SSL certificates are used to encrypt and authenticate connections to web servers

learn more… | top users | synonyms (1)

3
votes
0answers
2k views

SSL verification error with git (on github) on Ubuntu 14.04

I'm trying to clone the atom repository that just went fully open-source and I've run into some trouble. Attempting to git clone the repository is producing an SSL error: wug@wugputer:/src/test$ git ...
2
votes
0answers
31 views

Certificate can only be used by network service account

Issues : Our service is using one certification for partner service call. It worked well in IIS site which is running as network service account. But when we run test the code as administrator ...
2
votes
0answers
60 views

How do I make a Cisco Ironport appliance send “linked certificates” for HTTPS inspection?

I have a PKI tree, and the ironport is a CA at the second level of the PKI tree, (for issuing HTTPS inspection certs) Although I deployed the root certificate to all clients, and chrome/IE work ...
2
votes
0answers
175 views

Powershell Install-WindowsFeature Application-Server (and subfeatures) and assign certificate

I want to use a Powershell script to install Application Server on a windows 2012 server. When using the wizard, it prompts for you to select a certificate (for WS-Atomic Transactions) from the local ...
2
votes
0answers
61 views

CA is repeated in IIS https response, what is the configuration section to be checked?

This is about the https of the payment service provider we're using. We've notified them about the problem which causes some android devices to show SSL error message when the browser is redirected to ...
2
votes
0answers
402 views

Maven - resolving “java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors”

I am attempting to build/install this project on an Ubuntu 12.04 box: https://bitbucket.org/petermr/pdf2svg However: mvn clean install Fails to build due to getting errors like this: ...
2
votes
0answers
101 views

Suggestions on how to capture network connections/traffic for determining browser/SSL versions?

Note that I posted this Q to the StackExchange InfoSec site, but its not as populated as ServerFault and this is more on the technical side of network collection for web services. I've started ...
2
votes
0answers
245 views

Installing RD Gateway on a server with another site already in Default Web Site and listening on port 443?

I have a server running Windows Server 2008 R2, web facing with one website already installed. I would like to also add the RD Gateway services to this machine since it is already accessible form the ...
2
votes
0answers
682 views

How to alias a ssl certificate common name?

I have a server, which has a self signed certificate, which I am trying to securely access. I've got the certificate by looking at the output from openssl s_client -connect <ip>, and copied it ...
2
votes
0answers
186 views

Apache alternatives with per-directory SSLVerifyClient

My application requires per-directory verification of SSL client certificates (i.e. when user requests /foo we require they have a client certificate and verify it, but when they request /bar we don't ...
2
votes
0answers
221 views

Windows 2008 R2 Active Directory + NDES CA, OpenSSL clients renewing certificates

I posted another question which seems to be getting nowhere, so maybe it was too specific (or I was on the wrong track). I have OpenSSL clients which generate Certificate Signing Requests, which are ...
1
vote
0answers
6 views

Skip password authentication on Dovecot when client certificate provided

Using Dovecot version 2.1.7, I've gotten client certificates working with fairly little effort, and at this point I can choose between having password authentication after the certificate check or ...
1
vote
0answers
26 views

How do I change the expiration of CRLs with OpenSSL?

I am currently experimenting with my self signed CA. But in order for my devices to work I need a valid CRL. I set the CDP to one of the CDN hosting providers. As I have only 5 certificates issued I ...
1
vote
0answers
8 views

IIS bindings keep being removed

I'm having a problem where the security certificate for a site is being periodically unbound from port 443 and replaced with another certificate which is sitting on the server. So whenever a user ...
1
vote
0answers
20 views

Can I use both RSA and ECC certificates in apache?

If I simply use "SSLCertificateFile" and "SSLCertificateKeyFile" twice, the certificate chain is broken for the first one. Can I use both RSA and ECC certificate which is issued from different ...
1
vote
0answers
30 views

SSL certificate for sql-server on ec2

I have an ec2 node provisioned to host mssql server. I'm trying to request and install an ssl certificate for this node so I can securely connect to it but I can't get the certificate to appear in the ...
1
vote
0answers
53 views

HPOM Java GUI, multiple users connecting to different servers from Citrix sessions on the same server possible?

