SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

learn more… | top users | synonyms (1)

3
votes
1answer
231 views

How to fix issues with LetsEncrypt certificate chains on Windows Server?

I've been using LetsEncrypt to generate certificates for my sites on Windows 2012 R2 server. It worked great, until recently when I renewed the certificates. LetsEncrypt made a recent change where ...
0
votes
0answers
13 views

apache web two-way athentication, authenticated after removing certificate

I setup two-way authentication on my web server with openssl certificates. everything working fine. But, now when i removed the client certificate from my system, it still authenticates. Whats the ...
2
votes
5answers
3k views

Default CA Cert Bundle Location

I need to add a .pem cert file to my default CA cert bundle but I don't know where the default CA Cert bundle is kept. I need to append my new .pem file to this default bundle. I'd rather do that ...
0
votes
2answers
2k views

Config Manager 2012 Application Download stuck at 0%

We have a Config Manager 2012 R2 setup with 2 Distribution Points on remote sites. In the remote site the Applications don't get downloaded, the status remains on 'downloading (0% complete)' In the ...
2
votes
3answers
2k views

Windows Server 2008 RDP-TCP Certificate keeps going back to Auto generated

Our servers undergo periodic PCI compliance scans and we have a Windows 2008 server machine that we have port 3389 open for RDP. It is secured with SSL, but it is failing the scan because their test ...
0
votes
1answer
37 views

how do I covert a certificate with extension .cer to .asc

I have a certificate file (with extension .cer) that has content which looks something like this. -----BEGIN CERTIFICATE----- lots of data here -----END CERTIFICATE----- It is our signing ...
0
votes
1answer
17 views

openvpn certificate error prevents from connection

I try to connect with Tunnelblick to my private VPN, but I get the following error message. 2016-05-24 12:18:07 VERIFY ERROR: depth=1, error=unable to get issuer certificate: C=IL, O=StartCom Ltd., ...
0
votes
2answers
54 views

Should I use a single SSL certificate for example.com and www.example.com?

I have a website (hosted by Amazon S3) which redirects example.com to www.example.com. I am setting up an Amazon CloudFront distribution for this website, and would like the same redirection to work ...
0
votes
2answers
64 views

Using Lets Encrypt certificates with openLDAP

I've been running an openLDAP server for several months now and we use it to authenticate for a number of applications. A previous staff member set up the server and it doesn't seem to be a standard ...
0
votes
0answers
10 views

Parse Server SSL

I have setup Parse Server on Windows platform. I want to use SSL so that I can access Parse API using https. Is there a way to use SSL without using reverse proxy? I just want to cut one step to ...
0
votes
1answer
44 views

Unable to get StartSSL trust chain to work

I received a free SSL certificate from StartSSL which I installed on my server. It works fine on desktop browsers and such but as soon as I open the website on my phone it says ...
0
votes
1answer
1k views

How to create a proxy certificate?

I have created an ssl-based server that I need to now create a proxy certificate for. (the second part of the school project). I have found these lines on the OpenSSL Project: openssl req -new ...
0
votes
0answers
40 views

Domain is issuing trust certificate instead of root authority

I was running into an issue on Windows Server 2012 R2 where any website I visited was throwing a untrusted certificate error. I circumvented this issue by copying the certifications from another ...
1
vote
2answers
4k views

openssl verify error 7 at 1 depth lookup:certificate signature failure

I have installed OpenVPN server on CentOS. I have two clients - first under CentOS (all works), and trying connect Windows client now. I generated client's certificates with build-key utility. If I ...
3
votes
1answer
596 views

How to get a list of sites in IIS 7.5 binded to a certain ssl certificate using command line

Situation: an IIS 7.5 server with 30+ sites and 10+ certificates and a few certificates may be obsolete. Obsolete means they're not binded to the ip:port of any site on IIS. I could check each site ...
-1
votes
0answers
11 views

Captive-Portal Cert [closed]

I've recently become aware of the conflict between HSTS and the current implementations of captive-portals. As I've been reading up on the topic (RFC's and such) the thought occurred to me, why not ...
0
votes
1answer
50 views

MQTT certificates verification fails

I'm been desperately trying to get my MQTT clients to connect to my MQTT broker which is set up with a certificate from a CA (Letsencrypt). To be able to get the CA certificate, I've used the ...
2
votes
1answer
171 views

