SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms

14
votes
4answers
1k views

SSL certificate selection based on host-header: is it possible?

Is it possible for a web server to select an SSL certificate to use based on the host-header of the incoming connection, or is that information that is only available after the SSL connection is ...
4
votes
5answers
4k views

Exchange Certificates Don't Match Up

Ok, so I have two subdomains going to my Exchange box at work (Exchange 2007 on Server 2008). The internal subdomain is exchange.company.com and the outside domain is webmail.company.com. Our AD ...
4
votes
1answer
568 views

For enabling SSL for a single domain on a server with muliple vhosts, will this configuration work?

I just purchased an SSL certificate to secure/enable only ONE domain on a server with multiple vhosts. I plan on configuring as shown below (non SNI). In addition, I still want to access phpMyAdmin, ...
3
votes
2answers
2k views

Why is site serving different SSL certs to different browsers?

The SSL certificate on menswearireland.com and on www.menswearireland.com works fine on Safari, Chrome, SeaMonkey, K-Meleon, QtWeb, Firefox, and Opera. However, Internet Explorer claims that there is ...
5
votes
2answers
10k views

Stunnel won't work with SSLv3 from some hosts

I'm trying to set up Stunnel to server as SSL cache. Everything was smooth, and mostly it works as designed. Then I encountered errors in log files: SSL_accept: 1408F10B: error:1408F10B:SSL ...
0
votes
2answers
325 views

Puppet client not connection to master - SSL connect Error

I installed the puppet master and agent on the same machine. When the client is started, I got the following error message. puppet agent --server=agent.com --no-daemonize --debug err: Could not ...
16
votes
3answers
2k views

choosing the right SSL certificate

We're looking to purchase some SSL certificates to secure the login pages of ecommerce sites. It is not required to secure the actual payment process as this is protected by a third party with its own ...
13
votes
4answers
8k views

stop apache from asking for SSL password each restart [duplicate]

Using instructions from this site but varying them just a little i created a CA using -newca, i copied cacert.pem to my comp and imported as trusted issuer in IE. I then did -newreq and -sign (note: i ...
24
votes
2answers
4k views

Should a wildcard SSL certificate secure both the root domain as well as the sub-domains?

I ask this question, because Comodo are telling me that a wildcard certificate for *.example.com will also secure the root domain example.com. So with a single certificate, both my.example.com and ...
9
votes
2answers
1k views

Cost of getting in-house certificate authority trusted

My company has an in-house certificate authority that is currently self-signed. Since we want to start using it for external SSL and secure email to our customers, we need to get it trusted. Does ...
9
votes
2answers
1k views

Must CSRs be generated on the server that will host the SSL certificate?

Is it necessary to generate the CSR (Certificate Signing Request) on the same machine that will host my web application and SSL certificate? This page on SSL Shopper says so, but I'm not sure if ...
4
votes
5answers
4k views

Can I buy just one SSL cert for a subdomain?

I bought a plain ole SSL cert for mydomain.com. I also want to secure www.mydomain.com and mail.mydomain.com, which both map to the same server. Is this possible? I'm trying to avoid having to buy a ...
1
vote
2answers
247 views

How to have a certificate which works with both example.com and subdomain.example.com in IIS?

I have an IIS server hosting several websites, like: example.com subdomain1.example.com subdomain2.example.com I want those websites to be able to use SSL. If I install the certificate ...
2
votes
4answers
1k views

Apache rewrite rules and DNS settings for HTTPS sites

For a web application located at: https://www.domain.com/ With an SSL certificate issued to "www.domain.com", What is are the proper rewrite rules, DNS settings, or combination of both which makes ...
1
vote
1answer
713 views

Apache sending wrong SSL certificate on some connections / browsers

I have a bit of a strange problem and I hope someone can help! I have just moved servers (both Linux running Apache 2.2) and re-installed everything and pretty much everything is back up and running, ...
1
vote
2answers
1k views

Validating SSL clients using a list of authorised certificates instead of a Certificate Authority

Is it possible to configure Apache (or any other SSL-aware server) to only accept connections from clients presenting a certificate from a pre-defined list? These certificates may be signed by any CA ...
0
votes
3answers
757 views

Can I generate CSR for remoted server and what server I should use(thin,mongrel)?

