SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

15
votes
4answers
1k views

SSL certificate selection based on host-header: is it possible?

Is it possible for a web server to select an SSL certificate to use based on the host-header of the incoming connection, or is that information that is only available after the SSL connection is ...
19
votes
3answers
20k views

stop apache from asking for SSL password each restart [duplicate]

Using instructions from this site but varying them just a little i created a CA using -newca, i copied cacert.pem to my comp and imported as trusted issuer in IE. I then did -newreq and -sign (note: i ...
4
votes
5answers
4k views

Exchange Certificates Don't Match Up

Ok, so I have two subdomains going to my Exchange box at work (Exchange 2007 on Server 2008). The internal subdomain is exchange.company.com and the outside domain is webmail.company.com. Our AD ...
4
votes
3answers
11k views

SSL certificate for a public IP address?

I just tried buying a Comodo Positive SSL but it was rejected due to not supporting a public IP address, but instead they only support a domain name. Does anyone know any SSL certificate provider ...
7
votes
2answers
4k views

Why is site serving different SSL certs to different browsers?

The SSL certificate on menswearireland.com and on www.menswearireland.com works fine on Safari, Chrome, SeaMonkey, K-Meleon, QtWeb, Firefox, and Opera. However, Internet Explorer claims that there is ...
14
votes
1answer
12k views

SSL Certificate Location on UNIX/Linux

Is there any standard or convention for where SSL certificates and associated private keys should go on the UNIX/Linux filesystem? Thanks.
4
votes
1answer
731 views

For enabling SSL for a single domain on a server with muliple vhosts, will this configuration work?

I just purchased an SSL certificate to secure/enable only ONE domain on a server with multiple vhosts. I plan on configuring as shown below (non SNI). In addition, I still want to access phpMyAdmin, ...
7
votes
2answers
15k views

Stunnel won't work with SSLv3 from some hosts

I'm trying to set up Stunnel to server as SSL cache. Everything was smooth, and mostly it works as designed. Then I encountered errors in log files: SSL_accept: 1408F10B: error:1408F10B:SSL ...
1
vote
5answers
2k views

How to install a single SSL certificate for www and non-www

I have purchased an SSL certificate and I should be able to configure IIS 7 to use that certificate for both https://domainname and https://www.domainname I have looked online but didn't find a ...
0
votes
2answers
690 views

Puppet client not connection to master - SSL connect Error

I installed the puppet master and agent on the same machine. When the client is started, I got the following error message. puppet agent --server=agent.com --no-daemonize --debug err: Could not ...
18
votes
3answers
2k views

choosing the right SSL certificate

We're looking to purchase some SSL certificates to secure the login pages of ecommerce sites. It is not required to secure the actual payment process as this is protected by a third party with its own ...
6
votes
2answers
671 views

Do I have to buy a second wildcard certificate for a subdomain?

We already have a wildcard certificate for *.mycompany.com. Our network has hosts that are only reachable internally. All of them belong to the internal.mycompany.com subdomain. There is a private ...
31
votes
2answers
7k views

Should a wildcard SSL certificate secure both the root domain as well as the sub-domains?

I ask this question, because Comodo are telling me that a wildcard certificate for *.example.com will also secure the root domain example.com. So with a single certificate, both my.example.com and ...
17
votes
2answers
4k views

Must CSRs be generated on the server that will host the SSL certificate?

Is it necessary to generate the CSR (Certificate Signing Request) on the same machine that will host my web application and SSL certificate? This page on SSL Shopper says so, but I'm not sure if ...
10
votes
2answers
2k views

Cost of getting in-house certificate authority trusted

My company has an in-house certificate authority that is currently self-signed. Since we want to start using it for external SSL and secure email to our customers, we need to get it trusted. Does ...
4
votes
5answers
5k views

Can I buy just one SSL cert for a subdomain?

I bought a plain ole SSL cert for mydomain.com. I also want to secure www.mydomain.com and mail.mydomain.com, which both map to the same server. Is this possible? I'm trying to avoid having to buy a ...
6
votes
2answers
753 views

How to find out if an OpenSSL certificate was created by a certain private key?