Server certificate does NOT include an ID which matches the server name

Our server was upgraded yesterday so it now has a more updated Ubuntu, Apache 2.4.10, PHP etc. After I put everything back, Apache started complaining about my configuration. The server hosts a site ...
2
votes
1answer
25 views

mod ssl error during ssl installation

Server Environment AWS EC2, Ubuntu 14.04LTS, LAMP 443 Port is enabled from security group. Server is listening to 443 port. I have purchased SSL from cheapsslsecurity.com and followed following ...
3
votes
4answers
287 views

ssl virtualhosts with apache ip requirements

i have multiple domains i'm using ssl for on one apache install. i know i need to put each domain on a separate IP externally. does the same apply to the IPs behind the NAT? meaning, i have one ...
0
votes
0answers
20 views

Can I perform delegation for azure cloud with wildcard domain certificate or i need a server sertificate?

I currently have a windows adfs server installed locally with wildcard domain certificate. I am planning to setup Azure Cloud ADFS with a sub-domain of the wildcard domain certificate that i own. ...
0
votes
0answers
33 views

Check if RHEL certs have been updated

I have a sample .pem file placed in /etc/pki/ca-trust/source/anchors, and I have run update-ca-trust, but I'm not sure how I can check if the command actually worked. I tried to cat ...
1
vote
1answer
64 views

Cloudflare SSL - CACert cert file?

I have decided to generate SSL for IIS. I have own CSR and private key. The SSL generated by CloudFlare is in pcks7 format. I would like to to combine it into one pfx formate in order to import it in ...
0
votes
1answer
4k views

Page can't be displayed with IIS and SSL

I have a single site hosted in IIS 8. I have two site bindings. One is for HTTP, the other is for HTTPS. HTTP is on port 80 with All Unassigned addresses, I left host name blank. HTTPS is on port 443 ...
0
votes
0answers
35 views

Unable to change ssl settings for custom domain on app engine

When I attempt to change the ssl setting for my custom domains, the dash board were unable to load the "Select SSL serving mode", and the save button is disabled. I've also noticed in Inspector that ...
1
vote
1answer
2k views

ssl_crtd helpers are crashing too rapidly in squid

I am using the sslBump and Dynamic SSL Certificate Generation features of squid, below is my configuration for the sslBump sslcrtd_program /usr/lib64/squid/ssl_crtd -s ...
1
vote
1answer
2k views

Install SSL Certificate on Azure Cloud Service (VM)

I have an SSL certificate for domain example.com and I want to access my Azure Cloud Service exampleserver.cloudapp.net as https://server.example.com. I am using Virtual Machine to access this Cloud ...
0
votes
0answers
12 views

How can I update certs on RHEL with cloud init?

The cloud-init documentation says that this syntax ca-certs: trusted: - | -----BEGIN CERTIFICATE----- THIS IS A TEST -----END CERTIFICATE----- will update certs. This code works just ...
4
votes
2answers
1k views

Listing domains on a UCC/SAN SSL Certificate

Is there a way to list all domains on an SAN/UCC SSL Certificate (ideally using command line on linux/os x)? Clearly there must be some way to extract the data, since browsers can do it. ...
2
votes
0answers
48 views

Installing apache2 ssl - ubuntu

I need to install a ssl in my apache2 ubuntu, and do not know what I'm wrong, but the fact is that I do not get ... I have the relevant files: one .key file and two .crt files. At first, when editing ...
0
votes
1answer
38 views

ServerAlias without www not working on SSL virtualhost

I'm moving a site from a server to another, and using its current and still valid SSL certificate. The machine I'm working on is a Ubuntu 14.04 server. I've set up my usual virtual host file, let's ...
30
votes
1answer
2k views

Trusting an untrustworthy CA - Can I restrict how system trusts it?

