SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms

-1
votes
1answer
63 views

Windows azure vm refusing connection port 443

I am deploying my sailsjs app using forever in windows azure. And it is taking forever to get my server up and running. Initally it was working fine when it was http but I changed to SSL with self ...
0
votes
0answers
53 views

Two Way SSL authentication - Generating a certificate request for a web service client

I am in the process of developing a client for a web service that requires Two Way SSL Authentication. My client will be a Windows Service that calls a remote webservice belonging to an external ...
0
votes
0answers
57 views

SSL error - certificate not identifying correct server

SO I have set up my SSL certificate on my ubuntu/nginx server. When I created the certificate the wizard on Gandi (the CA for the certificate) asked me to identify a subdomain for the certificate. I ...
0
votes
0answers
18 views

Certificate issues at OpenVZ Ubuntu containers

today I came up with the problem that certificates cannot be verified on my openvz ubuntu containers. I checked the /etc/ssl/certs folder which is readable and seems to be ok. However, when I try to ...
1
vote
1answer
225 views

Pros / cons of using password-less OpenVPN client keys

I'm setting up an OpenVPN server for my organization, and I'm reading up on the different ways that the client side keys work. I'm still a little unfamiliar with all of the concepts behind these ...
0
votes
3answers
37 views

Detect unencrypted SSL keys

I have an OpenVPN server installed on a Debian machine. Is there a way to find which of the keys have been created without being encrypted with a password, so as to replace them?
0
votes
0answers
61 views

ssl_error_rx_record_too_long and basic Authentication

I have webspace, hosted at a german provider (its name could be understood as »2«) and added an SSL-Certificate to the domain. The domain points to a subdirectory in webspace. The subdirectory is ...
0
votes
2answers
131 views

How to disable HTTPS on IIS 7.5

I have a IIS 7.5 on Windows2008, hosting a couple of dozen of sites. Two sites use HTTPS, we call them www.site1.com and www.site2.com Now the problem is that if I (for any reason) browse to ...
0
votes
1answer
44 views

OpenSSL, PostiveSSL Root Authority

I seem to have a problem with my SSL Configuration and was wondering if anyone could help me. I've set everything up correctly (as far as I'm aware) But for some reason when I hit ...
-2
votes
1answer
32 views

Multiple domain SSL certificate: do I need to hold the property of all domains? [closed]

I just bought a multiple domains SSL certificate from godaddy.com for (an example): site1.my-company.com and site2.your-company.com both domains point to the same IP address. I hold the property ...
1
vote
1answer
63 views

Configuration of root ssl certificates

I wanted to install an SSL certificate for a domain. So I googled up and did some R&D and found this link https://www.symantec.com/page.jsp?id=roots. It says we can download and use without any ...
1
vote
1answer
30 views

Is it less secure to use a passphrase-removed key with apache?

I have a simple website with an ssl certificate and I noticed that when I would reboot apache was asking for the passphrase (causing the server to halt essentially). I did the following to remove it ...
3
votes
1answer
91 views

RDP Certificate subject name though a gateway

I have Server 2012 R2 setup with the Hyper-V and Server Essentials role enabled. I am running multiple machines that I would like to RDP to through a RDP Gateway. The gateway is correctly configured ...
0
votes
1answer
20 views

How can I get HTTPS working with this particular site?

I am trying to make an SSL wrapper to a website (and eventually redirect all HTTP requests to the HTTPS domain), on a Saucy EC2 instance. Right now Apache restarts without reported error, and it ...
0
votes
2answers
531 views

Installing intermediate certificates in ELB

I had a certificate expire today and needed to get one reissued from GoDaddy. In the past, I've had no trouble using the pem encodings they generate with the ELB SSL interface. However, when I try ...
1
vote
0answers
514 views

Nginx “ssl_stapling” ignored, no OCSP responder URL in the certificate

I'm trying to setup OCSP stapling on Nginx because I ran a test and it suggested the idea and well, you know. https://sslcheck.globalsign.com/en_GB/sslcheck?host=aj2jewellers.co.uk#176.58.103.165 ...
0
votes
2answers
143 views

SSL warning page includes other resources which are not secure

I have two web pages that sits on identical servers https://cupstelaviv.com/index.html https://app.cupsapp.com/index.html They both sit on identical servers (different SSL certificate) The second ...
2
votes
1answer
60 views

