SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

0
votes
0answers
5 views

Apache SSLCertificateFile doesn't seem to work as expected

I am using X509 authentication and my team is using two CAs. One from Spring Security and one from another project. (Yes, they didn't feel like setting up a single, trusted CA). So this is how I am ...
24
votes
3answers
25k views

SSL Certificate Location on UNIX/Linux

Is there any standard or convention for where SSL certificates and associated private keys should go on the UNIX/Linux filesystem? Thanks.
0
votes
1answer
24 views

Apache configuration using SNI and mix of SSL certs

Up to this point I've been using SNI in my ssl.conf file with Apache 2.2.31 I'm serving up different sites all in the same document root. For example: NameVirtualHost *:443 <VirtualHost *:443> ...
2
votes
1answer
98 views

What would be a less-known SSL certificate attribute to look out for?

I'm looking for a simple domain SSL certificate for our company's website and I'm a little confused. A lot of them seems to offer the exact same features, yet at price ranges going from 5$ / year to ...
-1
votes
1answer
24 views

Guidance for SSL Certificate for our domain services and installation

I'm not well versed on SSL certificates and how to install them in your environment, we have always outsourced this but I am interested in getting a full understanding and being capable of doing this ...
0
votes
0answers
9 views

Adding SSL to Virtual Host takes down all sites [on hold]

First question on here. Not fantastic with server side stuff but I have had to take it over at work. One of our servers has site that needs an SSL certificate. Now I have gone through all the ...
1
vote
1answer
2k views

ssl_crtd helpers are crashing too rapidly in squid

I am using the sslBump and Dynamic SSL Certificate Generation features of squid, below is my configuration for the sslBump sslcrtd_program /usr/lib64/squid/ssl_crtd -s ...
1
vote
0answers
14 views

HTTP to HTTPS redirect not working!? - Tried multiple methods

I purchased a Standard UCC SSL Up to 100 pack from Godaddy. I have installed all the required files on my server, and going to https://www.example.com works fine, but http://www.example.com is NOT ...
0
votes
0answers
20 views

Different behaviours of google chrome with my certificates

I have a problem with Google Chrome (Debian 7, installed with apt-get) accepting certificates for several of my domains. The funny thing is that the Windows,Mac,Android versions of Google Chrome do ...
8
votes
6answers
7k views

Using a self-signed SSL cert for an HTTPS-based internal APT repository

I've set up a Debian repository (Ubuntu actually) for internal use with some private packages, and now want to make it available over the web to some specific servers. I would like apt-get / aptitude ...
0
votes
1answer
17 views

Geotrust SSL certification issue

I have an issue with curl (Centos 6 env) does not recognize Geotrust intermediary certificate: * Trying 192.168.6.6... connected * Connected to composer.graymatter.co.uk (192.168.6.6) port 443 (#0) ...
0
votes
2answers
23 views

SubjectAlternativeName Add to Existing Certificate

i have an existing cert with 15 SubjectAlternativeName entries. How can I use keytool to add several more SubjectAlternativeName entries to the keystore's certificate without invalidating it. I'm ...
9
votes
5answers
4k views

Free SSL Certificate authority I can trust

Can anyone point me to a free SSL Certificate authority I can trust?
-1
votes
2answers
39 views

SSL encryption with CNAME redirect

Here is my current architecture: I have a simple site hosted in the cloud that needs to be served from my company. Thus, mysite.com has a CNAME redirect to 1234.cloud.com. I understand that the SSL ...
0
votes
1answer
9 views

How do I enable server certificates option in iis7

I'm administrator on a Windows box with IIS7 installed (specifically, 7.5). I'm trying to set up a self-signed certificate, so I can enable https for a web application I've set up within an IIS ...
5
votes
2answers
6k views

Correct Apache reverse proxy config with SSL for Jenkins and Sonar

I am running two services behind an Apache server: Jenkins (Port 8080) and SonarQube (Port 9000). My apache config looks like this: <VirtualHost *:80> ServerName server Redirect permanent ...
0
votes
2answers
978 views

vsftpd does not give a valid certificate using CA cert

When setting up vsftpd we have problems with it not providing a trusted connection us a basic pem certificate container using just our private key and certificate. We created our pem file with the ...
1
vote
1answer
53 views

ssl certificate self signed instead of valid

I've purchased a valid certificate: For example this site validates it: https://sslanalyzer.comodoca.com/?url=www.unival-logistics.com But when I test it with openSSL, like this: openssl ...
3
votes
1answer
2k views

How to alias a ssl certificate common name?

