Tagged Questions

SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms

1
vote
1answer
2k views

Server address requested and the certificate subject do no match

I'm trying to setup Remote Desktop Gateway (Terminal Service Gateway) on virtual Windows Server 2012 R2. But when connect over internet (from Win7 RDP client) getting an error: Your computer can't ...
0
votes
1answer
329 views

How to convert a SSL certificate and private key to a PFX for import in IIS?

Certificate name is: mycert.crt My CSR converted to PEM (RsA) Private key is: private.key I want to create mycert.pfx so I can use it in IIS. When I run this command: openssl pkcs12 -export -out ...
0
votes
1answer
549 views

How to have puppet master on hostname without modifying /etc/hosts on client?

I created an A record for my puppetmaster. In case the puppetmaster on this ip address goes down and I have to spawn a new one from a new ip address, I can just change the ip address associated with ...
2
votes
0answers
193 views

Installing RD Gateway on a server with another site already in Default Web Site and listening on port 443?

I have a server running Windows Server 2008 R2, web facing with one website already installed. I would like to also add the RD Gateway services to this machine since it is already accessible form the ...
0
votes
1answer
140 views

Importing SSL from Godaddy using Tomcat (SYSAID)

I've purchased an SSL cert from Godaddy and received the 3 following files: 4379ygfhd9745gh.crt gd_bundle.crt gd_intermediate.crt ...
0
votes
1answer
267 views

Generate SSL certificate using Keytool

I have a question about SSL certificates. I use Openssl to generate the certificate: I followed this tutorial. My goal is to generate: .crt .key .pem Is possible to obtain the same files using ...
0
votes
0answers
144 views

How Do I Enable My Ubuntu Server To Host Various SSL-Enabled Websites?

Actually, I Have looked around for a few hours now, but I can't get this to work. The main problem I'm having is that only one out of two sites works. I have my website which will mostly be used for ...
0
votes
2answers
429 views

SSL problems on Android (Intermediate Certificate)

My site works well on every browser and device, except on Android, where it throws a security exception. I already installed my SSL certificate on my Amazon Elastic Beanstalk instance (by installing ...
1
vote
1answer
176 views

Safari 7 SSL error if using IP-adress [closed]

I have created my own CA for internal usage and set the root certificate to trustworthy on my machines. With this CA I signed the SSL-certificates for my internal servers. I only address them with ...
0
votes
2answers
377 views

“Issued certificate not yet valid.” with wget?

I am getting the following error when using wget to fetch a file: Issued certificate not yet valid. To connect to www.atlassian.com insecurely, use ‘--no-check-certificate’. Testing with openssl ...
0
votes
1answer
759 views

Apache cannot read certificate file

I use self-signed certificates with no issue but today I have tried to create a SSL certificate for commercial use. But apache doesn't start and gives the following error: Notice: I have confirmed ...
5
votes
3answers
2k views

Multiple SSL vhosts using wildcard certificate in nginx

I have two hostnames sharing the same domain name which I want to serve over HTTPs. I've got a wildcard-SSL certificate and created two vhost configs: Host A listen 127.0.0.1:443 ssl; ...
0
votes
3answers
89 views

HTTPS and HTTP issue on server with SSL

I have a site www.example.com for which i purchased SSL cert and installed. And it was working fine, I also have a subdomain with app.example.com which was not on SSL. Both www.example.com and ...
1
vote
1answer
83 views

How can I configure apache2 to use a non - exportable ssl certificate managed by windows?

On Windows Server 2008 R2, my IT administrator has installed a certificate using the windows certificate management tool. The certificate is for *.thedomain.com. He set it up as not exportable for ...
0
votes
1answer
104 views

Single Shared Host, Single IP, Multiple Domains, Multiple Websites… (with and without SSL)

While my post may look similar to others, it concerns shared accounts at a web hosting provider all utilizing the same IP address (rather than different IP addresses). Here comes what I would like to ...
0
votes
1answer
60 views

OpenSSL not using CA directory

OpenSSL will not verify a cert $openssl s_client -connect <host>:443 ... Verify return code: 21 (unable to verify the first certificate) However, if we figure out the location of the store $ ...
0
votes
1answer
113 views

RapidSSL nginx Certificate issuer is me

I have baught the SSL certificate from RapidSSL. I have concatenated the chain files of RapidSSL CA and GeoTrust Global CA But when I check it on http://www.sslshopper.com/ I have this : The ...
0
votes
1answer
271 views

windows 2008 r2 import .cer file type not recognizable

I would like to import .cer on Windows Server 2008 R2 using mmc certificate import wizard, however it gives error: "The file type is not recognizable. Select another file." May I know how to import ...
1
vote
1answer
198 views

How do I redirect users from https://www.domain.com to https://domain.com?

