SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

learn more… | top users | synonyms (1)

0
votes
0answers
342 views

Let's Encrypt on AWS EC2 - domain name mismatch

I tried to generate a SSL certificate with Let's Encrypt on my EC2 instance with an elastic IP associated to it. The command I run is ./letsencrypt-auto certonly --standalone -d mariellaval.com -d ...
0
votes
1answer
59 views

openssl default md5 message digest default_md not listed in cert

According to this serverfault answer the default message digest for openssl 1.0 is MD5. My openssl.cnf file has default_md set to default. I generated a certificate using openssl 1.0.0: openssl req ...
1
vote
0answers
65 views

Java keystore: How to import the ca certificates correctly?

We have renewed the certificate of one of our server (apache httpd). For a webservice interface (for mobile clients) we need the certificate also on tomcat, means: stored in a java keystore. We have ...
2
votes
1answer
98 views

openssl - What is the public key default MD

In openssl.cnf default_md (use public key default MD) is set to default. How can I find out what the default is without generating a certificate? Is there a file I can check where it lists the ...
1
vote
0answers
35 views

Why this error: SSCEP.exe : error verifiying signature happens?

I'm trying to use sscep.exe (NDES/SCEP Windows Test Tool). In order to get a good enrollment, there is a README file contained in the zip file, which you can get on that website. So, the README file ...
2
votes
0answers
49 views

Apache2:Unable to read server certificate from file

Cannot start apache2 server. error info is below. Looking into similar questions (SSL Error - unable to read server certificate from file, Apache cannot read certificate file, and so on), still ...
4
votes
1answer
106 views

Convert cert .cer to .pem via OpenSSL plus using SHA-256

This might be me having done it wrong. I recently used OpenSSL to convert a .cer to .pem using this - openssl x509 -inform der -in certificate.cer -out certificate.pem (And then loaded the .pem ...
-1
votes
1answer
28 views

Difference between ssl products and recommented ssl [closed]

I need more information on SSL certificate. I am using AWS EC2 Ubuntu 14 with LAMP. I looked for OpenSSL as I do not have budget but it acts like first one. I need SSL which can acts like ...
0
votes
0answers
25 views

OpenFire: Import my SSL certificates

I use Openfire 3.10.3. I have 3 certificates: ad-wildcard.key (PRIVATE) ad-wildcard-123123123.crt ad-wildcard-CA-gd_bundle-g2-g1.crt I've tried many ways and have read many forums and blogposts ...
1
vote
2answers
80 views

Wildcard SSL Certificate on Multiple ELBs in VPC

I am very new to installation of certificates and AWS itself altogether. Now, in my current infrastructure I have 3 ELBs that are in a VPC. I have purchased a wildcard ssl certificate from COMODO ...
2
votes
1answer
41 views

ssl certificates from SSL Resellers - what are they reselling?

I've seen SSL resellers everywhere (such as namecheap for several of their options). How are they reselling? What are they reselling? Are there any security issues with them?
0
votes
1answer
46 views

How to add multiple X509v3 Subject Alternatve names during cerificate request (CSR generation) without editing openssl.cnf file

I want to generate CSR for two domains. I have tried according to this http://apetec.com/support/GenerateSAN-CSR.htm But there is no such section available in openssl.cnf file and i don't want to ...
1
vote
1answer
35 views

Does office365 require certificate renewal

We are using Office365 for our mail in a hybrid setup so we have an exchange server with the transport role installed but all mailboxes are hosted on the Microsoft cloud. I was wondering if you need ...
0
votes
2answers
135 views

Nginx client certificate authentication: How to exclude an IP address

I have Nginx running as a proxy to a web server and i want to securing Access using TLS/SSL Client Certificates. This is my ssl config server { listen 443 ssl; server_name ...
1
vote
1answer
100 views

Postfix SSL-Intermediate-CA

I got a thawte Wildcard SSL-Cert for for *.my.example.com. Now I would like to use it for my mailserver (hostname: test.my.example.com). I edited the /etc/postfix/postfix_default.pem and included ...
2
votes
1answer
92 views

Validate email address at my own domain with gmail

I need to have the ability to send email using gmail's web interface, but have them appear to originate from my own domain instead of originating at a gmail address. In order to do this, gmail asks ...
0
votes
2answers
107 views

Certificate SAN Mismatch. The (SAN) of SSL certificate does not appear to match the host address.

