SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

-1
votes
1answer
248 views

SSL certificate is not properly installed on Glassfish

I am an java developer not an web server/IT infra guy so i dont know wether I am asking this question correctly or not, So i apologies if I am wrong somewhere. Previously we are having an spring web ...
3
votes
1answer
97 views

RHEL6 httpd Root CA configuration

I'm setting up SSL on a RHEL6 box and I'm having problems finding information about configuring the Root CAs. I've got four files: cert.crt - My SSL certificate my_key.key - The key used to ...
2
votes
0answers
61 views

CA is repeated in IIS https response, what is the configuration section to be checked?

This is about the https of the payment service provider we're using. We've notified them about the problem which causes some android devices to show SSL error message when the browser is redirected to ...
2
votes
1answer
864 views

Replace wildcard certificate on multiple sites at once (using command line) on IIS 7.5

I have 3 websites: aaa.my-domain.com, bbb.my-domain.com and ccc.my-domain.com all using a single wildcard certificate *.my-domain.com on IIS 7.5 Windows Server 2008R2 64-bit. That certificate expires ...
-1
votes
1answer
713 views

Failed to bind to: /0.0.0.0:443 [closed]

I am having problems starting my play framework server on port 443,i am using scala play 2.20 and my play server running fine on port 9443 by following command ./start -Dhttps.port=9443 ...
0
votes
1answer
57 views

Exchange certificate - different issuer external to internal?

We have a GoDaddy signed SAN cert for our Exchange 2010 server, internally it works fine - issuer is GoDaddy and cert chain checks out. Externally the same SAN seems to be used (the domains are the ...
3
votes
1answer
360 views

How can I get an OID for a certificate template?

I'm using C# (or VBScript) to issue a certificate from an Enterprise CA. According to this answer, I need to specify the OID instead of the certificate name, and place it in an unexpected portion of ...
4
votes
1answer
711 views

ssl certificate installation on tomcat

I am trying to create a new certificate for my scala play framework on ubuntu but I cannot import my key with keytool. I haven't been able to figure out what is causing it so I thought I'd see here if ...
0
votes
1answer
2k views

Page can't be displayed with IIS and SSL

I have a single site hosted in IIS 8. I have two site bindings. One is for HTTP, the other is for HTTPS. HTTP is on port 80 with All Unassigned addresses, I left host name blank. HTTPS is on port 443 ...
0
votes
2answers
381 views

WHM/cPanel SSL certificate and two different subdomains per machine/IP

I have two servers with WHM/cPanel installed - server1.mydomain.com and server2.mydomain.com, and I would like to install WHM SSL certificate on both machines (different IPs). My question is do I ...
0
votes
0answers
54 views

Self Signed SSL Cert - Browser Warning

I generated a new self-signed cert for one of our intranet sites. The old cert expired today. I pushed the new cert out via GPO and deleted the old one. I can see on the client that the new cert has ...
0
votes
0answers
42 views

Have to reinstall certificate every so often

We call a web service which we have a mutual authentication set up. I have their certificate installed on my server in the "local computer" folder under "Third Party Root Cert Authorities". I call ...
0
votes
1answer
602 views

Extract key from JKS keystore to use with apache2 and tomcat

I have a keystore in JKS format and I want to use that with apache2. How can I export the key and the certificates (that i already chained) out the JKS in a easy way? I found many answers out there ...
0
votes
1answer
139 views

Set Up Of SSL Certificate COmmon Name to Protect Plesk Panel [closed]

A PCI Compliance scanner is balking that the self signed SSL certificate protecting secure access to Plesk Panel contains a name mismatch between the location of the Plesk Panel and the name on the ...
1
vote
2answers
155 views

Apache mod_rewrite: domain -> www.domain with wildcard SSL

I have an Apache 2.2 server and a wildcard SSL certificate for *.domain.com and have set up a mod_rewrite ruleset for both 80 and 443 that will properly redirect requests for domain.com to ...
1
vote
1answer
273 views

Do I need to resign/regen a cert when moving IPs?

