Questions tagged [ssl-certificate]
SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.
3,289
questions
0
votes
1
answer
146
views
Best practices for replacing a server while not breaking any URLs and not having any downtime?
I tried searching for an answer to this problem but the search term is so broad that nothing helpful popped up.
We have an old server and we want to replace it with a new one (both are physical ...
-1
votes
1
answer
257
views
Creating TLS certificates providing a CSR with Dehydrated
For the time being, I'm able to generate monthly TLS certificates using Dehydrated. I run the following command using crontab:
/usr/bin/dehydrated --challenge dns-01 -k /etc/le-godaddy-dns/godaddy.py -...
1
vote
2
answers
1k
views
How to hide "Alterative names" SSL certificates (in SSLlabs test)?
when running ssllabs.com's test on my website, the output contains "Certificate #2" for (one of the) other domains hosted on the NGINX web server. It is red and not Trusted but I prefer to ...
-5
votes
1
answer
1k
views
How do I renew my cert? ACMEv1 Brownout in Progress [closed]
I dont know what this means, their website doesn't offer any guides, and googling it doesn't provide any help. My whole website is now inaccessible and I can't fix it.
Cert is due for renewal, auto-...
1
vote
2
answers
837
views
My site's SSL cert is valid, why does WordPress tell me it's not?
I've generated an SSL cert for my domain (moteck.com.au) using certbot and installed it on my shared host (using the certificate, private key and CA bundle, with the last being the contents of ...
0
votes
1
answer
314
views
Certbot Hostname DOES NOT VERIFY
I try to create my first ssl certificate and i use the follow comand:
certbot certonly --manual -d *.flexis.cyou --agree-tos --manual-public-ip-logging-ok --preferred-challenges dns-01 --server https:/...
0
votes
1
answer
167
views
How to deliver certificate randomly to browser, according to the backend IP/server picked by HAProxy?
I am a beginner in HAProxy and I was trying to achieve this. I have 4 VMs, one having HAProxy server and Apache httpd server in other 3 VMs. I have test.html on all three servers. When user hit https:/...
1
vote
1
answer
447
views
Why browser is always showing certificate of only one server even if multiple certificates are configured in HAProxy?
I am a beginner in HAProxy. I have four VMs, with HAProxy in one and Apache httpd in other three. What I am trying to achieve is, when user connect to HAProxy IP using https, the connection should be ...
0
votes
2
answers
846
views
Possible conflict with multiple SSL certificates?
We currently have a SSL certificate for mycompany.com in GoDaddy and they are asking me to get one for our QA department for the URL qa.mycompany.com. I have installed certificates just fine with Let'...
2
votes
2
answers
57
views
Why aren't my websites configured in IIS using the correct certificates?
My sites are similarly named:
hi.api.domain.tld
hi.test.domain.tld
The .api domain is my api and .test is the webapp that consumes the api.
I've got a certificate for each one but they don't seem to ...
0
votes
1
answer
896
views
Nginx won't run after import SSL certificate
I have a problem, after import commercial certificate with private key into my bitdefender gravityzone console, it stopped working. I have such errors:
serv bdadmin # service nginx start
Job for nginx....
1
vote
1
answer
181
views
App service managed certificate for a naked domain
I've successfully created certificates (App service managed certificate) for other custom domains (for example www.cortoso.com, cortoso.com, www.cortoso.cz, cortoso.cz, ...). However, I am unable to ...
0
votes
1
answer
137
views
What is the proper way to send a certificate to a web hosting company?
I have a wildcard SSL cert issued through Azure. I need to use this certificate on a shared host (for a subdomain) and they don't have an interface for me to upload it myself, so I have to email it to ...
0
votes
2
answers
1k
views
How to use HAProxy to override 25 Certificates per Application Load Balancer limit in AWS?
I use AWS to run a web application, which supports custom domains and subdomains. I am using AWS certificate manager to generate and manage certificates.
Well, say my application is available under ...
0
votes
0
answers
143
views
Why and how does a client site-wide policy block "example.com" but not "www.example.com" despite the HTTPS certificate issued to both?
The DNS situation is this:
example.com. origin A record to 10.9.8.7
www.example.com. is a CNAME to fred.example.com
fred.example.com A record 10.9.8.7
mail.example.com A 10.9.8.7
the certificate has
...
2
votes
1
answer
2k
views
Getting tlsv1 alert unknown ca:../ssl/record/rec_layer_s3.c:1528:SSL alert number 48 even though verification seems to be ok
I have a root CA which signed 2 intermediates CAs (client CA and server CA), and 2 certs (client cert which is signed by client CA and server cert which is signed by server CA). Now server has the ...