What organizational method or system do you use to manage SSL certificates? [closed]

One of the duties I've been recently assigned is to keep track of the SSL certificates used by the application servers I support. These are managed by external group mainly but internal to our ...
1
vote
2answers
131 views

Two Secure Sub Domains - Two SSL Certs - One IIS server - Do I need new internal or external IP address

I am trying to figure out whether I need a new internal IP, external IP or both to configure an IIS 7.5 server to run with two secure sub domains each using a different SSL cert, with both domains ...
1
vote
2answers
1k views

Using CA certificate for Remote Desktop Connection

I’m connecting over the web to a remote Windows Server 2012 R2 via Remote Desktop Connection for administration needs. It is a single web and database server without an AD etc. I’m not talking ...
1
vote
3answers
108 views

Does each subdomain need it's own SSL certificate?

I am creating a websocket server which will live on ws.mysite.com. I want the web socket server to be SSL encrypted as well as domain.com to be SSL encrypted. Do I need to purchase a new certificate ...
2
votes
1answer
30 views

Certificate generation : root ca needed each time?

I want to create a different (unique), self signed, certificate to distribute to some clients. That way I think that if one is doomed, I just have to delete his certificate without bothering the ...
0
votes
0answers
162 views

Prompted for client certificate on each request from IIS 7.5

Our production web application is running on iis 6 and has require ssl enabled and client certificates are required. I have a development version of the site on my computer running iis 7.5 which also ...
-1
votes
2answers
70 views

Can an SSL cert (not self-signed) be used to create another SSL cert for another host in the same domain?

I have a regular SSL certificate issued by Network Solutions for a given host, say "host A". Can I create another SSL cert for the wiki host that has the host A cert in its trust path and therefore ...
5
votes
1answer
194 views

How to add custom OID for subject field on certificates issued by Windows Server 2008 R2 CA?

I'm using a Windows Server 2008 R2 domain controller with Active Directory Certificate Services installed. It's configured as an Enterprise Root CA. I have configured a custom certificate template so ...
1
vote
1answer
27 views

How does the “Certificate Approver Email” fit on the ssl-certificate workflow?

How does the "Certificate Approver Email", required upon certificate generation, fit in the certification process as a whole ? More specifically: Is it important only for certificate generation ? ...
0
votes
1answer
46 views

How to provide a “Certificate Approver Email”, for a domain not supposed to process incoming emails?

I am in the process of requiring the generation of a certificate on RapidSSL, for the domain foobar.com which hosts my web application. I've been requested to provide a "Certificate Approver Email" ...
0
votes
0answers
64 views

Generating an own CA for internal use

I want to create a CA for internal use in our office. I created the CA like the following: openssl genrsa -out rootCA.key 2048 openssl genrsa -out rootCA.key 2048 -des3 openssl req -x509 -new -nodes ...
2
votes
1answer
76 views

How to issue a cert for web hosting using ad cert authority

I need to issue a certificate for SSL binding in IIS using Active Directory Certificate Authority. As far as I understand it should have Purpose=Auth Server and contain private key/be exportable. ...
1
vote
0answers
82 views

Unable to generate a Bundle of CA Root Certificates (failed to create symbolic link)

I am trying to generate a Bundle of CA Root Certificates. Similar to what Facebook has done for its PHP SDK (https://github.com/facebook/facebook-php-sdk/blob/master/src/fb_ca_chain_bundle.crt). I ...
0
votes
1answer
55 views

Enable SSL on domain

I want to enable SSL on a certain domain, but I can't see anything on it. The domain is api.conoform.com. ` # Fix MIME types AddType text/css .css AddType text/html .php AddType ...
2
votes
1answer
536 views

How to install multiple Intermediate CA Certificate files on Apache?

I just bought a SSL certificate, and here are all the certificate files i got: Root CA Certificate - xxCARoot.crt Intermediate CA Certificate - x1.crt Intermediate CA Certificate - x2.crt ...
2
votes
1answer
78 views

What is the location of the SQL Server Fallback Certificate?

We are required to use encryption with SQL Server, so we have enabled ForceEncryption. According to the documentation, if a certificate is not provided, SQL Server will generate its own internal ...
0
votes
0answers
242 views

SSL Client Certificate works in Google Chrome, but doesn't work in Internet Explorer

Here's the setup: we've got a Production and a Test server, both Win2008R2 / IE9 and mostly similar in hardware/software/updates. We also have a client certificate (self-signed, private key included) ...
2
votes
0answers
45 views

Suggestions on how to capture network connections/traffic for determining browser/SSL versions?

