SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

-1
votes
0answers
6 views

Does one need to 'install' a CA certificate when one buys a certificate? [on hold]

I recently bought an ssl certificate. Do I need to somehow 'install' the CA certificate as well in order to get the purchased ssl certificate working properly for use to serve up my web app over https ...
1
vote
0answers
6 views

Losing server that generated CSR (Certificate Signing Request)

I have created a CSR file on a Windows server about 3 months earlier and used this CSR file to buy a wildcard SSL Certificate. The SSL company (opentrust) then gave me 3 files, the root CA file, the ...
0
votes
2answers
9 views

'openssl verify' outputs 'unable to get local issuer certificate'

In /etc/ssl, when I do sudo openssl verify mywebsite.pem I get a message stating mywebsite.pem: OU = GT46830179, OU = See www.rapidssl.com/resources/cps (c)15, OU = Domain Control Validated - ...
0
votes
0answers
6 views

Windows certificate export vs Cert download in browser

We have a https ssl cert on our IIS server. Is there any difference between certificates that one exports (without private key) from certmgr vs the cert that one sees in the browser address bar? I ...
1
vote
2answers
2k views

Why isn't tomcat serving the correct SSL certificate

I configured tomcat with SSL successfully and was using a self-signed certificate. Recently an issue arose where just having the client "Accept/trust" our certificate wasn't easy. We ended up ...
1
vote
1answer
1k views

SSL Connection Error

I have purchased a comodo ssl cert and have submitted the Certificate Signing Request (CSR) generated by my server to the ssl management site. With the 3 files it returned me with, - ...
1
vote
1answer
2k views

squid3 ssl bumping server-first with signed certificate

I'm trying to get Squid3.4 to do SSL Bumping with the server-first method. I followed this guide in alpinelinux. I'm working in explicit mode (browser configurer to Go to the proxy) and that works ...
2
votes
0answers
21 views

Cannot renew Public IP address SSL certificate. Any alternatives?

From what I've read and researched (here, other places) I'm almost certain what I'm asking will not be possible but any alternative suggestions are welcome. I have a server with a Public IP address ...
2
votes
2answers
113 views

RapidSSL certification - can't get it working for nginx

We have purchased a SHA-2 certificate from RapidSSL, but I can't for the life of me get it working! We first created out .key and .crt files on the destination server, using (obviously blanked out the ...
0
votes
1answer
12 views

Can a wildcard ssl certificate be used on a desktop development machine with a self-reported domain name? [on hold]

We have a wildcard certificate for *.mycompany.com for our server cluster. I'd like to set up a development environment on my desktop that replicates our server, https and all so I can test some ...
7
votes
4answers
4k views

How to view all ssl certificates in a bundle?

I have a certificate bundle .crt file. doing openssl x509 -in bundle.crt -text -noout only shows the root certificate. how do i see all the other certificates?
0
votes
1answer
47 views

Apache2 crash after SSL install

I'm trying to install ssl on my apache2 ubuntu 14.04. After I install all my credentials and restart my apache I get caught SIGTERM shutdown There is no more error or explanation. I created a ...
0
votes
1answer
1k views

Firefox users get sec_error_bad_signature over HTTPS

We've had a couple of users recently complain about not being able to connect to the HTTPS version of our website (served via Apache) from Firefox. They error they receive is: Secure Connection ...
1
vote
2answers
2k views

openssl verify error 7 at 1 depth lookup:certificate signature failure

I have installed OpenVPN server on CentOS. I have two clients - first under CentOS (all works), and trying connect Windows client now. I generated client's certificates with build-key utility. If I ...
20
votes
2answers
17k views

SSL Certificate Location on UNIX/Linux

Is there any standard or convention for where SSL certificates and associated private keys should go on the UNIX/Linux filesystem? Thanks.
3
votes
5answers
14k views

certutil: function failed: security library: bad database.

when I'm using certutil it returns this error: certutil: function failed: security library: bad database. e.g. I can't list certs or keys How Can I fix this? Thanks
0
votes
1answer
27 views

NGINX + SSL certificate securing the connection in some browsers only

I've been strugling with this issue and I seem to be running into a dead end here without knowing what to do next... I've taken a task left by another worker who left on vacation. He was trying to ...
0
votes
1answer
15 views

How to redirect one domain to the other with SSL?

