SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

learn more… | top users | synonyms (1)

0
votes
1answer
14 views

SSL test fails with a domain pointing at external server [closed]

Mmmmm.... I'm not really familiar with all this SSL stuff and struggling with this weird SSL issue now. Well, there is an godaddy account that has three domain in use. 1.jeounggi.com 2....
-3
votes
1answer
43 views

How can I configure multi domain IMAPS POPS and SMTPs with single SSL Certificate

If I have 3 domains hosted on single linux based mail server that are domain1.com, domain2.com and domain3.com.and I have *.domain1.com signed ssl certificate. Is there way I can use the same single ...
2
votes
1answer
102 views

Custom SSL doesn't show when using CloudFlare

I have an EV certificate from godaddy. It works fine and the green address bar with the name of my company shows up when I use it without cloudflare. However when I change my DNS to cloudflare and ...
1
vote
0answers
437 views

Windows Server 2012R2 RADIUS (wifi) clients won't accept bought wildcard certificate

I've been managing the NPS Server for a while and thought it was time to treat it a valid SSL certificate. The setup I bought a wildcard SSL certificate from comodo, compiled it to an .pfx ...
0
votes
1answer
212 views

GoDaddy Intermediate certificate for Apache 2.2.31 / Amazon Linux

I bought an SSL certificate for my domain from GoDaddy. The following are the contents: The certificate file gd_bundle-g2-g1.crt I have vhost on my Apache 2.2.31 web server. The following is the ...
5
votes
2answers
3k views

How to configure HAProxy for multiple SSL-Certificates

I need to configure HAProxy with two different SSL-Certificates www.example.com api.example.com Now I learned from a post on serverfault ( Configure multiple SSL certificates in Haproxy ) how to ...
1
vote
1answer
346 views

Nginx verifying client certs only on a particular location

We use Nginx as a reverse proxy to our web application server. Nginx handles our SSL and such but otherwise just acts as a reverse proxy. We want to require a valid client cert for requests to /...
0
votes
1answer
629 views

How to make Apache trust a client certificate using an unknown CA, without validating the CA

I am in the following situation. I need to set up a 2-way integration with an external system. The admin of the external system required me to send two CSRs, one to be used to generate a client ...
0
votes
0answers
6 views

Wildcard certificate and CSR for each subdomain [duplicate]

I am going to buy a wildcard certificate. I have a bunch of subdomains I want to protect on different servers. Can I make multiple CSR one for each subdomain on my wildcard certificate ? Or I am ...
0
votes
1answer
925 views

SSL handshake failed with nginx

I have a web server behind nginx and everything works well except for one thing. I'm trying to confirm an amazon SNS Subscription which needs to post some parameters (with a confirmation url) to my ...
2
votes
4answers
154 views

my ssl certificate only work with 'www.example.com' and not with 'example.com'

I purchased a certificate that is valid for both www.example.com and example.com. My server is working only with "www.example.com" (ssl is working fine) but it is not showing anything at all when I ...
0
votes
0answers
47 views

Disable trusted root cert on Windows without reboot

First a bit of background, in case I'm trying to solve the root problem in the wrong way: I have an SSL cert from WoSign, and https://www.sslshopper.com/ssl-checker.html shows that the full chain is ...
3
votes
1answer
450 views

Postfix (Ubuntu 14.04) SSL Certificates Differ - Anything to really worry about?

I've got an Ubuntu 14.04 server running Postfix - which is sending mail via an external host (Mandrill). I've got no issues sending email - but (prior to disabling TLS - which seems to have caused no ...
-1
votes
1answer
14 views

-nodes function during CSR creation with OpenSSL

This is a typical command to create CSR and private key with OpenSSL. openssl req -nodes -newkey rsa:4096 -keyout myserver.key -out server.csr What is the function of -nodes in the command line? I ...
2
votes
0answers
44 views

Losing server that generated CSR (Certificate Signing Request)

I have created a CSR file on a Windows server about 3 months earlier and used this CSR file to buy a wildcard SSL Certificate. The SSL company (opentrust) then gave me 3 files, the root CA file, the ...
0
votes
2answers
10k views

'openssl verify' outputs 'unable to get local issuer certificate'

In /etc/ssl, when I do sudo openssl verify mywebsite.pem I get a message stating mywebsite.pem: OU = GT46830179, OU = See www.rapidssl.com/resources/cps (c)15, OU = Domain Control Validated - ...
-1
votes
1answer
29 views

Windows certificate export vs Cert download in browser

We have a https ssl cert on our IIS server. Is there any difference between certificates that one exports (without private key) from certmgr vs the cert that one sees in the browser address bar? I ...
3
votes
1answer
132 views

Cannot renew Public IP address SSL certificate. Any alternatives?

