SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

0
votes
1answer
20 views

Signing wildcard cert for a subdomain

I want to use my issued wildcard certificate to generate an SSL cert for a subdomain E.g. *.bar.com -> foo.bar.com Reason being I want to attempt to prevent some XSS weaknesses caused by multiple ...
0
votes
1answer
11 views

wmic: error when setting remote desktop self-signed certificate

I'm attempting to use the wmic approach of assigning a self-signed certificate for Remote Desktop use on a Windows Server 2012 VM as described here and here. The CA for the RDP certificate has been ...
1
vote
1answer
1k views

SSL Connection Error

I have purchased a comodo ssl cert and have submitted the Certificate Signing Request (CSR) generated by my server to the ssl management site. With the 3 files it returned me with, - ...
0
votes
1answer
12 views

Client certificate authentication with no access to private keys

We are trying to set up client certificate authentication for VPN users on Cisco ASA. User certificate store is being used to complete the authentication. The problem we are running into is that the ...
3
votes
0answers
9 views

How can I set up Certificate Transparency if my CA doesn't support it?

I think many of you have actually heard of Google's Certificate Transparency initiative. Now the initiave involves a public log of all certificates issued by some CA. As this is some amount of work, ...
1
vote
2answers
25 views

SSL Cert for one domain and multiple IPs

I have a question about SSL certs and multiple servers. Question: I have one cert, one domain name and I have many servers that hold my website code. Example.com can point to IPs 192.168.1.1, ...
0
votes
1answer
2k views

Page can't be displayed with IIS and SSL

I have a single site hosted in IIS 8. I have two site bindings. One is for HTTP, the other is for HTTPS. HTTP is on port 80 with All Unassigned addresses, I left host name blank. HTTPS is on port 443 ...
1
vote
1answer
29 views

SSL Fault, Apache won't start [on hold]

After installing an SSL certificate from Comodo following these instructions, I've found that apache will no longer start. This is my config: <VirtualHost *:80> ServerName latimer.io ...
1
vote
2answers
2k views

openssl verify error 7 at 1 depth lookup:certificate signature failure

I have installed OpenVPN server on CentOS. I have two clients - first under CentOS (all works), and trying connect Windows client now. I generated client's certificates with build-key utility. If I ...
3
votes
0answers
23 views

Creating SSL certificate signed by a self-signed CA certificate in Jetty

I'm trying to configure a jetty-distribution-9.3.1.v20150714 backend running on Java 1.8.0_45-b14 with a certificate signed by a self-signed CA certificate, for SSL pinning. Following Apple's guide, ...
-3
votes
0answers
25 views

Browser Error due to Expired Certificate [closed]

My browser is not working, it said certificate is expired. What am i going to do? Please help me, im just a student. I need it so badly.
5
votes
1answer
15k views

Enabling SHA2 Certificate Support on Windows Server 2003

A little background information first. I have an SSIS package that runs inside a Windows Server 2003 SP2 32 bit environment. The package recently started failing with the following error during a ...
1
vote
3answers
4k views

Local SSL connections are causing redirect loop (after Ubuntu update)

Following a recent Ubuntu update, my local websites are no longer serving their pages over SSL. For example, my .htaccess file attempts to ensure /sign-in is always served over HTTPS: RewriteEngine ...
0
votes
1answer
32 views

Confusion over the correct private key

I inherited work on a website and I am trying ultimately to replace SHA-1 certificates with SHA-2 certificates. The first step would be to generate a CSR from my server using the command openssl req ...
0
votes
3answers
7k views

Exchange 2010 - Certificate error on internal Outlook 2013 connections

I have an Exchange 2010 and Outlook 2003. The exchange server has a wildcard SSL certificate installed *.domain.com, (for use with autodiscover.domain.com and mail.domain.com). The local fqdn of the ...
0
votes
0answers
7 views

Right way to configure startSSL Certificate [duplicate]

Hy! I try to apply a Start-SSL Certificate on my Apache 2 (Debian Wheezy). On Xampp i got it fast and it works, but on my Debian root, the certificate is confirmed by Avast (in this case) and not by ...
0
votes
2answers
32 views

Single *.company.com wildcard cert for RDS Deployment possible?

