SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

1
vote
1answer
383 views

Are XMPP certificates different than “regular” ones?

StartSSL offers special XMPP certificates in addition to their "regular" web server certs. Can anyone tell me if XMPP certificates are special in any way? Isn't it possible to operate an ejabberd with ...
1
vote
2answers
124 views

Apache2 has errors while starting after reinstalling SSL Certificate?

I recently purchased and set up a VPS, and one of the first steps I took was to purchase and install an SSL Certificate. I had issues getting everything set up, but after quite a bit of research and ...
1
vote
0answers
440 views

ldapmodify TLS: certificate is not valid - error -8179:Peer's Certificate issuer is not recognized

In trying to connect to an MS active directory server over ssl, I am trying to run this: ldapmodify -vv -H 'ldaps://abc.def.com:636' -D 'cn=user,cn=Users,dc=abc,dc=def,dc=com' -f test.ldif -w ...
0
votes
2answers
3k views

RDS 2012 R2: An authentication error has occurred (Code: 0x607)

I've set up an RDS 2012 R2 host farm, but have problems. When I try to log on from an outside client, then I get this error... "An authentication error has occurred (Code: 0x607)" I've tried google ...
2
votes
3answers
7k views

Remote desktop certificate error - how to connect anyways?

I have a remote server that I can only access through RDP. It uses a proper SSL certificate from godaddy for RDP, not a self signed one. The server is 2008R2, and I believe is set to the default of ...
1
vote
1answer
89 views

DER encoded hash

according to the manpage of stunnel4 the certificates in this directory should be named XXXXXXXX.0 where XXXXXXXX is the hash value of the DER encoded subject of the cert (the first 4 bytes of the ...
2
votes
2answers
462 views

Can't use (self-signed wildcard) SSL Certificate in Windows Azure Website (WAWS)

I want to secure an azure website with a custom domain via SSL. The website is in the "Standard" Tier, as required. I've been able to upload my self-signed wildcard certificate, but when I want to ...
5
votes
3answers
2k views

How to view all ssl certificates in a bundle?

I have a certificate bundle .crt file. doing openssl x509 -in bundle.crt -text -noout only shows the root certificate. how do i see all the other certificates?
0
votes
1answer
65 views

postfix master.cf configuration from database

I am wondering if it is possible to configure postfix master.cf file from database. Same as, for example, in main.cf one can set alias_maps = pgsql:/etc/postfix/pgsql-aliases.cf What I'm ...
2
votes
1answer
43 views

Certificate Authority - Issuing Authority Confusion

This is a bit of a newbie question, but my head is fried after reading various differing article on how CA's work. Are most certificates issued by an 'intermediate CA' where the chain eventually ...
-1
votes
1answer
78 views

Generate CSR for SSL [duplicate]

I need to add SSL to a Apache/Linux sever. Do I have to generate CSR from the same server which I need to add SSL? Also when I add SSL in Apache sever, can I omit mentioning key file like below? ...
0
votes
0answers
483 views

Failed to Configure CA Certificate chain after Rebuilding/Re-Installing OS

I got my free ssl at startssl.com and it works really fine. My site is working with https://. After I configure LAMP and VSFTP and broke something in there, I decided to re-install UBUNTU 12.04 OS to ...
0
votes
1answer
139 views

Understanding XP users accessing a UCC certificate on IIS8

I have a single IIS website which hosts 3 different websites all using the same UCC SSL certificate. (The code of my site examines the host header itself to decide which variation of the site to ...
2
votes
1answer
126 views

Switch the SSL provider after Heartbleed bug instead of revoking

I have a question regarding the Heartbleed problem and the SSL certificates. About Heartbleed many people say that admins should revoke their certificates and get new ones. I got my SSL certs from ...
2
votes
0answers
427 views

Maven - resolving “java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors”

I am attempting to build/install this project on an Ubuntu 12.04 box: https://bitbucket.org/petermr/pdf2svg However: mvn clean install Fails to build due to getting errors like this: ...
5
votes
2answers
11k views

Understanding the output of openssl s_client

Ever since our email provider changed their SSL certificate, a POP3 client based on mono refuses to connect to their secure POP server to download emails. Other clients do not have an issue; e.g. ...
5
votes
1answer
760 views

How to find out which server generated a CSR

I sent a client a CSR a few months ago and now they finally sent me back the CA response. However, there are multiple Windows 2008R2 servers and I don't remember which one I used to generate the CSR ...
1
vote
1answer
164 views

Linxu Forward proxy for client authentication

I need to use a simple HTTP forward proxy proxy for linux to do mutual SSL authentication The proxy needs to attach a client certificate to HTTP request and then upgrade HTTP to HTTPS. I have tried ...
0
votes
1answer
377 views

Exchange Server - How to use existing certificate without CSR?

