SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

learn more… | top users | synonyms (1)

2
votes
0answers
423 views

Samba4 DC cannot enable TLS encryption

I've created my SSL certificate through an intermediate and have attached the certificate, key and (chain) CA to the Samba4 config under [General]. Upon restarting Samba though, the LDAP server is no ...
0
votes
1answer
58 views

GoDaddy A record and SSL Handshake error

I have pointed A record to my server IP in GOoDaddty as ns1.example.com and it is working.But I am confused with SSL error. I have generated SSL certificate with CN as ns1.example.com. When I try to ...
6
votes
1answer
114 views

Can I get anSHA-256 certificate when the CSR is for SHA-1?

I've read: By default, OpenSSL cryptographic tools are configured to make SHA1 signatures. for example, if you want to generate a SHA256-signed certificate request (CSR) , add in the command ...
0
votes
1answer
61 views

Loading whole cert chain into keystore for Tomcat 7

Environment: Tomcat 7.0 on Windows 2008 R2 What to accomplish Get Tomcat 7.0 to use a specific wildcard certificate with accompanying cert chain so customers' browsers do not throw errors. The ...
1
vote
0answers
277 views

hMail Server SSL Certificate Verify Issue | TLS/SSL handshake failed

I will tell you my situation step by step and ask me any necessary questions and help me to fix hmail certificate issue. First of all : 1- i am using a windows server 2008 - r2 2- latest hmail ...
0
votes
1answer
119 views

Enforcing client verification in Apache just for a specific client certificate

I want to make my Apache web server accept SSL connections ONLY IF the client presents itself with a specific SSL client certificate. In other words, only ONE client is allowed and it MUST use a ...
0
votes
1answer
40 views

Generate CSR considering root domain and www version

I have purchased a SSL certificate (NOT wildcard), that as I found out was issued for example.com only and did not include the www version so I was getting warning, as I posted in this question when ...
2
votes
1answer
110 views

Can I use a Comodo Wildcard-Subdomain Cert for RDP on Win10?

I followed Using CA certificate for Remote Desktop Connection Configure custom SSL certificate for RDP on Windows Server 2012 in Remote Administration mode? to secure RDP with a proper cert ...
0
votes
2answers
85 views

Avoid SSL warning when certificate is issued for root domain only [duplicate]

I am having the following issue, trying to set up the SSL certificate. When opening the root domain name example.com the browser shows the green sign and all is fine. However trying to open with www ...
0
votes
2answers
58 views

Security measures of Linux 'certificate store'

I know that windows is using a kind of master key for encrypting private keys which are stored in the certificate store of the OS. Moreover I found out that the certificates and keys in linux are not ...
1
vote
0answers
49 views

Enable x509 Authentication in Tomcat on Openshift

I have a web application deployed on Tomcat 7 running on Openshift. I managed to enable HTTP-to-HTTPS redirection on the server (instruction). I don't have valid certificate. So I have to use the ...
0
votes
1answer
48 views

NGinx - muliple SSL domains, single .conf file

I have the need to support blah.domain1.com and blah.domain2.com in the same configuration file under SSL. I have wildcard SSL certs for *.domain1.com and *.domain2.com (this is a multi-tenant server)...
3
votes
0answers
146 views

How well does haproxy scale for handling client certificate authentication?

As this is a performance-based question about a security issue, some folks at Information Security suggested I post here: My IoT company would like to use client certificate authentication to secure ...
0
votes
0answers
211 views

Configure Windows update (WSUS) clients to use client certificates

WSUS is set up to serve a few clients (Windows Server 2012 R2, 7 and 8, without an AD domain). A reverse proxy (nginx) provides TLS encryption between the clients and the server. This is working as ...
0
votes
1answer
41 views

One vhost, multiple certificates

I have the domain example.com with the subdomains : www.example.com and a.example.com. Let's suppose that I can't buy a wildcard certificate but, I bought the certificates for example.com and www....
3
votes
2answers
282 views

How to enable SSL on ubuntu apache2 ec2 instance correctly?

