SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

1
vote
1answer
20 views

User domain CA to create a UCC cert

We have 30+ RDS servers and use a hardware load balancer. I'm trying to figure out how to generate a UCC cert from our in house CA. Anyone point me in the right direction to do so? Need to alias all ...
0
votes
0answers
15 views

Squid 3.5.4: ssl bump: error - Error negotiating SSL connection on FD 10: Success (0)

I am trying to install squid 3.5.4 (on docker, running debian 8) and run it in ssl-bump mode. Compilation: ./configure --prefix=/opt/squid --srcdir=. --disable-maintainer-mode \ ...
2
votes
1answer
14 views

Command line to set up SNI on IIS for Windows 2012

I'm trying to complete the automated build script of my web server, which runs Windows 2012 and has two SSL websites, each with its own digital certificate. I am using SNI, which works fine when I ...
10
votes
8answers
64k views

SSL Error - unable to read server certificate from file

I've been setting up SSL for my domain today, and have struck another issue - I was hoping someone could shed some light on.. I keep receiving the following error messages: [error] Init: Unable to ...
5
votes
2answers
11k views

Understanding the output of openssl s_client

Ever since our email provider changed their SSL certificate, a POP3 client based on mono refuses to connect to their secure POP server to download emails. Other clients do not have an issue; e.g. ...
-1
votes
1answer
28 views

Which kinds of SSL certs there are?

When I visit eg. https://www.google.com, my web browser (IceWeasel) shows just a (grey) lock icon next to the URL. However, when I visit eg. https://www.cia.gov, a green lock and "Central Intelligence ...
1
vote
1answer
911 views

SSL Connection Error

I have purchased a comodo ssl cert and have submitted the Certificate Signing Request (CSR) generated by my server to the ssl management site. With the 3 files it returned me with, - ...
0
votes
3answers
1k views

Apache https configurations

I am trying to setup my domain name with a self signed cert. I created the cert and placed the server.key and server.crt files into C:/apache/config/ Then I updated my httpd.confg host to include the ...
2
votes
2answers
1k views

Windows Server 2008 RDP-TCP Certificate keeps going back to Auto generated

Our servers undergo periodic PCI compliance scans and we have a Windows 2008 server machine that we have port 3389 open for RDP. It is secured with SSL, but it is failing the scan because their test ...
13
votes
3answers
4k views

How to decide where to purchase a wildcard SSL certificate?

Recently I needed to purchase a wildcard SSL certificate (because I need to secure a number of subdomains), and when I first searched for where to buy one I was overwhelmed with the number of choices, ...
-1
votes
0answers
40 views

Differences between Exchange's “default” SMTP certificate and others enabled for SMTP?

I know that: You can enable the SMTP service for multiple certificates in Exchange The last certificate enabled for SMTP becomes the "default SMTP certificate" My question: What are the ...
0
votes
1answer
23 views

Nginx SSL cant connect to site

I just bought a SSL certicate for my website and tried to get it working with my nginx install, but uppon connection the browser refuses the connection with the website. Here is the relevant part of ...
5
votes
1answer
630 views

How to add custom OID for subject field on certificates issued by Windows Server 2008 R2 CA?

I'm using a Windows Server 2008 R2 domain controller with Active Directory Certificate Services installed. It's configured as an Enterprise Root CA. I have configured a custom certificate template so ...
2
votes
1answer
25 views

configuring ssl on nginx - is this ciphers list up to date?

I have bought a certificate from Comodo and I'm following an article on their site on how to configure the certificate on my nginx. The question is, is this configuration, mainly the ciphers list, up ...
-2
votes
3answers
351 views

Accidently removed localhost.crt SSL in Centos 6 - what can i do?

So I just got my certificate issued from Digicert, and since there was other unused/old files in /etc/ssl/ i marked and removed, and accidently also removed localhost.crt. Now I cannot start my web ...
17
votes
4answers
1k views

Where do companies typically store SSL certificates for future use?