I have some SSL certificates problem. We have an Exchange 2010 server hosting mailboxes for mydomain.com, otherdomain.com and thirddomain.com. It's internal name is myserver.mydomain.local. When ...
1
vote
2answers
4k views

SSLCertificateChainFile Deprecation Warning on Apache 2.4.8+

We have an SSL Certificate for our website from Network Solutions. After upgrading Apache/OpenSSL to version 2.4.9, I now get the following warning when starting HTTPD: AH02559: The ...
0
votes
0answers
768 views

Can't seem to get Apache SSL client certificate authentication working with an intermediate CA

I'm restructuring my personal CA system and trying to add an intermediate CA into the mix. I have a self-signed root CA whose certificate is imported into all appropriate browsers/OSes. I seem to be ...
3
votes
2answers
205 views

Use DNSSEC for secure connections

From my understanding DNSSEC allows me to create a public key and sign my DNS records. There appears to be multiple ways to have a certificate record (such as DANE see ...
0
votes
1answer
256 views

SSL Certificate implementation for a stack that has varnish and multiple NGINX webservers

My current stack has Varnish -> NGINX (2 servers) running Drupal -> MySql. All static content is cached and served by Varnish over HTTP. However when a user signs-up and wants to purchase a plan the ...
8
votes
3answers
1k views

Do I have to update my snakeoil certificate after updating openssl (heartbleed)?

I just updated my debian wheezy server to the newest version of the openssl package which has the heartbleed bug fixed. I do support SSL on my server, but only with a snakeoil certificate. I was just ...
1
vote
2answers
704 views

How do I rotate an SSL Certificate as requested by AWS

Amazon AWS sent an email today that users using Elasic Load Balancing (ELB) service with SSL certificates should "Rotate" them for precaution (Heartbleed bug). How exactly do I rotate an ssl ...
0
votes
1answer
532 views

Heartbleed testing tools do not recognize reissued certificates (PositiveSSL Wildcard + Amazon ELB)

In response to the Heartbleed news, I have upgraded OpenSSL on my production server and am now trying to reissue the SSL certificate. I am using a PositiveSSL Wildcard certificate on an Amazon ELB. I ...
1
vote
1answer
98 views

Replacing SSL Cert Apache

I am replacing our SSL cert on our Apache web server. This is the first time I have done this, with my 2 colleagues being on holiday, and an urgent need to replace our SSL cert(due to the openssl ...
5
votes
1answer
725 views

How can I check if certificates generated with openssl are vulnerable to heartbleed

I am aware that you can show the version of openssl you are using by typing the following at the command line "openssl version". I created a certificate and a key some time ago with similar names to ...
0
votes
1answer
60 views

How to re-check SSL certificate even with exeption in browsers

My SSL certificate has expired. I created a new one for my domain but after a few days. Certificate is now online and working but there is a problem at users side. When the certificate expired, users ...
1
vote
1answer
711 views

Proper config for Couchdb + SSL Ubuntu. Getting error: curl: (35) Unknown SSL protocol error in connection to 127.0.0.1:6984

I'm looking to use CouchDB with SSL and nodejs and I have just switched from self signed certificates (which were working for over a month) to a real SSL certificate and now I'm running into ...
1
vote
3answers
1k views

Some users receive untrusted SSL certificate warnings

I've been getting reports of users visiting our site getting "this certificate is not trusted" errors when visiting our site via https. I don't seem to ever have any problems, but two separate people ...
3
votes
1answer
1k views

If I get a certificate signed for ECDSA will older browsers be able to use RSA?