Server Enviroment: Exch2003 (recently Decommissioned) Exch2007 (Will be decommissioned as soon as 2010 is up and going) Exch2007#2 Exch2010 (In process of installing) So I am at the point of ...
3
votes
1answer
128 views

AWS MySQL ERROR 2026 (HY000): SSL connection error:

I' am trying to connect to my AWS RDS MySQL instance with terminal on OSX El Captain, but I keep getting this error: ERROR 2026 (HY000): SSL connection error: error:00000001:lib(0):func(0):reason(1) ...
3
votes
1answer
62 views

Cannot set a default SMTP server certificate on Exchange Server 2013

I've an Exchange 2013 Server with two wildcard certificates, one for matching the internal AD zone and the other one with the public domain. The certificates are defined with those names: ...
0
votes
0answers
104 views

Nginx + SSL Certificate for Encryption purposes Issue

Sorry I'm not a sys admin. I'm trying to install my SSL Certificate for encrypt purposes and to use Nginx as a frontend of my Tomcat Alfresco application. I just can't reach my domain with HTTPS as ...
1
vote
2answers
108 views

AD Certificate services - The combobox to select Template is missing

Has anybody come across an issue where the certificate templates field is missing in the certsrv web-page? I am running 'Windows2012R2 Standard'. The online tutorials all have this combobox, but i am ...
-1
votes
1answer
37 views

Secure access to a site using SSL sertificate

I need to implement secure access to the corporate site using SSL certificates. After long time of searching I've came to conclusion that there are 2 ways to do that: creating own self-signed root ...
4
votes
0answers
104 views

Exchange 2013 Internal and External URLs with multiple servers and certificates

I'm building a lab with two Exchange 2013 Servers with different internal names and only one external URL, the naming schema is something like this: Internal Names: exchange1.local.example.com ...
1
vote
1answer
193 views

Setup secure connection with nginx and startssl certificate

I've registered on startssl.com and so retrivied 4 files for my domain: ssl.key - the private key file ssl.crt - the certificate file ca.pem - Root CA sub.class1.server.ca.pem - Class 1 ...
0
votes
0answers
220 views

nginx SSL_do_handshake() failed

it's the first time I configure an SSL certificate on my development machine (I'm no sysadmin - I need SSL to work with facebook). I decided to go with ngingx proxying a ruby sinatra application, ...
1
vote
1answer
49 views

md5 sum of private key is different from that of certificate and CSR

the output of: openssl req -noout -modulus -in presentCSR.csr and openssl x509 -noout -modulus -in server_new.crt | openssl md5 matches. But the output of openssl rsa -noout -modulus -in ...
0
votes
0answers
116 views

Outlook client expired SSL alert showing certificate removed from Exchange 2010

We use an Exchange 2010 SP3 environment (14.3.266.1). We replaced a wildcard certificated with a new one before it expired, assigned the roles to the certificated in exchange (SMTP etc...) before ...
-1
votes
2answers
74 views

SSL Certificate non-www not working [closed]

If I am going to type https://www.example.com the site is working. If I am going to type https://example.com the site is not working. The certificate should support example.com and also ...
0
votes
0answers
49 views

How to get the private key of my azure web app

I have inherited an Azure Web App and I would like to secure it with SSL. Following the official Microsoft Guide (here) I completed steps 1 - 5 of "1. Get an SSL certificate" Therefore I have : ...
0
votes
2answers
68 views

Unqualified DNS with Nginx and SSL registered to a fully qualified domain name

I have two servers; one is the 'official' example.com server that hosts my public website as well as mail servers (bluehost.com). The second is my private LAN server which hosts my point of sale ...
1
vote
1answer
27 views

IBMi and the Digital Certificate Manager with Multi-Domain SSL Certs

My company recently purchased a Multi-Domain SSL certificate for use on an IBMi V7R2. I'm relatively new to the IBMi world, but I get the feeling the DSM doesn't support Multi-Domain SSL ...
0
votes
1answer
79 views

NGINX HTTP/HTTPS Redirecting to HTTPS even though no instructions appear to be in server block

I have the following in my nginx.conf which is working great for HTTPS when I go to https://sub.mydomain.com. I needed to also allow HTTP (hence the listen 80). server { listen 80; listen 443 ...
0
votes
1answer
45 views

