SSL certificates are used to encrypt and authenticate connections to web servers
1
vote
2answers
368 views
SSL certificate for HTTPS website running tomcat as non-root user on centos
Is it possible to setup SSL certificate for HTTPS website (on centos 6.2) running tomcat server (6 or 7) as non-root account (/home/user/tomcat)?
Previously, I has this working on ubuntu but after ...
0
votes
3answers
263 views
New SSL Certificate Installation Errors on
We replaced an old SSL certificate with a new wildcard SSL certificate from GoDaddy. We switched out this certificate last week and have been receiving calls from customers trying to register ever ...
1
vote
3answers
193 views
Is there a way to have all virtual servers use the same SSL certificate without having multiple IPs?
Is there a way to have all virtual servers,in Apache, use the same SSL certificate without having multiple IPs? I know that you can use a certificate on one site, per port and per IP, but can I make ...
1
vote
1answer
355 views
StartSSL certificate with monit
I'm trying to use a StartSSL (free) SSL certificate with monit.
I followed the wizard on startssl.com to generate first a private key, then a certificate. I then downloaded the ...
0
votes
1answer
818 views
Mac OS X Server: This root certificate is not trusted
I don't know much about certificates but one of them on a Snow Leopard Server just expired and I'm trying to replace it. It was self-signed at "birth" with the Mac mini server it came installed on.
I ...
-1
votes
5answers
252 views
How to verify if my certificate has been installed correctly?
My client sent me a CER file so I installed on my IIS. How do I verify that it has been installed correctly? The purpose of CER file is to access their SSL protocol.
Is there a sample aspx file that ...
2
votes
1answer
424 views
Windows 7 Pro Remote Desktop, improper client-side Certificate warning
I have a standard Windows 7 Pro x64 workstation which has Remote Desktop enabled, the workstation is part of a domain (Samba3, so NT4 style).
I have followed these instructions to my success, the ...
0
votes
1answer
175 views
thin server with GoDaddy ssl - access from osx
I have a thin server that i run with a certificate from GoDaddy and a private key i created before. I also have a file "gd_bundle.crt" that's probably required for access from osx (or iphones).
thin ...
1
vote
1answer
766 views
RDP Certificate Distribution Points
I am receiving the message "Your computer can't connect to the remote computer because the Remote Desktop Gateway's server's certificate has expired or has been revoked" when trying to access a TS ...
1
vote
2answers
2k views
apache Client Certificate Authentication errors: Certificate Verification: Error (18): self signed certificate
So I have been following instructions on setting up Client Certificate Authentication in Apache2 w/ mod_ssl. This is solely for the purpose of testing an application against CAA, not for any sort of ...
0
votes
1answer
114 views
Not going to the correct website root directory when using https
We have 2 sites hosted on an Apache server. everything with port80 is working fine, but when we try to connect using https we are redirected to the first document directory of port443 regardless of ...
2
votes
3answers
217 views
What are the risks of trusting a self-signed certificate on a development machine?
We have development machines that test web applications under development over https, because the deployed app operates over https.
We have a couple of internal url's set up in our hosts file, so ...
3
votes
2answers
1k views
Using a self-signed SSL cert for an HTTPS-based internal APT repository
I've set up a Debian repository (Ubuntu actually) for internal use with some private packages, and now want to make it available over the web to some specific servers. I would like apt-get / aptitude ...
1
vote
0answers
218 views
SSL is dead slow in Internet Explorer + Safari
I had a Comodo SSL certificate installed on my website yesterday, after going through a lot of trouble it has finally been activated.
I am, however, experiencing serious issues in Safari and Internet ...
2
votes
2answers
288 views
extra configuration needed after installing SSL certificate?
We recently developed two rather simple PHP applications for AXA (European bank). URL's are axa.tfo.be/incentives/cipres and axa.tfo.be/incentives/zrkk (access to both sites is restricted to visitors ...
2
votes
0answers
165 views
Windows 2008 R2 Active Directory + NDES CA, OpenSSL clients renewing certificates
I posted another question which seems to be getting nowhere, so maybe it was too specific (or I was on the wrong track).
I have OpenSSL clients which generate Certificate Signing Requests, which are ...
6
votes
1answer
776 views
Details on exact expiration datetime of an SSL certificate?