I have an app (HPOM Java GUI) running on a 2008 R2 Xenapp 6 box that employs client certificates for encrypting connections to the HPOM server. I have 2 different sets of users who will use this app ...
1
vote
0answers
181 views

PuppetDB: unable to get local issuer certificate

I'm attempting to use puppetdb on but I'm running into some issues. I have a node called puppet. It is the master as well as where I've installed puppetdb. It's also a node that puppet manages. ...
1
vote
0answers
289 views

Are there any modern browser/machine that not accept class 1 SSL certificate

I'm considering to buy a SSL certificate from external Certificate Authority to my web service which does not involve e-commerce. So I was planning to request the simplest class 1 cert to eliminate ...
1
vote
0answers
55 views

SSL causes timeout, my fault or startSSL's?

I am currently using a free startSSL certificate for my webserver at https://website.co.uk/ but for some reason it gave me Error code: ERR_CONNECTION_TIMED_OUT (On chrome), assuming it was my fault I ...
1
vote
0answers
51 views

Owncloud - Proxy changes certificate

I'm running an owncloud server 7.0.2 with apache(Ubuntu host) and configured it to use a self-signed ssl certificate. Everything works fine on my home-PC On an other machine I would like to use the ...
1
vote
0answers
203 views

SSL certificate is reported as invalid by iDRAC7

I'm trying to install a wildcard certificate (*.my.example.com) to an iDRAC6 - this cerificate was provided by RapidSSL (a subsidiary of GeoTrust) and is used across our ubuntu/apache webservers and ...
1
vote
0answers
318 views

Unable to convert JKS keystore to Oracle Wallet using orapki

I have generated jks keystore using keytool and using the jks keystore I have csr. The same csr I have sent to Signing authority. The Signing authority have given the trusted ...
1
vote
0answers
27 views

Revoking client certificate two way authentication

can we revoke a client certificate by serial (we are using mutual authentication)? we tried revoking a certificate using the certificate file but the revocation date is not set to the current date . ...
1
vote
0answers
20 views

Auditing connections using certificates

We would like to have clients connect using client certificates from a trusted (internal) issuer and then log which user connected. Unfortunately, the following limitations are preventing success: ...
1
vote
0answers
1k views

The OCSP server has no status for the certificate. (Error code: sec_error_ocsp_unknown_cert)

Just set up a website (Apache/Centos) with SSL where the free cert came from startssl. I've used startssl before, and never had any problems. I have no problems accessing the site from IE and ...
1
vote
0answers
377 views

SSL Returning Blank Page, No Catalina Errors

This is my second, maybe third, time configuring SSL with Tomcat. Earlier I had created a self signed, which worked, and now using my signed is proving fruitless. I am using Tomcat, operating from ...
1
vote
0answers
423 views

ldapmodify TLS: certificate is not valid - error -8179:Peer's Certificate issuer is not recognized

In trying to connect to an MS active directory server over ssl, I am trying to run this: ldapmodify -vv -H 'ldaps://abc.def.com:636' -D 'cn=user,cn=Users,dc=abc,dc=def,dc=com' -f test.ldif -w ...
1
vote
0answers
5k views

openssl s_client -connect: 20 error with server signed certificate for client

What I want I want to connect to a server using a given signed certificate (by the company running the server) What I have Ubuntu 12.04 LTS My key and CSR files A signed certificate. It was signed ...
1
vote
0answers
208 views

Apache SSL Certificate and Basic Auth combination - password if no certificate

Is it possible, to force apache to ask for password only if user don't have client-certificate installed? I'm almost sure, that this is possible, but I'm not able to find any confirmation anywhere. ...
1
vote
0answers
170 views

Can't make Koji Work on A Centos6 server

I setup the koji build environment in a Centos6 Machine server as suggested by the documentation (http://fedoraproject.org/wiki/Koji/ServerHowTo). I could properly access the Koji Web using http. Yet ...
1
vote
0answers
126 views

Unable to generate a Bundle of CA Root Certificates (failed to create symbolic link)

I am trying to generate a Bundle of CA Root Certificates. Similar to what Facebook has done for its PHP SDK (https://github.com/facebook/facebook-php-sdk/blob/master/src/fb_ca_chain_bundle.crt). I ...
1
vote
0answers
228 views

Unable to install Alpha SSL certificate for Openfire

I have been issued an SSL certificate for www.mydomain.com, I have been able to successfully implement the certificate for the site and the site is working is https. However, I have not been able to ...
1
vote
0answers
90 views

certwatch NSS_Init failure

Ever since I set up my CentOS 6 web server and created my own certificates, daily cron has been sending an email to root: /etc/cron.daily/certwatch: NSS_Init("/etc/pki/nssdb") failed I found ...
1
vote
0answers
28 views

Replacing old SSL cert with a new one with IIS

I purchased a new cert for my web server (GoDaddy) rather than renewed the current one. In the IIS manager, whenever I do the "Complete certificate request..." and then add my new cert it seems to ...
1
vote
0answers
181 views

Web Server with PKCS11 support for server certificates?

