SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

2
votes
1answer
23 views

Pick SSL cert based on domain name without separate VHosts

I'm working with a WordPress multi-site network that has various top-level domain names. We're currently serving them all up with one virtual host: <VirtualHost *:80> ServerName ...
-1
votes
0answers
14 views

What type of certificate is the Comodo Free (for 90 days) SSL? [on hold]

Comodo offers a 90-day free SSL certificate. It's unclear though what kind of cert it is. Other than mentioning "limited to one issuance per domain", the signal-to-marketing ratio is very low. I doubt ...
0
votes
2answers
1k views

Why isn't tomcat serving the correct SSL certificate

I configured tomcat with SSL successfully and was using a self-signed certificate. Recently an issue arose where just having the client "Accept/trust" our certificate wasn't easy. We ended up ...
1
vote
1answer
1k views

SSL Connection Error

I have purchased a comodo ssl cert and have submitted the Certificate Signing Request (CSR) generated by my server to the ssl management site. With the 3 files it returned me with, - ...
1
vote
2answers
41 views

Is a good idea to use a SSL UCC certificate for two different but related web sites?

There are two e-commerce sites on the same Apache server, moreover they share the same Drupal installation with common users and products. They differ for domain name and for aspect but are ...
5
votes
0answers
45 views
+100

Is is possible to disable Certificate Transparency (audit log checking) of certificates in Chrome?

We utilize HTTPS deep packet inspection in our firewall via a trusted root certificate in the Windows certificate store. Chrome recently pushed forward with a feature to perform additional checks on ...
0
votes
1answer
20 views

Apache Server does not update certificate for subdomains after restart

I have a server which has domain1.example.com and domain2.example.com. The server is using 2 certificates one for domain1.example.com and a UCC certificate for domaind.example.com. My ssl config is as ...
1
vote
1answer
1k views

squid3 ssl bumping server-first with signed certificate

I'm trying to get Squid3.4 to do SSL Bumping with the server-first method. I followed this guide in alpinelinux. I'm working in explicit mode (browser configurer to Go to the proxy) and that works ...
0
votes
0answers
31 views

Wildcard SSL on 2 Servers

I'm helping an SEO client install an SSL certificate and have run into some issues. I'll try to simplify it. He has 2 servers: 1. SERVER A: Internal server running IIS that contains chat and support ...
1
vote
2answers
47 views

Windows XP invalid certificate on Nginx

I migrated my SSL websites and certificates from Apache to Nginx and from that moment all Windows XP clients does not recognize the SSL certificate (it is a wildcard certificate issued by Trustico). ...
1
vote
1answer
25 views

facebook app giving Security error when click on a shared link to my site [on hold]

I have built a site and users are sharing it on facebook, but when one of their friends click on the link it give them this error. Security error There are problems with the security ...
1
vote
2answers
1k views

openssl verify error 7 at 1 depth lookup:certificate signature failure

I have installed OpenVPN server on CentOS. I have two clients - first under CentOS (all works), and trying connect Windows client now. I generated client's certificates with build-key utility. If I ...
0
votes
1answer
2k views

Page can't be displayed with IIS and SSL

I have a single site hosted in IIS 8. I have two site bindings. One is for HTTP, the other is for HTTPS. HTTP is on port 80 with All Unassigned addresses, I left host name blank. HTTPS is on port 443 ...
1
vote
3answers
4k views

Local SSL connections are causing redirect loop (after Ubuntu update)

Following a recent Ubuntu update, my local websites are no longer serving their pages over SSL. For example, my .htaccess file attempts to ensure /sign-in is always served over HTTPS: RewriteEngine ...
0
votes
0answers
10 views

Cross Domain LDAPS

I have a bit of an issues I am running in to. We have two domains: domain1.com domain2.com Our Enterprise and Subordinate CA Resides on domain1, let's call it subca.domain1.com. I am trying to ...
0
votes
0answers
8 views

Configuring IIS ARR for backend client certificate authentication

I have an IIS server configured with ARR to reverse proxy requests to a backend server. The backend server requires client certificate authentication, however, it only needs to authenticate the ...
1
vote
1answer
47 views

Best Certs to use for internal https [duplicate]

I'm helping out a large church with some IT stuff they have lots of internal secure connections, like to the security cameras, or to the UniFi AP controller that want to use https. Of course each of ...
0
votes
1answer
3k views

