Questions tagged [ssl-certificate]

SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

Filter by
Sorted by
Tagged with
0 votes
1 answer
146 views

Best practices for replacing a server while not breaking any URLs and not having any downtime?

I tried searching for an answer to this problem but the search term is so broad that nothing helpful popped up. We have an old server and we want to replace it with a new one (both are physical ...
Dan Mantyla's user avatar
-1 votes
1 answer
257 views

Creating TLS certificates providing a CSR with Dehydrated

For the time being, I'm able to generate monthly TLS certificates using Dehydrated. I run the following command using crontab: /usr/bin/dehydrated --challenge dns-01 -k /etc/le-godaddy-dns/godaddy.py -...
joninx's user avatar
  • 129
1 vote
2 answers
1k views

How to hide "Alterative names" SSL certificates (in SSLlabs test)?

when running ssllabs.com's test on my website, the output contains "Certificate #2" for (one of the) other domains hosted on the NGINX web server. It is red and not Trusted but I prefer to ...
JuliusBaer's user avatar
-5 votes
1 answer
1k views

How do I renew my cert? ACMEv1 Brownout in Progress [closed]

I dont know what this means, their website doesn't offer any guides, and googling it doesn't provide any help. My whole website is now inaccessible and I can't fix it. Cert is due for renewal, auto-...
stackers's user avatar
  • 327
1 vote
2 answers
837 views

My site's SSL cert is valid, why does WordPress tell me it's not?

I've generated an SSL cert for my domain (moteck.com.au) using certbot and installed it on my shared host (using the certificate, private key and CA bundle, with the last being the contents of ...
Michhes's user avatar
  • 51
0 votes
1 answer
314 views

Certbot Hostname DOES NOT VERIFY

I try to create my first ssl certificate and i use the follow comand: certbot certonly --manual -d *.flexis.cyou --agree-tos --manual-public-ip-logging-ok --preferred-challenges dns-01 --server https:/...
techpt's user avatar
  • 1
0 votes
1 answer
167 views

How to deliver certificate randomly to browser, according to the backend IP/server picked by HAProxy?

I am a beginner in HAProxy and I was trying to achieve this. I have 4 VMs, one having HAProxy server and Apache httpd server in other 3 VMs. I have test.html on all three servers. When user hit https:/...
Alfred's user avatar
  • 111
1 vote
1 answer
447 views

Why browser is always showing certificate of only one server even if multiple certificates are configured in HAProxy?

I am a beginner in HAProxy. I have four VMs, with HAProxy in one and Apache httpd in other three. What I am trying to achieve is, when user connect to HAProxy IP using https, the connection should be ...
Alfred's user avatar
  • 111
0 votes
2 answers
846 views

Possible conflict with multiple SSL certificates?

We currently have a SSL certificate for mycompany.com in GoDaddy and they are asking me to get one for our QA department for the URL qa.mycompany.com. I have installed certificates just fine with Let'...
Tirux's user avatar
  • 3
2 votes
2 answers
57 views

Why aren't my websites configured in IIS using the correct certificates?

My sites are similarly named: hi.api.domain.tld hi.test.domain.tld The .api domain is my api and .test is the webapp that consumes the api. I've got a certificate for each one but they don't seem to ...
Ortund's user avatar
  • 127
0 votes
1 answer
896 views

Nginx won't run after import SSL certificate

I have a problem, after import commercial certificate with private key into my bitdefender gravityzone console, it stopped working. I have such errors: serv bdadmin # service nginx start Job for nginx....
Tutek's user avatar
  • 1
1 vote
1 answer
181 views

App service managed certificate for a naked domain

I've successfully created certificates (App service managed certificate) for other custom domains (for example www.cortoso.com, cortoso.com, www.cortoso.cz, cortoso.cz, ...). However, I am unable to ...
Martin Hamet's user avatar
0 votes
1 answer
137 views

What is the proper way to send a certificate to a web hosting company?