Hi serverfault community! I did not purchase a wildcard certificate, but I see a big problem with my setup. When I navigate to https://www.redmeetsblue.org I do not have a certificate, like the one I ...
0
votes
2answers
113 views

HTTPS returns 404

Have setup SSL on Apache The certificate is self-signed and generated with openssl req -x509 -nodes -days 9999 -newkey rsa:2048 -keyout private.key -out public.crt requests http://domain.com - ...
-1
votes
2answers
47 views

SSL for server aliases

I have a website and multiple domains are pointed to it. For example: sub.abc.com, sub.bcd.com, etc. The site is hosted on a single IP on a dedicated server. I'm using ServerAlias for pointing ...
1
vote
1answer
95 views

What are the effects of having the TLS certificate and private key in same file?

I have noticed that a number of different web and mail server software allow or require you to provide the TLS certificate (including server certificate, CA intermediate certificate, and CA root ...
3
votes
1answer
2k views

Restarting nginx keeps asking PEM pass phrase

I'm trying to reload nginx, I have a wildcard certificate for one domain which I got from namecheap, now I have moved it to my server, and assigned a nginx configuration rule with this: ...
0
votes
1answer
32 views

Determining if an IA (Intermediate Authority) SSL certificate has been deployed

I've recently redeployed an IA and normal certificate. Is there a way to check a live domain for whether or not the IA certificate is available?
0
votes
2answers
36 views

SSL certificates present for some clients and missing for others

I just changed the SSL certificates for one particular domain on AppEngine. While I expect that there might be a propagation delay with Google's systems before the new certs (CRT, IA) can take effect, ...
0
votes
1answer
118 views

IA (Intermediate Authority) SSL Certificate on AppEngine

I had a website running under one domain name on AppEngine with SSL working as expected. However, I switched to another domain name, and I've not been able to get SSL working. When I go to upload a ...
0
votes
1answer
78 views

Full IP NSI SSL certificate in plesk

I've created a domain alias in plesk for a secure site under a Thawte SSL123 certificate. The problem is that the alias domain SSL shows warnings to the users as the SSL cert only applies to the ...
1
vote
3answers
931 views

How can I find out the type of an SSL certificate?

I received by email from my certification authority a certificate that begins like that: -----BEGIN CERTIFICATE----- MIAGCSqGSIb3DQEHAqCAMIACAQExADALBgkqhkiG9w0BBwGggDCCBWMwggRLoAMC and ends like ...
0
votes
0answers
32 views

While Checking the expiry date of newly installed ssl it showing custom errr?

Am fully new to this site before setting this question as duplicate or hold read this. I am just installing sslcertificate which is in .pem for enabling APplePush Notification but the newly installed ...
-1
votes
1answer
131 views

Create self signed SSL certificate - nginx

I want to create a self signed SSL sertificate for my website. I will not use it for accessing the website itself but for other services i am going to be using (roundcube, phpmyadmin etc). I want to ...
1
vote
2answers
665 views

nginx permission denied to certificate files for ssl configuration

I'm installing an nginx ssl proxy on my Fedora server. I've created a cert and key pair under /etc/nginx. They look like this: ls -l /etc/nginx/ total 84 ... -rw-r--r--. 1 root root 1346 Sep 20 ...
3
votes
2answers
100 views

how is a website certificate file cryptographically readable by windows?

