
votes
1answer
153 views

What does this intention with random numbers mean in a SSL certificate?

I was looking at this site, and out of interest, I was having a look at the certificate in Chrome 32, on Windows 8.1, and I had a look at the certificate. I saw this really strange intention, Apart ...
9
votes
3answers
376 views

Why issue a SSL certificate that expires in 2037?

In Firefox, if I view the Verisign Universal Root Certificate Authority, I notice that it expires in 2037. (Settings tab -> advanced -> view certificates -> VeriSign Universal Root Certification ...
0
votes
1answer
51 views

Unable to update service communication certificate

We have added a self-signed certificate when setting up AD FS, and now want to update the service communications certificate to our domain's wildcard cert. Following these instructions: ...
0
votes
1answer
1k views

How to install SSL Certificate on Windows Server 2012 R2 without IIS

I have a Windows Server 2012 R2 server running SQL Server 2012 with Reporting Services. I want to be able to use the Reporting Services Report Manager over HTTPS instead of the default HTTP. How can ...
-1
votes
1answer
198 views

File server access via IIS 8 WebDAV using SSL and cert-based auth

I have: A hole in the corporate firewall allowing me to accept incoming connections on ports 80 and 443 Exactly one domain name for external web access No access to corporate DNS settings An onsite ...
1
vote
0answers
96 views

Can't make Koji Work on A Centos6 server

I setup the koji build environment in a Centos6 Machine server as suggested by the documentation (http://fedoraproject.org/wiki/Koji/ServerHowTo). I could properly access the Koji Web using http. Yet ...
0
votes
1answer
92 views

Cheapest SSL by GoDaddy that is good enough for Facebook Tab?

GoDaddy is way too confusing . Period. One of my clients has specifically asked us to buy SSL from godaddy as both domain and server (shared hosting) have been bought on GoDaddy. So here is my ...
2
votes
1answer
122 views

SSL/TLS cert: Get alternative name to work with LAN IP

I have created my own CA and imported its root certificate on my devices. I use a signed SSL certificate to provide myself with remote access to my NAS. When I access my NAS over the proper URL (e.g. ...
0
votes
1answer
126 views

CACert.org certificate giving sec_error_unknown_issuer

I have used cacert.org to issue class 1 certificates for my website. I made sure that the subdomain name is correct and that the e-mail address is there, but yet I keep getting the certificate problem ...
0
votes
0answers
53 views

Setting secure connection to SQL server over SSL

I have TEST-SERVER which is in 192.168.1.0 subnet. I need to set-up secure connection to it for people from outside that subnet i.e. internet. I know that certificate for SQL server needs to have ...
-1
votes
1answer
79 views

Windows azure vm refusing connection port 443

I am deploying my sailsjs app using forever in windows azure. And it is taking forever to get my server up and running. Initally it was working fine when it was http but I changed to SSL with self ...
0
votes
0answers
71 views

Two Way SSL authentication - Generating a certificate request for a web service client

I am in the process of developing a client for a web service that requires Two Way SSL Authentication. My client will be a Windows Service that calls a remote webservice belonging to an external ...
0
votes
0answers
66 views

SSL error - certificate not identifying correct server

SO I have set up my SSL certificate on my ubuntu/nginx server. When I created the certificate the wizard on Gandi (the CA for the certificate) asked me to identify a subdomain for the certificate. I ...
0
votes
0answers
21 views

Certificate issues at OpenVZ Ubuntu containers

today I came up with the problem that certificates cannot be verified on my openvz ubuntu containers. I checked the /etc/ssl/certs folder which is readable and seems to be ok. However, when I try to ...
2
votes
1answer
399 views

Pros / cons of using password-less OpenVPN client keys

I'm setting up an OpenVPN server for my organization, and I'm reading up on the different ways that the client side keys work. I'm still a little unfamiliar with all of the concepts behind these ...
0
votes
3answers
41 views

Detect unencrypted SSL keys

I have an OpenVPN server installed on a Debian machine. Is there a way to find which of the keys have been created without being encrypted with a password, so as to replace them?
0
votes
0answers
70 views

ssl_error_rx_record_too_long and basic Authentication

I have webspace, hosted at a german provider (its name could be understood as »2«) and added an SSL-Certificate to the domain. The domain points to a subdirectory in webspace. The subdirectory is ...
0
votes
2answers
209 views

How to disable HTTPS on IIS 7.5

I have a IIS 7.5 on Windows2008, hosting a couple of dozen of sites. Two sites use HTTPS, we call them www.site1.com and www.site2.com Now the problem is that if I (for any reason) browse to ...
0
votes
1answer
47 views

OpenSSL, PostiveSSL Root Authority

I seem to have a problem with my SSL Configuration and was wondering if anyone could help me. I've set everything up correctly (as far as I'm aware) But for some reason when I hit ...
-2
votes
1answer
34 views

Multiple domain SSL certificate: do I need to hold the property of all domains? [closed]

I just bought a multiple domains SSL certificate from godaddy.com for (an example): site1.my-company.com and site2.your-company.com both domains point to the same IP address. I hold the property ...
1
vote
1answer
71 views

Configuration of root ssl certificates

I wanted to install an SSL certificate for a domain. So I googled up and did some R&D and found this link https://www.symantec.com/page.jsp?id=roots. It says we can download and use without any ...
1
vote
1answer
32 views

Is it less secure to use a passphrase-removed key with apache?

I have a simple website with an ssl certificate and I noticed that when I would reboot apache was asking for the passphrase (causing the server to halt essentially). I did the following to remove it ...
3
votes
1answer
112 views

RDP Certificate subject name though a gateway

I have Server 2012 R2 setup with the Hyper-V and Server Essentials role enabled. I am running multiple machines that I would like to RDP to through a RDP Gateway. The gateway is correctly configured ...
0
votes
1answer
20 views

How can I get HTTPS working with this particular site?

I am trying to make an SSL wrapper to a website (and eventually redirect all HTTP requests to the HTTPS domain), on a Saucy EC2 instance. Right now Apache restarts without reported error, and it ...
0
votes
2answers
670 views

Installing intermediate certificates in ELB

I had a certificate expire today and needed to get one reissued from GoDaddy. In the past, I've had no trouble using the pem encodings they generate with the ELB SSL interface. However, when I try ...
1
vote
1answer
704 views

Nginx “ssl_stapling” ignored, no OCSP responder URL in the certificate

I'm trying to setup OCSP stapling on Nginx because I ran a test and it suggested the idea and well, you know. https://sslcheck.globalsign.com/en_GB/sslcheck?host=aj2jewellers.co.uk#176.58.103.165 ...