2022 Developer Survey is open! Take survey.

Questions tagged [ssl-certificate]

SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

Filter by
Sorted by
Tagged with
0 votes
0 answers
4 views

Amazon Lightsail + CDN 502 Error

I have gone through all of the various posts here about the issue as well as gone through this link and still can't solve the problem. Using Amazon's Lightsail and Amazon Linux 2, I tried setting up a ...
user avatar
  • 123
0 votes
0 answers
12 views

Adding Cloudflare SSL Results in 522 Error

Currently I'm trying to install a Cloudflare SSL certificate on my Ubuntu server that uses Nginx. I am following this guide on how to do so, but once I successfully install the certificate as per the ...
user avatar
  • 1
1 vote
1 answer
13 views

certbot wildcard cert not a wildcard

I did the following: sh-3.2# certbot certonly --manual --preferred-challenges=dns --email admin@example.com --server https://acme-v02.api.letsencrypt.org/directory --agree-tos -d *.someDomainlab.com ...
user avatar
  • 147
1 vote
1 answer
19 views

How can I tell if an installed cert is wildcard or not

I installed a cert for my server a while ago using certbot, and cant remember if I setup as a wildcard or not, What command can I run to see if it is or not?
user avatar
  • 147
0 votes
1 answer
18 views

Chrome shows ERR_CERT_COMMON_NAME_INVALID when firefox is happy

Learning how to work with certificates, maybe will have local CA server. I have server with BMC, so I used it for practicing. Generated CA pair then host pair and then signed host CSR with CA pair to ...
user avatar
10 votes
1 answer
690 views

Do SSL Certs containing two wildcards work (esp. on Let's Encrypt)? [duplicate]

I want to include two wildcards in an SSL cert (will be) signed by Let's Encrypt: *.*.thost3.de. Will this cert match any hostnames matching that rule (e.g. example.example.thost3.de, hello.world....
user avatar
  • 201
0 votes
1 answer
27 views

Certbot - Failed authorization procedure

I want to generate a Let's Encrypt certificate for my server, so that I can renew it automatically. I ran the command certbot --nginx -d testpbx.info.eu and got the following error. certbot --nginx -d ...
user avatar
0 votes
0 answers
23 views

My server has been physically moved to a new rack with a new IP address, and now I'm getting OCSP errors? Could it be an IPv6 thing maybe?

I'm pretty sure SSL certificates are almost always tied to a domain name rather than an IP address. And the vast majority of my traffic is unaffected, generally things are working well. However, my ...
user avatar
  • 1,034
0 votes
0 answers
15 views

Would SCCM require a second SubCA when using HTTPS with 2 domains?

I have a domain called one.local. It already has it's own Windows Root CA and SubCA. There is a second domain called two.local that is using SSCM. The team that is managing two.local wants to manage ...
user avatar
  • 101
0 votes
1 answer
14 views

Can i use different client certificates for different locations using nginx

I have two different location on my Server: server/locationA server/locationB I want to restrict access to these locations using two client certificates certA and certB. locationA should only be ...
user avatar
0 votes
1 answer
14 views

How to install SSL certificate to system-wide trust on SUSE

I know this qualifies as one of the most asked questions in SF (and also possibly in SO), but (this time) I've done my homework: I've read and tried this and this without any luck. So, I have my shiny ...
user avatar
0 votes
1 answer
55 views

Unable to renew a Certbot NGINX certificate

I have a NGINX server and I use Certbot to generate a Let's Encrypt certificate. I saw that my certificate was not renewing automatically despite the cron I had set up. I tried to renew it manually ...
user avatar
0 votes
1 answer
28 views

Server refused to connect after installing SSL via Certbot | Docker + Nginx, AWS Lightsail

I have successfully managed to install SSL via certbot into my Nginx Docker container, but after installation, all traffic routed via HTTPS refuses to connect. curl https://www.example.com or curl ...
user avatar
  • 101
-2 votes
0 answers
40 views