How to: Make X.509 Certificates Accessible to WCF

I have followed the instructions here http://msdn.microsoft.com/en-us/library/aa702621.aspx I runnning windows 2003 IIS6 with a seperate user account for the Application pool I give this user access ...
4
votes
3answers
589 views

View the SSL certificate of a page that immediately redirects to another

So I've googled quite a bit for this but it appears that my google-fu fails me - apologies if this is a trivial and already answered question, I could not find anything about this I'm trying to ...
-1
votes
0answers
10 views

“Connection restarted while page was loading” in Firefox when using SSL

I am developing an ASP.NET web app. The Login page use client certificates as credentials. IIS is configured so the Login.aspx require client certificate and SSL. On Explorer you select a client ...
0
votes
0answers
26 views

Easiest way to generate PFX certificate (Windows)

At the moment to generate PFX Certificate, I use openssl and: Generate a CSR with its private key Connect to my CA website (Microsoft CA), and submit CSR along with (san:dns=) additional attribute. ...
0
votes
1answer
53 views

What would be a less-known SSL certificate attribute to look out for? [closed]

I'm looking for a simple domain SSL certificate for our company's website and I'm a little confused. A lot of them seems to offer the exact same features, yet at price ranges going from 5$ / year to ...
-2
votes
1answer
13 views

TLS for outgoing mail (following ISPmail) not working

I built my mailserver on a vserver after the ISPmail tutorial (https://workaround.org/ispmail/wheezy) (which is awesome). The only remaining problem is that it does not seem to use TLS with outgoing ...
6
votes
3answers
744 views

Do I have to buy a second wildcard certificate for a subdomain?

We already have a wildcard certificate for *.mycompany.com. Our network has hosts that are only reachable internally. All of them belong to the internal.mycompany.com subdomain. There is a private ...
3
votes
2answers
332 views

Why does Chrome complain about “obsolete cryptography”?

I am hosting an ASP.NET website with wildcard ssl certificate on IIS / Windows 2008R2. While Chrome works fine with my website and shows a green lock the https connection, the https details mention ...
-1
votes
4answers
97 views

Why are many mail servers using subdomains like mail.example.com?

I'm just setting up dovecat and postfix for the first time and wondering why so many companies are using subdomains for IMAP and SMTP like smtp.mail.example.com and imap.mail.example.com? What are ...
0
votes
1answer
1k views

ssl_crtd helpers are crashing too rapidly in squid

I am using the sslBump and Dynamic SSL Certificate Generation features of squid, below is my configuration for the sslBump sslcrtd_program /usr/lib64/squid/ssl_crtd -s ...
17
votes
2answers
14k views

SSL Certificate Location on UNIX/Linux

Is there any standard or convention for where SSL certificates and associated private keys should go on the UNIX/Linux filesystem? Thanks.
0
votes
1answer
22 views

Replace ssl certificate in bundle

I'm not really used to administration stuff so please bear with me. Recently, the server's certificate from RapidSSL expired and we renewed an received a new one. TO replace the cert, I opened up ...
0
votes
2answers
341 views

Can you install a wildcard SSL and single EV SSL together for the same domain?

I currently have a EV Premium SSL from godaddy.com for www.mydomain.com Is it possible to install a wildcard SSL together with a EV Premium SSL? www.mydomain.com is my main SSL as customers see it ...
1
vote
0answers
509 views

Squid 3.5.4: ssl bump: error - Error negotiating SSL connection on FD 10: Success (0)

I am trying to install squid 3.5.4 (on docker, running debian 8) and run it in ssl-bump mode. Compilation: ./configure --prefix=/opt/squid --srcdir=. --disable-maintainer-mode \ ...
1
vote
1answer
32 views

How to unassign self-signed cert from SMTP on Exchange 2010?

We have a GoDaddy wildcard certificate that we have installed into Exchange 2010 and is successfully used on IIS connections for OWA. We have assigned this certificate to the SMTP Service as well as ...
1
vote
1answer
1k views

Export SSL Cert from IIS and import into GlassFish keystore

What I need: I have an existing SSL certificate installed on IIS 6. On the same machine, I have GlassFish installed and would like to share the same certificate since they both share the same ...
1
vote
1answer
175 views

How to use SSL Name Based Vhosts without SNI

I need to host a handful of web applications over SSL using name based virtual hosting. Apache documentation indicates this is possible (https://wiki.apache.org/httpd/NameBasedSSLVHosts) if all sites ...
0
votes
0answers
21 views

Imported wildcard SSL Certificate on Windows Server 2008 R2 IIS7.5 ERR_CONNECTION_RESET

I've been battling this all day! I've exported our production SSL Certificate to a PFX file, copied this to our dev IIS server. Using MMC, added the certificate management, imported the PFX into the ...
-1
votes
1answer
41 views

Do I need a wildcard cert if I'm running two SSL websites off different ports?

