SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

learn more… | top users | synonyms (1)

0
votes
2answers
51 views

SSL configuration on nginx - missing .icrt file?

I've managed to get SSL working on my site, under nginx (or so I thought!). However, I was trying to run it via GTMetrix (to check the new speeds), and it appears that there is something wrong. I ...
1
vote
1answer
175 views

Self-signed cert with Subject Alternative Names

I'm attempting to create a self-signed cert with SANs using OpenSSL on Ubuntu 14.10. I have been about to successfully generate a CSR that includes the proper extensions. When I generate the ...
0
votes
1answer
36 views

Share SSL certificate between VM

I have a SSL certificate for example.com, and I want to protect with it: My home page (example.com) running on a VM in Azure My servlet (servlet.example.com) which is running on a different VM (but ...
2
votes
2answers
224 views

How do I configure Windows for dual certificates, ECDSA with RSA fallback?

We'd like to use an ECDSA SSL cert; however, we need to support a fairly wide variety of devices including some that are unlikely to ever support ECDSA certificates. The standard solution is to ...
0
votes
1answer
15 views

Windows 2008 Cert Authority only issuing certificates for 10 days

I am trying to get a certificate for my Remote Desktop server on my AD. When I submit the request through the Certificate Authority snap in it generates a certificate that is only valid for a few days ...
0
votes
0answers
37 views

Can I use a credit card EMV chip as a client-side SSL Cert?

Is there a way to read the certificate in a consumer credit card EMV chip and use this to authenticate to an Apache web server using the client-side certificate support in SSL/TLS?
1
vote
2answers
863 views

Common Name does not match Server Name - SSL Certificate

I recently purchased an SSL certificate. I've got www.site.com.key, www.site.com.csr, intermedia.pem, www.site.com.crt all set up in my /etc/ssl/localcerts folder. When I open my browser I get the ...
3
votes
2answers
992 views

IIS sends incorrect intermediate SSL certificate

I just installed a new SSL certificate (from StartCom) to one of our servers and noticed that in Chrome there is the crossed padlock icon displayed for the site so I started investigating why is that ...
0
votes
2answers
45 views

SSL certificate issue for all clients

I had exchange 2013 installed on Windows 2012 server and all way happy until I attempted to add remote access role. This failed the first time, and I had to remove the role and re-add the role. Remote ...
2
votes
3answers
377 views

SSL binding with no hostname, and centralized certificate store?

We have a web app that serves a large number of websites from a single IIS website. The IIS website simply has a catch-all binding on port 80. Up till now, for the SSL bindings, we have added a new IP ...
4
votes
3answers
589 views

Do I need a dedicated IP address for each SSL certificate?

I am hosting multiple domains on a single AWS instance. The domains all share the same underlying codebase, but we provide "white label" services on various domains. Each of the domains (foo.com, ...
0
votes
0answers
115 views

Azure hosted website certificate chain (comodo) intermittently doesn't send full chain

We host a website in azure. The service we host has 6 instances. On that service we have added a certificate that covers the site, and has an authentication chain that looks like: our certificate ...
7
votes
2answers
458 views

Creating sub certificates from a root certificate (SSL) [duplicate]

If I purchase a signed certificate for example.com, can I then produce sub-certificates for a.example.com and b.example.com? These sub-certificates would have PEM files whose privacy cannot be ...
3
votes
0answers
81 views

Browser and openSSL return different certificates

I'm trying to debug my first attempt at using SSL Pinning in an app I'm developing. I use a shared hosting service on which I have a few domains active. One of the domains is going to act as an API ...
0
votes
0answers
82 views

IIS website stops working after installing new certificate

We have an IIS website that is available at the URL acc.myapp.mycustomer.com. The myapp.mycustomer.com website shares the certification with the Sharepoint website. The site has been working fine for ...
1
vote
0answers
44 views

Certificate chain lost apache 2.4

So I think I'm not getting something here. I'm getting javax.net.ssl.SSLHandshakeException: null cert chain when I access my application via apache httpd, but not when I'm accessing it directly. ...
1
vote
2answers
110 views

Is a good idea to use a SSL UCC certificate for two different but related web sites?

