SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms

3
votes
0answers
53 views

Windows PKI: How can I import, sign/issue and export a large number of CSRs?

I have a lot of CRS that I need to have signed/issued and exported in windows. I was hoping I could batch process them somehow (certutil sounds like it can do some of the work) but I'm not quite sure ...
2
votes
0answers
52 views

Powershell Install-WindowsFeature Application-Server (and subfeatures) and assign certificate

I want to use a Powershell script to install Application Server on a windows 2012 server. When using the wizard, it prompts for you to select a certificate (for WS-Atomic Transactions) from the local ...
2
votes
0answers
30 views

CA is repeated in IIS https response, what is the configuration section to be checked?

This is about the https of the payment service provider we're using. We've notified them about the problem which causes some android devices to show SSL error message when the browser is redirected to ...
2
votes
0answers
53 views

Suggestions on how to capture network connections/traffic for determining browser/SSL versions?

Note that I posted this Q to the StackExchange InfoSec site, but its not as populated as ServerFault and this is more on the technical side of network collection for web services. I've started ...
2
votes
0answers
126 views

Installing RD Gateway on a server with another site already in Default Web Site and listening on port 443?

I have a server running Windows Server 2008 R2, web facing with one website already installed. I would like to also add the RD Gateway services to this machine since it is already accessible form the ...
2
votes
0answers
279 views

How to alias a ssl certificate common name?

I have a server, which has a self signed certificate, which I am trying to securely access. I've got the certificate by looking at the output from openssl s_client -connect <ip>, and copied it ...
2
votes
0answers
204 views

Windows 2008 R2 Active Directory + NDES CA, OpenSSL clients renewing certificates

I posted another question which seems to be getting nowhere, so maybe it was too specific (or I was on the wrong track). I have OpenSSL clients which generate Certificate Signing Requests, which are ...
1
vote
0answers
289 views

Enabling SHA2 Certificate Support on Windows Server 2003

A little background information first. I have an SSIS package that runs inside a Windows Server 2003 SP2 32 bit environment. The package recently started failing with the following error during a ...
1
vote
0answers
108 views

SSL Returning Blank Page, No Catalina Errors

This is my second, maybe third, time configuring SSL with Tomcat. Earlier I had created a self signed, which worked, and now using my signed is proving fruitless. I am using Tomcat, operating from ...
1
vote
0answers
1k views

SSL verification error with git (on github) on Ubuntu 14.04

I'm trying to clone the atom repository that just went fully open-source and I've run into some trouble. Attempting to git clone the repository is producing an SSL error: wug@wugputer:/src/test$ git ...
1
vote
0answers
179 views

ldapmodify TLS: certificate is not valid - error -8179:Peer's Certificate issuer is not recognized

In trying to connect to an MS active directory server over ssl, I am trying to run this: ldapmodify -vv -H 'ldaps://abc.def.com:636' -D 'cn=user,cn=Users,dc=abc,dc=def,dc=com' -f test.ldif -w ...
1
vote
0answers
247 views

Maven - resolving “java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors”

I am attempting to build/install this project on an Ubuntu 12.04 box: https://bitbucket.org/petermr/pdf2svg However: mvn clean install Fails to build due to getting errors like this: ...
1
vote
0answers
1k views

Understanding the output of openssl s_client

Ever since our email provider changed their SSL certificate, a POP3 client based on mono refuses to connect to their secure POP server to download emails. Other clients do not have an issue; e.g. ...
1
vote
0answers
90 views

Can't make Koji Work on A Centos6 server

I setup the koji build environment in a Centos6 Machine server as suggested by the documentation (http://fedoraproject.org/wiki/Koji/ServerHowTo). I could properly access the Koji Web using http. Yet ...
1
vote
0answers
89 views

Unable to generate a Bundle of CA Root Certificates (failed to create symbolic link)

I am trying to generate a Bundle of CA Root Certificates. Similar to what Facebook has done for its PHP SDK (https://github.com/facebook/facebook-php-sdk/blob/master/src/fb_ca_chain_bundle.crt). I ...
1
vote
0answers
165 views

Unable to install Alpha SSL certificate for Openfire

I have been issued an SSL certificate for www.mydomain.com, I have been able to successfully implement the certificate for the site and the site is working is https. However, I have not been able to ...
1
vote
0answers
23 views

certwatch NSS_Init failure

Ever since I set up my CentOS 6 web server and created my own certificates, daily cron has been sending an email to root: /etc/cron.daily/certwatch: NSS_Init("/etc/pki/nssdb") failed I found ...
1
vote
0answers
25 views

Replacing old SSL cert with a new one with IIS

I purchased a new cert for my web server (GoDaddy) rather than renewed the current one. In the IIS manager, whenever I do the "Complete certificate request..." and then add my new cert it seems to ...
1
vote
0answers
111 views

Web Server with PKCS11 support for server certificates?