With a Remote Desktop Services deployment in a domain ad.company.com, I have RDG and RDSH installed on the same server, rd.ad.company.com. I can use a wildcard cert on *.company.com for access to the ...
2
votes
1answer
44 views

How do I connect to an OpenVPN server and dump the certificate chain presented when connecting?

My first thought was to use something like openssl s_client but this only supports TCP not UDP and it seems there requires some special magic to get TLS over UDP working, how do I interface with that ...
1
vote
2answers
37 views

Transferring SSL certificate to new server

We're swicthing from an OSCommerce website to Magento and are also swicthing servers. The old server is on Apache and our new one is on NGINX. The SSL certificate we have seems to have been purchased ...
6
votes
3answers
3k views

How to view all ssl certificates in a bundle?

I have a certificate bundle .crt file. doing openssl x509 -in bundle.crt -text -noout only shows the root certificate. how do i see all the other certificates?
1
vote
1answer
31 views

How do I configure Windows for dual certificates, ECDSA with RSA fallback?

We'd like to use an ECDSA SSL cert; however, we need to support a fairly wide variety of devices including some that are unlikely to ever support ECDSA certificates. The standard solution is to ...
0
votes
1answer
3k views

How to: Make X.509 Certificates Accessible to WCF

I have followed the instructions here http://msdn.microsoft.com/en-us/library/aa702621.aspx I runnning windows 2003 IIS6 with a seperate user account for the Application pool I give this user access ...
0
votes
1answer
44 views

Apache2 Server should be SSL-aware but has no certificate configured [Hint: SSLCertificateFile] for wild card SSL certificate

I am trying to configure Godaddy Wild Card Certificates on a Apache web server.I am getting the following error: [Thu Jul 23 02:32:42.499991 2015] [mpm_event:notice] [pid 12293:tid 140626762094464] ...
0
votes
1answer
28 views

Installing Domain SSL is not working

I have a Linode Server running Debian 7.5 & Apache2 I have the following files stored in the /etc/ssl/localcerts/ directory: www.test-site.com.key www.test-site.com.csr www.test-site.com.crt ...
3
votes
2answers
11k views

HTTPS not working; binding set, certificate installed

I've installed the certificate and set up the HTTPS bindings. However, when I load the site on HTTPS it does not load. I've looked at all the settings but everything seems correct. I've restarted ...
0
votes
2answers
34 views

Real trouble over an expired SSL certificate

I renewed my SSL certificate at a very well known company, who screwed up my order. After it was righted, I received several certificate files with no instructions: MY.SERVER.COM.crt ...
0
votes
0answers
11 views

SSL Certificates for Exchange 2013

I really need some help in configuring exchange 2013 and SSL. I purchased an SSL cert for my external domain - remote.company.com and this works fine as I have added the certificate and applied it to ...
0
votes
1answer
138 views

Setting up HTTPS across multiple servers

I want to offer our online services over HTTPS and am having a couple of problems understanding how to accomplish this. To access our services you must pass through our ISA firewall to a Win2000 ...
3
votes
2answers
5k views

Plesk HTTPS setup and directory problems [closed]

We are trying to configure SSL for one of our domains hosted on a Red Hat server running Plesk. Plesk version: 9.5.2 Apache: 2.2.3 Redhat: 2.6.18-194.el5 We created a new SSL certificate entry ...
0
votes
3answers
838 views

GoDaddy's SSL certificates and HTTPS connections

I want to buy and set up an SSL certificate on one of my domain names. However, since SSL Certs involve purchases, I would like to get other’s opinions before I actually go out and buy something. I ...
13
votes
5answers
17k views

How to avoid lftp Certificate verification error?

I'm trying to get my Pelican blog working. It uses lftp to transfer the actual blog to ones server, but I always get an error: mirror: Fatal error: Certificate verification: subjectAltName does not ...
0
votes
2answers
33 views

SSL certificate issue for all clients

I had exchange 2013 installed on Windows 2012 server and all way happy until I attempted to add remote access role. This failed the first time, and I had to remove the role and re-add the role. Remote ...
0
votes
2answers
26 views

SSL configuration on nginx - missing .icrt file?

