SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms

-1
votes
2answers
73 views

Can an SSL cert (not self-signed) be used to create another SSL cert for another host in the same domain?

I have a regular SSL certificate issued by Network Solutions for a given host, say "host A". Can I create another SSL cert for the wiki host that has the host A cert in its trust path and therefore ...
5
votes
1answer
448 views

How to add custom OID for subject field on certificates issued by Windows Server 2008 R2 CA?

I'm using a Windows Server 2008 R2 domain controller with Active Directory Certificate Services installed. It's configured as an Enterprise Root CA. I have configured a custom certificate template so ...
1
vote
1answer
36 views

How does the “Certificate Approver Email” fit on the ssl-certificate workflow?

How does the "Certificate Approver Email", required upon certificate generation, fit in the certification process as a whole ? More specifically: Is it important only for certificate generation ? ...
0
votes
1answer
93 views

How to provide a “Certificate Approver Email”, for a domain not supposed to process incoming emails?

I am in the process of requiring the generation of a certificate on RapidSSL, for the domain foobar.com which hosts my web application. I've been requested to provide a "Certificate Approver Email" ...
0
votes
0answers
82 views

Generating an own CA for internal use

I want to create a CA for internal use in our office. I created the CA like the following: openssl genrsa -out rootCA.key 2048 openssl genrsa -out rootCA.key 2048 -des3 openssl req -x509 -new -nodes ...
2
votes
1answer
156 views

How to issue a cert for web hosting using ad cert authority

I need to issue a certificate for SSL binding in IIS using Active Directory Certificate Authority. As far as I understand it should have Purpose=Auth Server and contain private key/be exportable. ...
1
vote
0answers
116 views

Unable to generate a Bundle of CA Root Certificates (failed to create symbolic link)

I am trying to generate a Bundle of CA Root Certificates. Similar to what Facebook has done for its PHP SDK (https://github.com/facebook/facebook-php-sdk/blob/master/src/fb_ca_chain_bundle.crt). I ...
0
votes
1answer
72 views

Enable SSL on domain

I want to enable SSL on a certain domain, but I can't see anything on it. The domain is api.conoform.com. ` # Fix MIME types AddType text/css .css AddType text/html .php AddType ...
4
votes
1answer
2k views

How to install multiple Intermediate CA Certificate files on Apache?

I just bought a SSL certificate, and here are all the certificate files i got: Root CA Certificate - xxCARoot.crt Intermediate CA Certificate - x1.crt Intermediate CA Certificate - x2.crt ...
2
votes
1answer
214 views

What is the location of the SQL Server Fallback Certificate?

We are required to use encryption with SQL Server, so we have enabled ForceEncryption. According to the documentation, if a certificate is not provided, SQL Server will generate its own internal ...
0
votes
0answers
595 views

SSL Client Certificate works in Google Chrome, but doesn't work in Internet Explorer

Here's the setup: we've got a Production and a Test server, both Win2008R2 / IE9 and mostly similar in hardware/software/updates. We also have a client certificate (self-signed, private key included) ...
2
votes
0answers
82 views

Suggestions on how to capture network connections/traffic for determining browser/SSL versions?

Note that I posted this Q to the StackExchange InfoSec site, but its not as populated as ServerFault and this is more on the technical side of network collection for web services. I've started ...
0
votes
0answers
53 views

What is causing HTTPS handshake not to occur?

I have two systems, running an application that does web service calls over HTTPS. I run a test by trying to log in to the HTTPS over webservice and one system works with HTTPS but the other does not. ...
0
votes
2answers
594 views

Why isn't tomcat serving the correct SSL certificate

I configured tomcat with SSL successfully and was using a self-signed certificate. Recently an issue arose where just having the client "Accept/trust" our certificate wasn't easy. We ended up ...
4
votes
1answer
5k views

Install a root certificate in CentOS 6

I know it has been already asked, but despite many hours of research I couldn't find a working solution. I am trying to install my root certificate in my server, so internal service can bind to each ...
2
votes
1answer
884 views

Wildcard certificate causes warning on Google Chrome only

I have a company.sv domain and recently purchased a RapidSSL wildcard certificate, I installed it and tested it with many browsers(Firefox, Chromium, Chrome, IE) and SSL checking tools, it worked fine ...
0
votes
1answer
254 views