I have a PKCS#11-compatible smart card with either a private key, or a combination of a certificate and a private key on it (I can have both). I want to present the certificate from the smart card to ...
1
vote
0answers
147 views

Create jks for tomcat using .key ,.ca and .cert file

I have three file sample.cert, sample.CA,sample.key provided by Verisign. I need to create keystore for tomcat. As I searched I cannot use .key file directly to create keystore. The command I used ...
1
vote
0answers
52 views

Setting up SSL on an Apache Ubuntu Server

I am setting up an SSL certificate for the first time on an Ubuntu server. I have purchased a dedicated IP address and have purchased the certificate under the subdomain of secure.example.com Port ...
1
vote
0answers
115 views

How to properly replace CA certificate when clients get it bundled in PKCS#12 containers?

I'm about to regenerate a certificate of my CA (maintained by OpenSSL) used mostly to provide OpenVPN access to the intranet for my clients. My question is related to this one — "Certification ...
1
vote
0answers
235 views

Client Certificates not working with IIS7

I have been trying to get a webservice we are creating to require client certificates for connections for several weeks and haven't been having much luck. I thought that I would attempt to make a ...
1
vote
0answers
137 views

Apache alternatives with per-directory SSLVerifyClient

My application requires per-directory verification of SSL client certificates (i.e. when user requests /foo we require they have a client certificate and verify it, but when they request /bar we don't ...
1
vote
0answers
187 views

Outlook Internet Security Warning with UCC w/ Subject Alternative Names

I installed a certificate on the mail server with Subject Alternative Names. Thunderbird does not throw any warnings but when an Outlook 2007 client connects, it throws a warning titled, "Internet ...
1
vote
0answers
118 views

apache2 server running ruby on rails application has go daddy cert that works in chrome/firefox and ie 9 but not ie 8

I have a rails application up on a linode ubuntu 11 server, running apache2. I have a cert purchased from godaddy, (where we also bought our domain) and the cert is installed on my server. Part of my ...
1
vote
0answers
699 views

Extract cert and private key from JKS keystore to use it in Apache2 httpd

I tried to find this but no luck. I created a JKS keystore and generated a CSR, then imported the signed cert and intermediate and root CA certs. Used this keystore on Tomcat without problems. Now I ...
1
vote
0answers
57 views

require client certificates in IIS without requiring SSL

In IIS 7, I've created an https binding for a site, and I'd like to require client certificates for https and still keep my http endpoint. That is to say, I'd like to require client certificates for ...
1
vote
0answers
107 views

Generating client certificates for IIS webapp

I am trying to figure out how to set up my web application so that only clients (external) with issued certificates could access it. (on Windows7) I have followd this tutorial where i got a .CER and ...
1
vote
0answers
784 views

How to client authentication in SSL

I was trying to connect to my server over ssl. The server and client are made possible using Openssl. I made the code for study purpose only. I made self signed certificates for clients and servers ...
1
vote
0answers
160 views

RemoteApp Manager SSL certificate extend expiry date

I have setup an RDP RemoteApp Server for deploying a couple of programs. The self-signed SSL certificate that I created only has a 6-month lifespan! Is it possible to extend this expiry date?
1
vote
0answers
195 views

SSLRequire multiple OU validation

We are using client certificates with multiple OU fields. For example: OU1= ZZZ(unique value) OU2= XYZ(dynamic value) OU3= ABC(dynamic value) I need to write a rule only if the OU3 matches with the ...
1
vote
0answers
305 views

SSL is dead slow in Internet Explorer + Safari

I had a Comodo SSL certificate installed on my website yesterday, after going through a lot of trouble it has finally been activated. I am, however, experiencing serious issues in Safari and Internet ...
1
vote
0answers
228 views

