SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

learn more… | top users | synonyms (1)

1
vote
2answers
195 views

Redirecting HTTPS naked domain to www, without a matching certificate on naked domain virtualhost

Our department's website uses the www subdomain, both internally and externally. When I joined, I noticed that a lot of users tried without the www, got an error, became confused or annoyed, until ...
0
votes
1answer
68 views

how to configure apache to redirect HTTPS to HTTP

I need to redirect HTTPS connections to HTTP site. The problem is there is a SSL certificate on the server. It has problems and we applied to get a new one. But google already indexed our site with ...
3
votes
2answers
640 views

Postfix SSL certificates with Comodo (PostivieSSL) - “Unknown Authority”

I have an issue with my mail server running a postfix/dovecot setup, essentially when I run the various security tests I get told that my certificates can't be validated, see here: https://ssl-tools....
1
vote
0answers
618 views

SSL: couldn't read X509 certificate from pem file lighttpd

I have installed ssl key in the past on my lighttpd and I've documented the steps I did to make sure that I can replicate it in the future. Well, I haven't touched the server for a while and I need ...
0
votes
1answer
88 views

How to install a default ssl cert for apache on debian

Learning linux skills...please be patient! I have found lots of tutorials on installing a cert for a single site but not a default. I have a wildcard cert for my domain. I had support install this ...
-1
votes
1answer
471 views

Unable to parse certificate. Please ensure the certificate is in PEM format [AWS Console]

I got the following error, Unable to parse certificate. Please ensure the certificate is in PEM format aws console when trying to add https listener to the aws load balancer as instructed ...
1
vote
0answers
33 views

Configure Apache to serve proper certificate chain

I am running Apache 2.2.15 on Red Hat 6.3, and I can't get certificate chains to work properly. I am using my organisations PKI for certificate signing etc, which does not publish their root ...
1
vote
1answer
3k views

Install SSL Certificate on Azure Cloud Service (VM)

I have an SSL certificate for domain example.com and I want to access my Azure Cloud Service exampleserver.cloudapp.net as https://server.example.com. I am using Virtual Machine to access this Cloud ...
0
votes
0answers
51 views

SSL certificate wrong for site when accessed externally

A client has a OWA site and the SSL certificate for it is displaying the correct date when the site is viewed internally. However externally it displays a certificate that expired a year ago. The ...
2
votes
2answers
4k views

How to make Firefox trust system CA certificates?

Our network admin recently enabled HTTPS inspection on our firewall/router. For IE users this is fine because the certs have all been distributed via Active Directory for domain-joined machines. ...
0
votes
1answer
183 views

Common websites displaying “Server's certificate is not trusted” on new Server 2012 R2 image

I've recently been tasked with migrating one of our company's web app servers from Server 2008 to Server 2012 R2. While on the new server and trying to download some apps to set it up I keep getting ...
0
votes
1answer
16 views

SSL test fails with a domain pointing at external server [closed]

Mmmmm.... I'm not really familiar with all this SSL stuff and struggling with this weird SSL issue now. Well, there is an godaddy account that has three domain in use. 1.jeounggi.com 2....
-3
votes
1answer
45 views

How can I configure multi domain IMAPS POPS and SMTPs with single SSL Certificate

If I have 3 domains hosted on single linux based mail server that are domain1.com, domain2.com and domain3.com.and I have *.domain1.com signed ssl certificate. Is there way I can use the same single ...
2
votes
1answer
107 views

Custom SSL doesn't show when using CloudFlare

I have an EV certificate from godaddy. It works fine and the green address bar with the name of my company shows up when I use it without cloudflare. However when I change my DNS to cloudflare and ...
1
vote
0answers
481 views

Windows Server 2012R2 RADIUS (wifi) clients won't accept bought wildcard certificate

I've been managing the NPS Server for a while and thought it was time to treat it a valid SSL certificate. The setup I bought a wildcard SSL certificate from comodo, compiled it to an .pfx ...
0
votes
1answer
238 views

GoDaddy Intermediate certificate for Apache 2.2.31 / Amazon Linux

I bought an SSL certificate for my domain from GoDaddy. The following are the contents: The certificate file gd_bundle-g2-g1.crt I have vhost on my Apache 2.2.31 web server. The following is the ...
5
votes
2answers
3k views