Let's say we have an SSL certificate for a site. According to a web browser, the certificate expires tomorrow, Dec 10 2011.
OK, but that glosses over time zones. When will it expire, exactly?
00:00 ...
0
votes
4answers
350 views
What happens if you install an SSL certificate?
I recently developed an incentive website for a European bank, and one of the requirements was SSL - the website displays some personal customer data (though no financial or really sensitive data).
...
2
votes
1answer
609 views
Why might Windows falsely claim a self-signed root CA certificate is revoked?
I created a self-signed root CA cert for internal test use, using openssl. This has been successfully installed and used as a trusted CA on a number of machines and platforms (Windows, Linux, various ...
0
votes
1answer
257 views
How do I create a certificate with HP Systems Management Homepage with Windows 2008 R2
I'd like to get a trusted, or even better a "green bar" certificate from my Windows 2008 R2 CA to work with my Insight manger home page of https://host:2381
I tried importing the file ...
-2
votes
3answers
268 views
Untrusted Connection issue when running my site in https
I'm using cloudflare to manage my DNS. When I visit my site under https:// it displays an "Untrusted Connection".
Is this most likely due to a DNS issue? Or, could it be happening because of a ...
0
votes
1answer
179 views
SSL Certificate failed install in IIS7
I can't seem to install my SSL in IIS7 because when I do it appears in the Server Certificates list but then if I navigate away from that page or refresh it then it disappears?
I don't know if it has ...
0
votes
1answer
283 views
SSL Migration from NGINX proxy to Citrix NetScaler VPX problems
We migrated a bunch of our sites (changed static IP addresses) from an NGINX proxy to a Citrix NetScaler VPX instance. We tested our sites using every browser available, and they all appeared to be ...
2
votes
1answer
540 views
How do I require client certificates with a specific username / password in Apache?
I have several clients certificates that my Apache httpd server requires clients to have (made using the instructions at http://www.garex.net/apache/). I would like to have an authentication that also ...
2
votes
1answer
463 views
Why can't openSSL verify google's certificate?
When I run the command openssl -connect www.google.com:443 from a Debian VM, I get the following within the output:
Verify return code: 20 (unable to get local issuer certificate)
What's going ...
0
votes
2answers
115 views
How can I make a private SSL certificate be trusted by end-users on two seperate ActiveDirectory domains
I have a web application that utilizes SSL. The website is not publicly facing, and is for private internal access only at our enterprise.
For security reasons, we run two separate Active ...
1
vote
0answers
151 views
Configure OpenSCEP to grant certificate requests automatically
I am trying to setup an OpenSCEP server that can grant certificates automatically instead of me running scepgrant command every time there is a new request? Can someone let me know how to proceed with ...
0
votes
1answer
492 views
Configuring UCC GoDaddy SSL Certificate in IIS 7.5
PLATFORM
We have a Windows Server 2008 R2 server with IIS7.5 and we host a number of our client's websites.
OBJECTIVE
We need to configure two domains: Acme.co.za and Contoso.com to make use of an ...
1
vote
1answer
73 views
SSL certificates with password encrypted key at hosting provider
We are a software company and offer hosting to our clients. We have a VPS at a large Dutch datacenter. For some of the applications, we need an SSL certificate which we'd like to encrypt with a ...
0
votes
1answer
62 views
Lower SpamAssassin scores when certificate verification fails
I’ve noticed that I’m getting junk mail from Norwegian companies that send from servers that Postfix says failed certificate verification. Is it possible to give these messages a lower spam score with ...
0
votes
1answer
498 views
Old SSL Certificate Cached on IE
We recently switched our SSL certificates on our web hosting environment and the old certificates are still showing up on certain computers with IE installed. It works perfectly fine in both Firefox ...
8
votes
3answers
324 views
Is it good practice to remove the password from a ssl cert?
I have read at several blogs now that one should remove passwords from SSL certificates in order to avoid password prompts during Apache restarts.
Is this true and does this pose any security risks?
3
votes
2answers
97 views
Force SSL for IIS 6
What is the best way to force HTTP requests to HTTPS requests on IIS 6? For example, I have both a directory and a whole site that I need to force HTTPS on for two different servers. What is the ...
1
vote
1answer
164 views
HTTPS for server IP address shows as invalid certificate
I have a website, say www.foo.com with an IP address 1.2.3.4 I have an SSL certificate for www.foo.com and when I visit https://www.foo.com all is good. However if I visit https://1.2.3.4 it says the ...