If I've got two vhosts for two different websites running off 8081 and 8082 (both SSL), do I need a wildcard cert? The hostnames resolve to the same IP but seeing as they are running off of different ...
4
votes
2answers
5k views

SSL setup: UCC or wildcard certificates?

I've scoured the web for a clear and concise answer to my SSL question, but to no avail. So here goes: I have a web-service requiring SSL support for authentication pages. The root-level domain ...
2
votes
1answer
340 views

How to issue a cert for web hosting using ad cert authority

I need to issue a certificate for SSL binding in IIS using Active Directory Certificate Authority. As far as I understand it should have Purpose=Auth Server and contain private key/be exportable. ...
0
votes
0answers
38 views

firefox with ssl two way authentication chains

I fall into a never ending trouble with certificate chains and 2-way authentication on my servers; I'll try to describe the problem as best as I can: I have 2 sites on 2 different servers, ...
1
vote
0answers
16 views

MS Webdeploy V3 encryptPassword correct usage

I have installed MS Webdeploy (Version 3.5) on both my ("old") Server 2003/IIS6 and ("new") Server 2012/IIS8. Currently, I am following the guidelines in the article here, backing up the Target ...
0
votes
1answer
33 views

Client Certificate Web Service Call

I have a requirement to call server web service with client certificate. They have provided me one .crt file. I am hosting my project in WindowsServer2008 IIS7. I install .crt from right click ...
-1
votes
0answers
14 views

Unable to install ssl on Debian. Mozzila showing “Secure Connection Failed”

I downloaded 2 files from GoDaddy. 27c17d93d400c2.crt gd_bundle-g2-g1.crt And put it in /etc/ssl/localcerts/. I did what mentioned here. My default-ssl file looks like: <IfModule ...
2
votes
1answer
2k views

How do I properly generate a keystore for ssl?

I'm trying to get an ssl certificate from godaddy for use with jetty. These are my steps: keytool -keystore keystore -alias jetty -genkey -keyalg RSA -keysize 2048 What is your first and last name?: ...
7
votes
2answers
175 views

Windows PKI: How can I import, sign/issue and export a large number of CSRs?

I have a lot of CSRs that I need to have signed/issued and exported in windows. I was hoping I could batch process them somehow (certutil sounds like it can do some of the work) but I'm not quite sure ...
4
votes
3answers
3k views

The site is using outdated security settings that may prevent future versions of Chrome from being able to safely access it

We're using an AWS ELB to do SSL termination and are having an issue where Chrome is displaying "https" in red with a strikethrough. It says "The site is using outdated security settings that may ...
0
votes
2answers
186 views

Apache SSL - self signed certificate

I know this might be a very newbee question, but I couldn't find anywhere how to solve this. I managed to create a self signed certificate for my production environment (apache) and activated SSL, ...
6
votes
3answers
13k views

Understanding the output of openssl s_client

Ever since our email provider changed their SSL certificate, a POP3 client based on mono refuses to connect to their secure POP server to download emails. Other clients do not have an issue; e.g. ...
0
votes
1answer
37 views

Exchange 2010 rejecting Amazon SES TLS with UntrusedRoot

Due to our network setup, when we moved our business last year we switched Exchange 2010 to use AWS SES to relay our outgoing emails. This has worked pretty well up until yesterday, when Exchange ...
0
votes
2answers
1k views

Config Manager 2012 Application Download stuck at 0%

We have a Config Manager 2012 R2 setup with 2 Distribution Points on remote sites. In the remote site the Applications don't get downloaded, the status remains on 'downloading (0% complete)' In the ...
0
votes
1answer
11 views

Multiple Certificates on Exchange for OWA and EWS

We are currently running Exchange 2007. All our clients access the EWS service on Outlook via the internal server name server.domain.local. For this we use a self-signed certificate from the domain's ...