There are two e-commerce sites on the same Apache server, moreover they share the same Drupal installation with common users and products. They differ for domain name and for aspect but are ...
0
votes
1answer
28 views

Apache Server does not update certificate for subdomains after restart

I have a server which has domain1.example.com and domain2.example.com. The server is using 2 certificates one for domain1.example.com and a UCC certificate for domaind.example.com. My ssl config is as ...
0
votes
0answers
38 views

Wildcard SSL on 2 Servers

I'm helping an SEO client install an SSL certificate and have run into some issues. I'll try to simplify it. He has 2 servers: 1. SERVER A: Internal server running IIS that contains chat and support ...
1
vote
1answer
198 views

facebook app giving Security error when click on a shared link to my site [closed]

I have built a site and users are sharing it on facebook, but when one of their friends click on the link it give them this error. Security error There are problems with the security ...
0
votes
0answers
29 views

Cross Domain LDAPS

I have a bit of an issues I am running in to. We have two domains: domain1.com domain2.com Our Enterprise and Subordinate CA Resides on domain1, let's call it subca.domain1.com. I am trying to ...
1
vote
2answers
213 views

Windows XP invalid certificate on Nginx

I migrated my SSL websites and certificates from Apache to Nginx and from that moment all Windows XP clients does not recognize the SSL certificate (it is a wildcard certificate issued by Trustico). ...
7
votes
1answer
1k views

Is is possible to disable Certificate Transparency (audit log checking) of certificates in Chrome?

We utilize HTTPS deep packet inspection in our firewall via a trusted root certificate in the Windows certificate store. Chrome recently pushed forward with a feature to perform additional checks on ...
1
vote
1answer
349 views

Configuring IIS ARR for backend client certificate authentication

I have an IIS server configured with ARR to reverse proxy requests to a backend server. The backend server requires client certificate authentication, however, it only needs to authenticate the ...
2
votes
1answer
77 views

Best Certs to use for internal https [duplicate]

I'm helping out a large church with some IT stuff they have lots of internal secure connections, like to the security cameras, or to the UniFi AP controller that want to use https. Of course each of ...
5
votes
3answers
776 views

View the SSL certificate of a page that immediately redirects to another

So I've googled quite a bit for this but it appears that my google-fu fails me - apologies if this is a trivial and already answered question, I could not find anything about this I'm trying to ...
0
votes
1answer
761 views

Easiest way to generate PFX certificate (Windows)

At the moment to generate PFX Certificate, I use openssl and: Generate a CSR with its private key Connect to my CA website (Microsoft CA), and submit CSR along with (san:dns=) additional attribute. ...
2
votes
1answer
101 views

What would be a less-known SSL certificate attribute to look out for?

I'm looking for a simple domain SSL certificate for our company's website and I'm a little confused. A lot of them seems to offer the exact same features, yet at price ranges going from 5$ / year to ...
4
votes
2answers
6k views

Why does Chrome complain about “obsolete cryptography”?

I am hosting an ASP.NET website with wildcard ssl certificate on IIS / Windows 2008R2. While Chrome works fine with my website and shows a green lock the https connection, the https details mention ...
0
votes
5answers
465 views

Why are many mail servers using subdomains like mail.example.com?

I'm just setting up dovecat and postfix for the first time and wondering why so many companies are using subdomains for IMAP and SMTP like smtp.mail.example.com and imap.mail.example.com? What are ...
-2
votes
1answer
37 views

TLS for outgoing mail (following ISPmail) not working

I built my mailserver on a vserver after the ISPmail tutorial (https://workaround.org/ispmail/wheezy) (which is awesome). The only remaining problem is that it does not seem to use TLS with outgoing ...
0
votes
1answer
50 views

Replace ssl certificate in bundle

I'm not really used to administration stuff so please bear with me. Recently, the server's certificate from RapidSSL expired and we renewed an received a new one. TO replace the cert, I opened up ...
1
vote
1answer
3k views

How to unassign self-signed cert from SMTP on Exchange 2010?

We have a GoDaddy wildcard certificate that we have installed into Exchange 2010 and is successfully used on IIS connections for OWA. We have assigned this certificate to the SMTP Service as well as ...
0
votes
0answers
111 views

Imported wildcard SSL Certificate on Windows Server 2008 R2 IIS7.5 ERR_CONNECTION_RESET

I've been battling this all day! I've exported our production SSL Certificate to a PFX file, copied this to our dev IIS server. Using MMC, added the certificate management, imported the PFX into the ...
-1
votes
1answer
68 views

Do I need a wildcard cert if I'm running two SSL websites off different ports?

