Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [self-signed-certificate]

The tag has no usage guidance.

0
votes
0answers
16 views

Logstash isn't accepting the self signed certificates and throws a sslv3 alert handshake failure

I have set up an elsatic stack in my laptop and I have configured full stack (filebeat, logstash, elasticsearch and kibana) in it. But now I need to connect filebeat and logstash in a secure manner ...
0
votes
0answers
161 views

x509 certificate not valid for any names when added IP address to openssl.cnf

A self-signed certificate works well while the command used to generate it on a ubuntu machine is: openssl req -x509 -newkey rsa:4096 -keyout private.key -out cert.crt -days 365 -nodes If the ...
0
votes
0answers
32 views

Proftpd and DSA certificate for TLS

I'm trying to configure a Docker image based on an Alpine 3.8 to run a Proftpd server. Everything works well even with TLS RSA Certificate. Proftpd run well and I can upload and download files. But ...
0
votes
0answers
17 views

apache SSL client certificat check take a long time (self signed)

I protect a specif url of the web server with a self signed client certificate. Here is the apache configuration: SSLVerifyClient none SSLCACertificateFile /etc/apache2/ssl.crt/ca-bundle.crt ...
0
votes
1answer
70 views

How can I generate a self signed certificate that will not fire a SSL_ERROR_BAD_CERT_DOMAIN?

I need to generate a self signed certificate for my application and I want to be able to make it valid if a self generated root certificate have been added to the web browser manually. The problem is ...
0
votes
1answer
117 views

Self-Signed Certificate working in OS X but not Windows

Im trying to create a self-signed certificate to use a HTTPS connection to access my internal site (jira.intranet.com). I have successfully followed this article https://security.stackexchange.com/...
0
votes
2answers
594 views

SSL Self-Signed Certificate Vulnerability Keeps Returning

So, I've been dealing with a recurring problem with my workstations self-generating certificates. They're appearing in the "Personal" certificate store. Even after I manually delete them from the ...
0
votes
0answers
389 views

Self-signed certificate for SSTP VPN server

I'm developing a custom VPN solution that needs to support SSTP for Windows clients. For this, the SSTP specifications (and Windows) require my server to authenticate itself using a certificate during ...
1
vote
1answer
1k views

Why openssl ignore -days for expiration date for self signed certificate?

I have a bash script that generates a self-signed certificate and works perfectly fine: #! /bin/bash # Generate self signed root CA cert openssl req -nodes -x509 -days 358000 -newkey rsa:2048 -...
2
votes
1answer
562 views

Cannot add a self signed certificate in Firefox

I need to set up an IIS webserver that will be accessed by a small, finite number of users. I was considering using a self-signed certificate only, and manually installing it on the user's systems. ...
0
votes
0answers
41 views

How to create self-signed certificate to sign Office macros

I need to create a self-signed certificate which I can use to sign different kind of Office macros (for Outlook, Excel etc.). I must be able to use this certificate on all workstations in my domain, ...
2
votes
1answer
97 views

What is the use of SigningCertificate in AWS Cognito

I'm using AWS Cognito for my user authentication. I want to know the actual use of SigningCertificate in AWS cognito? NOTE: We can get the SigningCertificate of AWS Cognito usign this ...
0
votes
1answer
301 views

Configuring Imported Self Signed SSL Certificate to SQL Server Express

I've created a self-signed certificate and configured with SQL Server Express. The encryption works fine on my PC. When I export the certificate to another PC I can import fine and can see the ...
3
votes
3answers
77 views

Does filling out the Country Name, State etc. matter when creating a self-signed certificate for Postfix?

When I set up Postfix I have to create a cert because the snakeoil cert included with Postfix is there strictly for the purpose of demonstration. I use this command: sudo openssl req -x509 -newkey ...
0
votes
0answers
416 views

Node.js HTTPS error (SSL_ERROR_NO_CYPHER_OVERLAP) - no common encryption algorithm(s)

I have seen other similar questions but non addresses my problem. I have generated my TLS (openSSL) Self-Signed certificate, but seems not working on my NodeJS server. Instructions to generate SSL ...
16
votes
2answers
2k views

Why not validate self signed certificates through DNS-record instead of letsencrypt

I was just wondering. We use a lot of SSL certificates. Nowadays, we almost exclusively use letsencrypt (thanks!). The bottom line of these certificates is, that proof of ownership of the domain name(...
0
votes
1answer
142 views