Jira over SSL gives a blank page with symbols

My attempts to configure Jira to work over SSL have not been successful so far. I have followed the steps at: https://confluence.atlassian.com/jira/running-jira-over-ssl-or-https-124008.html My ...
1
vote
1answer
70 views

Sometimes SSL error with haproxy

I'm trying to setup a haproxy for SSL offloading for multiple hosts. This works perfect with this config: # Example configuration for a possible web application. See the # full configuration options ...
1
vote
1answer
23 views

Are default parameters to 'openssl genpkey' sufficiently secure? [closed]

I know very little about openssl so I'm wondering whether the default parameters to openssl genpkey are sufficiently secure. If I run openssl genpkey -algorithm rsa I get a private key. But is it fine ...
1
vote
1answer
45 views

Nginx always rewriting to ssl even on non ssl sites

I have a page example.com, which has ssl certificates setup and everything is working fine. Here is the ssl part of the config: server { listen 80 default_server; server_name www.example.com ...
1
vote
0answers
283 views

certificate issue in squid3 on pfsense

I am using pfsense latest version and installed squid3 with Transparent HTTP Proxy and HTTPS/SSL interception with squidguard but many site are not open and getting below errors. (54) Connection ...
0
votes
0answers
29 views

Windows SSL Certificate access issue

There seems to be something going on with my Windows 7 installation's SSL Certificate store, and I'm not quite sure how to resolve it. The full issue is described in the question and replies in this ...
7
votes
2answers
923 views

CA Certificate not trusted by Firefox

My domain bytecode77.com (analytics) is using a RapidSSL certificate. Firefox doesn't trust that one, so I installed a CA certificate. I used the one below. I placed it in ...
1
vote
1answer
78 views

OpenLDAP configure LDAPS, restart fails

I am attempting to get ldaps working with openldap. I have a wildcard ssl certificate that was issued for this domain and have used ldapmodify to add the relevant files to cn=config as show here. ...
0
votes
0answers
45 views

SSL on Bluemix - installing multiple intermediate certificates

I'm using a custom domain and need to secure my Bluemix application with an SSL certificate (RapidSSL wildcard). The problem is that the certificate I've got requires two intermediate certificates to ...
1
vote
1answer
29 views

Not Trusted Error on https for Some Users

Starting a few days ago some users have reported that they're getting errors on a client's site saying the "certificate is not trusted because it is self-signed" and it goes on to say that "The ...
1
vote
1answer
117 views

Where are the CA certs on Solaris 10

I want to find and update the ca certs on the machine but I don't know their location. They are not location under /etc/pki/tls/certs/ like for Linux machines
3
votes
2answers
87 views

Self-Signed Certificate With Public and Private IP (Tomcat 7)

I am configuring a server that has both a public and private IP. It doesn't have any associated domain names. Using a self-signed certificate to access the URL below works properly: ...
0
votes
0answers
38 views

SSL cert install won't work on Debian 8.1

I'm running Debian 8.1 and attempted to follow Linode's among many other websites' instructions on setting up Comodo SSL certs on Apache. ...
1
vote
1answer
42 views

Only require Client Certificate for requests not coming from a specific IP

I have an Apache 2.4 server running as an SSL Reverse Proxy for a number of servers I have running, and I am introducing some Client Certificate Authentication for this. However, there are many ...
0
votes
1answer
24 views

Nginx ssl_protocols change

I am using Ubuntu Server 14.04 LTS and tryng to change Nginx ssl_protocols to ssl_protocols TLSv1 TLSv1.1 TLSv1.2; I restarted nginx and php5-fpm. When checking the enabled protocols on ...
2
votes
1answer
146 views

AD Certificate template - Enroll on behalf of

I'm trying to setup S/MIME for a few users, which requires certificates. I'm not using smartcards, and not using autoenrollment for these certificates. Server is running 2012R2. I created a ...
1
vote
2answers
48 views

SSL certificate for a subdomain

We have domain: littledogs.com and a subdomain pics.littledogs.com. This two domains point to two servers. The business login is on server A (littledog.com) and we store all of our pictures on servers ...
0
votes
0answers
36 views

Tomcat CSR for 2 servers with SAN ssl cert

I have a requirement to install SSL on Tomcat on two different servers. One server for pre-production the other production. I have been told that I must submit a CSR to my CA to get my certs for my ...