If I've got two vhosts for two different websites running off 8081 and 8082 (both SSL), do I need a wildcard cert? The hostnames resolve to the same IP but seeing as they are running off of different ...
1
vote
0answers
29 views

MS Webdeploy V3 encryptPassword correct usage

I have installed MS Webdeploy (Version 3.5) on both my ("old") Server 2003/IIS6 and ("new") Server 2012/IIS8. Currently, I am following the guidelines in the article here, backing up the Target ...
0
votes
1answer
192 views

Client Certificate Web Service Call

I have a requirement to call server web service with client certificate. They have provided me one .crt file. I am hosting my project in WindowsServer2008 IIS7. I install .crt from right click ...
0
votes
0answers
89 views

firefox with ssl two way authentication chains

I fall into a never ending trouble with certificate chains and 2-way authentication on my servers; I'll try to describe the problem as best as I can: I have 2 sites on 2 different servers, ...
0
votes
1answer
150 views

Multiple Certificates on Exchange for OWA and EWS

We are currently running Exchange 2007. All our clients access the EWS service on Outlook via the internal server name server.domain.local. For this we use a self-signed certificate from the domain's ...
0
votes
1answer
138 views

Exchange 2010 rejecting Amazon SES TLS with UntrusedRoot

Due to our network setup, when we moved our business last year we switched Exchange 2010 to use AWS SES to relay our outgoing emails. This has worked pretty well up until yesterday, when Exchange ...
0
votes
0answers
32 views

Does my SSL cert have anything to do with or say about the symmetric session key?

The answer found on this server fault thread is my jumping off point for this general topic: http://serverfault.com/a/313558 ... and this question can be thought of as a follow-up to that answer. ...
1
vote
1answer
73 views

Certificate common name invalid

I have a webserver and its domain name is foo.com, if I access the site in https://foo.com I will receive the warning from Chomre browser. NET::ERR_CERT_COMMON_NAME_INVALID I searched the web and ...
2
votes
1answer
90 views

Pick SSL cert based on domain name without separate VHosts

I'm working with a WordPress multi-site network that has various top-level domain names. We're currently serving them all up with one virtual host: <VirtualHost *:80> ServerName ...
1
vote
2answers
1k views

NGNIX 1.6.2 on Debian8: Won't start after adding SSL

I can't figure out even the text of the error I get from starting it ● nginx.service - A high performance web server and a reverse proxy server Loaded: loaded (/lib/systemd/system/nginx.service; ...
0
votes
1answer
53 views

Permissions to attach client auth certificate in Windows

I have Win32 app that does web service calls that need a client auth cert to be attached to each message. The code works fine on all the machines I manage, but some clients are getting issues where ...
1
vote
2answers
51 views

Strange SSL certificate and https website

Checking this https://racq.travelinsurancepartners.com.au/, you will find the browser is displaying things OK. However, browsing https://www.travelinsurancepartners.com.au/, you will see the browser ...
0
votes
0answers
109 views

Certificates not working optimally with NGINX

I have a test NGINX server that behaves strange with certificates. I have compiled NGINX 1.9.1 and custom openssl-1.0.2a on an Ubuntu 14.04-server. $ nginx -V nginx version: nginx/1.9.1 built by gcc ...
2
votes
1answer
232 views

Exchange 2013 with two wildcard certificates for services

We've an Exchange Server with two different DNS names pointing to the same server, the internal and the external name. Something like this: exchange.domain.com [External Domain] ...
0
votes
1answer
35 views

SSL Certificate Install in IIS7 from PFX issue

I was following along this list for installing an SSL certificate and got stuck on step 12/13. Apparently there is no 'director security tab' in IIS 7.x so I'm not sure how to proceed. In my IIS ...
-1
votes
1answer
44 views

Do I need a new certificate?

We currently are running our server in a Windows 2008 R2 environment (IIS7) on the company intranet. We are moving to a hosted server running W2012 on XAMP (apache/tomcat) stack. Do I need to ...