Self signed certificate is still trusted after revocation

I have create Root CA and Server Certificate following didierstevens blog. My browsers still trusts the certificate even after revoking the server certificate. I was getting certificate revoked error ...
1
vote
2answers
998 views

Unable to access a server with a self-signed SSL certificate from some devices

I'm struggling to connect to an SSL site (self-signed certificate) that seems to work from other computers/internet connections. I've tried accessing the site using wget: wget https://example.com --...
0
votes
1answer
105 views

Cannot create SSL Engine: The target principle name is incorrect, SSL and SAP HANA

I'm getting the following error when attempting to connect to a tenant database in a multi-tenant SAP HANA Server running on SUSE Linux: I can connect via SSL to the system database of the HANA ...
2
votes
2answers
991 views

Issue with generating self-sign certificate with proper SAN field

I am trying to configure Janus Gateway and I am experiencing with an issue with my self-signed certificate, see log below Jan 25 09:50:46 localhost platform: [2018/01/25 09:50:46 EST] [EROR] /api/v4/...
0
votes
1answer
23 views

Will an IIS SelfSSL certificate still be valid when the signing server is replaced?

Will my 10 year valid self-signed certificate, that is using a common name not resembling any hostname, still be valid/trusted by others in the AD, after the signing server is replaced in maybe a few ...
0
votes
0answers
162 views

Self Signed certificate on tomcat

I have installed OpenIAM application on tomcat and same is working fine. But unable to install self signed certificate on the same. I have tried from all ways, generate .keystore file, in .jks file ...
0
votes
0answers
938 views

How to generate client certificate for OpenVPN when you only have server.p12 and dh2048.pem?

I have a server with openvpn up and running, there are only two files specified in the server configuration: dh /etc/openvpn/dh2048.pem pkcs12 /etc/openvpn/server.p12 I can read these files. I need ...
0
votes
0answers
609 views

AWS API Gateway: self-signed cert for backend HTTP endpoint integration

I have a simple AWS API gateway endpoint. It accepts an https GET request, this is passed to a back-end https API via an integraiton request, and returns simple JSON. This works great when we hit ...
0
votes
1answer
531 views

Client Certificate Authentication and Windows Authentication on IIS

I have a https service hosted in IIS 10 which previously was using windows authentication, and was working good. Now, we need to implement Client Certificate Authentication. Currently i have enabled ...
0
votes
1answer
25 views

Certificate Error since Migrating to new Exchange 2007 Server

I just finished moving mailboxes last night to a second Exchange 2007 server I built (moving from physical to virtual). Clients are pointed to the new server. Getting ready to remove the old server ...
1
vote
0answers
297 views

Apache : Wrong hostname is checked when connecting to proxyed sever using SSL

I'm trying to make this setup work : Reverse proxy : SSL enabled and facing the internet using Let's Encrypt certificate (reverse-proxy.com). Target : Site accessed via the reverse proxy with SSL ...
3
votes
0answers
490 views

The revocation function was unable to check revocation for the certificate 0x80092012

Please help me to deal with self-signed revocation check I've used makecert.exe to create root and client certificate The problem is that certutil fails to check certificate with error The ...
0
votes
1answer
171 views

Is it possible to have full SSL security on localhost services?

I've been reading a lot about SSL certificate as of late and trying to get my localhost services to have SSL certificates to avoid warnings and whatnot. These services are 100% local, their ports are ...
0
votes
1answer
91 views

65536bit long certificate self-signing using openssl fails

I created my privatekey & certificate request using openssl req -new -newkey rsa:65536 > server.cert.csr. This took some minutes and produced 2 files. Then I decrypted my private key using ...
0
votes
1answer
309 views

How to get a signed powershell script on Windows without deprecated makecert.exe? [closed]

I've followed the instructions here Create Code Signing Certificate on Windows for signing PowerShell scripts but it doesn't work as I get this error: File C:\temp\script.ps1 cannot be loaded. A ...
1
vote
0answers
1k views

OpenSSL self-signed certificates, Windows 10 laptops, and “This certificate has an invalid digital signature” error

I have the following: OpenSSL-generated, Self-signed Internal CA cert OpenSSL-generated Internal-CA signed, wildcard cert This cert protects our internal websites. e.g. "myservice.corp.example.com" ...
0
votes
1answer
166 views

Do I even need a federation certificate?