Are these errors related to moving a site to a new IP and keeping the same SSL CERT? Will I need to regen/sign to fix this? [Sun Jun 22 07:13:11.054280 2014] [mpm_worker:notice] [pid 2775:tid ...
3
votes
1answer
7k views

Enabling SHA2 Certificate Support on Windows Server 2003

A little background information first. I have an SSIS package that runs inside a Windows Server 2003 SP2 32 bit environment. The package recently started failing with the following error during a ...
5
votes
2answers
78 views

How to tell if an (offline) SSL Certificate been revoked

I would like to know whether an SSL certificate was revoked. The website no longer serves up that certificate, I only have the domain name and the serial number. The SSL certificate was replaced 5 ...
0
votes
3answers
546 views

Install godaddy ssl certificate on amazon ec2

I'm new to setting up ssl certificate and csr, i want to use public ip instead domain name in ssl. i created a csr file using following command and info openssl req -new -newkey rsa:2048 -nodes ...
1
vote
1answer
2k views

Two domains, two SSL certificates, one IP

I'm trying to run two domains, one with a wildcard certificate and the other one with a regular certificate from one IP and one nginx. Setup: example1.com with wildcard certificate example2.com with ...
1
vote
1answer
497 views

Error 26101: SSL certificate common name invalid

I have 3 systems with similar configuration: Windows Server Datacenter 2008R2 MS System Center 2012 connected to a storage array On 2 systems I can add the storage provider from VMM without any ...
7
votes
4answers
2k views

Why is Windows 2012 R2 not trusting my self-signed certificate?

In a testing environment, I'm currently being held up from testing some things that need to be deployed soon (actually already, but you know how deadlines go...) because Windows refuses to trust the ...
0
votes
0answers
202 views

IIS Client Authentication without a CDP

I'm running IIS 7.5 on Win2k8, and am trying to configure 2-way SSL. I've turned Require Client Certificate on in IIS, I've installed a valid root certificate in my local machine's trusted root store, ...
0
votes
2answers
87 views

SSL certs or intermediate for DMZ

I've been tasked with deploying and managing load balancers covering internal servers and DMZ servers. I have no experience with this, and this is a first for my organization as well. Balancers are ...
1
vote
1answer
20 views

Extract Certs from Apache

Recently I've had to uninstall a single Self-Signed SSL Certificate from one of my Apache boxes, specifically for an outside party. That's not really a problem for me, since it was easy. What ...
1
vote
2answers
233 views

OwnCloud RSA certificate configured for SERVER- ISSUE, webpage has a redirect loop [closed]

I had Owncloud running on a server that had died, I remember installing being easy, I have migrated server and Owncloud is one of the last apps to install. Ok Just downloaded and installed the newest ...
0
votes
2answers
5k views

How to get around Unrecognized Certificate Authority signature on Domino 9.0.1 with Go Daddy SSL?

I am a part-time administrator, at best, so I only get to do these things once every 2-3 years. I am reinstalling a Linux server that worked in 8.5.2. The SSL certificate is from GoDaddy. I have ...
0
votes
1answer
203 views

Is the decision to use SNI or IP based SSL made during cert purchase or cert installation?

It's time to renew an SSL cert - but the website will soon be moving from a dedicated machine with a fixed IP to a cloud based host behind a load balancer. When I renew or re-purchase my ssl cert do ...
0
votes
1answer
109 views

Why am I having trouble viewing HTTPS websites only using Chrome only on my employer's network? [closed]

I'm using Google Chrome on my new MacBook Pro that has been provided to me by my employer. Many of the HTTPS sites I visit do not work when I visit them using Google Crome while I am connected to my ...
0
votes
2answers
69 views

Does the server SSL certificate need to be kept private?

I understand that private key definitely does, but what about the certificate file? I also understand that the server sends (part of?) the certificate to a connecting client, but does it send the ...
5
votes
1answer
591 views

Windows 2012R2 seems to automatically download and install intermediate root certificates

Whilst preparing a new Windows 2012R2 server for production I needed to install a (GlobalSign Domain) SSL certificate for the website powering our application. I did this by generating a certificate ...
2
votes
1answer
531 views

Installing SSL certs with nginx on Amazon EC2

I finally got a cert from an authority and am struggling to get things working. I've created the appropriate combined certificate (personal + intermediate + root) and nginx is pointing to it. I got ...
0
votes
0answers
813 views

SSL Connection Error

I have purchased a comodo ssl cert and have submitted the Certificate Signing Request (CSR) generated by my server to the ssl management site. With the 3 files it returned me with, - ...
1
vote
0answers
1k views

The OCSP server has no status for the certificate. (Error code: sec_error_ocsp_unknown_cert)

Just set up a website (Apache/Centos) with SSL where the free cert came from startssl. I've used startssl before, and never had any problems. I have no problems accessing the site from IE and ...
9
votes
3answers
2k views

How to decide where to purchase a wildcard SSL certificate?