Configure OpenSCEP to grant certificate requests automatically

I am trying to setup an OpenSCEP server that can grant certificates automatically instead of me running scepgrant command every time there is a new request? Can someone let me know how to proceed with ...
1
vote
0answers
205 views

Exchange 2010 TLS Cert questions

I'm trying to wrap my head around with enabling TLS for a specific domain on Exchange 2010 server but I have a few questions that I'm sure you guys have an answer to. I've gone through this guide ...
1
vote
0answers
256 views

Switch stunnel from self-signed cert to signed by CA cert

We use stunnel configured to provide SSL-tunnel between SERVER A (where we have stunnel configured as client) and many SERVERS B (where we deployed stunnel configured to work in server mode). We use ...
1
vote
0answers
984 views

Debugging mutual-authentication SSL handshake

I've got a load balancer that is configured for mutual-authentication SSL. As far as I'm aware, the load balancer has been configured with an Entrust certificate, and has been installed with our own ...
1
vote
0answers
150 views

On IIS6, can I install a certificate on a website with another CSR pending?

I have a GoDaddy exteneded EV certificate that I am trying to renew. It had completely expired before I realized it was up for renewal. In a haste, I generated a CSR to issue a new certificate from ...
1
vote
0answers
184 views

Should the “subject alternative name” property of an X509 certificate be set to critical?

I'm writing a tool to generate self-signed X509 certificates and X509 certificate requests and I'm wondering how the "critical" property of the SubjectAlternativeName (OID 2.5.29.17) should be ...
1
vote
0answers
503 views

hMailserver: Secure SMTP SetUP - Trusted Cert Issue

I'm trying to configure hMailserver with a 3rd party SSL cert. I'v 1) Installed the SSL key & cert 2) Placed the hash named CA and intermediate in to the \externals\cs folder Now, the connection ...
1
vote
0answers
276 views

WebLogic 8.1 and 4096-bit SSL?

We have a scenario in which we'd like to configure a WebLogic 8.1 server (running on Windows, JRockit 1.4.2) to connect to Active Directory over SSL for authentication. Our Active Directory is ...
1
vote
0answers
137 views

Trusted 2008 RDP publisher thumbprint failure

Server 2008 R2, Windows 7. I'm trying to use group policy to specify the thumbprints of a trusted RDP publisher (me). I've followed the msdn instructions for getting and setting the thumbprint and ...
0
votes
0answers
32 views

Nginx proxy to back-end with SSL client certificate authentication

I have two servers, both have nginx. Server A is listening to 443 and is configured to authenticate with a Client SSL certificate. Server B has an internal process that needs to communicate to Server ...
0
votes
0answers
13 views

SSL cert issued to and SAN attribute

I have added a cert to my application cacerts file. The new cert is issued to one DNS(abc.com) and they have added few other DNS(XYZ.com, TEST.com) to the SAN attribute while creating. I tried ...
0
votes
0answers
38 views

SSL Certificate error only on host server

I'm running Windows Server 2008 R2 with IIS 7.5. This is in a development environment. I have a self-signed certificate, and a second wildcard server authentication certificate which was issued by ...
0
votes
0answers
36 views

Java keystore - keytool error: java.lang.Exception: Failed to establish chain from reply

I am trying to import a cert into my java keystore. The cert is not signed with an intermediary cert, its signed from the root cert. I've imported the root cert into my keystore, however I am still ...
0
votes
0answers
33 views

SSL Client Certificates on Mobile

Has anyone gotten mobile devices to use client SSL certs with nginx? I have configured a private Certificate Authority and I'm using an intermediate cert to sign client certificates. Clients ...
0
votes
0answers
19 views

Nginx configuration: continue sending request to application server on ssl_client_verify FAIL

I am currently using nginx/uwsgi, with nginx to check validity of client certificates (if one is provided). server { ... location /example { ... uwsgi_param SSL_CLIENT_VERIFY ...
0
votes
0answers
38 views

Self Signed SSL Cert - Browser Warning

I generated a new self-signed cert for one of our intranet sites. The old cert expired today. I pushed the new cert out via GPO and deleted the old one. I can see on the client that the new cert has ...
0
votes
0answers
35 views

Have to reinstall certificate every so often

We call a web service which we have a mutual authentication set up. I have their certificate installed on my server in the "local computer" folder under "Third Party Root Cert Authorities". I call ...