SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms

0
votes
2answers
90 views

How to redirect from FR to COM when using HTTPS [duplicate]

I have two domains : my-domain.com and my-domain.fr I want to redirect traffic as followed : my-domain.com:80 -> my-domain.com:443 my-domain.fr:80 -> my-domain.com:443 my-domain.fr:443 -> ...
1
vote
1answer
324 views

Turning on ssl_verify_client in Nginx causes Gitlab user identification to fail

We have a private Gitlab instance that we plan on exposing externally, in order to ensure that only employees can connect to the website I have rolled out a small internal CA with user certs in order ...
2
votes
2answers
104 views

Specify nginx's ssl_certificate in location{} block

For a web service we have two certificates: myservice.com and api.myservice.com. Both have the same application (document root) but are serverd over HTTPS with different certificates. Unfortunately, ...
0
votes
1answer
68 views

Download root CA certificate in browser

I have a Apache server installed on CentOS 6. I have created a trusted self sign certificate. For that I had created root CA certificate and using it I have signed my self signed certificate. Now I ...
6
votes
1answer
159 views

What does this intention with random numbers mean in a SSL certificate?

I was looking at this site, and out of interest, I was having a look at the certificate in Chrome 32, on Windows 8.1, and I had a look at the certificate. I saw this really strange intention, Apart ...
9
votes
3answers
400 views

Why issue a SSL certificate that expires in 2037?

In Firefox, if I view the Verisign Universal Root Certificate Authority, I notice that it expires in 2037. (Settings tab -> advanced -> view certificates -> VeriSign Universal Root Certification ...
0
votes
1answer
56 views

Unable to update service communication certificate

We have added a self-signed certificate when setting up AD FS, and now want to update the service communications certificate to our domain's wildcard cert. Following these instructions: ...
0
votes
1answer
2k views

How to install SSL Certificate on Windows Server 2012 R2 without IIS

I have a Windows Server 2012 R2 server running SQL Server 2012 with Reporting Services. I want to be able to use the Reporting Services Report Manager over HTTPS instead of the default HTTP. How can ...
-1
votes
1answer
233 views

File server access via IIS 8 WebDAV using SSL and cert-based auth

I have: A hole in the corporate firewall allowing me to accept incoming connections on ports 80 and 443 Exactly one domain name for external web access No access to corporate DNS settings An onsite ...
1
vote
0answers
112 views

Can't make Koji Work on A Centos6 server

I setup the koji build environment in a Centos6 Machine server as suggested by the documentation (http://fedoraproject.org/wiki/Koji/ServerHowTo). I could properly access the Koji Web using http. Yet ...
0
votes
1answer
96 views

Cheapest SSL by GoDaddy that is good enough for Facebook Tab?

GoDaddy is way too confusing . Period. One of my clients has specifically asked us to buy SSL from godaddy as both domain and server (shared hosting) have been bought on GoDaddy. So here is my ...
2
votes
1answer
163 views

SSL/TLS cert: Get alternative name to work with LAN IP

I have created my own CA and imported its root certificate on my devices. I use a signed SSL certificate to provide myself with remote access to my NAS. When I access my NAS over the proper URL (e.g. ...
0
votes
1answer
160 views

CACert.org certificate giving sec_error_unknown_issuer

I have used cacert.org to issue class 1 certificates for my website. I made sure that the subdomain name is correct and that the e-mail address is there, but yet I keep getting the certificate problem ...
-1
votes
1answer
95 views

Windows azure vm refusing connection port 443

I am deploying my sailsjs app using forever in windows azure. And it is taking forever to get my server up and running. Initally it was working fine when it was http but I changed to SSL with self ...
0
votes
0answers
87 views

Two Way SSL authentication - Generating a certificate request for a web service client

I am in the process of developing a client for a web service that requires Two Way SSL Authentication. My client will be a Windows Service that calls a remote webservice belonging to an external ...
0
votes
0answers
67 views

SSL error - certificate not identifying correct server

SO I have set up my SSL certificate on my ubuntu/nginx server. When I created the certificate the wizard on Gandi (the CA for the certificate) asked me to identify a subdomain for the certificate. I ...
0
votes
0answers
30 views

Certificate issues at OpenVZ Ubuntu containers

today I came up with the problem that certificates cannot be verified on my openvz ubuntu containers. I checked the /etc/ssl/certs folder which is readable and seems to be ok. However, when I try to ...
2
votes
1answer
569 views