I have a .crt file signed by a CA. I cat the file to see that it is ascii text. Yet when I double click on the .crt file in windows, it opens it up and somehow displays all the information that's ...
1
vote
0answers
200 views

Unable to install Alpha SSL certificate for Openfire

I have been issued an SSL certificate for www.mydomain.com, I have been able to successfully implement the certificate for the site and the site is working is https. However, I have not been able to ...
1
vote
1answer
185 views

The connection was reset with client SSL verification

I had a server with server side ssl working. I've added : SSLVerifyClient require SSLVerifyDepth 1 SSLCaCertificateFile /etc/ssl/certs/MyCA.crt And now I get a connection reset every time I try to ...
1
vote
1answer
3k views

SSL Library Error: X509_check_private_key:key values mismatch

I installed a new SSL certificate signed by our own Certificate Authority. Apache will not start, with the error: SSL Library Error: 185073780 error:0B080074:x509 certificate ...
1
vote
1answer
342 views

Wildcard SSL not working for multiple subdomains

I have a wildcard SSL for my website, but I'm getting a strange error in my web browser(s). You attempted to reach app.dev.mysite.com, but instead you actually reached a server identifying itself ...
-2
votes
1answer
59 views

Do any well-known CAs issue Elliptic Curve certificates (now that all others are hackable)? [closed]

I know it had been asked before here, but that was back in 2009. Now that it is widely supported by browsers (Requires TLS 1.1, only added in Chrome 22+, FF 23 released Aug 8 2013, IE9+), AND can ...
0
votes
2answers
712 views

Passed SSL checker, but browser doesn't show secure?

I've set up my SSL certificate following the instructions at http://splittingelectrons.wordpress.com/2012/02/24/how-to-configure-an-ssl-certificate-for-apache-on-amazon-ec2/ I've checked my website ...
1
vote
3answers
1k views

Why is it considered bad practice to only protect one page with SSL instead of whole website

I know that protecting all pages with SSL will slow down the website and add overhead to the server resources. I also see many other websites only protecting their login and registration page, which ...
0
votes
1answer
516 views

Exchange 2010 Transport Certificate , Event ID 12014

I am getting cert error on our external domain for TLS. I already have a cert for Web Outlook and ActiveSync, but that's a different domain name, this is our mail.name from our MX records that I've ...
0
votes
1answer
213 views

SSL/TLS Client certificate Authentication using RewriteCond and Rewrite Rules to perceptively redirect traffic not authorized

I finally end up to write here because I´m badly struggling against apache, SSL/TLS and a client certificate authentication that should use the certificate´s Serial Number to restrict access to a ...
5
votes
1answer
635 views

IIS no longer trusts any CAs for client authentication

Yesterday the IIS on our build server (running Windows Server 2012) started refusing our clients' certificates. The certificates are signed using our own self-signed CA cert that has been added to ...
2
votes
2answers
126 views

WSUS Public or Domain Certificate

After having followed this guide, it is unclear when one would use a public certificate versus a domain certificate for WSUS. What are the advantages and disadvantages of one way versus the other? ...
2
votes
1answer
2k views

Why is Firefox 23 showing Untrusted Connection errors?

We recently went from a standard SSL certificate to a wildcard one. We use RapidSSL for our certificates. As of Firefox 23 we are getting the following untrusted connection error: ...
3
votes
1answer
53 views

Can an ssl certificate be modified?

Is there any way to modify a ssl certificate? I don't want to change any of sections relating to authentication, only some of the surrounding data, e.g. Issuer or X509v3 Key Usage. Is there any tool ...
2
votes
0answers
499 views

How to alias a ssl certificate common name?

I have a server, which has a self signed certificate, which I am trying to securely access. I've got the certificate by looking at the output from openssl s_client -connect <ip>, and copied it ...
5
votes
1answer
350 views

How to get certificate common name from PEM file

Various articles online have lead me to believe that a server certificate's common name must be an exact match to the root URL it is valid for. However, when I look at a bunch of the files in ...
1
vote
1answer
24 views

Certificate validity range concerning subdomains

If I have a self-signed certificate for something.subdomain.example.com then it will not be valid on www.subdomain.example.com, right? (Note that the certificate is self-signed, but imported so it ...
2
votes
1answer
48 views

wildcard ssl for subdomains

I generate my ssl keys via openssl use this commands: openssl req -passin pass:3a1b -new -key server.key -out server.csr; cp server.key server.key.org; openssl rsa -passin pass:3a1b -in ...
1
vote
1answer
1k views

Create a public private key pair for certificate in IIS

I need to create a public/private key pair for a certificate request. I would like to use IIS. Once the certificate is signed I will be distributing it to multiple servers and therefor will need the ...