I'm looking into using ECDHE-ECDSA and there are a lot of great articles on why (https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/) and ...
1
vote
1answer
53 views

Single IIS, 2 applications, 2 IP addresses, 2 Domains, 2 SSLs

I know there are many questions out there, but none seemed to address specifically what I am after. I have one instance of IIS, with two separate applications on it. Each application works on its ...
1
vote
1answer
964 views

Apache fails to start with new ssl certificate

I'm running RHEL 6.4 and my trusted certificate has expired recently, so I decided to renew it. I've obtained a new certificate from StartSSL. After downloading and putting the certificate file on the ...
0
votes
2answers
153 views

S/MIME certificate to minimize email bounce

I have a website hosted in a vps that sends informative emails to my clientes, maybe 20-40 emails per day. Since few weeks ago some sent emails are bouncing with the following error: This message ...
0
votes
0answers
140 views

Windows 2012 - Certificate Issue

My application runs as a WCF web-server in a Windows service. It uses https/ssl protocol and binds it's certificate with its port number. During the Service start, I am seeing this error in Windows ...
-1
votes
1answer
45 views

Only allow a specific client to talk to a server

I have the following situation: have a server (ubuntu) running an application. I have a client (only the one client) requesting stuff from that server. To execute the requests, the client has to ...
9
votes
2answers
3k views

Can't upload certificate to AWS

I'm doing: aws iam upload-server-certificate --server-certificate-name MysiteCertificate --certificate-body Downloads/mysite/mysite.crt --private-key mysite.pem --certificate-chain ...
0
votes
1answer
143 views

IIS 7 filling disk with millions of certificate files

I've got an ASP.NET website running on IIS 7. Using PA File Sight, I've proven that it is creating 2 to 3 new files in the C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys folder every minute. PA ...
15
votes
1answer
710 views

How does this kind of SSL work?

"Issued to" and "Domain Name" doesn't match but still valid and accepted by all major browsers without any warning. While previewing my blog post in Blogger, I noticed that my blog was previewed via ...
0
votes
1answer
894 views

StartSSL.com SSL Class2 Certificate and Postfix

currently my Postfix 2.11 instance runs TLS on a GoDaddy SSL Certificate but as i would like to be able to access my server from smtp.example.com as well as imap.example.com, example.com or ...
3
votes
3answers
994 views

Nginx issues between vhosts and SSL

I have two sites in the same IP with the follow configuration: site1.com Multiples subdomains (ie.: foo.site1.com, bar.site1.com) Everything listening on port 80, NOTHING in 443 ...
13
votes
2answers
1k views

Does it matter where the CSR and key files for SSL certification are generated?

I have to create a CSR for a wildcard SSL certificate. Some FAQs from SSL providers say that I should generate the CSR file on the machine where I want to install the certificate? My understanding is ...
0
votes
1answer
217 views

MDM Server Apple Certificate: Certificate Signature Verification failed

I want to create a MDM server to manage my iOS devices. I have enrolled in iOS Enterprise Developer program. And executed the following openSSL commands "1. Creating Certificate Authority (CA)" ...
0
votes
1answer
478 views

How can I renew the SSL certificate used on our Exchange server?

According to the MSDN article Renew an Exchange Certificate, I'm supposed to use Get-ExchangeCertificate -Thumbprint 'AD19B141228C7CF98B5F78DCED978B7C45E15434' | New-ExchangeCertificate ...
0
votes
1answer
912 views

Config Manager 2012 Application Download stuck at 0%

We have a Config Manager 2012 R2 setup with 2 Distribution Points on remote sites. In the remote site the Applications don't get downloaded, the status remains on 'downloading (0% complete)' In the ...
-2
votes
1answer
779 views

Why openssl s_client and gnutls-cli deliver different certificates (own server)

on my server i have multiple virtual hosts with apache2. Some with domain *.example-one.org and some whith *.example-two.org. Each domain has it's own wildcard certificate. When I fetch the ...
1
vote
2answers
1k views

Does a domain computer trust certs from domain CA

I have investigated this but have been unable to find a definitive answer to my question. I have never used certificate services in active directory before so am unsure of its possible ...
1
vote
1answer
2k views

version 0.9.7a of openssl reports “certificate signature failed”, but version 0.9.8e is happy

I am trying to construct an openssl certificate chain that will work with a standard CentOS 4 install as client. (I know it's very old, but it's what our client is using so we need to support it). ...
0
votes
1answer
308 views

Will renewing a wildcard SSL certificate on one server invalidate the certificate on other servers?

We have a wildcard SSL certificate that is due to expire in a few weeks. I currently have this certificate installed on six servers. I'd like to renew it on one server first, test it out, and then ...