SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

learn more… | top users | synonyms (1)

1
vote
1answer
27 views

IBMi and the Digital Certificate Manager with Multi-Domain SSL Certs

My company recently purchased a Multi-Domain SSL certificate for use on an IBMi V7R2. I'm relatively new to the IBMi world, but I get the feeling the DSM doesn't support Multi-Domain SSL ...
0
votes
1answer
79 views

NGINX HTTP/HTTPS Redirecting to HTTPS even though no instructions appear to be in server block

I have the following in my nginx.conf which is working great for HTTPS when I go to https://sub.mydomain.com. I needed to also allow HTTP (hence the listen 80). server { listen 80; listen 443 ...
0
votes
1answer
53 views

Jira over SSL gives a blank page with symbols

My attempts to configure Jira to work over SSL have not been successful so far. I have followed the steps at: https://confluence.atlassian.com/jira/running-jira-over-ssl-or-https-124008.html My ...
1
vote
1answer
79 views

Sometimes SSL error with haproxy

I'm trying to setup a haproxy for SSL offloading for multiple hosts. This works perfect with this config: # Example configuration for a possible web application. See the # full configuration options ...
1
vote
1answer
26 views

Are default parameters to 'openssl genpkey' sufficiently secure? [closed]

I know very little about openssl so I'm wondering whether the default parameters to openssl genpkey are sufficiently secure. If I run openssl genpkey -algorithm rsa I get a private key. But is it fine ...
1
vote
1answer
45 views

Nginx always rewriting to ssl even on non ssl sites

I have a page example.com, which has ssl certificates setup and everything is working fine. Here is the ssl part of the config: server { listen 80 default_server; server_name www.example.com ...
1
vote
0answers
318 views

certificate issue in squid3 on pfsense

I am using pfsense latest version and installed squid3 with Transparent HTTP Proxy and HTTPS/SSL interception with squidguard but many site are not open and getting below errors. (54) Connection ...
0
votes
0answers
29 views

Windows SSL Certificate access issue

There seems to be something going on with my Windows 7 installation's SSL Certificate store, and I'm not quite sure how to resolve it. The full issue is described in the question and replies in this ...
7
votes
2answers
1k views

CA Certificate not trusted by Firefox

My domain bytecode77.com (analytics) is using a RapidSSL certificate. Firefox doesn't trust that one, so I installed a CA certificate. I used the one below. I placed it in ...
1
vote
1answer
85 views

OpenLDAP configure LDAPS, restart fails

I am attempting to get ldaps working with openldap. I have a wildcard ssl certificate that was issued for this domain and have used ldapmodify to add the relevant files to cn=config as show here. ...
0
votes
0answers
53 views

SSL on Bluemix - installing multiple intermediate certificates

I'm using a custom domain and need to secure my Bluemix application with an SSL certificate (RapidSSL wildcard). The problem is that the certificate I've got requires two intermediate certificates to ...
1
vote
1answer
31 views

Not Trusted Error on https for Some Users

Starting a few days ago some users have reported that they're getting errors on a client's site saying the "certificate is not trusted because it is self-signed" and it goes on to say that "The ...
1
vote
1answer
167 views

Where are the CA certs on Solaris 10

I want to find and update the ca certs on the machine but I don't know their location. They are not location under /etc/pki/tls/certs/ like for Linux machines
3
votes
2answers
102 views

Self-Signed Certificate With Public and Private IP (Tomcat 7)

I am configuring a server that has both a public and private IP. It doesn't have any associated domain names. Using a self-signed certificate to access the URL below works properly: ...
0
votes
0answers
38 views

SSL cert install won't work on Debian 8.1

I'm running Debian 8.1 and attempted to follow Linode's among many other websites' instructions on setting up Comodo SSL certs on Apache. ...
1
vote
1answer
43 views

Only require Client Certificate for requests not coming from a specific IP

I have an Apache 2.4 server running as an SSL Reverse Proxy for a number of servers I have running, and I am introducing some Client Certificate Authentication for this. However, there are many ...
0
votes
1answer
25 views

Nginx ssl_protocols change

I am using Ubuntu Server 14.04 LTS and tryng to change Nginx ssl_protocols to ssl_protocols TLSv1 TLSv1.1 TLSv1.2; I restarted nginx and php5-fpm. When checking the enabled protocols on ...
2
votes
1answer
180 views