I have two domains (example.com and example.co.uk). The .com one is the "head" and has servers behind him. What I want to do is redirect all traffic from the .co.uk to the .com domain. I looked at ...
0
votes
1answer
3k views

Page can't be displayed with IIS and SSL

I have a single site hosted in IIS 8. I have two site bindings. One is for HTTP, the other is for HTTPS. HTTP is on port 80 with All Unassigned addresses, I left host name blank. HTTPS is on port 443 ...
0
votes
0answers
11 views

Purchasing a certificate for Freeradius / WPA-Enterprise

I'm moving my WiFi to WPA-Enterprise, using a Freeradius server that authenticates with our Samba 4 directory. I'm currently using a self-signed certificate, but want to move to a purchased ...
6
votes
3answers
942 views

Windows 2012R2 seems to automatically download and install intermediate root certificates

Whilst preparing a new Windows 2012R2 server for production I needed to install a (GlobalSign Domain) SSL certificate for the website powering our application. I did this by generating a certificate ...
1
vote
3answers
4k views

Local SSL connections are causing redirect loop (after Ubuntu update)

Following a recent Ubuntu update, my local websites are no longer serving their pages over SSL. For example, my .htaccess file attempts to ensure /sign-in is always served over HTTPS: RewriteEngine ...
11
votes
3answers
6k views

How do I ensure that stunnel sends all intermediate CA certs?

A few computers, but not most, are rejecting the SSL certificate from my webserver. The problem seems to be that some computers are rejecting the CA certs. The problem seems to be manifesting on Mac ...
13
votes
6answers
18k views

How to avoid lftp Certificate verification error?

I'm trying to get my Pelican blog working. It uses lftp to transfer the actual blog to ones server, but I always get an error: mirror: Fatal error: Certificate verification: subjectAltName does not ...
0
votes
1answer
2k views

ssl_crtd helpers are crashing too rapidly in squid

I am using the sslBump and Dynamic SSL Certificate Generation features of squid, below is my configuration for the sslBump sslcrtd_program /usr/lib64/squid/ssl_crtd -s ...
-1
votes
3answers
44 views

Chrome on Android random red HTTPS

When I'm using Chrome on my desktop, the address bar is always green. However, on my Android phone the address bar is usually green, but sometimes red. It says that I'm using a certificate signed ...
0
votes
0answers
19 views

How to disable OCSP for a headless firefox browser (xvfb)?

I have a headless firefox browser (XVFB) on a linux server. I use it to run selenium tests as part of CI (Its a Jenkins box and the tests run for every build). However, the tests suddenly started ...
1
vote
4answers
967 views

Default CA Cert Bundle Location

I need to add a .pem cert file to my default CA cert bundle but I don't know where the default CA Cert bundle is kept. I need to append my new .pem file to this default bundle. I'd rather do that ...
4
votes
2answers
2k views

Moving SSL Certificate from one Apache server to another

I just moved hosts and I looked for a decent guide on how to move my SSL certificate from my old host to the new one. I am amazed on how many 'guides' or 'tutorials' which are simply useless are out ...
0
votes
2answers
92 views

Can I apply SSL to all my virtual hosts with this?

I've been wanting SSL for one portion of my website, which is one single domain name on my VPS. As most certificates look fairly expensive, I had looked at my domain name provider and had found a ...
2
votes
1answer
225 views

Apache alternatives with per-directory SSLVerifyClient

My application requires per-directory verification of SSL client certificates (i.e. when user requests /foo we require they have a client certificate and verify it, but when they request /bar we don't ...
2
votes
1answer
267 views

Web Server with PKCS11 support for server certificates?