0
votes
2answers
257 views
How can I install root or intermediate SSL certificates without restarting server?
For installation of a certificate I needed to install the root and intermediate certificates as well. This was recognized (after IIS reset) by Firefox and IIS at once, but not by IE, Opera or ...
0
votes
1answer
27 views
What type of errors will users encounter for subdomains that are not accepted by a wildcard certificate?
This is just a follow up clarification question to the one over here.
I plan to buy the following wild card certificate for my domain:
*.example.com (sample only)
but I want to secure the ...
0
votes
3answers
522 views
StartSSL certificate on domain and subdomain + two different servers
I have created free StartSSL certificate (class 1, https://www.startssl.com/?app=1) for www.example.com which is also valid on subdomain dev.example.com.
Can I use this certificate, if ...
0
votes
1answer
263 views
There is no certificate chain in portal certificate file
I am trying to install Mcafee EMM in a lab environment. I have created an enterprise CA and created a certificate. But while installing the EMM, its showing the error of
there is no certificate ...
1
vote
2answers
754 views
Installed wildcard Certification not showing up in the IIS6 Available Certificates box
I've installed a GoDaddy wildcard certificate on my Win2003/IIS6 Server. It shows up in the Intermediate Certificate Authorities area of the MMC Certicates. All looks fine: Issued to: *.mydomain.com; ...
0
votes
1answer
728 views
Watchguard Firebox SSL certificate validation failed
I'm really stuck on this one! I have two Watchguard firebox firewalls. My SSL certificates expired and I bought two new wildcard certificates from RapidSSL. I couldn't get the certificate to install ...
1
vote
1answer
911 views
Creating a non-MD5 CSR for Verisgn?
When creating the CSR and sending it to Verisgn got this warning:
"Alert: Your CSR has been signed using the MD5 hashing algorithm. While the MD5 hashing algorithm is not optimal it will not prevent ...
1
vote
0answers
177 views
Exchange 2010 TLS Cert questions
I'm trying to wrap my head around with enabling TLS for a specific domain on Exchange 2010 server but I have a few questions that I'm sure you guys have an answer to.
I've gone through this guide ...
0
votes
2answers
513 views
SVN Trusted Certification Error [duplicate]
Possible Duplicate:
SVN SSL Certificate Validation Error
I am running RedHat Enterprise Linux 6 and have a subversion server installed (with Apache). I have just configured Apache to run ...
2
votes
1answer
243 views
openssl req -key server.key -out server.csr taking ages to complete
I am trying to generate my own self-signed ssl certificate with openssl so I can test them out on a dev server on nginx before I buy one. I have created the server.key but when I run the command ...
4
votes
1answer
2k views
Apache seems to be using old expired certificate even though new one is installed
Apache 2.2.3/mod_ssl/CentOS 5.5 VPS
Our certificate expired on 2011-10-06, and even though we have seemingly installed the new one correctly, browsing to the site still shows an expired certificate! ...
1
vote
1answer
70 views
SSL common names for second-level-domains
While configuring SSL and certificates in my Apache server I had some troubles with second-level-domains like .com.pt.
If I ask for a certificate for a www.xpto.com domain it will be issued for ...
2
votes
3answers
66 views
What's a “request” in context of SSL certificates and how do I get one?
I need to host a web service that would accept requests over https. Therefore I need an SSL certificate issues by some Serious Certificate Company. I asked our admins - they say I have to generate ...
2
votes
2answers
496 views
ISA 2006 does not allow traffic using FQDN
I experience an issue accessing Tomcat running over SSL with MS ISA 2006 in front.
When I access using the internal IP address (e.g. https://10.0.42.136/...) everything works fine and ...
0
votes
2answers
359 views
Secure connections with Domain aliases running on IIS7
I have a site that can be accessed through example.com. I can secure traffic to and from this site by installing a certificate on the web server that is tied to the example domain.
Now, I have ...
3
votes
1answer
370 views
Are there any way to check client certificate issuer in lighttpd?
I have to check client certificate issuer in the Lighttpd but can't find any variable for that.
Here is part of my config, related to ssl_mod:
$SERVER["socket"] == ":443" {
ssl.engine ...