I have set up a ubuntu (14.04.2) apache2 (2.4.7) server for SSL, but the certificate doesnt seem to be found. Ubuntu is running on an EC2 instance with static IP, enabled 443 port and domain name ...
0
votes
0answers
710 views

SSL server: Unable to get local issuer certificate (Let's Encrypt)

As the title says I'm having some problems with my https connection, it was working perfectly but now (2 weeks after) I was installing the Jetpack plug-in on my wordpress site when I got an IXR -32300:...
0
votes
2answers
58 views

Configure mail for multiple domains VPS

I have a VPS with a few domains: domain1.com, domain2.com FQDN = domain1.com A self signed certificate for FQDN is configured automatically. iRedMail (postfix + dovecot) is configured on this VPS. ...
-3
votes
1answer
166 views

1.1.1.1 uses an invalid security certificate [closed]

I have bought a wild-card certificate for *.helloworld.com in "Godaddy" and had tried to use it in "2.2.2.2" that is in digital ocean which has my apache installed, ssl configured based on the above ...
0
votes
0answers
410 views

Let's Encrypt on AWS EC2 - domain name mismatch

I tried to generate a SSL certificate with Let's Encrypt on my EC2 instance with an elastic IP associated to it. The command I run is ./letsencrypt-auto certonly --standalone -d mariellaval.com -d ...
0
votes
1answer
72 views

openssl default md5 message digest default_md not listed in cert

According to this serverfault answer the default message digest for openssl 1.0 is MD5. My openssl.cnf file has default_md set to default. I generated a certificate using openssl 1.0.0: openssl req -...
1
vote
0answers
110 views

Java keystore: How to import the ca certificates correctly?

We have renewed the certificate of one of our server (apache httpd). For a webservice interface (for mobile clients) we need the certificate also on tomcat, means: stored in a java keystore. We have ...
2
votes
1answer
183 views

openssl - What is the public key default MD

In openssl.cnf default_md (use public key default MD) is set to default. How can I find out what the default is without generating a certificate? Is there a file I can check where it lists the default?...
1
vote
0answers
49 views

Why this error: SSCEP.exe : error verifiying signature happens?

I'm trying to use sscep.exe (NDES/SCEP Windows Test Tool). In order to get a good enrollment, there is a README file contained in the zip file, which you can get on that website. So, the README file ...
2
votes
0answers
70 views

Apache2:Unable to read server certificate from file

Cannot start apache2 server. error info is below. Looking into similar questions (SSL Error - unable to read server certificate from file, Apache cannot read certificate file, and so on), still ...
4
votes
1answer
194 views

Convert cert .cer to .pem via OpenSSL plus using SHA-256

This might be me having done it wrong. I recently used OpenSSL to convert a .cer to .pem using this - openssl x509 -inform der -in certificate.cer -out certificate.pem (And then loaded the .pem ...
-1
votes
1answer
28 views

Difference between ssl products and recommented ssl [closed]

I need more information on SSL certificate. I am using AWS EC2 Ubuntu 14 with LAMP. I looked for OpenSSL as I do not have budget but it acts like first one. I need SSL which can acts like ...
0
votes
0answers
27 views

OpenFire: Import my SSL certificates

I use Openfire 3.10.3. I have 3 certificates: ad-wildcard.key (PRIVATE) ad-wildcard-123123123.crt ad-wildcard-CA-gd_bundle-g2-g1.crt I've tried many ways and have read many forums and blogposts ...
1
vote
2answers
117 views

Wildcard SSL Certificate on Multiple ELBs in VPC

I am very new to installation of certificates and AWS itself altogether. Now, in my current infrastructure I have 3 ELBs that are in a VPC. I have purchased a wildcard ssl certificate from COMODO ...
2
votes
1answer
43 views

ssl certificates from SSL Resellers - what are they reselling?

I've seen SSL resellers everywhere (such as namecheap for several of their options). How are they reselling? What are they reselling? Are there any security issues with them?
0
votes
1answer
69 views

How to add multiple X509v3 Subject Alternatve names during cerificate request (CSR generation) without editing openssl.cnf file

I want to generate CSR for two domains. I have tried according to this http://apetec.com/support/GenerateSAN-CSR.htm But there is no such section available in openssl.cnf file and i don't want to ...
1
vote
1answer
43 views

Does office365 require certificate renewal

We are using Office365 for our mail in a hybrid setup so we have an exchange server with the transport role installed but all mailboxes are hosted on the Microsoft cloud. I was wondering if you need ...
0
votes
2answers
228 views

Nginx client certificate authentication: How to exclude an IP address

I have Nginx running as a proxy to a web server and i want to securing Access using TLS/SSL Client Certificates. This is my ssl config server { listen 443 ssl; server_name ...
1
vote
1answer
221 views

Postfix SSL-Intermediate-CA

I got a thawte Wildcard SSL-Cert for for *.my.example.com. Now I would like to use it for my mailserver (hostname: test.my.example.com). I edited the /etc/postfix/postfix_default.pem and included ...
2
votes
1answer
116 views

Validate email address at my own domain with gmail

I need to have the ability to send email using gmail's web interface, but have them appear to originate from my own domain instead of originating at a gmail address. In order to do this, gmail asks ...
0
votes
2answers
165 views

Certificate SAN Mismatch. The (SAN) of SSL certificate does not appear to match the host address.