I have an OpenSSl certificate. I also need the private key. I was told it is located somewhere on the server, and true enough, I found multiple SSL key files. Before I try them all by brute force: Is ...
1
vote
2answers
304 views

How to have a certificate which works with both example.com and subdomain.example.com in IIS?

I have an IIS server hosting several websites, like: example.com subdomain1.example.com subdomain2.example.com I want those websites to be able to use SSL. If I install the certificate ...
4
votes
1answer
274 views

How do I work out my certificate chain order manually?

Lets say I start with a certificate. Using openssl I can print it out like this: openssl x509 -in cert.pem -text -noout And I'll get some output such as Validity, Issuer and Subject along with ...
2
votes
4answers
2k views

Apache rewrite rules and DNS settings for HTTPS sites

For a web application located at: https://www.domain.com/ With an SSL certificate issued to "www.domain.com", What is are the proper rewrite rules, DNS settings, or combination of both which makes ...
1
vote
2answers
1k views

How to fix from the server side: ERROR: The certificate of ‘www.example.org’ is not trusted

I am managing a website which uses a SSL/TLS Certificate from a well known issuer (GoDaddy in this case, although this same error appears with certificates from other issuers). The website is hosted ...
1
vote
1answer
802 views

Apache sending wrong SSL certificate on some connections / browsers

I have a bit of a strange problem and I hope someone can help! I have just moved servers (both Linux running Apache 2.2) and re-installed everything and pretty much everything is back up and running, ...
1
vote
2answers
2k views

Validating SSL clients using a list of authorised certificates instead of a Certificate Authority

Is it possible to configure Apache (or any other SSL-aware server) to only accept connections from clients presenting a certificate from a pre-defined list? These certificates may be signed by any CA ...
0
votes
3answers
566 views

Nginx sslv3 poodle disable

I tried setup SSL cert without SSLv3 in my nginx, but SSL Labs say, my server have SSLv3 how to disable it. My config: add_header Strict-Transport-Security max-age=31536000; add_header ...
0
votes
3answers
1k views

Can I generate CSR for remoted server and what server I should use(thin,mongrel)?

I am moving my app into production and need help in generating CSR. I created a private key and followed these steps: Created private key Entered passphrase for it (openssl genrsa -des3 -out ...
0
votes
1answer
808 views

Using several SSL certificates on same IP with IIS 7

I've got several domains (different sites with different domains. not sub-domains) which need SSL. I couldn't find a way to make it work - so that each domain will have its SSL certificate, but use ...
0
votes
3answers
71 views

mydomainname.com not working with https

I have create a self signed SSL Certificate for testing purpose and I have configure the generated certificate with my virtual hosts file. But when I tried to access my domainname.com with ...
18
votes
8answers
29k views

IIS7: can't set host name on site with SSL cert and port 443

Consider a Win 2008 SP2 machine with IIS7. The task is to apply a certificate and host name to the one and only Site on this machine. The site's host headers need to be abc.123.mysite.com The first ...
10
votes
3answers
12k views

How to set up my own full-featured certificate authority?

I'd like to set up a certificate authority, which I can then import to all the company's browsers and systems to get rid of all those nasty client warnings when using HTTPS or SSL.
31
votes
2answers
13k views

How can I work around problems with certificate configuration in Remote Desktop Services?

I am setting up a Remote Desktop Services farm, and am having trouble configuring certificates for it to use. A demonstration of the problem I'm seeing can be found in Step #4. At this point I am ...
29
votes
5answers
2k views

Is a Self Signed SSL Certificate a False Sense of Security?

Is a Self Signed SSL certificate a false sense of security? If you are being eavesdropped, the user will simply accept the certificate like he/she always does.
4
votes
6answers
9k views

Which wildcard SSL cert vendors allow you to set up the same cert on multiple servers? [closed]

We are looking to set up a service where multiple boxes, in different data centers, would allow HTTPS access. We are looking to set to buy a wildcard SSL cert to handle any number of vanity sub ...
15
votes
2answers
3k views

Can MS Certificate Services be a Subordinate to CA created with OpenSSL

I want to setup a enterprise certification authority for my domain. So I can issue certificates for various purposes. I would like to follow the best practice of having an offline CA as the root, ...
11
votes
7answers
8k views