I've managed to get SSL working on my site, under nginx (or so I thought!). However, I was trying to run it via GTMetrix (to check the new speeds), and it appears that there is something wrong. I ...
1
vote
1answer
45 views

Configuring IIS ARR for backend client certificate authentication

I have an IIS server configured with ARR to reverse proxy requests to a backend server. The backend server requires client certificate authentication, however, it only needs to authenticate the ...
0
votes
0answers
25 views

Self-signed cert with Subject Alternative Names

I'm attempting to create a self-signed cert with SANs using OpenSSL on Ubuntu 14.10. I have been about to successfully generate a CSR that includes the proper extensions. When I generate the ...
0
votes
1answer
29 views

Share SSL certificate between VM

I have a SSL certificate for example.com, and I want to protect with it: My home page (example.com) running on a VM in Azure My servlet (servlet.example.com) which is running on a different VM (but ...
0
votes
1answer
1k views

ssl_crtd helpers are crashing too rapidly in squid

I am using the sslBump and Dynamic SSL Certificate Generation features of squid, below is my configuration for the sslBump sslcrtd_program /usr/lib64/squid/ssl_crtd -s ...
5
votes
2answers
5k views

OCSP validation - unable to get local issuer certificate

I'm new to setup SSL from the scratch and did my first steps. I bought a SSL cert from RapidSSL for my domain and followed there steps to install the cert. In general the cert is valid and working on ...
0
votes
1answer
13 views

Windows 2008 Cert Authority only issuing certificates for 10 days

I am trying to get a certificate for my Remote Desktop server on my AD. When I submit the request through the Certificate Authority snap in it generates a certificate that is only valid for a few days ...
0
votes
0answers
24 views

Can I use a credit card EMV chip as a client-side SSL Cert?

Is there a way to read the certificate in a consumer credit card EMV chip and use this to authenticate to an Apache web server using the client-side certificate support in SSL/TLS?
1
vote
1answer
1k views

Export SSL Cert from IIS and import into GlassFish keystore

What I need: I have an existing SSL certificate installed on IIS 6. On the same machine, I have GlassFish installed and would like to share the same certificate since they both share the same ...
0
votes
2answers
69 views

IIS sends incorrect intermediate SSL certificate

I just installed a new SSL certificate (from StartCom) to one of our servers and noticed that in Chrome there is the crossed padlock icon displayed for the site so I started investigating why is that ...
0
votes
2answers
47 views

Common Name does not match Server Name - SSL Certificate

I recently purchased an SSL certificate. I've got www.site.com.key, www.site.com.csr, intermedia.pem, www.site.com.crt all set up in my /etc/ssl/localcerts folder. When I open my browser I get the ...
2
votes
3answers
6k views

Certificate verification error when sending a service request from Weblogic

I'm attempting to make a service call to salesforce.com. I've added the certificate chain to my keystore but when the service verifies the domain certificate it gets hung up on the wild card for the ...
2
votes
3answers
41 views

SSL binding with no hostname, and centralized certificate store?

We have a web app that serves a large number of websites from a single IIS website. The IIS website simply has a catch-all binding on port 80. Up till now, for the SSL bindings, we have added a new IP ...
2
votes
1answer
4k views

How to debug certificate chains with OpenSSL?

I am completely new to OpenSSL and I'm reading a tutorial on OpenSSL programming to connect to a server: www.rtfm.com/openssl-examples/part1.pdf www.rtfm.com/openssl-examples/part2.pdf Somehow ...
2
votes
2answers
2k views

SSL Certifcate Request s2003 DC CA DNS Name not Avaiable

I am trying to submit a request for an SSL certificate on a Domain Controller in order to enable LDAP SSL, and having no end of problems. I am following the information provided at ...
4
votes
3answers
497 views

Do I need a dedicated IP address for each SSL certificate?

I am hosting multiple domains on a single AWS instance. The domains all share the same underlying codebase, but we provide "white label" services on various domains. Each of the domains (foo.com, ...
0
votes
2answers
96 views

Using an SSL certificate in multiple locations

I have a website hosted in the UK and I also have an organisation in South Africa hosting my company application online for web access. I want to implement SSL for both servers, as it requires login ...
7
votes
2answers
368 views

Creating sub certificates from a root certificate (SSL) [duplicate]

If I purchase a signed certificate for example.com, can I then produce sub-certificates for a.example.com and b.example.com? These sub-certificates would have PEM files whose privacy cannot be ...