I have a PKCS#11-compatible smart card with either a private key, or a combination of a certificate and a private key on it (I can have both). I want to present the certificate from the smart card to ...
1
vote
0answers
195 views

Create jks for tomcat using .key ,.ca and .cert file

I have three file sample.cert, sample.CA,sample.key provided by Verisign. I need to create keystore for tomcat. As I searched I cannot use .key file directly to create keystore. The command I used ...
1
vote
0answers
66 views

Setting up SSL on an Apache Ubuntu Server

I am setting up an SSL certificate for the first time on an Ubuntu server. I have purchased a dedicated IP address and have purchased the certificate under the subdomain of secure.example.com Port ...
1
vote
0answers
169 views

How to properly replace CA certificate when clients get it bundled in PKCS#12 containers?

I'm about to regenerate a certificate of my CA (maintained by OpenSSL) used mostly to provide OpenVPN access to the intranet for my clients. My question is related to this one — "Certification ...
1
vote
0answers
396 views

Client Certificates not working with IIS7

I have been trying to get a webservice we are creating to require client certificates for connections for several weeks and haven't been having much luck. I thought that I would attempt to make a ...
1
vote
0answers
220 views

Outlook Internet Security Warning with UCC w/ Subject Alternative Names

I installed a certificate on the mail server with Subject Alternative Names. Thunderbird does not throw any warnings but when an Outlook 2007 client connects, it throws a warning titled, "Internet ...
1
vote
0answers
132 views

apache2 server running ruby on rails application has go daddy cert that works in chrome/firefox and ie 9 but not ie 8

I have a rails application up on a linode ubuntu 11 server, running apache2. I have a cert purchased from godaddy, (where we also bought our domain) and the cert is installed on my server. Part of my ...
1
vote
0answers
1k views

Extract cert and private key from JKS keystore to use it in Apache2 httpd

I tried to find this but no luck. I created a JKS keystore and generated a CSR, then imported the signed cert and intermediate and root CA certs. Used this keystore on Tomcat without problems. Now I ...
1
vote
0answers
65 views

require client certificates in IIS without requiring SSL

In IIS 7, I've created an https binding for a site, and I'd like to require client certificates for https and still keep my http endpoint. That is to say, I'd like to require client certificates for ...
1
vote
0answers
108 views

Generating client certificates for IIS webapp

I am trying to figure out how to set up my web application so that only clients (external) with issued certificates could access it. (on Windows7) I have followd this tutorial where i got a .CER and ...
1
vote
0answers
1k views

How to client authentication in SSL

I was trying to connect to my server over ssl. The server and client are made possible using Openssl. I made the code for study purpose only. I made self signed certificates for clients and servers ...
1
vote
0answers
214 views

RemoteApp Manager SSL certificate extend expiry date

I have setup an RDP RemoteApp Server for deploying a couple of programs. The self-signed SSL certificate that I created only has a 6-month lifespan! Is it possible to extend this expiry date?
1
vote
0answers
223 views

SSLRequire multiple OU validation

We are using client certificates with multiple OU fields. For example: OU1= ZZZ(unique value) OU2= XYZ(dynamic value) OU3= ABC(dynamic value) I need to write a rule only if the OU3 matches with the ...
1
vote
0answers
381 views

SSL is dead slow in Internet Explorer + Safari

I had a Comodo SSL certificate installed on my website yesterday, after going through a lot of trouble it has finally been activated. I am, however, experiencing serious issues in Safari and Internet ...
1
vote
0answers
279 views

Configure OpenSCEP to grant certificate requests automatically

I am trying to setup an OpenSCEP server that can grant certificates automatically instead of me running scepgrant command every time there is a new request? Can someone let me know how to proceed with ...