I have a PKCS#11-compatible smart card with either a private key, or a combination of a certificate and a private key on it (I can have both). I want to present the certificate from the smart card to ...
0
votes
1answer
3k views

How to: Make X.509 Certificates Accessible to WCF

I have followed the instructions here http://msdn.microsoft.com/en-us/library/aa702621.aspx I runnning windows 2003 IIS6 with a seperate user account for the Application pool I give this user access ...
4
votes
3answers
7k views

SSLCertificateChainFile Deprecation Warning on Apache 2.4.8+

We have an SSL Certificate for our website from Network Solutions. After upgrading Apache/OpenSSL to version 2.4.9, I now get the following warning when starting HTTPD: AH02559: The ...
0
votes
0answers
58 views

SunOne Webserver 6.1 support for SHA2

I have sunone webserver 6.1SP19. Just like to check whether the certutil option -Z supports SHA256. I searched from examples and so far, what I see is -Z SHA1. I would like to create a CSR with SHA2 ...
0
votes
1answer
62 views

SSL: Issued SSL for www.domain.com but only works for https://domain.com

Last week about an SSL Certificate issued by RapidSSL and my hosting MediaTemple, you can see the order details at RapidSSL here: http://i.imgur.com/s5XHcPH.jpg And SSL details on my panel at ...
-1
votes
2answers
27 views

How to generate .key and .crt file from JKS file for httpd apache server

I have the mycert.jks file only. Now i need to extract and generate .key and .crt file and use it in apache httpd server. SSLCertificateFile /usr/local/apache2/conf/ssl.crt/server.crt ...
1
vote
0answers
31 views

Import a P12 certificate into a NSS database (with an alias)

Here´s the deal... I have a personal P12 certificate generated by a certificate authority. I want to use it with CURL to access a protected URL. If CURL on CENTOS was compiled with openssl, I should ...
4
votes
3answers
2k views

Double Wildcard SSL Certificates

Is there a registar that offers SSL certificates for: ..domain.com or something_fixed.*.domain.com? -- M.
1
vote
2answers
69 views

How do I configure Windows for dual certificates, ECDSA with RSA fallback?

We'd like to use an ECDSA SSL cert; however, we need to support a fairly wide variety of devices including some that are unlikely to ever support ECDSA certificates. The standard solution is to ...
1
vote
1answer
23 views

Changing SSL Certificate

We are currently deploying a security solution for one of our clients and we require their SSL cert in PEM / PKCS12 format. However, they told us that they have "Lost" their CSR and wouldn't be able ...
0
votes
2answers
41 views

automate generation of SSL certificates

How I can automate the generation of self signed certificates when I know the domain name ? This works, but it asks me on the command line prompt certain questions. How I should change it to ignore ...
-2
votes
0answers
18 views

SSL Certificate for apache 2.2 wont update to new cert after being changed

I am trying to update the SSL Cert in Apache on windows and after adding the new key and cert to the httpd-ssl.conf and upon restart the Apache Service the website is still using the old certificate. ...
5
votes
3answers
167 views

Nginx client SSL authentication

I have Nginx running purely as a proxy to a various number of web servers. One of our clients has asked us to use client certificates and has provided us 3 certificates for the 3 different machines ...
2
votes
1answer
15 views

Apache-Served CA vs Local Root CA - Which Wins?

I currently have two Apache servers running here and here, both use SSL certs signed by StartSSL. Apache SSL configuration below: ## SSL directives SSLEngine on SSLCertificateFile ...
0
votes
2answers
1k views

Config Manager 2012 Application Download stuck at 0%

We have a Config Manager 2012 R2 setup with 2 Distribution Points on remote sites. In the remote site the Applications don't get downloaded, the status remains on 'downloading (0% complete)' In the ...
1
vote
1answer
1k views

Export SSL Cert from IIS and import into GlassFish keystore

What I need: I have an existing SSL certificate installed on IIS 6. On the same machine, I have GlassFish installed and would like to share the same certificate since they both share the same ...
2
votes
2answers
77 views

Can I use wildcards with SAN self-signed certificates?

We have a dev server that is accessible through the Internet, but is IP restricted, so security here is merely a way of allowing us to reproduce the live environment as opposed to trying to be secure. ...
2
votes
1answer
59 views

How secure is this Nginx Config? What else can I do to optimize it further? [closed]

So I recently setup a personal GitLab server and I am using the following config with full SSL. I tried my best but what else can be done to make it better? I mostly learned what I know about ...
-1
votes
1answer
32 views

How to debug where an SSL connection is getting lost?

The big picture is I'm trying to setup an SSL connection for a subdomain, if I go to currently if I go to the non-secure url the website works, but if requeset https://sub.domain.com there is no ...