SSL certificates are used to encrypt and authenticate connections to web servers
0
votes
0answers
2 views
How to setup SSL for Active Directory?
I have a Windows 2008 Server (Base2) machine.
In Server Manager > Roles, i can see:
1. Active Directory Domain Services
2. DNS Server
3. Active Directory Certificate Services.
Under Active Directory ...
1
vote
0answers
7 views
missing configuration in apache to achive mutual SSL authentcaion
After implementing a Mutual Certificate Authentication with OpenSSL and Apache Web Server on CentOS platform. I tried this scenario ( see this diagram ):
----------
...
0
votes
1answer
21 views
Verify Certificate for subdomain without access to root domain
We want to replace an expired certificate for a subdomain hosted in its own server, for example:
department.area.city.gov
We just have control over that server and subdomain. Because of security ...
0
votes
1answer
1k views
How do I install a GeoTrust RapidSSL certificate on OSX Server 10.5?
The certificate comes with an intermediate trust certificate which needs to be installed on the system along with the normal signing certificate. Most of the tutorials online to do this seem to be out ...
2
votes
2answers
805 views
Does any Certificate Authority support both SAN and wildcards?
My basic quandry is that wildcard certificates don't support subdomains of subdomains, nor do they help with alternate domain names. Basically, if my CN is example.com, I want a Subject Alternative ...
34
votes
9answers
2k views
Why do I need to purchase an SSL certificate when I can generate one locally?
I am having trouble understanding why we need to purchase SSL certificates when we can generate them locally using openSSL. What is the difference between the certificate I purchase and a test ...
0
votes
0answers
11 views
wso2 Governance Registry Active Directory integration unable to find valid certification path to requested target
I am attempting to set up a WSO2 Governance Registry server on RHEL5 that will integrate with our Active Directory using ldaps, but normal methods of setting up trust of the domain controllers ssl ...
0
votes
2answers
30 views
SSL install issue on Apache2 for virtual host
I"m trying to get an ssl cert installed but i'm getting an error when reboot apache.
I get this error
Syntax error on line 25 of /etc/apache2/sites-enabled/xxxx.com:
Invalid command ...
0
votes
0answers
23 views
A way to manage https virtual hosts and their certificates [closed]
I want to provide hosting for websites with different TLD, every website is to be accessible through https only and all of them on single IP (by using SNI). Is there a way to configure either http ...
0
votes
0answers
14 views
Unable to deploy Cloud Service with Class 1 certificate
I have a brand new Cloud Service on which I want to deploy a .NET application (WebRole). The only means of access is HTTPS, so I generated a certificate (http://www.startssl.com/) and uploaded it to ...
0
votes
1answer
668 views
postfix, TLS and rapidssl - “verify error:num=19:unable to get local issuer certificate”
I have a certificate from rapidssl. I run this command:
openssl s_client -showcerts -connect smtp.server.com:465
I get this error:
verify error:num=19:self signed certificate in certificate chain
...
0
votes
2answers
84 views
Can an IP Address be used as the FQDN when requesting a SSL Certificate?
When filling out a request for a SSL Certificate, can the IP address be used for the "Common Name"?
update:
We have a new production box that doesn't have a public domain name. Just a public IP. But ...
0
votes
1answer
37 views
Simple authentication via AD over LDAP for Tomcat-hosted app
We use a central AD server for authentication, and have several different webapps that connect to it via LDAP.
I'm trying to connect a simple webapp running on Tomcat 5.5 on Windows to the AD server ...
4
votes
2answers
68 views
Should I delete the .pfx or .cer files after importing the SSL cert?
When provided, I have to import into IIS on Windows Server (2008 R2) using either a .pfx or .cer to get SSL certs ready for use.
My question is, is should I delete these files after I have ...
0
votes
1answer
1k views
How to: Make X.509 Certificates Accessible to WCF
I have followed the instructions here
http://msdn.microsoft.com/en-us/library/aa702621.aspx
I runnning windows 2003 IIS6 with a seperate user account for the Application pool
I give this user access ...
0
votes
1answer
22 views
Issue with applying an SSL cert (Apache)
I'm running a windows server 2008 r2 with apache 2 installed runnign svn. I've had to buy a new public cert. I've overwritten the old .crt and .key file with the new files and then restarted the ...