Free (or nearly free) Trusted SSL Certificate? [closed]

Is it possible to get a trusted signed ssl certificate for free? I could create a self signed one using iis7 for example but these normally require the user to accept them as compared to one from a ...
5
votes
3answers
5k views

IIS6: Web Site presenting the wrong SSL certificate

Consider an IIS6 installation with multiple Web Sites. Each is intended to be a different subdomain with its own cert (not a wildcard cert). Each has their host-header specified properly. ...
4
votes
9answers
836 views

Must have SSL Cert Providers? [closed]

I am looking into getting an SSL certificate and was wondering what the best providers are? Please base your answer on price and supported browsers. I am shopping around for the best deal, but also ...
10
votes
2answers
5k views

How do I ensure that stunnel sends all intermediate CA certs?

A few computers, but not most, are rejecting the SSL certificate from my webserver. The problem seems to be that some computers are rejecting the CA certs. The problem seems to be manifesting on Mac ...
11
votes
4answers
955 views

differences of SSL certificates?

What are differences of SSL certificates for web server, such like extended validation, Smart Seal, wildcards, single root? What certificates are appropriate for what needs?
9
votes
4answers
30k views

Why does Window's SSL Cipher-Suite get restricted under certain SSL certificates?

Problem: Windows Server 2008 R2 will only support the following ssl cipher suites when using certain certificates on the server: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA ...
8
votes
5answers
7k views

What is TLS and how does it compare to SSL?

Is TLS the "new" version of SSL? What features does it add, or security issues does it address? Can anything that supports SSL support TLS? What would be involved in making the switch? Is the ...
4
votes
2answers
12k views

802.1x automatically validate certificate in windows clients

We're deploying a wireless networking using Windows Server 2008 NAC as a RADIUS server. When Windows XP or 7 clients connect they initally fail to connect. In order to enable the client to connect we ...
2
votes
1answer
2k views

Multiple SSL certs with Stunnel

I have purchased two PositiveSSL certs (seperately), one for manager.domain.com and another for domain.com. Originally I only needed manager.domain.com using SSL, but than I needed to use SSL on ...
6
votes
3answers
4k views

Cannot create self-signed SSL certificate with IIS 7

I'm trying to create a self-signed certificate from within the IIS 7 snap-in, with little luck. When prompted for a friendly name for the certificate, I type in the name, and click OK, but then I am ...
4
votes
5answers
10k views

Installing a CA certificate on multiple Windows machines (IE/Firefox)

I look after ~50 machines running XP/Vista, all on a single Windows Server 2008 domain. We are rolling out a number of test webservers internally, which have their SSL certificates signed with a ...
3
votes
1answer
13k views

What is the 'cacert.pem' and for what to use that?

I am developing a web application on localhost with domains and sub-domains and I would like to use a HTTPS connection. On my Mac OS, in order to enable SSL, I need to set Apache correctly, so I ...
1
vote
2answers
2k views

Import SSL Cert into IIS when I have the text of the certificate and private key

I am working on moving a site from Rackspace Cloud Sites onto a server running IIS and need to get the SSL certificate imported into IIS. All I have at the moment for the SSL certificate is what ...
9
votes
1answer
3k views

Details on exact expiration datetime of an SSL certificate?

Let's say we have an SSL certificate for a site. According to a web browser, the certificate expires tomorrow, Dec 10 2011. OK, but that glosses over time zones. When will it expire, exactly? 00:00 ...
6
votes
1answer
193 views

Does Apache needs to know about intermediate certificates for client authentication?

I have a following hierarchy of certificates. And I need to do a client authentication on Apache. . └── root (CA) - self signed ├── intermediate 1 (CA) | ├── client1 | ├── client2 ...
5
votes
3answers
2k views

Can I purchase a certificate for my domain that can sign other certificates for subdomains?

I have written a small program to run on a Windows computer that serves SSL/TLS web pages through port 443 to visiting web browsers. I want it to be easy for non-technical people to install and run ...
5
votes
3answers
4k views

Can you import a SSL certificate from another Windows IIS 7 server?

Usually I re-request the CSR and install the certificate when I move servers. Was hoping if there was a faster way, where I can just export/import a SSL certificate when I move my website to another ...