SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms

1
vote
0answers
162 views

Can't make Koji Work on A Centos6 server

I setup the koji build environment in a Centos6 Machine server as suggested by the documentation (http://fedoraproject.org/wiki/Koji/ServerHowTo). I could properly access the Koji Web using http. Yet ...
0
votes
1answer
111 views

Cheapest SSL by GoDaddy that is good enough for Facebook Tab?

GoDaddy is way too confusing . Period. One of my clients has specifically asked us to buy SSL from godaddy as both domain and server (shared hosting) have been bought on GoDaddy. So here is my ...
2
votes
1answer
335 views

SSL/TLS cert: Get alternative name to work with LAN IP

I have created my own CA and imported its root certificate on my devices. I use a signed SSL certificate to provide myself with remote access to my NAS. When I access my NAS over the proper URL (e.g. ...
0
votes
1answer
344 views

CACert.org certificate giving sec_error_unknown_issuer

I have used cacert.org to issue class 1 certificates for my website. I made sure that the subdomain name is correct and that the e-mail address is there, but yet I keep getting the certificate problem ...
-1
votes
1answer
152 views

Windows azure vm refusing connection port 443

I am deploying my sailsjs app using forever in windows azure. And it is taking forever to get my server up and running. Initally it was working fine when it was http but I changed to SSL with self ...
0
votes
0answers
100 views

Two Way SSL authentication - Generating a certificate request for a web service client

I am in the process of developing a client for a web service that requires Two Way SSL Authentication. My client will be a Windows Service that calls a remote webservice belonging to an external ...
0
votes
0answers
76 views

SSL error - certificate not identifying correct server

SO I have set up my SSL certificate on my ubuntu/nginx server. When I created the certificate the wizard on Gandi (the CA for the certificate) asked me to identify a subdomain for the certificate. I ...
1
vote
1answer
52 views

Certificate issues at OpenVZ Ubuntu containers

today I came up with the problem that certificates cannot be verified on my openvz ubuntu containers. I checked the /etc/ssl/certs folder which is readable and seems to be ok. However, when I try to ...
2
votes
1answer
1k views

Pros / cons of using password-less OpenVPN client keys

I'm setting up an OpenVPN server for my organization, and I'm reading up on the different ways that the client side keys work. I'm still a little unfamiliar with all of the concepts behind these ...
0
votes
3answers
79 views

Detect unencrypted SSL keys

I have an OpenVPN server installed on a Debian machine. Is there a way to find which of the keys have been created without being encrypted with a password, so as to replace them?
0
votes
0answers
96 views

ssl_error_rx_record_too_long and basic Authentication

I have webspace, hosted at a german provider (its name could be understood as »2«) and added an SSL-Certificate to the domain. The domain points to a subdirectory in webspace. The subdirectory is ...
0
votes
2answers
493 views

How to disable HTTPS on IIS 7.5

I have a IIS 7.5 on Windows2008, hosting a couple of dozen of sites. Two sites use HTTPS, we call them www.site1.com and www.site2.com Now the problem is that if I (for any reason) browse to ...
0
votes
1answer
56 views

OpenSSL, PostiveSSL Root Authority

I seem to have a problem with my SSL Configuration and was wondering if anyone could help me. I've set everything up correctly (as far as I'm aware) But for some reason when I hit ...
-2
votes
1answer
43 views

Multiple domain SSL certificate: do I need to hold the property of all domains? [closed]

I just bought a multiple domains SSL certificate from godaddy.com for (an example): site1.my-company.com and site2.your-company.com both domains point to the same IP address. I hold the property ...
1
vote
1answer
93 views

Configuration of root ssl certificates

I wanted to install an SSL certificate for a domain. So I googled up and did some R&D and found this link https://www.symantec.com/page.jsp?id=roots. It says we can download and use without any ...
1
vote
1answer
36 views

Is it less secure to use a passphrase-removed key with apache?

I have a simple website with an ssl certificate and I noticed that when I would reboot apache was asking for the passphrase (causing the server to halt essentially). I did the following to remove it ...
3
votes
1answer
213 views

RDP Certificate subject name though a gateway

I have Server 2012 R2 setup with the Hyper-V and Server Essentials role enabled. I am running multiple machines that I would like to RDP to through a RDP Gateway. The gateway is correctly configured ...
0
votes
1answer
23 views

How can I get HTTPS working with this particular site?