How to configure HAProxy for multiple SSL-Certificates

I need to configure HAProxy with two different SSL-Certificates www.example.com api.example.com Now I learned from a post on serverfault ( Configure multiple SSL certificates in Haproxy ) how to ...
1
vote
1answer
425 views

Nginx verifying client certs only on a particular location

We use Nginx as a reverse proxy to our web application server. Nginx handles our SSL and such but otherwise just acts as a reverse proxy. We want to require a valid client cert for requests to /...
0
votes
1answer
722 views

How to make Apache trust a client certificate using an unknown CA, without validating the CA

I am in the following situation. I need to set up a 2-way integration with an external system. The admin of the external system required me to send two CSRs, one to be used to generate a client ...
0
votes
0answers
6 views

Wildcard certificate and CSR for each subdomain [duplicate]

I am going to buy a wildcard certificate. I have a bunch of subdomains I want to protect on different servers. Can I make multiple CSR one for each subdomain on my wildcard certificate ? Or I am ...
0
votes
1answer
1k views

SSL handshake failed with nginx

I have a web server behind nginx and everything works well except for one thing. I'm trying to confirm an amazon SNS Subscription which needs to post some parameters (with a confirmation url) to my ...
2
votes
4answers
167 views

my ssl certificate only work with 'www.example.com' and not with 'example.com'

I purchased a certificate that is valid for both www.example.com and example.com. My server is working only with "www.example.com" (ssl is working fine) but it is not showing anything at all when I ...
0
votes
0answers
51 views

Disable trusted root cert on Windows without reboot

First a bit of background, in case I'm trying to solve the root problem in the wrong way: I have an SSL cert from WoSign, and https://www.sslshopper.com/ssl-checker.html shows that the full chain is ...
3
votes
1answer
480 views

Postfix (Ubuntu 14.04) SSL Certificates Differ - Anything to really worry about?

I've got an Ubuntu 14.04 server running Postfix - which is sending mail via an external host (Mandrill). I've got no issues sending email - but (prior to disabling TLS - which seems to have caused no ...
-1
votes
1answer
14 views

-nodes function during CSR creation with OpenSSL

This is a typical command to create CSR and private key with OpenSSL. openssl req -nodes -newkey rsa:4096 -keyout myserver.key -out server.csr What is the function of -nodes in the command line? I ...
2
votes
0answers
45 views

Losing server that generated CSR (Certificate Signing Request)

I have created a CSR file on a Windows server about 3 months earlier and used this CSR file to buy a wildcard SSL Certificate. The SSL company (opentrust) then gave me 3 files, the root CA file, the ...
0
votes
2answers
11k views

'openssl verify' outputs 'unable to get local issuer certificate'

In /etc/ssl, when I do sudo openssl verify mywebsite.pem I get a message stating mywebsite.pem: OU = GT46830179, OU = See www.rapidssl.com/resources/cps (c)15, OU = Domain Control Validated - ...
-1
votes
1answer
29 views

Windows certificate export vs Cert download in browser

We have a https ssl cert on our IIS server. Is there any difference between certificates that one exports (without private key) from certmgr vs the cert that one sees in the browser address bar? I ...
3
votes
1answer
136 views

Cannot renew Public IP address SSL certificate. Any alternatives?

From what I've read and researched (here, other places) I'm almost certain what I'm asking will not be possible but any alternative suggestions are welcome. I have a server with a Public IP address ...
2
votes
2answers
319 views

RapidSSL certification - can't get it working for nginx

We have purchased a SHA-2 certificate from RapidSSL, but I can't for the life of me get it working! We first created out .key and .crt files on the destination server, using (obviously blanked out the ...
0
votes
1answer
26 views

Can a wildcard ssl certificate be used on a desktop development machine with a self-reported domain name? [closed]

We have a wildcard certificate for *.mycompany.com for our server cluster. I'd like to set up a development environment on my desktop that replicates our server, https and all so I can test some APIs....
0
votes
1answer
142 views

Apache2 crash after SSL install

I'm trying to install ssl on my apache2 ubuntu 14.04. After I install all my credentials and restart my apache I get caught SIGTERM shutdown There is no more error or explanation. I created a ...
0
votes
1answer
302 views

NGINX + SSL certificate securing the connection in some browsers only

I've been strugling with this issue and I seem to be running into a dead end here without knowing what to do next... I've taken a task left by another worker who left on vacation. He was trying to ...
0
votes
2answers
113 views

How to redirect one domain to the other with SSL?