Create Self-Signed Certificate for IP Address (customized domain) on windows

I want to create a Self-Signed Certificate for an IP Address (not domain) using windows OS. Then I want to bind this certificate to my API, which is hosted on IIS on our own server. Finally, I want to ...
user avatar
  • 97
0 votes
0 answers
17 views

Multiple SSL certificate types on the same server

Can i have two types of certificates installed on the server at the same time? I need a wildcard SSL to protect a single domain and all its all subs. I need a UCC/SAN SSL to protect multiple other ...
user avatar
-1 votes
2 answers
29 views

installing SSL on 2 exchange servers

I have 2 exchange servers run for one email service, and I need to renew the SSL certificate. Do I need to issue 2 SSL, or one is enough? If one is enough how can I replicate it between them?
user avatar
0 votes
0 answers
37 views

Configure winrm https certificate from non-admin user

Using letsencrypt as a CA, a non-admin user automatically requests a new certificate to be used by the winrm https listener once the old one is about to expire. To make winrm actually use the ...
user avatar
  • 3,979
0 votes
0 answers
29 views

Is it possible to verify TLS if a server doesn't provide an issuer cert?

I'm trying to configure Apache httpd v2.4 for LDAP authentication to AD. LDAPS certificates are issued by the internal CA. For whatever reason (I'm not on the AD team), neither our prod or non-prod ...
user avatar
-1 votes
0 answers
17 views

public SSL certificate not being recognised as trusted on Windows server 2019

I have a public SSL certificate, when I import it into the keystore on my MacOS desktop I can access a website it refers to using https without any issues using chrome. When I import the certificate ...
user avatar
1 vote
1 answer
70 views

Dovecot problems wit SSL Cert: Verify return code: 2 (unable to get issuer certificate)

sry for that, but i am a newcomer at ssl and what do i wrong? i try to change the dovecot imap login to imaps but something goes wrong with the ssl cert check. The ssl cert works for the https apache ...
user avatar
  • 15
0 votes
1 answer
25 views

Windows Certificate Authority - Adding Additional Attributes

In AD Certificate Templates the templates have an option to build from AD information and includes Email, DNS, UPN, etc. When creating a CSR using powershell, openssl and the certificate mmc snap-in ...
user avatar
  • 578
0 votes
0 answers
59 views

NET::ERR_CERT_AUTHORITY_INVALID error in Chrome but not in Firefox

I'm using AWS and I have requested an ACM certificate. I used DNS validation to make it a valid cert. Now I've attached it to a private ALB. The URL is private. When I connect with my VPN and I can ...
user avatar
  • 283
0 votes
0 answers
7 views

How does a ProxyPass impact the server resources in Apache?

In our local office, we have a developement server, with kind of limited resources. When multiple developers are using this server, the load becomes really big on it, to the point it starts becoming ...
user avatar
0 votes
0 answers
10 views

SSL to Amazon EC-2 instance

First time using EC-2, and I have a hard time adding SSL, got stuck under CloudHSM, it won't connect to the IP, it's so complicated, 1000 steps using another 2 services, CloudHSM and AWS key ...
user avatar
  • 1
0 votes
0 answers
30 views

Best Way to Force use of SSL Certificate

When a browser connects to my website by entering it's FQDN the connection is encrypted using the site's SSL Certificate. However it has come to my attention that it is possible to bypass the SSL and ...
user avatar
  • 101
0 votes
0 answers
42 views

Nginx with SSL behind another Nginx (with nginx-proxy)

I have two VMS. The first is VM1 and the second is VM2. The first is a VPN server and the second is a client. On VM1 the Nginx is installed as a reverse proxy from the official Docker repository. On ...
user avatar
0 votes
1 answer
97 views

The certificate request was submitted to the online authority, but was not issued. The request was denied

I've a Hyper-V lab with few VMs. I'm trying to renew expired server certificate for one of my virtual machines which is running Windows Server 2019 (version 1809). I'm trying to renew the certificate ...
user avatar
  • 225
0 votes
1 answer
54 views

How to create create certificate using OpenSSL from powershell without user prompt for passphrase?