Certificate errors on Exchange 2010 NLB CAS array server

On my Exchange server, I have two CAS servers in a CAS NLB array. I need to install a 3rd party SAN/UCC certificate on both of these servers for OWA. I generated the request on CAS1, submitted to a ...
0
votes
1answer
54 views

Configure SSL for FTP

We are in the process of making our site PCI compliant. One of the vulnerabilities we are facing is as below. Description: SSL Version 2 (v2) Protocol Detection (for ftp) Synopsis: The remote service ...
-1
votes
1answer
195 views

Https not working JBoss AS 7.0.2

I am trying to load SSL certificate to one of our site. We are using JBoss AS 7.0.2 for our application on Ubuntu Server 12.04, it's running successfully on http while on https it's not responding. ...
0
votes
2answers
993 views

The SSL Certificate we found on this site is not meant for [your_domain_name], probably this is another site on the same server

Note: in this post, I changed my actual domain name to [your_domain_name] to make it more generic. I installed an SSL certificate for apache2 on my linux server. The certificate's type is ...
0
votes
1answer
538 views

SSL Certificate error in IE8 (It's OK in IE10, Chrome and Firefox)

We have a SSL offloader (nginx) with different certificates for different machines and subdomains. It encrypts and redirects all the traffic to the corresponding machines. It works OK with all ...
1
vote
2answers
307 views

openldap cacerts directory symbolic link to /etc/pki/tls/certs - Yes/No? Why?

Every single article/how-to/blog on openldap talks about putting the ldap cert for ldaps in the /etc/openldap/cacerts directory. I am wondering why not just put the cert(s) in /etc/pki/tls/certs and ...
0
votes
1answer
70 views

openssl generate .key from CSR

A customer sent me a CSR and the .CER of a certificate for a linux server that I host. The customer does not have access to this machine. Is this enough data to generate a valid certificate? Is it ...
3
votes
1answer
899 views

RDS 2012 Certificates - Subject Names do not match

I'm evaluating RDS on 2012, I want to use Remote App to allow home workers to access one application This is a single server setup at the moment Server Name acmeVDI.acme.co.uk - This has RD Web ...
0
votes
1answer
153 views

RD Session Host Configuration doesn't list my SSL certificate

I'm trying to change SSL certificate from auto-generated to another one, e.g. custom self-signed made by makecert. But RD Session Host Configuration snap-in -> Connections -> RDP-Tcp -> ...
1
vote
2answers
3k views

Server address requested and the certificate subject do no match

I'm trying to setup Remote Desktop Gateway (Terminal Service Gateway) on virtual Windows Server 2012 R2. But when connect over internet (from Win7 RDP client) getting an error: Your computer can't ...
0
votes
1answer
359 views

How to convert a SSL certificate and private key to a PFX for import in IIS?

Certificate name is: mycert.crt My CSR converted to PEM (RsA) Private key is: private.key I want to create mycert.pfx so I can use it in IIS. When I run this command: openssl pkcs12 -export -out ...
0
votes
1answer
631 views

How to have puppet master on hostname without modifying /etc/hosts on client?

I created an A record for my puppetmaster. In case the puppetmaster on this ip address goes down and I have to spawn a new one from a new ip address, I can just change the ip address associated with ...
2
votes
0answers
215 views

Installing RD Gateway on a server with another site already in Default Web Site and listening on port 443?

I have a server running Windows Server 2008 R2, web facing with one website already installed. I would like to also add the RD Gateway services to this machine since it is already accessible form the ...
0
votes
1answer
152 views

Importing SSL from Godaddy using Tomcat (SYSAID)

I've purchased an SSL cert from Godaddy and received the 3 following files: 4379ygfhd9745gh.crt gd_bundle.crt gd_intermediate.crt ...
0
votes
1answer
317 views

Generate SSL certificate using Keytool

I have a question about SSL certificates. I use Openssl to generate the certificate: I followed this tutorial. My goal is to generate: .crt .key .pem Is possible to obtain the same files using ...
0
votes
0answers
164 views

How Do I Enable My Ubuntu Server To Host Various SSL-Enabled Websites?

