SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

learn more… | top users | synonyms (1)

6
votes
0answers
2k views

The OCSP server has no status for the certificate. (Error code: sec_error_ocsp_unknown_cert)

Just set up a website (Apache/Centos) with SSL where the free cert came from startssl. I've used startssl before, and never had any problems. I have no problems accessing the site from IE and Chrome,...
4
votes
0answers
122 views

Exchange 2013 Internal and External URLs with multiple servers and certificates

I'm building a lab with two Exchange 2013 Servers with different internal names and only one external URL, the naming schema is something like this: Internal Names: exchange1.local.example.com ...
4
votes
0answers
3k views

SSL verification error with git (on github) on Ubuntu 14.04

I'm trying to clone the atom repository that just went fully open-source and I've run into some trouble. Attempting to git clone the repository is producing an SSL error: wug@wugputer:/src/test$ git ...
3
votes
0answers
114 views

How well does haproxy scale for handling client certificate authentication?

As this is a performance-based question about a security issue, some folks at Information Security suggested I post here: My IoT company would like to use client certificate authentication to secure ...
3
votes
0answers
229 views

Creating SSL certificate signed by a self-signed CA certificate in Jetty

I'm trying to configure a jetty-distribution-9.3.1.v20150714 backend running on Java 1.8.0_45-b14 with a certificate signed by a self-signed CA certificate, for SSL pinning. Following Apple's guide, ...
3
votes
0answers
87 views

Browser and openSSL return different certificates

I'm trying to debug my first attempt at using SSL Pinning in an app I'm developing. I use a shared hosting service on which I have a few domains active. One of the domains is going to act as an API ...
3
votes
0answers
1k views

PuppetDB: unable to get local issuer certificate

I'm attempting to use puppetdb on but I'm running into some issues. I have a node called puppet. It is the master as well as where I've installed puppetdb. It's also a node that puppet manages. ...
3
votes
0answers
330 views

How to properly replace CA certificate when clients get it bundled in PKCS#12 containers?

I'm about to regenerate a certificate of my CA (maintained by OpenSSL) used mostly to provide OpenVPN access to the intranet for my clients. My question is related to this one — "Certification ...
2
votes
0answers
54 views

Installing apache2 ssl - ubuntu

I need to install a ssl in my apache2 ubuntu, and do not know what I'm wrong, but the fact is that I do not get ... I have the relevant files: one .key file and two .crt files. At first, when editing ...
2
votes
0answers
342 views

Samba4 DC cannot enable TLS encryption

I've created my SSL certificate through an intermediate and have attached the certificate, key and (chain) CA to the Samba4 config under [General]. Upon restarting Samba though, the LDAP server is no ...
2
votes
0answers
63 views

Apache2:Unable to read server certificate from file

Cannot start apache2 server. error info is below. Looking into similar questions (SSL Error - unable to read server certificate from file, Apache cannot read certificate file, and so on), still ...
2
votes
0answers
61 views

How to prevent users from bypassing certificate warnings in Outlook

I had a case where a roaming user was connected to a public WiFi and got a certificate warning. The user saw the error and called me before connecting. Turns out the WiFi was doing SSL inspection. ...
2
votes
0answers
45 views

Losing server that generated CSR (Certificate Signing Request)

I have created a CSR file on a Windows server about 3 months earlier and used this CSR file to buy a wildcard SSL Certificate. The SSL company (opentrust) then gave me 3 files, the root CA file, the ...
2
votes
0answers
871 views

Import a P12 certificate into a NSS database (with an alias)

Here´s the deal... I have a personal P12 certificate generated by a certificate authority. I want to use it with CURL to access a protected URL. If CURL on CENTOS was compiled with openssl, I should ...
2
votes
0answers
1k views

OpenSSL cannot convert PKCS12 exported from Cisco ASA 55xx

I have exported an existing certificate+key from an ASA 5510: asa5510(config)# crypto ca export MYTRUSTSTORE pkcs12 MYPASSWORD Saved the output in a file (vpn-cisco.pkcs12), and now I am trying to ...
2
votes
0answers
49 views

Certificate can only be used by network service account

Issues : Our service is using one certification for partner service call. It worked well in IIS site which is running as network service account. But when we run test the code as administrator (...
2
votes
0answers
358 views

Powershell Install-WindowsFeature Application-Server (and subfeatures) and assign certificate

I want to use a Powershell script to install Application Server on a windows 2012 server. When using the wizard, it prompts for you to select a certificate (for WS-Atomic Transactions) from the local ...
2
votes
0answers
78 views

CA is repeated in IIS https response, what is the configuration section to be checked?