From what I've read and researched (here, other places) I'm almost certain what I'm asking will not be possible but any alternative suggestions are welcome. I have a server with a Public IP address ...
2
votes
2answers
299 views

RapidSSL certification - can't get it working for nginx

We have purchased a SHA-2 certificate from RapidSSL, but I can't for the life of me get it working! We first created out .key and .crt files on the destination server, using (obviously blanked out the ...
0
votes
1answer
26 views

Can a wildcard ssl certificate be used on a desktop development machine with a self-reported domain name? [closed]

We have a wildcard certificate for *.mycompany.com for our server cluster. I'd like to set up a development environment on my desktop that replicates our server, https and all so I can test some APIs....
0
votes
1answer
136 views

Apache2 crash after SSL install

I'm trying to install ssl on my apache2 ubuntu 14.04. After I install all my credentials and restart my apache I get caught SIGTERM shutdown There is no more error or explanation. I created a ...
0
votes
1answer
276 views

NGINX + SSL certificate securing the connection in some browsers only

I've been strugling with this issue and I seem to be running into a dead end here without knowing what to do next... I've taken a task left by another worker who left on vacation. He was trying to ...
0
votes
2answers
112 views

How to redirect one domain to the other with SSL?

I have two domains (example.com and example.co.uk). The .com one is the "head" and has servers behind him. What I want to do is redirect all traffic from the .co.uk to the .com domain. I looked at ...
0
votes
0answers
116 views

Purchasing a certificate for Freeradius / WPA-Enterprise

I'm moving my WiFi to WPA-Enterprise, using a Freeradius server that authenticates with our Samba 4 directory. I'm currently using a self-signed certificate, but want to move to a purchased ...
0
votes
0answers
191 views

How to disable OCSP for a headless firefox browser (xvfb)?

I have a headless firefox browser (XVFB) on a linux server. I use it to run selenium tests as part of CI (Its a Jenkins box and the tests run for every build). However, the tests suddenly started ...
-1
votes
3answers
352 views

Chrome on Android random red HTTPS

When I'm using Chrome on my desktop, the address bar is always green. However, on my Android phone the address bar is usually green, but sometimes red. It says that I'm using a certificate signed ...
0
votes
2answers
4k views

How to generate .key and .crt file from JKS file for httpd apache server

I have the mycert.jks file only. Now i need to extract and generate .key and .crt file and use it in apache httpd server. SSLCertificateFile /usr/local/apache2/conf/ssl.crt/server.crt ...
2
votes
0answers
868 views

Import a P12 certificate into a NSS database (with an alias)

Here´s the deal... I have a personal P12 certificate generated by a certificate authority. I want to use it with CURL to access a protected URL. If CURL on CENTOS was compiled with openssl, I should ...
1
vote
1answer
25 views

Changing SSL Certificate

We are currently deploying a security solution for one of our clients and we require their SSL cert in PEM / PKCS12 format. However, they told us that they have "Lost" their CSR and wouldn't be able ...
2
votes
1answer
24 views

Apache-Served CA vs Local Root CA - Which Wins?

I currently have two Apache servers running here and here, both use SSL certs signed by StartSSL. Apache SSL configuration below: ## SSL directives SSLEngine on SSLCertificateFile "/etc/...
6
votes
3answers
2k views

Nginx client SSL authentication

I have Nginx running purely as a proxy to a various number of web servers. One of our clients has asked us to use client certificates and has provided us 3 certificates for the 3 different machines ...
3
votes
1answer
251 views

How secure is this Nginx Config? What else can I do to optimize it further? [closed]

So I recently setup a personal GitLab server and I am using the following config with full SSL. I tried my best but what else can be done to make it better? I mostly learned what I know about ...
0
votes
1answer
236 views

How to debug where an SSL connection is getting lost?