AD Certificate template - Enroll on behalf of

I'm trying to setup S/MIME for a few users, which requires certificates. I'm not using smartcards, and not using autoenrollment for these certificates. Server is running 2012R2. I created a ...
1
vote
2answers
49 views

SSL certificate for a subdomain

We have domain: littledogs.com and a subdomain pics.littledogs.com. This two domains point to two servers. The business login is on server A (littledog.com) and we store all of our pictures on servers ...
0
votes
0answers
38 views

Tomcat CSR for 2 servers with SAN ssl cert

I have a requirement to install SSL on Tomcat on two different servers. One server for pre-production the other production. I have been told that I must submit a CSR to my CA to get my certs for my ...
0
votes
1answer
155 views

Setting up self-signed ssl on subdomain: servers certificate does not match URL

I am trying to set up ssl for owncloud on an Ubuntu 14 LTS server. The domain is served by the same company that hosts the nameserver for the domain, but a single subdomain foo.bar.com is directed to ...
1
vote
1answer
81 views

How to import SSL certificates in a 389 Directory Server using the command line?

I am trying to setup a new 389 Directory Server in a RHEL machine and I am trying to configure SSL for LDAPS using the command line. I have just spent several hours digging through every piece of ...
0
votes
0answers
646 views

New SSL cert on Exchange server, now fails connectivity analyzer

Exchange Server 2003 SP2. Had a problem installing SSL cert so I installed a hotfix that fixed the inability to utilize SHA2 certs. Hotfix and cert are now loaded. Went into IIS manager, set ...
0
votes
0answers
31 views

LDAPS with AD Server 2008R2 certreq -accept fails

I'm having the issue listed here: Active Directory SSL Certificate Private Key Not Attached however they don't explain what to do to fix the private key not attached if the certreq -accept fails. ...
0
votes
1answer
95 views

AWS - ELB - Puppet - Must not contain unprintable characters

I am setting up a miscellaneous server cluster behind an internal AWS ELB which will serve NTP, centralized Rsyslog, and Puppetmaster. I configured the listener on the ELB to use https (8140) which ...
0
votes
0answers
57 views

problems after installing SSL cert on Win2003 R2 mail server

I know Microsoft has EOL'd 2003 server. Server is used as local exchange server with some users accessing via OWA or MobileSync. Server had an old SSL cert long expired. Company would like to ...
1
vote
3answers
50 views

How to setup SSL on an IIS development server?

Our team has a Windows 2008 server which is used primary for a common IIS dev box. I want to enable SSL on one of the websites on IIS, so that it can only be accessed via HTTPS. I created a ...
0
votes
0answers
42 views

2 domains, 2 wildcard certificates, same backend, howto with NGINX?

This is a not rare scenario I suppose. I have a domain like myhost.net and also bought recently myhost.com (after expensive buyout) The current NGINX configuration it's a bit lenghty due to SSL ...
0
votes
0answers
76 views

https on node.js server running on port 3000

So I have a node.js server like http://someIp:3000. Is it possible to install https on this without getting a domain name and running on port 80? The reason I'm asking this question is that I have a ...
0
votes
1answer
127 views

Why can I not parse my certificate signing request with openssl on my Windows workstation

Workstation: Windows Pro 8.1 OpenSSL version: 1.0.2d-x64 I have a CSR generated via an Exchange 2010 management console. I'd like to self sign it with openssl but I am having issues parsing the CSR. ...
0
votes
1answer
194 views

how to configure ssl for a subdomain on nginx

Currently Nginx is configured so that it accepts a wildcard SSL certificate for domain ex: *.website.com. Instead of buying an expensive wildcard certificate I bought a single domain SSL certificate ...
0
votes
1answer
56 views

Pound, HTTPs and Varnish

I'm configuring a proxy, and trying to workout how to use a SSL Cert for Pound. Or whether its even needed? At this stage the proxy simply points to the web server - we are likely to need more web ...
0
votes
2answers
115 views

How to setup SSL reverse proxy using nginx?