I have two domains (example.com and example.co.uk). The .com one is the "head" and has servers behind him. What I want to do is redirect all traffic from the .co.uk to the .com domain. I looked at ...
0
votes
0answers
125 views

Purchasing a certificate for Freeradius / WPA-Enterprise

I'm moving my WiFi to WPA-Enterprise, using a Freeradius server that authenticates with our Samba 4 directory. I'm currently using a self-signed certificate, but want to move to a purchased ...
0
votes
0answers
205 views

How to disable OCSP for a headless firefox browser (xvfb)?

I have a headless firefox browser (XVFB) on a linux server. I use it to run selenium tests as part of CI (Its a Jenkins box and the tests run for every build). However, the tests suddenly started ...
-1
votes
3answers
371 views

Chrome on Android random red HTTPS

When I'm using Chrome on my desktop, the address bar is always green. However, on my Android phone the address bar is usually green, but sometimes red. It says that I'm using a certificate signed ...
0
votes
2answers
5k views

How to generate .key and .crt file from JKS file for httpd apache server

I have the mycert.jks file only. Now i need to extract and generate .key and .crt file and use it in apache httpd server. SSLCertificateFile /usr/local/apache2/conf/ssl.crt/server.crt ...
2
votes
0answers
913 views

Import a P12 certificate into a NSS database (with an alias)

Here´s the deal... I have a personal P12 certificate generated by a certificate authority. I want to use it with CURL to access a protected URL. If CURL on CENTOS was compiled with openssl, I should ...
1
vote
1answer
25 views

Changing SSL Certificate

We are currently deploying a security solution for one of our clients and we require their SSL cert in PEM / PKCS12 format. However, they told us that they have "Lost" their CSR and wouldn't be able ...
2
votes
1answer
26 views

Apache-Served CA vs Local Root CA - Which Wins?

I currently have two Apache servers running here and here, both use SSL certs signed by StartSSL. Apache SSL configuration below: ## SSL directives SSLEngine on SSLCertificateFile "/etc/...
6
votes
3answers
2k views

Nginx client SSL authentication

I have Nginx running purely as a proxy to a various number of web servers. One of our clients has asked us to use client certificates and has provided us 3 certificates for the 3 different machines ...
3
votes
1answer
299 views

How secure is this Nginx Config? What else can I do to optimize it further? [closed]

So I recently setup a personal GitLab server and I am using the following config with full SSL. I tried my best but what else can be done to make it better? I mostly learned what I know about ...
0
votes
1answer
262 views

How to debug where an SSL connection is getting lost?

The big picture is I'm trying to setup an SSL connection for a subdomain, if I go to currently if I go to the non-secure url the website works, but if requeset https://sub.domain.com there is no ...
0
votes
3answers
153 views

automate generation of SSL certificates

How I can automate the generation of self signed certificates when I know the domain name ? This works, but it asks me on the command line prompt certain questions. How I should change it to ignore ...
0
votes
1answer
188 views

SSL: Issued SSL for www.domain.com but only works for https://domain.com

Last week about an SSL Certificate issued by RapidSSL and my hosting MediaTemple, you can see the order details at RapidSSL here: http://i.imgur.com/s5XHcPH.jpg And SSL details on my panel at ...
0
votes
1answer
115 views

SSL certificate for a pointed domain

I have a domain hosted by GoDaddy and I have just bought a vps server (without domain) and an SSL certificate (not used) from 1&1. Could I use my SSL certificate for that domain if I just point ...
0
votes
1answer
688 views

How to create a SSL certificate using SSL certificate text?

I have received a certificate from StartSSL for my domain in pure text which looks somewhat like: -----BEGIN CERTIFICATE----- [...]Many letters and digits[...] -----END CERTIFICATE----- I'm trying ...
12
votes
3answers
7k views

Chrome reports ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY connecting to local web server over HTTPS

Summary Chrome is reporting ERR_SPDY_INADEQUATE_TRANSPORT_SECURITY when I try and connect to my local web server over HTTPS. I am almost certain this problem has to do with my recent Windows 10 ...
2
votes
2answers
654 views

Can I use wildcards with SAN self-signed certificates?

We have a dev server that is accessible through the Internet, but is IP restricted, so security here is merely a way of allowing us to reproduce the live environment as opposed to trying to be secure. ...