I have a wildcard SSL cert issued through Azure. I need to use this certificate on a shared host (for a subdomain) and they don't have an interface for me to upload it myself, so I have to email it to ...
JRP Mike's user avatar
0 votes
2 answers
1k views

How to use HAProxy to override 25 Certificates per Application Load Balancer limit in AWS?

I use AWS to run a web application, which supports custom domains and subdomains. I am using AWS certificate manager to generate and manage certificates. Well, say my application is available under ...
Alfred's user avatar
  • 111
0 votes
0 answers
143 views

Why and how does a client site-wide policy block "example.com" but not "www.example.com" despite the HTTPS certificate issued to both?

The DNS situation is this: example.com. origin A record to 10.9.8.7 www.example.com. is a CNAME to fred.example.com fred.example.com A record 10.9.8.7 mail.example.com A 10.9.8.7 the certificate has ...
Gunther Schadow's user avatar
2 votes
1 answer
2k views

Getting tlsv1 alert unknown ca:../ssl/record/rec_layer_s3.c:1528:SSL alert number 48 even though verification seems to be ok

I have a root CA which signed 2 intermediates CAs (client CA and server CA), and 2 certs (client cert which is signed by client CA and server cert which is signed by server CA). Now server has the ...
Scarlet's user avatar
  • 21
1 vote
0 answers
91 views

Why have both CERT and TLSA DNS RR?

I know of at least 2 DNS resource record types that serve the purpose of enabling domain owners the ability to control approved/revoked certificates either self-signed or by CA's namely the CERT and ...
MShakeG's user avatar
  • 111
1 vote
3 answers
14k views

nginx tlsv1 alert unknown ca:SSL alert number 48

I'm currently trying to set up nginx as a proxy for a website which requires certificate authentication. The following curl command works perfectly: curl --cacert ca-cert.pem -v --key client.key --...
nett_hier's user avatar
1 vote
1 answer
4k views

New Let'sencrypt certificate ERR_CERT_DATE_INVALID

Ubuntu 20.04 Nginx I obtained a certificate with certbot like sudo certbot --nginx -d pvapp-2021.umwelt-campus.de. And included the paths to the certificate to my two nginx config files (one for the ...
why me's user avatar
  • 113
1 vote
1 answer
409 views

Do i need SSL when redirecting to https and if so, does multi-domain SSL work?

I have a question regarding the need for SSL certificates in the following situation: I will have www.example.app which will be registered and hosted by supplier A. In the hosting, a SSL certificate ...
zorigo's user avatar
  • 11
1 vote
1 answer
3k views

Maximum SSL certificate duration

Using openSSL, it looks like the maximum -days I can use is 11499 based on the conversation here. However, if I want to sign it by a certification authority, how long will be the maximum certification ...
mercury's user avatar
  • 23
2 votes
1 answer
1k views

On CentOS Certbot / Lets Encrypt uses snap to keep SSL certificates up to date. Is there another method that will keep certificates up to date?

Environment: Centos 8, Certbot, Lets Encrypt On CentOS distributions certbot / Lets Encrypt uses snap to keep SSL certificates up to date. Below are the instructions. certbot instructions: Nginx on ...
myNewAccount's user avatar
0 votes
1 answer
292 views

New SSL Cert now showing up for Postfix in browser (Ubuntu, Namecheap)

I'm a newbie trying to wing it after our Sys Admin left. I needed to update our wildcard certificate and copy it onto our mail server. I renewed the cert at Namecheap, downloaded it, and installed it ...
DevOpsSauce's user avatar
0 votes
1 answer
982 views

nginx proxy to node and ssl on vue/node

EDIT: Error.log 2021/02/23 07:30:07 [warn] 233791#233791: "ssl_stapling" ignored, issuer certificate not found for certificate "/etc/nginx/selfSignedCerts/example.crt" 2021/02/24 ...
why me's user avatar
  • 113
0 votes
0 answers
192 views

How to protect the access to a local server with a certificate, Apache httpd, and ngrok?