I'm in the process of migrating our Exchange 2010 to Exchange 2016, which is going smoothly, except for one issue, which I just can't seem to find an answer to. The 2010 Exchange had an expired ...
3
votes
2answers
845 views

How to certify a self-signed imap email server

My task is to retrieve emails from an imaps email server using Java so as a client I need to authenticate the email server using an appropriate certificate. It seems however, that this email server is ...
0
votes
2answers
460 views

SSL Self Signed certificate - How are they displayed on clients and how to configure?

I've added SSL to a website (Apache 2.2 w/ Centos 6) using a self signed key. Chrome, FF, and IE displays the following: Chrome Your connection is not private Attackers might be trying to steal ...
0
votes
1answer
345 views

Creating private key to certificate

I am trying to replace an expired certificate for a new one, with 2 years of validation(with IIS GUI to create self signed certificates I got just 1 year), and using exchange management shell, with: ...
2
votes
2answers
715 views

Revoked certificate still valid

I've recently setup a new domain joined Standalone CA on a Windows 2012 R2 server which is publicly accessible and authenticating fine, however, revoked certificates still appear to be authenticating. ...
-1
votes
3answers
921 views

How is a self-signed certificate different from a certificate signing request?

From the wiki page for a Certificate signing request: In Public Key Infrastructure (PKI) systems, a Certificate Signing Request (also CSR or certification request) is a message sent from an ...
0
votes
1answer
973 views

nginx with multiple certificates, letsencrypt and self-signed

I would like so use Nginx as frontend SSL proxy with Letsencrypt certificates and also limit client access to certain backend servers with other (self-signed) certificate. I cannot use Letsencrypt for ...
0
votes
1answer
635 views

Difference between CSR creation and create domain certificate

I'm a CA admin and I'm new to this field, Can any one explain the below scenario and explain the difference between them. Scenario 1 System Admin creates a CSR file and give it to me... I will ...
0
votes
0answers
392 views

Cannot connect to a site with a self-signed certificate

So we've just set up a site with IIS 8.0, that is normally accesible via port 80 and no certificate requirement. we've created a self signed certificate we've set up site bindings through port 443 ...
1
vote
1answer
83 views

Reverse DNS and Mailserver and self generated certificates

this is my first question here, so don't kill me if it sounds stupid. I don't know much about server administration, that's why we booked a managed server to host our clients. So far we have been ...
0
votes
3answers
403 views

SSL Certificate apache2 - certificate trust issues when website loads

I'm new to this whole section of generating certificates and recently started working on it for the application that I'm working on. I installed apache2 and further looked into sites - drissamri.be, ...
0
votes
1answer
271 views

Not able to get https response from nginx server after installing self signed certificate

Getting no response from server when connecting with https:// Http is running fine I have installed self signed certificate and configured properly without errors. I am running nginx with php-fpm. I ...
0
votes
1answer
1k views

WildFly with client certifactes: javax.net.ssl.SSLException: Received fatal alert: unknown_ca

I'm trying to install a wildfly9 server with client certificate authorization. To do that I have: On the Client: Create a self signed certificate: keytool -genkey -keystore client.keystore -validity ...
1
vote
1answer
470 views

Which certificate store do I put a third party self-signed SSL certificate to have authentication working without extra security risks?

I'm trying to setup client certificate authentication in an ASP.NET MVC3 application running in IIS 8. The client (Good Third Party) uses a self-signed SSL certificate to authenticate himself and my ...
1
vote
0answers
12 views

Nginx ssl port 433 not open/listening (refused to connect) [duplicate]

I'm running nginx 1.6.2 on Linux and using CloudFlare origin certificates for HTTPS, I have installed the certificate and key in (for example) /path/to/certs and run chown 600 root on the directory ...
0
votes
1answer
709 views

How could I prevent NetExtender Cli to asking certificate confirmation?

Our company is using self-signed SonicWall for firewall facility. And remote clients needs to be connect to internal network through VPN via NetExtender client. Some of the clients are using Linux OS ...
0
votes
0answers
460 views

Wget cannot locally verify issuer authority

I am using my company provided certificate which is self signed. wget https://github.com /This throws the error Other sites work fine. Chrome is able to successfully use this. And i am also able to ...
2
votes
1answer
305 views

Untrusted publisher for Powershell profile modules after creating, installing, and signing with certificate?

I'm still getting untrusted publisher after creating a self-signed certificate and installing it on a system, when trying to run my Powershell Profile sub modules? Do you want to run software from ...