2
votes
1answer
19 views
Drawbacks of changing certificate revocation mode
Recently our SSL certificate provider had an outage. Web services that used the certificate issued by the certificate provider had stopped working because we had web service RevocationMode set to ...
2
votes
0answers
27 views
SSL Client Certificates and Stores
I am looking to distribute a ssl client certificate to Citrix users.
I know that for each user I could run this:
certutil –f –p 12345 –importpfx C:\cert.pfx
The above would install the certificate ...
0
votes
1answer
18 views
new user and problems with ssh key configuration (pub vs pem files)
We access our ubuntu server from outside over ssh this way :
ssh -i securityTier.pem -l someUsername serverDnsName
I need to create new user which will use separate *.pem file. So far i created :
...
0
votes
1answer
45 views
What is SSL Certificate, X.509 Certificate
I use openssl to create certificate, that I know it is x.509 Certificate. But I quite don't understand certificate in term of 'SSL Certificate'. Are they the same ? or SSL Certificate is x.509 ...
0
votes
2answers
38 views
-bash: www.mydomain.com.pem: Permission denied
I have these three files in /etc/nginx/ssl folder:
www.mydomain.com.csr
www.mydomain.com.key
www.midomain.com.key.nopass
I bought and downloaded the positive ssl certs in ...
0
votes
3answers
482 views
StartSSL certificate on domain and subdomain + two different servers
I have created free StartSSL certificate (class 1, https://www.startssl.com/?app=1) for www.example.com which is also valid on subdomain dev.example.com.
Can I use this certificate, if ...
1
vote
2answers
51 views
SSL Certificate Performance
Is it possible that a cheap security certificate could inhibit the performance of a website when serving pages over https?
Background: I have built an e-commerce website using Drupal 7 and Drupal ...
0
votes
1answer
33 views
SSL Certificate, multiple servers, and DNS
We have two servers in different physical locations. They will be configured in a cluster so that information can be transferred between them.
Server hostnames are as follows:
...
1
vote
0answers
98 views
Java CertificateException in Domino 9 when trying to access HTTPS URL
When we upgraded our Domino development server from 8.5.3 to 9 the HTTPS connections from Java code to sites having GoDaddy certificate stopped working. Connections to servers having DigiCert ...
0
votes
0answers
29 views
SSL certificate changed to outside network
I've two websites hosted on IIS7, each bound to two network cards with 192.168.x.x IPs, and these IPs are mapped to two public IPs.
Both sites have two different (different domains) SSL certificates ...
0
votes
2answers
2k views
SSL Library Error: 218570875 error:0D07207B:asn1 encoding routines:ASN1_get_object:header too long
I am trying to install SSL certificate from a certificate authority into my httpd server in CentOS 5.x. When I configure it and start the server I am getting the following errors,
[error]Init: Unable ...
8
votes
2answers
504 views
Can we use a certificate bought for one domain on another domain?
We bought a certificate two years ago for service1.domain1.com and it is valid up to 2018. The problem is that domain was managed by third party and they are going to drop that sub domain.
My ...
1
vote
1answer
599 views
PCI scan failure for SSL Certificate with Wrong Hostname?
A client had a PCI scan completed by SecurityMetrics, and it now says they failed due to the SSL certificate for the SMTP port 25 (and POP3s/IMAPS) not matching the domain scanned. Specifically:
...
1
vote
1answer
666 views
Export SSL Cert from IIS and import into GlassFish keystore
What I need:
I have an existing SSL certificate installed on IIS 6. On the same machine, I have GlassFish installed and would like to share the same certificate since they both share the same ...
0
votes
1answer
895 views
Problems with self-signed SSL certificate for SSTP in Windows Server Foundation 2008
I am trying to configure SSTP in Windows Server Foundation 2008. I want to use a self-signed SSL certificate to do authentication. When the server is running, I get the following error when trying ...
0
votes
1answer
27 views
Exchange 2010 Certificate Error
I began a transition from Exchange 2003 to Exchange 2010 today. At the moment nearly all of my users are still on 2K3 (save for a few test accounts on the 2K10 server.) As best as I can tell ...
0
votes
0answers
30 views
Safari on MAC OS keeps asking for client certificate while SSLVerifyClient none
I have a website running on Apache 2.2 /openssl 1.0.0d. And I'm using a certificate issued by a trusted CA.
Everything works fine on all browsers, except safari on MAC OS, when the user tries to ...
0
votes
3answers
80 views
DNS Messed Up After Adding SSL
I need some advice.