I am moving my app into production and need help in generating CSR. I created a private key and followed these steps: Created private key Entered passphrase for it (openssl genrsa -des3 -out ...
0
votes
1answer
584 views

Using several SSL certificates on same IP with IIS 7

I've got several domains (different sites with different domains. not sub-domains) which need SSL. I couldn't find a way to make it work - so that each domain will have its SSL certificate, but use ...
0
votes
3answers
65 views

mydomainname.com not working with https

I have create a self signed SSL Certificate for testing purpose and I have configure the generated certificate with my virtual hosts file. But when I tried to access my domainname.com with ...
29
votes
1answer
5k views

How can I work around problems with certificate configuration in Remote Desktop Services?

I am setting up a Remote Desktop Services farm, and am having trouble configuring certificates for it to use. A demonstration of the problem I'm seeing can be found in Step #4. At this point I am ...
28
votes
4answers
2k views

Is a Self Signed SSL Certificate a False Sense of Security?

Is a Self Signed SSL certificate a false sense of security? If you are being eavesdropped, the user will simply accept the certificate like he/she always does.
7
votes
3answers
10k views

How to set up my own full-featured certificate authority?

I'd like to set up a certificate authority, which I can then import to all the company's browsers and systems to get rid of all those nasty client warnings when using HTTPS or SSL.
4
votes
6answers
9k views

Which wildcard SSL cert vendors allow you to set up the same cert on multiple servers? [closed]

We are looking to set up a service where multiple boxes, in different data centers, would allow HTTPS access. We are looking to set to buy a wildcard SSL cert to handle any number of vanity sub ...
10
votes
7answers
5k views

Free (or nearly free) Trusted SSL Certificate? [closed]

Is it possible to get a trusted signed ssl certificate for free? I could create a self signed one using iis7 for example but these normally require the user to accept them as compared to one from a ...
15
votes
2answers
2k views

Can MS Certificate Services be a Subordinate to CA created with OpenSSL

I want to setup a enterprise certification authority for my domain. So I can issue certificates for various purposes. I would like to follow the best practice of having an offline CA as the root, ...
5
votes
3answers
4k views

IIS6: Web Site presenting the wrong SSL certificate

Consider an IIS6 installation with multiple Web Sites. Each is intended to be a different subdomain with its own cert (not a wildcard cert). Each has their host-header specified properly. ...
4
votes
9answers
785 views

Must have SSL Cert Providers? [closed]

I am looking into getting an SSL certificate and was wondering what the best providers are? Please base your answer on price and supported browsers. I am shopping around for the best deal, but also ...
8
votes
2answers
4k views

How do I ensure that stunnel sends all intermediate CA certs?

A few computers, but not most, are rejecting the SSL certificate from my webserver. The problem seems to be that some computers are rejecting the CA certs. The problem seems to be manifesting on Mac ...
7
votes
5answers
5k views

What is TLS and how does it compare to SSL?

Is TLS the "new" version of SSL? What features does it add, or security issues does it address? Can anything that supports SSL support TLS? What would be involved in making the switch? Is the ...
4
votes
2answers
7k views

802.1x automatically validate certificate in windows clients

We're deploying a wireless networking using Windows Server 2008 NAC as a RADIUS server. When Windows XP or 7 clients connect they initally fail to connect. In order to enable the client to connect we ...
2
votes
1answer
1k views

Multiple SSL certs with Stunnel

I have purchased two PositiveSSL certs (seperately), one for manager.domain.com and another for domain.com. Originally I only needed manager.domain.com using SSL, but than I needed to use SSL on ...
10
votes
4answers
890 views

differences of SSL certificates?