We recently bought a wildcard SSL cert for our domain. We converted all of the certs to a Java keystore, but now we are asking ourselves where we should store these for later use. Do people use ...
1
vote
2answers
937 views

openssl verify error 7 at 1 depth lookup:certificate signature failure

I have installed OpenVPN server on CentOS. I have two clients - first under CentOS (all works), and trying connect Windows client now. I generated client's certificates with build-key utility. If I ...
0
votes
0answers
18 views

Lync Server SSL Cert

I have a cert issued by the domain CA. The cert subject is the name of the server. The subject alternative name contains sip.domain sip.domain2 dialin, meet, admin, and the auto discover for ...
1
vote
0answers
15 views

Apache Signed certificate by know authority and client certificate self-signed

I've been investigating about this and it work with the apache SSL option SSLVerifyClient optional_no_ca I have the following virtualhost configuration. NameVirtualHost *:443 <VirtualHost ...
3
votes
2answers
47 views

Firefox sec_error_unknown_issuer after renewing root CA certificate [closed]

For our corporate network we use an internal CA, which directly signs some intranet server certificates. Now the root certificate is about to expire. I tried to renew it with the following OpenSSL ...
0
votes
2answers
985 views

Why isn't tomcat serving the correct SSL certificate

I configured tomcat with SSL successfully and was using a self-signed certificate. Recently an issue arose where just having the client "Accept/trust" our certificate wasn't easy. We ended up ...
0
votes
1answer
2k views

Page can't be displayed with IIS and SSL

I have a single site hosted in IIS 8. I have two site bindings. One is for HTTP, the other is for HTTPS. HTTP is on port 80 with All Unassigned addresses, I left host name blank. HTTPS is on port 443 ...
-1
votes
0answers
45 views

Application does on open upon Installing SSL on Glassfish v3

I have been trying to install Comodo 90-day SSL certificates, but could not get it to work. Application link does not open. I did the following: I reset the master password using asadmin ...
1
vote
1answer
53 views

Single IIS, 2 applications, 2 IP addresses, 2 Domains, 2 SSLs

I know there are many questions out there, but none seemed to address specifically what I am after. I have one instance of IIS, with two separate applications on it. Each application works on its ...
1
vote
0answers
32 views

Outlook/Exchange certificate errors after setting clientaccessserver, etc… properties

After updating exchange 2010 using the commands for Set-ActiveSyncVirtualDirectory, Set-ClientAccessServer, Set-ECPVirtualDirectory, Set-OABVirtualDirectory, Set-OWAVirtualDirectory, & ...
-1
votes
0answers
17 views

How to issue a Client Certificate with the Client's hostname using openssl?

I recently went through the process of securing a communication between two servers, one internal to my network, the other external. In order to accomplish this, I used openssl and went through the ...
2
votes
1answer
27 views

How to build a chained cert for Dovecot?

I have a Dovecot default certificate "dovecot.pem" which is for localhost. My email client uses "domain1" and "domain2" as email hosts. Herefore I have two more self-signed certificates "domain1.crt" ...
0
votes
1answer
142 views

Can you install a single domain certificate in IIS 6 with mutlple ip host headers?

If I have the A record in the DNS pointed to a unique IP address on our server, but have mutiple IP addresses associated with the host headers, will this cause an issue?
0
votes
1answer
3k views

How to: Make X.509 Certificates Accessible to WCF

I have followed the instructions here http://msdn.microsoft.com/en-us/library/aa702621.aspx I runnning windows 2003 IIS6 with a seperate user account for the Application pool I give this user access ...
2
votes
3answers
6k views

apache Client Certificate Authentication errors: Certificate Verification: Error (18): self signed certificate

So I have been following instructions on setting up Client Certificate Authentication in Apache2 w/ mod_ssl. This is solely for the purpose of testing an application against CAA, not for any sort of ...
0
votes
1answer
49 views

Installing SSL certificate on nginx server

I am trying to install a positivessl certificate on my server without success. I started creating a mydomain.key file on my server and requested the certificate. I bundled the files using cat ...
1
vote
1answer
38 views

the same certificates are sold at different prices?