1
vote
0
answers
91
views
Why have both CERT and TLSA DNS RR?
I know of at least 2 DNS resource record types that serve the purpose of enabling domain owners the ability to control approved/revoked certificates either self-signed or by CA's namely the CERT and ...
1
vote
3
answers
14k
views
nginx tlsv1 alert unknown ca:SSL alert number 48
I'm currently trying to set up nginx as a proxy for a website which requires certificate authentication.
The following curl command works perfectly:
curl --cacert ca-cert.pem -v --key client.key --...
1
vote
1
answer
4k
views
New Let'sencrypt certificate ERR_CERT_DATE_INVALID
Ubuntu 20.04
Nginx
I obtained a certificate with certbot like sudo certbot --nginx -d pvapp-2021.umwelt-campus.de. And included the paths to the certificate to my two nginx config files (one for the ...
1
vote
1
answer
409
views
Do i need SSL when redirecting to https and if so, does multi-domain SSL work?
I have a question regarding the need for SSL certificates in the following situation:
I will have www.example.app which will be registered and hosted by supplier A. In the hosting, a SSL certificate ...
1
vote
1
answer
3k
views
Maximum SSL certificate duration
Using openSSL, it looks like the maximum -days I can use is 11499 based on the conversation here. However, if I want to sign it by a certification authority, how long will be the maximum certification ...
2
votes
1
answer
1k
views
On CentOS Certbot / Lets Encrypt uses snap to keep SSL certificates up to date. Is there another method that will keep certificates up to date?
Environment: Centos 8, Certbot, Lets Encrypt
On CentOS distributions certbot / Lets Encrypt uses snap to keep SSL certificates up to date. Below are the instructions.
certbot instructions: Nginx on ...
0
votes
1
answer
292
views
New SSL Cert now showing up for Postfix in browser (Ubuntu, Namecheap)
I'm a newbie trying to wing it after our Sys Admin left. I needed to update our wildcard certificate and copy it onto our mail server.
I renewed the cert at Namecheap, downloaded it, and installed it ...
0
votes
1
answer
982
views
nginx proxy to node and ssl on vue/node
EDIT:
Error.log
2021/02/23 07:30:07 [warn] 233791#233791: "ssl_stapling" ignored, issuer certificate not found for certificate "/etc/nginx/selfSignedCerts/example.crt"
2021/02/24 ...
0
votes
0
answers
192
views
How to protect the access to a local server with a certificate, Apache httpd, and ngrok?
If we have the following scenario:
a Ubuntu 18.04.5 LTS machine
a third party server running on port 10000 of this machine and already configuring a self-signed certificate (https://localhost:10000)
...
0
votes
2
answers
469
views
How to create a certificate with SAN and specific encryption in Windows?
I want to create a certificate with:
Subject Alternative Name
SHA256 as hash algorithm
On a Windows 10 Ent machine, both the above options are not available by default when creating a certificate. ...
0
votes
1
answer
42
views
How to remove a "not safe" flag when getting into a RHEL cockpit portal on my intranet (AD based)?
I have an ERP server hosted on RHEL 8.3, and for management I use cockpit portal from my web browser.
Everytime I enter to this portal I get a message saying the website is not trustable, and I want ...
1
vote
0
answers
29
views
Finding example domain that uses AAACertificateServices cert
How can I find a domain whose root certificate is AAACertificateServices? Note this is a Comodo certificate.
To prepare for a dependent server whose certificate will change soon, it looks my servers ...
0
votes
0
answers
54
views
Azure App Certificate FraudDetected
My client has purchased a domain through my GoDaddy reseller account, and is attempting to bind it to his Azure App Certificate. The certificate never gets issued. After doing some research I found ...
1
vote
2
answers
460
views
GCP Google Cloud - When hosting microsites on GCP, what is the most efficient way to handle SSL Certs for HTTPs
My product built on GCP creates microsites. They are served by a Google Cloud Function connected to a GCP Load balancer. My customer's want to point their own domain names to my product's microsites.
...
0
votes
1
answer
807
views
Make Non-Domain Machines Trust Self Signed Certificate
Background:
At my company we are running ERP software on our local network that is hosted from a windows server.
The catch is that the client code (run in Chrome) requires that the site is loaded via ...
1
vote
1
answer
7k
views
Error "This certificate cannot be verified up to a trusted certification authority"
In my VirtualBox I have following network for testing and every software on virtual machines is a fresh installation.
On virtual machine, named www.home.local, where my web server resides, I created ...
1
vote
0
answers
2k
views
ca-certificates.crt doesn't include my custom CA certificate after "sudo update-ca-certificates"
I'm trying to install the public CA certificate of a 3rd party service, onto a Debian instance. I'm doing this so that the SSL certificate of the 3rd party service that I'm connecting to can be ...