What are differences of SSL certificates for web server, such like extended validation, Smart Seal, wildcards, single root? What certificates are appropriate for what needs?
6
votes
1answer
6k views

SSL Certificate Location on UNIX/Linux

Is there any standard or convention for where SSL certificates and associated private keys should go on the UNIX/Linux filesystem? Thanks.
6
votes
3answers
3k views

Cannot create self-signed SSL certificate with IIS 7

I'm trying to create a self-signed certificate from within the IIS 7 snap-in, with little luck. When prompted for a friendly name for the certificate, I type in the name, and click OK, but then I am ...
1
vote
2answers
2k views

Import SSL Cert into IIS when I have the text of the certificate and private key

I am working on moving a site from Rackspace Cloud Sites onto a server running IIS and need to get the SSL certificate imported into IIS. All I have at the moment for the SSL certificate is what ...
4
votes
3answers
1k views

Can I purchase a certificate for my domain that can sign other certificates for subdomains?

I have written a small program to run on a Windows computer that serves SSL/TLS web pages through port 443 to visiting web browsers. I want it to be easy for non-technical people to install and run ...
4
votes
3answers
20k views

Why does Window's SSL Cipher-Suite get restricted under certain SSL certificates?

Problem: Windows Server 2008 R2 will only support the following ssl cipher suites when using certain certificates on the server: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA ...
4
votes
3answers
1k views

Double Wildcard SSL Certificates

Is there a registar that offers SSL certificates for: ..domain.com or something_fixed.*.domain.com? -- M.
4
votes
5answers
6k views

Installing a CA certificate on multiple Windows machines (IE/Firefox)

I look after ~50 machines running XP/Vista, all on a single Windows Server 2008 domain. We are rolling out a number of test webservers internally, which have their SSL certificates signed with a ...
2
votes
5answers
2k views

Setting up SSL on apache on linux ubuntu

I'm trying to get SSL to run on my apache web server. I do not have the DNS for the domain setup yet is that an issue? How do I setup SSL on my web server? When I start apache it fails. ...
2
votes
3answers
383 views

Outlook Security Alert following Exchange 2007 upgrade to SP2

Following an update to Exchange 2007 sp2 (yes I know very belated) I have an issues when logging onto Outlook. I see the below message... I also had a simlar issues with web access and as I am at ...
1
vote
5answers
982 views

How to install a single SSL certificate for www and non-www

I have purchased an SSL certificate and I should be able to configure IIS 7 to use that certificate for both https://domainname and https://www.domainname I have looked online but didn't find a ...
1
vote
1answer
7k views

Install Certificate in RDP-TCP properties

I'm trying to get certificates to work on our Windows 2008 Terminal server. Currently when we log on using RDP 6.1 client we get an certificate warning saying that the rdp.geas.local certificate is ...
0
votes
1answer
58 views

Why do we need to list our CAS servers as SANs in Exchange 2010's UCC certificate?

We currently have a few CAS/Hub servers behind a hardware balancer. We were told by Microsoft and Digicert that we may not need them listed as SANs in our UCC cert since we do not publicize their ...
0
votes
1answer
233 views

Setting up Certification Authority on WinServer2003 and configuring IIS SSL

I'm a .net developer and I'm currently working on moving the asp.net project from http to https. I have worked my way through few tutorials and I'm wondering whether I have missed anything out. So ...
0
votes
1answer
3k views

Setting up SSL on Glassfish V2 or V3

My employer recently purchased a Trustwave SSL certificate. Trustwave advertises support on their website, but they don't give an installation guide like they do for their other servers at all, and I ...
6
votes
1answer
1k views

Details on exact expiration datetime of an SSL certificate?

Let's say we have an SSL certificate for a site. According to a web browser, the certificate expires tomorrow, Dec 10 2011. OK, but that glosses over time zones. When will it expire, exactly? 00:00 ...
5
votes
1answer
185 views

How to get certificate common name from PEM file

Various articles online have lead me to believe that a server certificate's common name must be an exact match to the root URL it is valid for. However, when I look at a bunch of the files in ...
5
votes
1answer
329 views

How does one install a custom CA certificate on CentOS?

I'm trying to install a certificate for my internal certificate server on a series of CentOS systems, and I'm finding the documentation on this to be almost non existent. My end goal is to be able to ...
4
votes
2answers
4k views

Does an SSL certificate work on CNAME'd urls?

Suppose I create sub domain per user, something like mysite.test.com which is secured under a wildcard ssl certificate. If I allow users to have their own custom url via a CNAME would the new url ...