If we have the following scenario: a Ubuntu 18.04.5 LTS machine a third party server running on port 10000 of this machine and already configuring a self-signed certificate (https://localhost:10000) ...
GarouDan's user avatar
  • 152
0 votes
2 answers
469 views

How to create a certificate with SAN and specific encryption in Windows?

I want to create a certificate with: Subject Alternative Name SHA256 as hash algorithm On a Windows 10 Ent machine, both the above options are not available by default when creating a certificate. ...
Regmi's user avatar
  • 207
0 votes
1 answer
42 views

How to remove a "not safe" flag when getting into a RHEL cockpit portal on my intranet (AD based)?

I have an ERP server hosted on RHEL 8.3, and for management I use cockpit portal from my web browser. Everytime I enter to this portal I get a message saying the website is not trustable, and I want ...
Abel Joasim Marquez Gonzalez's user avatar
1 vote
0 answers
29 views

Finding example domain that uses AAACertificateServices cert

How can I find a domain whose root certificate is AAACertificateServices? Note this is a Comodo certificate. To prepare for a dependent server whose certificate will change soon, it looks my servers ...
lf215's user avatar
  • 111
0 votes
0 answers
54 views

Azure App Certificate FraudDetected

My client has purchased a domain through my GoDaddy reseller account, and is attempting to bind it to his Azure App Certificate. The certificate never gets issued. After doing some research I found ...
Billdr's user avatar
  • 101
1 vote
2 answers
460 views

GCP Google Cloud - When hosting microsites on GCP, what is the most efficient way to handle SSL Certs for HTTPs

My product built on GCP creates microsites. They are served by a Google Cloud Function connected to a GCP Load balancer. My customer's want to point their own domain names to my product's microsites. ...
Brad Willard's user avatar
0 votes
1 answer
807 views

Make Non-Domain Machines Trust Self Signed Certificate

Background: At my company we are running ERP software on our local network that is hosted from a windows server. The catch is that the client code (run in Chrome) requires that the site is loaded via ...
Bigbob556677's user avatar
1 vote
1 answer
7k views

Error "This certificate cannot be verified up to a trusted certification authority"

In my VirtualBox I have following network for testing and every software on virtual machines is a fresh installation. On virtual machine, named www.home.local, where my web server resides, I created ...
DotNet Developer's user avatar
1 vote
0 answers
2k views

ca-certificates.crt doesn't include my custom CA certificate after "sudo update-ca-certificates"

I'm trying to install the public CA certificate of a 3rd party service, onto a Debian instance. I'm doing this so that the SSL certificate of the 3rd party service that I'm connecting to can be ...
Chris Halcrow's user avatar
1 vote
1 answer
9k views

Certificate problems when sending mail via smtp (tream_socket_enable_crypto(): SSL operation failed with code 1)

I am new on this board. I also posted the issue in the CraftCMS-board, but I think it is more related to this one. I hope it fits in here. I found some similar posts here, but unfortunately, but none ...
Luke's user avatar
  • 111
3 votes
4 answers
20k views

Import PFX Certificate via PowerShell with full certificate chain

It's SSL certificate replacement time, and while I could, for my Windows servers, do this the tedious way (Certificates mmc, import manually), I'm looking for something I can automate via some ...
Maximus Minimus's user avatar
0 votes
0 answers
1k views

No valid IP addresses found for subdomain with certbot

I am currently trying to set up an email server, and recently stumbled over getting a SSL certificate from Let's Encrypt in this question and realizing it isn't necessary if I don't have a web server, ...
sangstar's user avatar
-1 votes
3 answers
279 views

Is a web server required to run a mail server?