Note that I posted this Q to the StackExchange InfoSec site, but its not as populated as ServerFault and this is more on the technical side of network collection for web services. I've started ...
0
votes
0answers
49 views

What is causing HTTPS handshake not to occur?

I have two systems, running an application that does web service calls over HTTPS. I run a test by trying to log in to the HTTPS over webservice and one system works with HTTPS but the other does not. ...
0
votes
2answers
193 views

Why isn't tomcat serving the correct SSL certificate

I configured tomcat with SSL successfully and was using a self-signed certificate. Recently an issue arose where just having the client "Accept/trust" our certificate wasn't easy. We ended up ...
2
votes
1answer
2k views

Install a root certificate in CentOS 6

I know it has been already asked, but despite many hours of research I couldn't find a working solution. I am trying to install my root certificate in my server, so internal service can bind to each ...
2
votes
1answer
310 views

Wildcard certificate causes warning on Google Chrome only

I have a company.sv domain and recently purchased a RapidSSL wildcard certificate, I installed it and tested it with many browsers(Firefox, Chromium, Chrome, IE) and SSL checking tools, it worked fine ...
0
votes
0answers
122 views

Certificate errors on Exchange 2010 NLB CAS array server

On my Exchange server, I have two CAS servers in a CAS NLB array. I need to install a 3rd party SAN/UCC certificate on both of these servers for OWA. I generated the request on CAS1, submitted to a ...
0
votes
1answer
42 views

Configure SSL for FTP

We are in the process of making our site PCI compliant. One of the vulnerabilities we are facing is as below. Description: SSL Version 2 (v2) Protocol Detection (for ftp) Synopsis: The remote service ...
-1
votes
1answer
71 views

Https not working JBoss AS 7.0.2

I am trying to load SSL certificate to one of our site. We are using JBoss AS 7.0.2 for our application on Ubuntu Server 12.04, it's running successfully on http while on https it's not responding. ...
0
votes
2answers
384 views

The SSL Certificate we found on this site is not meant for [your_domain_name], probably this is another site on the same server

Note: in this post, I changed my actual domain name to [your_domain_name] to make it more generic. I installed an SSL certificate for apache2 on my linux server. The certificate's type is ...
0
votes
1answer
272 views

SSL Certificate error in IE8 (It's OK in IE10, Chrome and Firefox)

We have a SSL offloader (nginx) with different certificates for different machines and subdomains. It encrypts and redirects all the traffic to the corresponding machines. It works OK with all ...
1
vote
2answers
130 views

openldap cacerts directory symbolic link to /etc/pki/tls/certs - Yes/No? Why?

Every single article/how-to/blog on openldap talks about putting the ldap cert for ldaps in the /etc/openldap/cacerts directory. I am wondering why not just put the cert(s) in /etc/pki/tls/certs and ...
0
votes
1answer
55 views

openssl generate .key from CSR

A customer sent me a CSR and the .CER of a certificate for a linux server that I host. The customer does not have access to this machine. Is this enough data to generate a valid certificate? Is it ...
3
votes
1answer
441 views

RDS 2012 Certificates - Subject Names do not match

I'm evaluating RDS on 2012, I want to use Remote App to allow home workers to access one application This is a single server setup at the moment Server Name acmeVDI.acme.co.uk - This has RD Web ...
0
votes
1answer
33 views

RD Session Host Configuration doesn't list my SSL certificate

I'm trying to change SSL certificate from auto-generated to another one, e.g. custom self-signed made by makecert. But RD Session Host Configuration snap-in -> Connections -> RDP-Tcp -> ...
0
votes
0answers
56 views

VPN/PPTP connection dialog doesn't list my certificate to choose

I'm trying to configure VPN connection with PPTP and authentication using SSL Certificate. Client is running Windows 7, RRAS/NPS is running Windows Server 2008 R2, Cert Authority is running Windows ...
1
vote
1answer
562 views

Server address requested and the certificate subject do no match

I'm trying to setup Remote Desktop Gateway (Terminal Service Gateway) on virtual Windows Server 2012 R2. But when connect over internet (from Win7 RDP client) getting an error: Your computer can't ...