This is about the https of the payment service provider we're using. We've notified them about the problem which causes some android devices to show SSL error message when the browser is redirected to ...
2
votes
0answers
741 views

Maven - resolving “java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors”

I am attempting to build/install this project on an Ubuntu 12.04 box: https://bitbucket.org/petermr/pdf2svg However: mvn clean install Fails to build due to getting errors like this: Downloading:...
2
votes
0answers
159 views

Suggestions on how to capture network connections/traffic for determining browser/SSL versions?

Note that I posted this Q to the StackExchange InfoSec site, but its not as populated as ServerFault and this is more on the technical side of network collection for web services. I've started ...
2
votes
0answers
481 views

Installing RD Gateway on a server with another site already in Default Web Site and listening on port 443?

I have a server running Windows Server 2008 R2, web facing with one website already installed. I would like to also add the RD Gateway services to this machine since it is already accessible form the ...
2
votes
0answers
250 views

Windows 2008 R2 Active Directory + NDES CA, OpenSSL clients renewing certificates

I posted another question which seems to be getting nowhere, so maybe it was too specific (or I was on the wrong track). I have OpenSSL clients which generate Certificate Signing Requests, which are ...
1
vote
0answers
43 views

Squid reverse proxy with multiple SSL-certificates via SNI

Does squid Proxy Server offer the possibility to supply multiple SSL certificates to it? I have a server with various virtual machines running Apache web servers for different customers. As an ...
1
vote
0answers
27 views

Active Directory, wildcard security certificate, and remote access

Is there any way to secure an entire Active Directory (AD) domain using a single trusted, third-party Certification Authority (CA)-signed wildcard security certificate so that remote access will be ...
1
vote
0answers
26 views

Windows Server 2008 R2 w/ IIS 7.5 w/ Autodiscover.xml, but SAN-Certificate causes “Target Principle name is incorrect”

Outlook 365 finds the account through autodiscover without any problems, but warns about "Target Principle name is incorrect" (CN=eposthub.de), when adding an account like anything@nabil-redmann.de ...
1
vote
0answers
30 views

Import Windows 2008R2 .p12 certificate into Samba4 SDC

In our firm we need to migrate our existing infrastructure from Windows 2008R2 to Samba 4. To do this we already managed to add the Samba machine as a secondary domain controller. The next step would ...
1
vote
0answers
20 views

Certificate is not showing up in SQL Server

I need to say first that I am not a DBA and so, my problem is getting SQL Server Configuration Manager to recognize a certificate. I have 3 SQL Instances I work on, 2 are on the same network, the ...
1
vote
0answers
108 views

Apache, Tomcat : How to use multiple SSL certificates on a single server

I am working on our Debian X64 server which is the endpoint for 5 domain-names. One of the domain-names is utilized by a web-project running on Apache web server. The remaining 4 domains have ...
1
vote
0answers
58 views

nginx SSL client certificate handshake very slow for domain and paths

I have a server with some subdomains publicly accessible while on one subdomain a client side certificate is required. Not only that, paths on that subdomain point to different applications. I.e that ...
1
vote
0answers
23 views

Install Comodo SSL Cert for AWS Elastic Beanstalk Instance

I purchased a wildcard SSL cert from Comodo SSL, but am really confused on how to install it to use with my AWS Elastic Beanstalk instance. The files they sent me are: STAR_setheroapp_com.crt ...
1
vote
0answers
23 views

How to use your ssl certificate and key from your website with activemq console?

After enforcing strict transport security in a server, it is also forcing https into port 8161 for activemq which of course makes it fail. I followed this instructions to enable https on activemq ...
1
vote
0answers
48 views

Exchange 2013 - IMAP with Wildcard Cert - Error when Set-ImapSettings

Trying to get a wildcard cert working on Exchange 2013 for IMAP purposes. Unable to add in ECP (receives error about it not having a FQDN since its a wildcard) So then I try to run: Set-...
1
vote
0answers
30 views

HTTP to HTTPS redirect not working!? - Tried multiple methods

I purchased a Standard UCC SSL Up to 100 pack from Godaddy. I have installed all the required files on my server, and going to https://www.example.com works fine, but http://www.example.com is NOT ...
1
vote
0answers
164 views