I have a server, which has a self signed certificate, which I am trying to securely access. I've got the certificate by looking at the output from openssl s_client -connect <ip>, and copied it ...
0
votes
0answers
21 views

Will every SSL certificate work with nginx SNI? [closed]

SNI is not working on nginx 1.2 to make a single IP serve multiple certificates for different domains. nginx -V verifies that the build is ready for SNI (e.g. TLS SNI support enabled). We've had no ...
0
votes
2answers
675 views

EC2 Load balancer and wildcard/multi-domain SSL certificates

I am running three sites through one load balancer (and 2 child-application servers) One of the site's has an SSL certificate, but I'd like to add a certificate for the other two sites What is my ...
0
votes
1answer
72 views

Let's Encrypt — “DNS … query timed out looking up CAA for …”

I have been using Let's Encrypt on a few domains for a couple of months now, and it generally has been working. I was going through renewing the certs, and for one of the domains I get the following ...
-2
votes
0answers
11 views

SSL certificate for Mailserver [closed]

I have a vps with a shared IP. Now, I want use SSL/TLS for the mailserver. I was wondering what kind of certificate I need for the mailserver. So, do I need to issue a certificate on the hostname? ...
0
votes
0answers
51 views

VeriSign G5 Root Certificate - PayPal IPN

We're using Windows Server 2008 R2 and IIS. We need to make sure that we can send POST requests to the PayPal IPN sandbox URL: https://www.sandbox.paypal.com/cgi-bin/webscr SSL Report: ...
8
votes
1answer
1k views

certutil -ping fails with 30 seconds timeout - what to do?

The certificate store on my Win7 box is constantly hanging. Observe: C:\>1.cmd C:\>certutil -? | findstr /i ping -ping -- Ping Active Directory Certificate Services Request ...
2
votes
1answer
37 views

Completing certificate request via command line in Windows Server

I administrate a number of Windows Servers (mostly 2008 R2 or 2012 R2) and I have to process a lot of SSL certificate renewals. When we renew from our vendor, Globalsign, they automatically generate ...
7
votes
5answers
4k views

Displaying a remote SSL certificate details using CLI tools

In Chrome, clicking on the green HTTPS lock icon opens a window with the certificate details: When I tried the same with cURL, I got only some of the information: $ curl -vvI https://gnupg.org * ...
11
votes
2answers
12k views

Save Remote SSL Certificate via Linux Command Line

Can you think of any linux command-line method for saving the certificate presented by a HTTPS server? Something along the lines of having curl/wget/openssl make a SSL connection and save the cert ...
0
votes
0answers
69 views

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

I have set up my SSL configuration in an Azure Ubuntu VM using Tomcat8. The service seems to be running on port 8443. I have created an endpoint on Azure from public port 443 to 8443. However, when ...
0
votes
1answer
40 views

Certificate not trusted by only a single browser

We have a site that uses a signed cert from thwarte and we have an A rating for the cert across multiple checking tools. However, we have a user that complained that her browser does not trust the ...
0
votes
1answer
28 views

SSL Cert G2 to G5 for PayPal IPN

We have several Rackspace Windows servers (2008 R2), each running 4/5 e-commerce websites, each with their own SSL certificates from Go Daddy. We accept PayPal payments on these websites and use IPN ...
0
votes
0answers
8 views

Multiple Wildcard SSL binding issue in IIS 7.5

I have a requirement for a second Wildcard SSL *.domain2.com to be installed on Win2008 R2, IIS 7.5 . The server currently has one NIC and one IP installed. When I try to bind the test.domain2.com ...
0
votes
1answer
67 views

Can I use the new free SSL/TLS AWS certificates without ELB or Beanstalk on plain EC2?