Pros / cons of using password-less OpenVPN client keys

I'm setting up an OpenVPN server for my organization, and I'm reading up on the different ways that the client side keys work. I'm still a little unfamiliar with all of the concepts behind these ...
0
votes
3answers
44 views

Detect unencrypted SSL keys

I have an OpenVPN server installed on a Debian machine. Is there a way to find which of the keys have been created without being encrypted with a password, so as to replace them?
0
votes
0answers
76 views

ssl_error_rx_record_too_long and basic Authentication

I have webspace, hosted at a german provider (its name could be understood as »2«) and added an SSL-Certificate to the domain. The domain points to a subdirectory in webspace. The subdirectory is ...
0
votes
2answers
282 views

How to disable HTTPS on IIS 7.5

I have a IIS 7.5 on Windows2008, hosting a couple of dozen of sites. Two sites use HTTPS, we call them www.site1.com and www.site2.com Now the problem is that if I (for any reason) browse to ...
0
votes
1answer
48 views

OpenSSL, PostiveSSL Root Authority

I seem to have a problem with my SSL Configuration and was wondering if anyone could help me. I've set everything up correctly (as far as I'm aware) But for some reason when I hit ...
-2
votes
1answer
36 views

Multiple domain SSL certificate: do I need to hold the property of all domains? [closed]

I just bought a multiple domains SSL certificate from godaddy.com for (an example): site1.my-company.com and site2.your-company.com both domains point to the same IP address. I hold the property ...
1
vote
1answer
73 views

Configuration of root ssl certificates

I wanted to install an SSL certificate for a domain. So I googled up and did some R&D and found this link https://www.symantec.com/page.jsp?id=roots. It says we can download and use without any ...
1
vote
1answer
33 views

Is it less secure to use a passphrase-removed key with apache?

I have a simple website with an ssl certificate and I noticed that when I would reboot apache was asking for the passphrase (causing the server to halt essentially). I did the following to remove it ...
3
votes
1answer
144 views

RDP Certificate subject name though a gateway

I have Server 2012 R2 setup with the Hyper-V and Server Essentials role enabled. I am running multiple machines that I would like to RDP to through a RDP Gateway. The gateway is correctly configured ...
0
votes
1answer
20 views

How can I get HTTPS working with this particular site?

I am trying to make an SSL wrapper to a website (and eventually redirect all HTTP requests to the HTTPS domain), on a Saucy EC2 instance. Right now Apache restarts without reported error, and it ...
0
votes
2answers
828 views

Installing intermediate certificates in ELB

I had a certificate expire today and needed to get one reissued from GoDaddy. In the past, I've had no trouble using the pem encodings they generate with the ELB SSL interface. However, when I try ...
1
vote
1answer
887 views

Nginx “ssl_stapling” ignored, no OCSP responder URL in the certificate

I'm trying to setup OCSP stapling on Nginx because I ran a test and it suggested the idea and well, you know. https://sslcheck.globalsign.com/en_GB/sslcheck?host=aj2jewellers.co.uk#176.58.103.165 ...
0
votes
2answers
651 views

SSL warning page includes other resources which are not secure

I have two web pages that sits on identical servers https://cupstelaviv.com/index.html https://app.cupsapp.com/index.html They both sit on identical servers (different SSL certificate) The second ...
2
votes
1answer
67 views

What organizational method or system do you use to manage SSL certificates? [closed]

One of the duties I've been recently assigned is to keep track of the SSL certificates used by the application servers I support. These are managed by external group mainly but internal to our ...
1
vote
2answers
353 views

Two Secure Sub Domains - Two SSL Certs - One IIS server - Do I need new internal or external IP address

I am trying to figure out whether I need a new internal IP, external IP or both to configure an IIS 7.5 server to run with two secure sub domains each using a different SSL cert, with both domains ...
3
votes
2answers
3k views

Using CA certificate for Remote Desktop Connection

I’m connecting over the web to a remote Windows Server 2012 R2 via Remote Desktop Connection for administration needs. It is a single web and database server without an AD etc. I’m not talking ...
1
vote
3answers
161 views

Does each subdomain need it's own SSL certificate?