Actually, I Have looked around for a few hours now, but I can't get this to work. The main problem I'm having is that only one out of two sites works. I have my website which will mostly be used for ...
0
votes
2answers
473 views

SSL problems on Android (Intermediate Certificate)

My site works well on every browser and device, except on Android, where it throws a security exception. I already installed my SSL certificate on my Amazon Elastic Beanstalk instance (by installing ...
1
vote
1answer
201 views

Safari 7 SSL error if using IP-adress [closed]

I have created my own CA for internal usage and set the root certificate to trustworthy on my machines. With this CA I signed the SSL-certificates for my internal servers. I only address them with ...
0
votes
2answers
414 views

“Issued certificate not yet valid.” with wget?

I am getting the following error when using wget to fetch a file: Issued certificate not yet valid. To connect to www.atlassian.com insecurely, use ‘--no-check-certificate’. Testing with openssl ...
0
votes
1answer
926 views

Apache cannot read certificate file

I use self-signed certificates with no issue but today I have tried to create a SSL certificate for commercial use. But apache doesn't start and gives the following error: Notice: I have confirmed ...
6
votes
3answers
3k views

Multiple SSL vhosts using wildcard certificate in nginx

I have two hostnames sharing the same domain name which I want to serve over HTTPs. I've got a wildcard-SSL certificate and created two vhost configs: Host A listen 127.0.0.1:443 ssl; ...
0
votes
3answers
89 views

HTTPS and HTTP issue on server with SSL

I have a site www.example.com for which i purchased SSL cert and installed. And it was working fine, I also have a subdomain with app.example.com which was not on SSL. Both www.example.com and ...
1
vote
1answer
94 views

How can I configure apache2 to use a non - exportable ssl certificate managed by windows?

On Windows Server 2008 R2, my IT administrator has installed a certificate using the windows certificate management tool. The certificate is for *.thedomain.com. He set it up as not exportable for ...
0
votes
1answer
108 views

Single Shared Host, Single IP, Multiple Domains, Multiple Websites… (with and without SSL)

While my post may look similar to others, it concerns shared accounts at a web hosting provider all utilizing the same IP address (rather than different IP addresses). Here comes what I would like to ...
0
votes
1answer
62 views

OpenSSL not using CA directory

OpenSSL will not verify a cert $openssl s_client -connect <host>:443 ... Verify return code: 21 (unable to verify the first certificate) However, if we figure out the location of the store $ ...
0
votes
1answer
119 views

RapidSSL nginx Certificate issuer is me

I have baught the SSL certificate from RapidSSL. I have concatenated the chain files of RapidSSL CA and GeoTrust Global CA But when I check it on http://www.sslshopper.com/ I have this : The ...
0
votes
1answer
290 views

windows 2008 r2 import .cer file type not recognizable

I would like to import .cer on Windows Server 2008 R2 using mmc certificate import wizard, however it gives error: "The file type is not recognizable. Select another file." May I know how to import ...
1
vote
1answer
207 views

How do I redirect users from https://www.domain.com to https://domain.com?

Hi serverfault community! I did not purchase a wildcard certificate, but I see a big problem with my setup. When I navigate to https://www.redmeetsblue.org I do not have a certificate, like the one I ...
0
votes
2answers
128 views

HTTPS returns 404

Have setup SSL on Apache The certificate is self-signed and generated with openssl req -x509 -nodes -days 9999 -newkey rsa:2048 -keyout private.key -out public.crt requests http://domain.com - ...
-1
votes
2answers
47 views

SSL for server aliases

I have a website and multiple domains are pointed to it. For example: sub.abc.com, sub.bcd.com, etc. The site is hosted on a single IP on a dedicated server. I'm using ServerAlias for pointing ...
1
vote
1answer
102 views

What are the effects of having the TLS certificate and private key in same file?

I have noticed that a number of different web and mail server software allow or require you to provide the TLS certificate (including server certificate, CA intermediate certificate, and CA root ...
3
votes
1answer
2k views

Restarting nginx keeps asking PEM pass phrase

I'm trying to reload nginx, I have a wildcard certificate for one domain which I got from namecheap, now I have moved it to my server, and assigned a nginx configuration rule with this: ...
0
votes
1answer
33 views

Determining if an IA (Intermediate Authority) SSL certificate has been deployed

I've recently redeployed an IA and normal certificate. Is there a way to check a live domain for whether or not the IA certificate is available?
0
votes
2answers
37 views

SSL certificates present for some clients and missing for others

I just changed the SSL certificates for one particular domain on AppEngine. While I expect that there might be a propagation delay with Google's systems before the new certs (CRT, IA) can take effect, ...