I've encountered so many times with this situation. For example everybody know if I buy a Positive SSL for a year from a reseller, its price is about $5.95 . If I buy the certificate from CA ...
1
vote
0answers
22 views

How to install SSL Certificate into Service Bus 1.1 on Windows Server

For test cases and evaluation we installed 2 nodes with "Azure Service Bus 1.1" on Windows Server 2012 R2 machines. The installation process installs the https endpoints with a self-signed ...
0
votes
1answer
1k views

ssl_crtd helpers are crashing too rapidly in squid

I am using the sslBump and Dynamic SSL Certificate Generation features of squid, below is my configuration for the sslBump sslcrtd_program /usr/lib64/squid/ssl_crtd -s ...
0
votes
1answer
42 views

SSL certificate for CNAME [closed]

We have added CNAME for AWS Amazon S3 domain. Like below test.domain.com IN CNAME d5f29cy3a2ai3ip.cloudfront.net. We already have the SSL certificate for the domain "www.domain.com". But don't have ...
5
votes
2answers
214 views

Change Key exchange mechanism in IIS 8

We are using RSA key exchange mechanism for SSL certificate. How can i change that to DHE_RSA or ECDHE_RSA? Due to using RSA, we are getting the below warning in chrome “Your connection to website is ...
3
votes
1answer
678 views

The site is using outdated security settings that may prevent future versions of Chrome from being able to safely access it

We're using an AWS ELB to do SSL termination and are having an issue where Chrome is displaying "https" in red with a strikethrough. It says "The site is using outdated security settings that may ...
3
votes
1answer
3k views

Why is Firefox 23 showing Untrusted Connection errors?

We recently went from a standard SSL certificate to a wildcard one. We use RapidSSL for our certificates. As of Firefox 23 we are getting the following untrusted connection error: ...
0
votes
2answers
47 views

Apache:mod_ssl:Error: Private key not found

I'm installing a SSL certificate to serve HTTPS. I'm using Apache 2.4 in Amazon Linux and got the certificate in Startssl. My Vhost config is the following: <IfModule mod_ssl.c> ...
1
vote
3answers
3k views

Local SSL connections are causing redirect loop (after Ubuntu update)

Following a recent Ubuntu update, my local websites are no longer serving their pages over SSL. For example, my .htaccess file attempts to ensure /sign-in is always served over HTTPS: RewriteEngine ...
6
votes
2answers
683 views

Do I have to buy a second wildcard certificate for a subdomain?

We already have a wildcard certificate for *.mycompany.com. Our network has hosts that are only reachable internally. All of them belong to the internal.mycompany.com subdomain. There is a private ...
1
vote
1answer
1k views

Export SSL Cert from IIS and import into GlassFish keystore

What I need: I have an existing SSL certificate installed on IIS 6. On the same machine, I have GlassFish installed and would like to share the same certificate since they both share the same ...
0
votes
0answers
46 views

Squid transparent https certificate error: ssl_error_bad_cert_domain

I have a squid transparent proxy (squid 3.4 in pfsense 2.1) with ssl_bump for https, all my clients trusts squid as CA and many sistes are well working... However I have some problem with websites ...
2
votes
3answers
13k views

Peer's Certificate has been revoked

I just upgraded our web server with a renewed cert as our current cert expires later this week. When I browse to our site via FF it is throwing this error: Secure Connection Failed An error ...
-1
votes
1answer
24 views

https connection can't established behind a gre tunnel

I have a network topological graph like this: Local box GateWay box +---------------+ +--------------------------+ |192.168.1.200 | -> |192.168.1.2 10.2.10.2 | ...
1
vote
0answers
34 views

SHA-2 issues with Verisign root on OS 10.9 Mavericks?

I'm using a Secure Site Pro with EV certificate from Verisign/Symantec, with a full SHA-2 root chain. Everything is great - except for Mac OS 10.9 (Mavericks), that complains the certificate is ...
0
votes
1answer
20 views

IIS: logging client certificate's thumbprint

On IIS 7.5, with client authentication by certificate, how to enable logging of client certificate's thumbprint (or serial, or subject dn) to IIS log?
8
votes
3answers
7k views

Cant connect to mysql using self signed SSL certificate

After creating a self-signed SSL certificate, I have configured my remote mysqld to use them (and ssl is enabled) I ssh into my remote server, and try connecting to its own mysqld using ssl (mysql ...
0
votes
2answers
987 views

Kloxo/CentOS 5.7 install .p12 certificate [closed]

I have just got a free StartSSL certificate, I received a .p12 file, and only a .key file. I'm not really sure how to install this on my server and replace the current one. It's running Kloxo latest ...
0
votes
1answer
59 views

Root Certificate Update Solution - Windows Server 2008

We have an application attempting to run licensing checks via http over the web. The machines this software resides on are Server 2008 vm's with no domain configured. While tracking what is ...