(Posted to ServerFault instead of StackOverflow because I feel it concerns OS configuration more than programming code). I'm currently responsible for maintaining a system which connects to a ...
11
votes
2answers
2k views

Cost of getting in-house certificate authority trusted

My company has an in-house certificate authority that is currently self-signed. Since we want to start using it for external SSL and secure email to our customers, we need to get it trusted. Does ...
1
vote
1answer
42 views

Nginx user uploaded SSL Certificates

I'm wondering what's the best way to let users upload their SSL certificates. I have a multitenant application based on rails/passenger/nginx and I need each user to use his own domain with his SSL ...
0
votes
1answer
45 views

Installing SSL Certificate

I am trying to install an SSL certificate on my Apache server that's hosted on an EC2 instance from AWS. I originally intended to go with AWS Certificate Manager and put the SSL on a Load Balancer but ...
1
vote
1answer
1k views

Root Certificate Update Solution - Windows Server 2008

We have an application attempting to run licensing checks via http over the web. The machines this software resides on are Server 2008 vm's with no domain configured. While tracking what is ...
0
votes
1answer
3k views

How to: Make X.509 Certificates Accessible to WCF

I have followed the instructions here http://msdn.microsoft.com/en-us/library/aa702621.aspx I runnning windows 2003 IIS6 with a seperate user account for the Application pool I give this user access ...
2
votes
2answers
138 views

Renew Letsencrypt certificate

I am trying to renew my letsencrypt certificate by the next command: ./letsencrype-auto renew but I receive this error message: configuration file /etc/letsencrypt/renewal/domain.conf produced ...
11
votes
4answers
18k views

IIS 7.5 Creating self signed certificates with validation date of more than a year

I am creating self-signed SSL certificates in IIS 7.5 for internal use. The problem I have is that I want to create them so that they last for 10 years as it is only a dev environment. I can't see an ...
2
votes
1answer
128 views

Apache Extension Error

I have an Apache 2.4.18 with OpenSSL 1.0.2f configuration here with dual (RSA 4096 + ECC 384) certificate configuration. I also provide certificate transparency through TLS extension. When using ...
1
vote
0answers
25 views

Import Windows 2008R2 .p12 certificate into Samba4 SDC

In our firm we need to migrate our existing infrastructure from Windows 2008R2 to Samba 4. To do this we already managed to add the Samba machine as a secondary domain controller. The next step would ...
1
vote
2answers
49 views

Do web Servers send the certificate chain to the Web Client?

If my web server (latest Apache) has a valid (not expired or revoked) Verisign certificate chain (root -> intermediate -> leaf/my server), then does the server send the entire(?) chain to the client? ...
8
votes
1answer
1k views

certutil -ping fails with 30 seconds timeout - what to do?

The certificate store on my Win7 box is constantly hanging. Observe: C:\>1.cmd C:\>certutil -? | findstr /i ping -ping -- Ping Active Directory Certificate Services Request ...
0
votes
0answers
37 views

Google App Engine The SSL certificate provided could not be inserted. xn- domain

I try installing Comodo Certificate that I ordered in SSLs.com on Google App Engine Custom Domain. But I have error: The SSL certificate provided could not be inserted. I checked that my key is ...
0
votes
1answer
29 views

Adding a second SSL for a second domain on a server - second domain is still using the first SSL Cert

I need to add an ssl cert to a second domain on my server (AWS Amazon Linux) I thought I enabled SNI correctly? although probably not... domain1 already has a functioning SSL cert. First attempt I ...
1
vote
1answer
60 views

Let's Encrypt SSL Certificate File Not Found Error, but still working

I'm running SSL Certificates from Let's Encrypt. I've got them installed on my Ubuntu machine running Apache. The setup works fine and I can launch the website, see the green padlock and even got an ...
0
votes
1answer
35 views

Ensure client compatibility before https certificate change on server if you don't have access to all clients

In the next months we plan/need to refresh our https certificate and update our server OS version. We are thinking about switching to Let's Encrypt. It would be inacceptable, if clients could not ...
1
vote
0answers
16 views

Certificate is not showing up in SQL Server

I need to say first that I am not a DBA and so, my problem is getting SQL Server Configuration Manager to recognize a certificate. I have 3 SQL Instances I work on, 2 are on the same network, the ...
4
votes
3answers
17k views

HTTPS not working; binding set, certificate installed

I've installed the certificate and set up the HTTPS bindings. However, when I load the site on HTTPS it does not load. I've looked at all the settings but everything seems correct. I've restarted ...
0
votes
0answers
26 views

Is there any way to disable at least TLS 1.0 in GCE HTTPS Load Balancer?

I'm trying to pass the Trustwave pci DSS scan but i can't because it fails in "TLSv1.0 supported" and i think the problem is in GCE HTTPS loadbalancer that enables TLSv 1.0, 1.1 and 1.2 by default ...