AWS just announced free SSL/TLS certificates here: https://aws.amazon.com/blogs/aws/new-aws-certificate-manager-deploy-ssltls-based-apps-on-aws/ Mainly: SSL/TLS certificates provisioned through ...
0
votes
1answer
3k views

How to: Make X.509 Certificates Accessible to WCF

I have followed the instructions here http://msdn.microsoft.com/en-us/library/aa702621.aspx I runnning windows 2003 IIS6 with a seperate user account for the Application pool I give this user access ...
0
votes
0answers
34 views

Windows server 2012 R2: Adding support on new cipher

Environment Description I have a VM (hosted in Azure) cluster (one of many identical machines) that I'm using for running my application. I have noticed that some webpages are cannot be loaded in ...
0
votes
2answers
2k views

Config Manager 2012 Application Download stuck at 0%

We have a Config Manager 2012 R2 setup with 2 Distribution Points on remote sites. In the remote site the Applications don't get downloaded, the status remains on 'downloading (0% complete)' In the ...
5
votes
2answers
1k views

Apache's deprecated SSLCertificateChainFile directive (AH02559)

Recently I've upgraded Apache from 2.2 to 2.4 and I cannot figure out how to deprecate a SSLCertificateChainFile directive. The error: me@jessie:~$ sudo apache2ctl configtest AH02559: The ...
-2
votes
1answer
24 views

Use a Mac to create a CSR for another server

I have a website hosted on Bluemix. I want to set up an SSL certificate, I am following this guide: https://developer.ibm.com/bluemix/2014/09/28/ssl-certificates-bluemix-custom-domains/ I placed an ...
5
votes
1answer
4k views

Trying to setup SSL with Apache on Ubuntu 14.04

I have purchased a SSL certificate from namecheap.com. I am trying to install it on a server running Ubuntu 14.04 and Apache. I used the following tutorial to setup Apache ...
13
votes
1answer
7k views

Certificate does not have a name

I've successfully managed to install an ssl-certificate in IIS, however the 'Name' column is showing as blank even though I entered a friendly name. Is there any way to rectify this? I grabbed a ...
1
vote
3answers
966 views

Puppet client not connection to master - SSL connect Error

I installed the puppet master and agent on the same machine. When the client is started, I got the following error message. puppet agent --server=agent.com --no-daemonize --debug err: Could not ...
8
votes
2answers
26k views

Enabling SHA2 Certificate Support on Windows Server 2003

A little background information first. I have an SSIS package that runs inside a Windows Server 2003 SP2 32 bit environment. The package recently started failing with the following error during a ...
-1
votes
1answer
45 views

HTTPS certificate not working on WWW, but is on NON-WWW

I bought an SSL certificate from SSLMate and it's working fine on my Nginx server when I access http://example.com, but not when I access http:// www.example.com I believe the problem has to do with ...
0
votes
0answers
27 views

Uploading A Server certificate AWS, A client error (MalformedCertificate).

I have been trying to upload server certificates for the last 2 days but I keep getting this error every time A client error (MalformedCertificate) occurred when calling the UploadServerCertificate ...
0
votes
2answers
2k views

Passed SSL checker, but browser doesn't show secure?

I've set up my SSL certificate following the instructions at http://splittingelectrons.wordpress.com/2012/02/24/how-to-configure-an-ssl-certificate-for-apache-on-amazon-ec2/ I've checked my website ...
2
votes
1answer
81 views

Generate subdomain certificate from valid wildcard certificate

Giving the nature of SSL certificates and keys which can be chained, can I (myself) generate a certificate for a subdomain based on the main domain certificate and key which are issued for wildcard ...
0
votes
1answer
993 views

How to create a proxy certificate?

I have created an ssl-based server that I need to now create a proxy certificate for. (the second part of the school project). I have found these lines on the OpenSSL Project: openssl req -new ...
0
votes
4answers
42 views

SSL certificate for CNAME redirected domain

I have a webservice which provides simple site constructor functionality with payment page. User can select purchase domain e.g. user.com, select some template and point this domain with CNAME to my ...
2
votes
2answers
3k views

Why isn't tomcat serving the correct SSL certificate

I configured tomcat with SSL successfully and was using a self-signed certificate. Recently an issue arose where just having the client "Accept/trust" our certificate wasn't easy. We ended up ...
2
votes
1answer
3k views

How do I properly generate a keystore for ssl?

I'm trying to get an ssl certificate from godaddy for use with jetty. These are my steps: keytool -keystore keystore -alias jetty -genkey -keyalg RSA -keysize 2048 What is your first and last name?: ...