I am trying to make an SSL wrapper to a website (and eventually redirect all HTTP requests to the HTTPS domain), on a Saucy EC2 instance. Right now Apache restarts without reported error, and it ...
1
vote
2answers
1k views

Installing intermediate certificates in ELB

I had a certificate expire today and needed to get one reissued from GoDaddy. In the past, I've had no trouble using the pem encodings they generate with the ELB SSL interface. However, when I try ...
2
votes
1answer
2k views

Nginx “ssl_stapling” ignored, no OCSP responder URL in the certificate

I'm trying to setup OCSP stapling on Nginx because I ran a test and it suggested the idea and well, you know. https://sslcheck.globalsign.com/en_GB/sslcheck?host=aj2jewellers.co.uk#176.58.103.165 ...
0
votes
2answers
1k views

SSL warning page includes other resources which are not secure

I have two web pages that sits on identical servers https://cupstelaviv.com/index.html https://app.cupsapp.com/index.html They both sit on identical servers (different SSL certificate) The second ...
2
votes
1answer
75 views

What organizational method or system do you use to manage SSL certificates? [closed]

One of the duties I've been recently assigned is to keep track of the SSL certificates used by the application servers I support. These are managed by external group mainly but internal to our ...
2
votes
2answers
697 views

Two Secure Sub Domains - Two SSL Certs - One IIS server - Do I need new internal or external IP address

I am trying to figure out whether I need a new internal IP, external IP or both to configure an IIS 7.5 server to run with two secure sub domains each using a different SSL cert, with both domains ...
4
votes
2answers
7k views

Using CA certificate for Remote Desktop Connection

I’m connecting over the web to a remote Windows Server 2012 R2 via Remote Desktop Connection for administration needs. It is a single web and database server without an AD etc. I’m not talking ...
1
vote
3answers
388 views

Does each subdomain need it's own SSL certificate?

I am creating a websocket server which will live on ws.mysite.com. I want the web socket server to be SSL encrypted as well as domain.com to be SSL encrypted. Do I need to purchase a new certificate ...
2
votes
1answer
35 views

Certificate generation : root ca needed each time?

I want to create a different (unique), self signed, certificate to distribute to some clients. That way I think that if one is doomed, I just have to delete his certificate without bothering the ...
0
votes
1answer
263 views

Prompted for client certificate on each request from IIS 7.5

Our production web application is running on iis 6 and has require ssl enabled and client certificates are required. I have a development version of the site on my computer running iis 7.5 which also ...
-1
votes
2answers
74 views

Can an SSL cert (not self-signed) be used to create another SSL cert for another host in the same domain?

I have a regular SSL certificate issued by Network Solutions for a given host, say "host A". Can I create another SSL cert for the wiki host that has the host A cert in its trust path and therefore ...
5
votes
1answer
492 views

How to add custom OID for subject field on certificates issued by Windows Server 2008 R2 CA?

I'm using a Windows Server 2008 R2 domain controller with Active Directory Certificate Services installed. It's configured as an Enterprise Root CA. I have configured a custom certificate template so ...
1
vote
1answer
39 views

How does the “Certificate Approver Email” fit on the ssl-certificate workflow?

How does the "Certificate Approver Email", required upon certificate generation, fit in the certification process as a whole ? More specifically: Is it important only for certificate generation ? ...
0
votes
1answer
99 views

How to provide a “Certificate Approver Email”, for a domain not supposed to process incoming emails?

I am in the process of requiring the generation of a certificate on RapidSSL, for the domain foobar.com which hosts my web application. I've been requested to provide a "Certificate Approver Email" ...
0
votes
0answers
85 views

Generating an own CA for internal use

I want to create a CA for internal use in our office. I created the CA like the following: openssl genrsa -out rootCA.key 2048 openssl genrsa -out rootCA.key 2048 -des3 openssl req -x509 -new -nodes ...
2
votes
1answer
170 views

How to issue a cert for web hosting using ad cert authority

I need to issue a certificate for SSL binding in IIS using Active Directory Certificate Authority. As far as I understand it should have Purpose=Auth Server and contain private key/be exportable. ...
1
vote
0answers
118 views

Unable to generate a Bundle of CA Root Certificates (failed to create symbolic link)

I am trying to generate a Bundle of CA Root Certificates. Similar to what Facebook has done for its PHP SDK (https://github.com/facebook/facebook-php-sdk/blob/master/src/fb_ca_chain_bundle.crt). I ...
0
votes
1answer
72 views

Enable SSL on domain

I want to enable SSL on a certain domain, but I can't see anything on it. The domain is api.conoform.com. ` # Fix MIME types AddType text/css .css AddType text/html .php AddType ...
4
votes
1answer
2k views

How to install multiple Intermediate CA Certificate files on Apache?