Server Enviroment: Exch2003 (recently Decommissioned) Exch2007 (Will be decommissioned as soon as 2010 is up and going) Exch2007#2 Exch2010 (In process of installing) So I am at the point of ...
3
votes
1answer
192 views

AWS MySQL ERROR 2026 (HY000): SSL connection error:

I' am trying to connect to my AWS RDS MySQL instance with terminal on OSX El Captain, but I keep getting this error: ERROR 2026 (HY000): SSL connection error: error:00000001:lib(0):func(0):reason(1) ...
3
votes
1answer
136 views

Cannot set a default SMTP server certificate on Exchange Server 2013

I've an Exchange 2013 Server with two wildcard certificates, one for matching the internal AD zone and the other one with the public domain. The certificates are defined with those names: *.example....
0
votes
0answers
127 views

Nginx + SSL Certificate for Encryption purposes Issue

Sorry I'm not a sys admin. I'm trying to install my SSL Certificate for encrypt purposes and to use Nginx as a frontend of my Tomcat Alfresco application. I just can't reach my domain with HTTPS as ...
1
vote
2answers
222 views

AD Certificate services - The combobox to select Template is missing

Has anybody come across an issue where the certificate templates field is missing in the certsrv web-page? I am running 'Windows2012R2 Standard'. The online tutorials all have this combobox, but i am ...
-1
votes
1answer
38 views

Secure access to a site using SSL sertificate

I need to implement secure access to the corporate site using SSL certificates. After long time of searching I've came to conclusion that there are 2 ways to do that: creating own self-signed root ...
4
votes
0answers
131 views

Exchange 2013 Internal and External URLs with multiple servers and certificates

I'm building a lab with two Exchange 2013 Servers with different internal names and only one external URL, the naming schema is something like this: Internal Names: exchange1.local.example.com ...
1
vote
1answer
264 views

Setup secure connection with nginx and startssl certificate

I've registered on startssl.com and so retrivied 4 files for my domain: ssl.key - the private key file ssl.crt - the certificate file ca.pem - Root CA sub.class1.server.ca.pem - Class 1 ...
0
votes
0answers
358 views

nginx SSL_do_handshake() failed

it's the first time I configure an SSL certificate on my development machine (I'm no sysadmin - I need SSL to work with facebook). I decided to go with ngingx proxying a ruby sinatra application, ...
1
vote
1answer
65 views

md5 sum of private key is different from that of certificate and CSR

the output of: openssl req -noout -modulus -in presentCSR.csr and openssl x509 -noout -modulus -in server_new.crt | openssl md5 matches. But the output of openssl rsa -noout -modulus -in ...
0
votes
0answers
170 views

Outlook client expired SSL alert showing certificate removed from Exchange 2010

We use an Exchange 2010 SP3 environment (14.3.266.1). We replaced a wildcard certificated with a new one before it expired, assigned the roles to the certificated in exchange (SMTP etc...) before ...
-1
votes
2answers
101 views

SSL Certificate non-www not working [closed]

If I am going to type https://www.example.com the site is working. If I am going to type https://example.com the site is not working. The certificate should support example.com and also www.example....
0
votes
0answers
68 views

How to get the private key of my azure web app

I have inherited an Azure Web App and I would like to secure it with SSL. Following the official Microsoft Guide (here) I completed steps 1 - 5 of "1. Get an SSL certificate" Therefore I have : ...
0
votes
2answers
79 views

Unqualified DNS with Nginx and SSL registered to a fully qualified domain name

I have two servers; one is the 'official' example.com server that hosts my public website as well as mail servers (bluehost.com). The second is my private LAN server which hosts my point of sale ...
1
vote
1answer
27 views

IBMi and the Digital Certificate Manager with Multi-Domain SSL Certs

My company recently purchased a Multi-Domain SSL certificate for use on an IBMi V7R2. I'm relatively new to the IBMi world, but I get the feeling the DSM doesn't support Multi-Domain SSL certificates....