Related to my question about how to setup a reverse proxy using nginx, I am now stuck when setting up one which additionally requires a SSL connection. I have docker container which provides the ...
2
votes
0answers
57 views

How to prevent users from bypassing certificate warnings in Outlook

I had a case where a roaming user was connected to a public WiFi and got a certificate warning. The user saw the error and called me before connecting. Turns out the WiFi was doing SSL inspection. ...
2
votes
1answer
106 views

install self signed cert on user computers

I'm currently running a test Sharepoint 2013 server. Not all users are within the internal network. They can bypass the self signed cert warning for Sharepoint easily but the Office Web Apps cert ...
3
votes
4answers
402 views

Is it possible for a good ssl certificate to fail on a client's computer?

I have a server running behind SSL (https://es.content-index.oustatic.com:8443). We got a report from somebody that that SSL cert was bad: However, it seems good on our end. I plugged it into to an ...
1
vote
1answer
16 views

Can I use a wildcard certificate for some subdomains and not others?

I have a VPS environment with 4 IPs, 3 of which of which point to 1 or more subdomains. The other is the TLD. Because of the use of host headers, subdomains have needed to be isolated on their own IP ...
0
votes
0answers
27 views

“Manual User Signing & Encryption Certificates Enrollment” profile in Dogtag CA doesn't work with fresh installation

After Dogtag 10 installation (step by step by video tutorial) when I try to submit request "Manual User Signing & Encryption Certificates Enrollment"(3rd option) to CA by CA end-entity(end user ...
0
votes
1answer
138 views

haproxy not delivering certificate chain

We're setting up haproxy 1.5.14 to do SSL termination for the upcoming release of our massively tenanted application. Hundreds of domain names are used with the app; most of the certs are for ...
6
votes
1answer
38 views

How to extract X.509 certificate from live network traffic automatically on Linux OS

I will appreciate if someone can point me How to extract an X.509 certificate from live network traffic automatically during the handshake phase between client and server on Linux OS. A similar ...
0
votes
0answers
96 views

How to configure FishEye to connect to an Jira server using SSL?

I have a jira server running at https://jira.example.com/ and everything with it is fine. It is a real certificate, not a self-signed cert. I am trying to turn up a FishEye server and I'd like to use ...
14
votes
1answer
495 views

What happens when an SSL certificate is cancelled?

We are currently using an standard SSL certificate for a domain say example.com hosted on 300 servers. When someone request https://example.com, one of the server serves the request. Now, we want to ...
1
vote
1answer
64 views

ssl certificate self signed instead of valid

I've purchased a valid certificate: For example this site validates it: https://sslanalyzer.comodoca.com/?url=www.unival-logistics.com But when I test it with openSSL, like this: openssl ...
2
votes
1answer
469 views

How to install a missing intermediate SSL certificate system wide client side so that a CLI tool such as Juniper ncsvc uses it?

I'm struggling with the Juniper ncsvc CLI VPN client, which used to work for me but recently broke, and I suspect it's because of a HTTPS SSL Certificate issue: cat ...
1
vote
0answers
21 views

Tomcat Sending Invalid SSL Certificate to Client

I am trying to install SSL certificates on tomcat on Windows 2012 R2 server . I followed the normal procedure: created keystore generated csr got certificates from Godaddy imported certificates ...
0
votes
1answer
43 views

Using an HTTPS/SSL Certificate to establish the authenticity of an SSH session

I've just registered my website so people can accesses by HTTPS (and will be forced to, HSTS & redirects are part of configuration). It's set up with GitLab. I can access my repositories via ...
0
votes
0answers
63 views

Setting up GoDaddy SSL Certificate Bundle on Modulus

I'm following these instructions for installing GoDaddy SSL Certificate on Modulus. http://help.modulus.io/customer/portal/articles/1701165-ssl-setup-guide However I'm having trouble with creating a ...
0
votes
0answers
14 views

Forcing HTTPS across site is intermittent

I've a Wordpress site on my server. Within it's root directory I've got my htaccess file. Within this file I've the following lines of code: #Begin https redirect RewriteCond %{HTTPS} off RewriteRule ...
1
vote
0answers
168 views

NPS/RAIDUS Authentication for Wifi and certificates for non trusted server

I'm trying to setup an NPS server as RADIUS server for Wifi network of employers of my company. All mobile devices could connect to this networks using their domain user/pass. My problem is to let ...
1
vote
2answers
180 views

Firefox not receiving full certificate chain

Server: Windows 2012 R2 / IIS 8.5 using SNI (Azure Virtual Machine) I have an SSL certificate that has been installed and is working in all browsers except Firefox and iOS Safari. The chain in Chrome ...