The big picture is I'm trying to setup an SSL connection for a subdomain, if I go to currently if I go to the non-secure url the website works, but if requeset https://sub.domain.com there is no ...
0
votes
3answers
140 views

automate generation of SSL certificates

How I can automate the generation of self signed certificates when I know the domain name ? This works, but it asks me on the command line prompt certain questions. How I should change it to ignore ...
0
votes
1answer
180 views

SSL: Issued SSL for www.domain.com but only works for https://domain.com

Last week about an SSL Certificate issued by RapidSSL and my hosting MediaTemple, you can see the order details at RapidSSL here: http://i.imgur.com/s5XHcPH.jpg And SSL details on my panel at ...
0
votes
1answer
104 views

SSL certificate for a pointed domain

I have a domain hosted by GoDaddy and I have just bought a vps server (without domain) and an SSL certificate (not used) from 1&1. Could I use my SSL certificate for that domain if I just point ...
0
votes
1answer
604 views

How to create a SSL certificate using SSL certificate text?

I have received a certificate from StartSSL for my domain in pure text which looks somewhat like: -----BEGIN CERTIFICATE----- [...]Many letters and digits[...] -----END CERTIFICATE----- I'm trying ...
11
votes
3answers
7k views

Chrome reports ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY connecting to local web server over HTTPS

Summary Chrome is reporting ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY when I try and connect to my local web server over HTTPS. I am almost certain this problem has to do with my recent Windows 10 ...
2
votes
2answers
564 views

Can I use wildcards with SAN self-signed certificates?

We have a dev server that is accessible through the Internet, but is IP restricted, so security here is merely a way of allowing us to reproduce the live environment as opposed to trying to be secure. ...
0
votes
1answer
53 views

Change amazon's ELB domain name to my own domain without it changing upon resolving it

I'm trying to set my own domain name as an alias for the generated DNS by Amazon's ELB. The generated DNS is not good for me, since I've purchased a certificate for my domain (www.domain.com). ...
0
votes
1answer
24 views

OpenSSL get's the server SSL key instead of the website SSL key [duplicate]

If I navigate to my site, it shows in the browser that my ssl key is correct for my site hosted at WP Engine. It is showing and validating my certificate. However, if I connect with openssl, it get's ...
1
vote
1answer
858 views

wmic: error when setting remote desktop self-signed certificate

I'm attempting to use the wmic approach of assigning a self-signed certificate for Remote Desktop use on a Windows Server 2012 VM as described here and here. The CA for the RDP certificate has been ...
0
votes
1answer
87 views

Client certificate authentication with no access to private keys

We are trying to set up client certificate authentication for VPN users on Cisco ASA. User certificate store is being used to complete the authentication. The problem we are running into is that the ...
11
votes
1answer
401 views

How can I set up Certificate Transparency if my CA doesn't support it?

I think many of you have actually heard of Google's Certificate Transparency initiative. Now the initiave involves a public log of all certificates issued by some CA. As this is some amount of work, ...
1
vote
1answer
107 views

SSL Fault, Apache won't start [closed]

After installing an SSL certificate from Comodo following these instructions, I've found that apache will no longer start. This is my config: <VirtualHost *:80> ServerName latimer.io ...
1
vote
2answers
103 views

SSL Cert for one domain and multiple IPs

I have a question about SSL certs and multiple servers. Question: I have one cert, one domain name and I have many servers that hold my website code. Example.com can point to IPs 192.168.1.1, 192....
0
votes
1answer
35 views

Signing wildcard cert for a subdomain

I want to use my issued wildcard certificate to generate an SSL cert for a subdomain E.g. *.bar.com -> foo.bar.com Reason being I want to attempt to prevent some XSS weaknesses caused by multiple ...
3
votes
0answers
227 views

Creating SSL certificate signed by a self-signed CA certificate in Jetty

I'm trying to configure a jetty-distribution-9.3.1.v20150714 backend running on Java 1.8.0_45-b14 with a certificate signed by a self-signed CA certificate, for SSL pinning. Following Apple's guide, ...
0
votes
0answers
8 views

Right way to configure startSSL Certificate [duplicate]

Hy! I try to apply a Start-SSL Certificate on my Apache 2 (Debian Wheezy). On Xampp i got it fast and it works, but on my Debian root, the certificate is confirmed by Avast (in this case) and not by ...
2
votes
1answer
254 views

How do I connect to an OpenVPN server and dump the certificate chain presented when connecting?

My first thought was to use something like openssl s_client but this only supports TCP not UDP and it seems there requires some special magic to get TLS over UDP working, how do I interface with that ...