Tag Info

Hot answers tagged


This is not possible. To use an existing certificate to sign another certificates it must have the appropriate purpose and extension set, so that it can work as a CA (certificate authority). End user certificates don't have this extension. You would probably be able to use your certificate to sign a new one, but this new certificate could then not be ...


For each identity that one of your servers will assume (that is, each name a server will identify itself as), you'll need to have a certificate that matches that identity. An identity doesn't necessarily equal a DNS entry, but in cases when it does (such as web servers), it makes no difference whether the entries are CNAME or A (or even AAAA) records. To ...


There are 2 options: rewrite and HTTP 301 permanent redirect, second is more preferred: server { listen 80; server_name _; return 301 https://$server_name$request_uri; }


The public key is - like it's name suggests - public. It can thus not alone be used for authorization, since everybody knows it. But only the owner of the private key is able to sign some random challenge and this signature can then be verified by everybody having access to the public key - in this case the server which has sent this challenge to the client. ...

Only top voted, non community-wiki answers of a minimum length are eligible