I am creating a websocket server which will live on ws.mysite.com. I want the web socket server to be SSL encrypted as well as domain.com to be SSL encrypted. Do I need to purchase a new certificate ...
2
votes
1answer
31 views

Certificate generation : root ca needed each time?

I want to create a different (unique), self signed, certificate to distribute to some clients. That way I think that if one is doomed, I just have to delete his certificate without bothering the ...
0
votes
1answer
200 views

Prompted for client certificate on each request from IIS 7.5

Our production web application is running on iis 6 and has require ssl enabled and client certificates are required. I have a development version of the site on my computer running iis 7.5 which also ...
-1
votes
2answers
72 views

Can an SSL cert (not self-signed) be used to create another SSL cert for another host in the same domain?

I have a regular SSL certificate issued by Network Solutions for a given host, say "host A". Can I create another SSL cert for the wiki host that has the host A cert in its trust path and therefore ...
5
votes
1answer
328 views

How to add custom OID for subject field on certificates issued by Windows Server 2008 R2 CA?

I'm using a Windows Server 2008 R2 domain controller with Active Directory Certificate Services installed. It's configured as an Enterprise Root CA. I have configured a custom certificate template so ...
1
vote
1answer
33 views

How does the “Certificate Approver Email” fit on the ssl-certificate workflow?

How does the "Certificate Approver Email", required upon certificate generation, fit in the certification process as a whole ? More specifically: Is it important only for certificate generation ? ...
0
votes
1answer
74 views

How to provide a “Certificate Approver Email”, for a domain not supposed to process incoming emails?

I am in the process of requiring the generation of a certificate on RapidSSL, for the domain foobar.com which hosts my web application. I've been requested to provide a "Certificate Approver Email" ...
0
votes
0answers
75 views

Generating an own CA for internal use

I want to create a CA for internal use in our office. I created the CA like the following: openssl genrsa -out rootCA.key 2048 openssl genrsa -out rootCA.key 2048 -des3 openssl req -x509 -new -nodes ...
2
votes
1answer
104 views

How to issue a cert for web hosting using ad cert authority

I need to issue a certificate for SSL binding in IIS using Active Directory Certificate Authority. As far as I understand it should have Purpose=Auth Server and contain private key/be exportable. ...
1
vote
0answers
98 views

Unable to generate a Bundle of CA Root Certificates (failed to create symbolic link)

I am trying to generate a Bundle of CA Root Certificates. Similar to what Facebook has done for its PHP SDK (https://github.com/facebook/facebook-php-sdk/blob/master/src/fb_ca_chain_bundle.crt). I ...
0
votes
1answer
63 views

Enable SSL on domain

I want to enable SSL on a certain domain, but I can't see anything on it. The domain is api.conoform.com. ` # Fix MIME types AddType text/css .css AddType text/html .php AddType ...
2
votes
1answer
1k views

How to install multiple Intermediate CA Certificate files on Apache?

I just bought a SSL certificate, and here are all the certificate files i got: Root CA Certificate - xxCARoot.crt Intermediate CA Certificate - x1.crt Intermediate CA Certificate - x2.crt ...
2
votes
1answer
135 views

What is the location of the SQL Server Fallback Certificate?

We are required to use encryption with SQL Server, so we have enabled ForceEncryption. According to the documentation, if a certificate is not provided, SQL Server will generate its own internal ...
0
votes
0answers
432 views

SSL Client Certificate works in Google Chrome, but doesn't work in Internet Explorer

Here's the setup: we've got a Production and a Test server, both Win2008R2 / IE9 and mostly similar in hardware/software/updates. We also have a client certificate (self-signed, private key included) ...
2
votes
0answers
60 views

Suggestions on how to capture network connections/traffic for determining browser/SSL versions?

Note that I posted this Q to the StackExchange InfoSec site, but its not as populated as ServerFault and this is more on the technical side of network collection for web services. I've started ...
0
votes
0answers
50 views

What is causing HTTPS handshake not to occur?

I have two systems, running an application that does web service calls over HTTPS. I run a test by trying to log in to the HTTPS over webservice and one system works with HTTPS but the other does not. ...
0
votes
2answers
396 views

Why isn't tomcat serving the correct SSL certificate

I configured tomcat with SSL successfully and was using a self-signed certificate. Recently an issue arose where just having the client "Accept/trust" our certificate wasn't easy. We ended up ...