We have an e-commerce website hosted at HostGator. Yesterday I ordered a RapidSSL certificate and they auto-configured it for me which made https://www.ourdomain.com work fine. I ...
0
votes
1answer
41 views
SSL: Is a SAN certificate what I need?
I have 3 web-applications (api, app and admin) that I want to protect with SSL and need a certificate. I'm not sure what certificate I need so I'll try to describe what I have, hoping that someone ...
0
votes
1answer
22 views
Certificate verification error when sending a service request from Weblogic
I'm attempting to make a service call to salesforce.com. I've added the certificate chain to my keystore but when the service verifies the domain certificate it gets hung up on the wild card for the ...
1
vote
1answer
55 views
When do SSL certs require a dedicated IP, and when don't they? [duplicate]
My host has informed me that I need to purchase a dedicated IP from them in order to use a SSL cert I want to buy. I don't believe them. Is there a way to leave them out of the loop and get this done ...
2
votes
2answers
970 views
suppress warnings from windows live mail untrusted cerficate ssl
Hi we have setup our own mailserver using ssl.
Each time I start up windows live mail, in comes up with an annoying message that
"The server you are connected to is using a security certificate that ...
23
votes
1answer
909 views
How can I work around problems with certificate configuration in Remote Desktop Services?
I am setting up a Remote Desktop Services farm, and am having trouble configuring certificates for it to use. A demonstration of the problem I'm seeing can be found in Step #4.
At this point I am ...
1
vote
0answers
31 views
Setting up SSL on an Apache Ubuntu Server
I am setting up an SSL certificate for the first time on an Ubuntu server. I have purchased a dedicated IP address and have purchased the certificate under the subdomain of secure.example.com
Port ...
0
votes
2answers
29 views
Installing a SSL certificate on dedicated ip with more than one domain
This problem is a bit complex, but i will try to explain as best possible.
I am hosted on Bluehots, and I have a Dedicated ip address with them. they allow hosting multiple domains, so i have ...
3
votes
1answer
392 views
nginx ssl certificate issue key values mismatch
I am have been trying to setup an ssl certificate for a few days now, I am buying it from Namecheap.com and I am buying a rapid ssl wildcard certificate I am doing the following:
Generate a csr - ...
0
votes
1answer
28 views
Is there a windows 7 utility that can verify that an ssl certificate matches a key file?
The title says it all. When I google for this, it mentions openssl, but I think that must be a unix utility because I can't find it on windows 7.
0
votes
0answers
35 views
apache2: UCC / SAN-certificate, vhosts and SSLVerifyClient
I'm trying to build an apache2-setup using an UCC / SAN certificate containing multiple subdomains. Each subdomain has its own vhost. Only the first vhost contains the ssl-config, the following hosts ...
0
votes
1answer
69 views
openssl Subject Public Key Info: RSA Public Key: (1024 bit) vs Public Key: (1024 bit)
I have a couple of certificates whose format seem pretty similar except for one thing
I have checked the details of the cert by using the following openssl command
openssl x509 -in certname -text
...
4
votes
3answers
1k views
Ubuntu 12.04 LDAP SSL self-signed cert not accepted
I'm working with Ubuntu 12.04, using OpenLDAP server. I've followed the instructions on the Ubuntu help pages and can happily connect without security. To test my connection, I'm using ldapsearch ...
0
votes
0answers
33 views
Why does IIS7 on one server work with my certificate while another has problems?
In the setup I describe, we have two servers, Alpha and Bravo.
Alpha is a server that has been around for years. It is a Windows 2008 server running IIS7. In order to log in to any application on ...
5
votes
3answers
3k views
Cannot create self-signed SSL certificate with IIS 7
I'm trying to create a self-signed certificate from within the IIS 7 snap-in, with little luck. When prompted for a friendly name for the certificate, I type in the name, and click OK, but then I am ...
0
votes
2answers
38 views
How do I set up the DN for a SSL cert with a hostname of greater than 64 characters?
Everywhere I read says to have the server hostname in the commonName field and the subjectAltName field. The problem is that the hostname that I want to sign has greater than 64 characters. Therefore, ...
0
votes
0answers
36 views
create java keystore with certificate request and certificate?
I have two files.
labeled as privatekey.pem but opened, it has a header called: certificate request
certificate in pkcs#7 format from a CA
I want to create new java keystore to provide Tomcat with ...