Recently I needed to purchase a wildcard SSL certificate (because I need to secure a number of subdomains), and when I first searched for where to buy one I was overwhelmed with the number of choices, ...
1
vote
1answer
106 views

Inject SSL client certificate in Nginx proxy

I have 2 Nginx instances, one is listening on 80 and has a proxy_pass https://second_nginx; The second instance is configured to listen on 443 with a self signed certificate, but also have the SSL ...
4
votes
2answers
102 views

Can't provision SSL certificate for my subdomain [closed]

Are only specific TLD's available for SSL certification? I'm trying to provision an SSL certificate for my subdomain, (I own the root domain but can't afford a wildcard SSL yet) but I can't find an ...
2
votes
1answer
161 views

Multiple SSL certs for wildcard domain

I would like to set up an EV SSL certifcate for a few subdomains like blog.domain.com and www.domain.com. I also need to set up a wildcard PositiveSSl cert for *.domain.com, excluding blog.domain.com ...
1
vote
1answer
328 views

Root certificate authority works windows/linux but not mac osx - (malformed)

I have created a self-signed root certificate authority which if I install onto windows, linux, or even using the certificate store in firefox (windows/linux/macosx) will work perfectly with my ...
2
votes
1answer
544 views

How to install (update) SSL certificate for a website in Windows NLB cluster

I wanted to ask what the proper procedure for installing an SSL certificate onto two servers running IIS6 that are in an NLB load balancing configuration. Yesterday I installed the certificates ...
0
votes
3answers
1k views

Chef Server 11.4 SSL certificate failure when bootstrapping a node

I'm trying to bootstrap a RHEL 5 server with Chef 11 Chef-Client using my Chef 11 Work station through a Chef Server 11.4. However, I am receiving the error below. ...
0
votes
1answer
2k views

Sending to gmail with TLS and self signed certificate

Since many provider switched to TLS only connections, I cannot deliver to gmail anymore with a default plaintext postfix setup. My question is, can I use valid TLS / does google accept TLS with a ...
0
votes
0answers
886 views

Where to locate certificates and keys on Centos 6.5

Looking at my Centos 6.5 /etc/pki/ directory, I see the following system generated directories: [root@vps ~]# ls /etc/pki CA ca-trust java nssdb rpm-gpg rsyslog tls [root@vps ~]# ls /etc/pki/CA ...
2
votes
1answer
949 views

Outlook: Name on security certificate invalid

Our end users are receiving the following dialog box in Outlook which refers to an incorrect internal domain name (domain.internal). No dialog box is received if using Outlook Anywhere. Clicking ...
3
votes
1answer
6k views

Postfix and OpenSSL: “Unable to get local issuer certificate”

I bought a certicifate for my mail server and configured it in Postfix like so: smtpd_tls_security_level=may smtpd_tls_CAfile = /etc/ssl/certs/ca-certificates.crt smtpd_tls_cert_file = ...
1
vote
0answers
375 views

SSL Returning Blank Page, No Catalina Errors

This is my second, maybe third, time configuring SSL with Tomcat. Earlier I had created a self signed, which worked, and now using my signed is proving fruitless. I am using Tomcat, operating from ...
1
vote
2answers
640 views

Do I need wildcard SSL for the www subdomain

I own example.com, example.net, and example.biz. I use Apache to rewrite example.net and example.biz to example.com. Based on this rewriting, it is my understanding that I would only need a ...
0
votes
0answers
244 views

Unable to get private key, path is correct, file readable

When testing Cyrus IMAPs connection, the connection fails with: May 12 21:03:16 mail cyrus/imaps[25758]: executed May 12 21:03:16 mail cyrus/imaps[25758]: accepted connection May 12 21:03:16 mail ...
6
votes
2answers
722 views

How to find out if an OpenSSL certificate was created by a certain private key?

I have an OpenSSl certificate. I also need the private key. I was told it is located somewhere on the server, and true enough, I found multiple SSL key files. Before I try them all by brute force: Is ...
0
votes
1answer
67 views

ssl address mismatch on purchased ssl cert [closed]

i've bought a "Protect 1 Website" ssl from godaddy http://www.godaddy.com/ssl/ssl-certificates.aspx , and requested and downloaded a cert for domain "example.com", but when i access dev.example.com, ...