1
vote
1
answer
9k
views
Certificate problems when sending mail via smtp (tream_socket_enable_crypto(): SSL operation failed with code 1)
I am new on this board. I also posted the issue in the CraftCMS-board, but I think it is more related to this one. I hope it fits in here.
I found some similar posts here, but unfortunately, but none ...
3
votes
4
answers
20k
views
Import PFX Certificate via PowerShell with full certificate chain
It's SSL certificate replacement time, and while I could, for my Windows servers, do this the tedious way (Certificates mmc, import manually), I'm looking for something I can automate via some ...
0
votes
0
answers
1k
views
No valid IP addresses found for subdomain with certbot
I am currently trying to set up an email server, and recently stumbled over getting a SSL certificate from Let's Encrypt in this question and realizing it isn't necessary if I don't have a web server, ...
-1
votes
3
answers
279
views
Is a web server required to run a mail server?
I'm trying to create a mail server, but I'm not able to connect to my DO droplet's domain, which I need to do to get a Let's Encrypt SSL certificate. It refuses conection. letsdebug.net says:
[My ...
1
vote
1
answer
296
views
Certificates in docker local registry
I'm trying to set up a docker local registry within my university network. Since they offer certificates from rediris I requested one, so I have now three different files:
cert.pem
intermediate.pem
...
2
votes
0
answers
167
views
Placing restrictions on certificate extensions when proxying HTTPs with nginx
I'm using nginx as a reverse proxy to handle HTTPS for an application that talks HTTP. This is working great so far, but now I need to be able to restrict what kind of certificates I accept from the ...
0
votes
1
answer
922
views
Step-CA doesn't work with server alternative names (SAN)
The help text for Step-CA when creating a certificate with SANs reads:
Request a new certificate with multiple Subject Alternative Names. The
Subject Common Name of the certificate will be 'foobar'...
0
votes
0
answers
247
views
Resources using a successfully issued (I think?) ACM Certificate produce net::ERR_CERT_AUTHORITY_INVALID when accessed
We're using an ACM certificate to afford custom CNAMEs in a CloudFront Distribution and an API Gateway API. This was working correctly until we recently moved the creation and assignment of this ...
1
vote
0
answers
564
views
How to create a new default keyfile/keyring for Domino
I am in the process of moving from Web Configuration to Internet Sites on a Domino 9 server. I have a specific keyring/keyfile for a Positive SSL certificate, however, it can only be applied to one ...
1
vote
0
answers
344
views
Windows Server 2008 R2 Stand Alone Certificate Authority - creating a new root certificate
I seemed to have hosed up my Certificate Authority.
I have a Stand Alone Certificate Authority and it's not on a domain or enterprise so there's no certificate templates. Currently all of the ...
1
vote
2
answers
978
views
How does Apache choose which certificate to use?
Currently Apache is hosting several sub domains with host certificates generated with certbot and a http challenge.
Now I want to setup a default virtual ssl host to redirect non-existing subdomains ...
0
votes
0
answers
1k
views
links, lynx, curl and wget don't like my new SSL certificate, but Chrome does
I recently bought an SSL certificate (positiveSSL).
I configured NGINX to work with it.
I can go to the https:// version of the site, and Chrome declares that the certificate is "valid and ...
0
votes
1
answer
340
views
How can I make a "local" mywebsite.test on a remote server work with SSL from my local computer?
I have a XUbuntu server that I can connect to via XFCE and load https://mywebsite.test with a valid local certificate I created using mkcert.
However, connecting via XFCE makes the website lag a lot, ...
0
votes
1
answer
2k
views
How to get .pfx file for renewed SSL certificate
We have a SSL certificate associated with a .dev domain purchased from GoDaddy about 2 years ago. The domain is associated with a website hosted in Azure, the initial certificate was uploaded as a ....
1
vote
1
answer
2k
views
Why do I keep getting “There is no SSL certificate configured for this domain.” even other people see my web page?
I recently created a domain and put some file on it, on:
https://gitareradovic.com/
https://www.gitareradovic.com/
either one should be working.
However, I always get the message "There is no ...
-1
votes
1
answer
248
views
Can I create Let’s Encrypt certificate for my domain from macOS? [closed]
I have a domain parking that returns a security error for HTTPS and is not possible to create a Let’s Encrypt certificate on the server, but it is possible to upload a certificate.
Would it be ...
3
votes
1
answer
476
views
Configuring mailiers in Phabricator
After a clean installation using the bitnami image I followed the instructions to set up the mailers.
It looks like this:
[
{
"key": "stmp-mailer",
"type": &...