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

I have set up my SSL configuration in an Azure Ubuntu VM using Tomcat8. The service seems to be running on port 8443. I have created an endpoint on Azure from public port 443 to 8443. However, when ...
1
vote
0answers
234 views

hMail Server SSL Certificate Verify Issue | TLS/SSL handshake failed

I will tell you my situation step by step and ask me any necessary questions and help me to fix hmail certificate issue. First of all : 1- i am using a windows server 2008 - r2 2- latest hmail ...
1
vote
0answers
47 views

Enable x509 Authentication in Tomcat on Openshift

I have a web application deployed on Tomcat 7 running on Openshift. I managed to enable HTTP-to-HTTPS redirection on the server (instruction). I don't have valid certificate. So I have to use the ...
1
vote
0answers
96 views

Java keystore: How to import the ca certificates correctly?

We have renewed the certificate of one of our server (apache httpd). For a webservice interface (for mobile clients) we need the certificate also on tomcat, means: stored in a java keystore. We have ...
1
vote
0answers
43 views

Why this error: SSCEP.exe : error verifiying signature happens?

I'm trying to use sscep.exe (NDES/SCEP Windows Test Tool). In order to get a good enrollment, there is a README file contained in the zip file, which you can get on that website. So, the README file ...
1
vote
0answers
352 views

certificate issue in squid3 on pfsense

I am using pfsense latest version and installed squid3 with Transparent HTTP Proxy and HTTPS/SSL interception with squidguard but many site are not open and getting below errors. (54) Connection ...
1
vote
0answers
23 views

Tomcat Sending Invalid SSL Certificate to Client

I am trying to install SSL certificates on tomcat on Windows 2012 R2 server . I followed the normal procedure: created keystore generated csr got certificates from Godaddy imported certificates ...
1
vote
0answers
189 views

NPS/RAIDUS Authentication for Wifi and certificates for non trusted server

I'm trying to setup an NPS server as RADIUS server for Wifi network of employers of my company. All mobile devices could connect to this networks using their domain user/pass. My problem is to let ...
1
vote
0answers
549 views

SSL: couldn't read X509 certificate from pem file lighttpd

I have installed ssl key in the past on my lighttpd and I've documented the steps I did to make sure that I can replicate it in the future. Well, I haven't touched the server for a while and I need ...
1
vote
0answers
33 views

Configure Apache to serve proper certificate chain

I am running Apache 2.2.15 on Red Hat 6.3, and I can't get certificate chains to work properly. I am using my organisations PKI for certificate signing etc, which does not publish their root ...
1
vote
0answers
439 views

Windows Server 2012R2 RADIUS (wifi) clients won't accept bought wildcard certificate

I've been managing the NPS Server for a while and thought it was time to treat it a valid SSL certificate. The setup I bought a wildcard SSL certificate from comodo, compiled it to an .pfx ...
1
vote
0answers
124 views

Azure hosted website certificate chain (comodo) intermittently doesn't send full chain

We host a website in azure. The service we host has 6 instances. On that service we have added a certificate that covers the site, and has an authentication chain that looks like: our certificate ...
1
vote
0answers
47 views

Certificate chain lost apache 2.4

So I think I'm not getting something here. I'm getting javax.net.ssl.SSLHandshakeException: null cert chain when I access my application via apache httpd, but not when I'm accessing it directly. ...
1
vote
0answers
32 views

MS Webdeploy V3 encryptPassword correct usage

I have installed MS Webdeploy (Version 3.5) on both my ("old") Server 2003/IIS6 and ("new") Server 2012/IIS8. Currently, I am following the guidelines in the article here, backing up the Target ...
1
vote
0answers
519 views

nginx: No client certificate CA names sent

I have nginx and want it to verify client certificates. So I bought commercial certificate for server, and non-commercial for clients. Basically I've generated client certificates with easy-rsa ...
1
vote
0answers
449 views

SSL Configuration failed in Apache after moving keys/certs to another machine

I'm in the process of moving my website to another server, and after moving the SSL key and certs and recreating the same Apache config, I encounter the following in the error logs at the time of ...
1
vote
0answers
1k views

Squid 3.5.4: ssl bump: error - Error negotiating SSL connection on FD 10: Success (0)

I am trying to install squid 3.5.4 (on docker, running debian 8) and run it in ssl-bump mode. Compilation: ./configure --prefix=/opt/squid --srcdir=. --disable-maintainer-mode \ --disable-dependency-...