I just bought a SSL certificate, and here are all the certificate files i got: Root CA Certificate - xxCARoot.crt Intermediate CA Certificate - x1.crt Intermediate CA Certificate - x2.crt ...
2
votes
1answer
235 views

What is the location of the SQL Server Fallback Certificate?

We are required to use encryption with SQL Server, so we have enabled ForceEncryption. According to the documentation, if a certificate is not provided, SQL Server will generate its own internal ...
0
votes
0answers
646 views

SSL Client Certificate works in Google Chrome, but doesn't work in Internet Explorer

Here's the setup: we've got a Production and a Test server, both Win2008R2 / IE9 and mostly similar in hardware/software/updates. We also have a client certificate (self-signed, private key included) ...
2
votes
0answers
89 views

Suggestions on how to capture network connections/traffic for determining browser/SSL versions?

Note that I posted this Q to the StackExchange InfoSec site, but its not as populated as ServerFault and this is more on the technical side of network collection for web services. I've started ...
0
votes
0answers
53 views

What is causing HTTPS handshake not to occur?

I have two systems, running an application that does web service calls over HTTPS. I run a test by trying to log in to the HTTPS over webservice and one system works with HTTPS but the other does not. ...
0
votes
2answers
665 views

Why isn't tomcat serving the correct SSL certificate

I configured tomcat with SSL successfully and was using a self-signed certificate. Recently an issue arose where just having the client "Accept/trust" our certificate wasn't easy. We ended up ...
4
votes
1answer
5k views

Install a root certificate in CentOS 6

I know it has been already asked, but despite many hours of research I couldn't find a working solution. I am trying to install my root certificate in my server, so internal service can bind to each ...
2
votes
1answer
967 views

Wildcard certificate causes warning on Google Chrome only

I have a company.sv domain and recently purchased a RapidSSL wildcard certificate, I installed it and tested it with many browsers(Firefox, Chromium, Chrome, IE) and SSL checking tools, it worked fine ...
0
votes
1answer
289 views

Certificate errors on Exchange 2010 NLB CAS array server

On my Exchange server, I have two CAS servers in a CAS NLB array. I need to install a 3rd party SAN/UCC certificate on both of these servers for OWA. I generated the request on CAS1, submitted to a ...
0
votes
1answer
55 views

Configure SSL for FTP

We are in the process of making our site PCI compliant. One of the vulnerabilities we are facing is as below. Description: SSL Version 2 (v2) Protocol Detection (for ftp) Synopsis: The remote service ...
-1
votes
1answer
207 views

Https not working JBoss AS 7.0.2

I am trying to load SSL certificate to one of our site. We are using JBoss AS 7.0.2 for our application on Ubuntu Server 12.04, it's running successfully on http while on https it's not responding. ...
1
vote
2answers
1k views

The SSL Certificate we found on this site is not meant for [your_domain_name], probably this is another site on the same server

Note: in this post, I changed my actual domain name to [your_domain_name] to make it more generic. I installed an SSL certificate for apache2 on my linux server. The certificate's type is ...
0
votes
1answer
582 views

SSL Certificate error in IE8 (It's OK in IE10, Chrome and Firefox)

We have a SSL offloader (nginx) with different certificates for different machines and subdomains. It encrypts and redirects all the traffic to the corresponding machines. It works OK with all ...
1
vote
2answers
332 views

openldap cacerts directory symbolic link to /etc/pki/tls/certs - Yes/No? Why?

Every single article/how-to/blog on openldap talks about putting the ldap cert for ldaps in the /etc/openldap/cacerts directory. I am wondering why not just put the cert(s) in /etc/pki/tls/certs and ...
0
votes
1answer
71 views

openssl generate .key from CSR

A customer sent me a CSR and the .CER of a certificate for a linux server that I host. The customer does not have access to this machine. Is this enough data to generate a valid certificate? Is it ...