I'm trying to create a mail server, but I'm not able to connect to my DO droplet's domain, which I need to do to get a Let's Encrypt SSL certificate. It refuses conection. letsdebug.net says: [My ...
sangstar's user avatar
1 vote
1 answer
296 views

Certificates in docker local registry

I'm trying to set up a docker local registry within my university network. Since they offer certificates from rediris I requested one, so I have now three different files: cert.pem intermediate.pem ...
Vicent Blanes's user avatar
2 votes
0 answers
167 views

Placing restrictions on certificate extensions when proxying HTTPs with nginx

I'm using nginx as a reverse proxy to handle HTTPS for an application that talks HTTP. This is working great so far, but now I need to be able to restrict what kind of certificates I accept from the ...
user612658's user avatar
0 votes
1 answer
922 views

Step-CA doesn't work with server alternative names (SAN)

The help text for Step-CA when creating a certificate with SANs reads: Request a new certificate with multiple Subject Alternative Names. The Subject Common Name of the certificate will be 'foobar'...
AlastairG's user avatar
  • 348
0 votes
0 answers
247 views

Resources using a successfully issued (I think?) ACM Certificate produce net::ERR_CERT_AUTHORITY_INVALID when accessed

We're using an ACM certificate to afford custom CNAMEs in a CloudFront Distribution and an API Gateway API. This was working correctly until we recently moved the creation and assignment of this ...
jmkmay's user avatar
  • 211
1 vote
0 answers
564 views

How to create a new default keyfile/keyring for Domino

I am in the process of moving from Web Configuration to Internet Sites on a Domino 9 server. I have a specific keyring/keyfile for a Positive SSL certificate, however, it can only be applied to one ...
teleman's user avatar
  • 113
1 vote
0 answers
344 views

Windows Server 2008 R2 Stand Alone Certificate Authority - creating a new root certificate

I seemed to have hosed up my Certificate Authority. I have a Stand Alone Certificate Authority and it's not on a domain or enterprise so there's no certificate templates. Currently all of the ...
Braden's user avatar
  • 11
1 vote
2 answers
978 views

How does Apache choose which certificate to use?

Currently Apache is hosting several sub domains with host certificates generated with certbot and a http challenge. Now I want to setup a default virtual ssl host to redirect non-existing subdomains ...
Jette's user avatar
  • 113
0 votes
0 answers
1k views

links, lynx, curl and wget don't like my new SSL certificate, but Chrome does

I recently bought an SSL certificate (positiveSSL). I configured NGINX to work with it. I can go to the https:// version of the site, and Chrome declares that the certificate is "valid and ...
Jesse Hogan's user avatar
0 votes
1 answer
340 views

How can I make a "local" mywebsite.test on a remote server work with SSL from my local computer?

I have a XUbuntu server that I can connect to via XFCE and load https://mywebsite.test with a valid local certificate I created using mkcert. However, connecting via XFCE makes the website lag a lot, ...
andrux's user avatar
  • 335
0 votes
1 answer
2k views

How to get .pfx file for renewed SSL certificate

We have a SSL certificate associated with a .dev domain purchased from GoDaddy about 2 years ago. The domain is associated with a website hosted in Azure, the initial certificate was uploaded as a ....
Surubelnita's user avatar
1 vote
1 answer
2k views

Why do I keep getting “There is no SSL certificate configured for this domain.” even other people see my web page?

I recently created a domain and put some file on it, on: https://gitareradovic.com/ https://www.gitareradovic.com/ either one should be working. However, I always get the message "There is no ...
Vladimir Despotovic's user avatar
-1 votes
1 answer
248 views

Can I create Let’s Encrypt certificate for my domain from macOS? [closed]

I have a domain parking that returns a security error for HTTPS and is not possible to create a Let’s Encrypt certificate on the server, but it is possible to upload a certificate. Would it be ...
al404IT's user avatar
  • 123
3 votes
1 answer
476 views

Configuring mailiers in Phabricator

After a clean installation using the bitnami image I followed the instructions to set up the mailers. It looks like this: [ { "key": "stmp-mailer", "type": &...
danijepg's user avatar

1
7 8
9
10 11
66