I'm setting up a development VDI, and need to automate creations of some certificates for accessing https://{foo}.local (127.0.0.1) websites duing dev and testing. I'm only allowed to use OpenSSL and ...
user avatar
  • 103
0 votes
0 answers
26 views

Web browser presented with bogus SSL certificate?

I have what I can only characterize as a very strange problem. We have customers who, when they visit our website, get an SSL error: ERR_CERTIFICATE_AUTHORITY_NOT_VALID Upon closer inspection, the ...
user avatar
0 votes
0 answers
27 views

"Require expr" Apache expression under nginx

How can the following Apache config snippet be translated to nginx? <Directory "/usr/local/var/www/client2"> SSLOptions +StdEnvVars +ExportCertData SSLVerifyClient require ...
user avatar
0 votes
1 answer
24 views

Can you prevent routing traffic to an AWS ALB if the host is an IP address and not a domain name?

I'm running an ALB on AWS with multiple SSL certificates. The domain name is dynamically handled via the application on EC2. Currently, the ALB will route requests to the IP address of the ALB to the ...
user avatar
0 votes
0 answers
46 views

Microsoft Remote Desktop (MacOS) - Certificate trust

I've got a Windows RemoteApps setup to access a few applications from home but having some issues connecting from MacOS devices using the Microsoft Remote Desktop app. I initially thought it coincided ...
user avatar
0 votes
1 answer
13 views

Adding a security certificate to a remote sql server

I'm in the process of trying to add a security certificate to a sql server running on a remote machine. I managed to generate the cert, but I'm a bit lost on the next step. All the instructions I have ...
user avatar
-1 votes
2 answers
23 views

Unable to find user account to set permissions for private key

I'm trying to set up a security certificate for a sql server. According to the documentation, I need to set up the permissions so that the sql server instance can read the private key. I tried setting ...
user avatar
0 votes
1 answer
52 views

How to determine the common name (CN) for a microsoft sql certificate?

I'm in the process of trying to set up a self signed certificate for connecting a jetty server to a development sql database. I'm following the instructions here: https://codekabinett.com/rdumps.php?...
user avatar
0 votes
1 answer
167 views

Windows certificate import not accepting private key password

I'm trying to follow the instructions provided here: https://codekabinett.com/rdumps.php?Lang=2&targetDoc=create-install-ssl-tls-certificate-sql-server for setting up a self-signed certificate for ...
user avatar
0 votes
1 answer
47 views

handel tls when domain point to subdomain in cname record

we are trying to point domain to sub doamins *.com --> *.zeineldin.link for example https://www.asrevo.com --> https://petman.zeineldin.link we need to support all domain not few domains for ...
user avatar
1 vote
2 answers
182 views

Generate PFX file from private key and CRT files

I'm trying to create a PFX file for my website hosted on Azure. I generated mycsr.csr as well as privatekey.key and from Entrust I recieved back 3 files root.crt, Intermediate.crt and ...
user avatar
  • 71
0 votes
0 answers
31 views

Using self-sign certificates with OpenSSH on Windows

I'm wondering if you can use a self-sign certificate on the OpenSSH platform for Windows? Anyone know if this is possible and how to do it? Sincerely John Rosell
user avatar
0 votes
0 answers
38 views

Generated .crt file from text

I bought a SSL certificate and got these Text files. -----BEGIN CERTIFICATE----- MIIHhjCCBm6gAwIBAgIQBBHZG2IHaYx3EGHHgy1+GzANBgkqhkiG9w0BAQsFADBZ . . . STrB0u+/i8hZL9KBhMXFxhdUdcaze3xSlX6xDL+...
user avatar
0 votes
0 answers
109 views

How to "Let's Encrypt" Wildcard SSL certificate on Multiple Servers?

How can I configure WildCard SSL Certificate with certbot and copy the same certificate to other servers as well? I'm trying to run a secured Nodejs (Expressjs) application. Currently, I'm able to do ...
user avatar
0 votes
0 answers
38 views

stunnel client accepts any peer certificate

I have a Linux machine that is connecting to a remote MySQL server using stunnel 5.56. I downloaded the remote server's certificate and put it in /etc/ssl/cert/mysql-server.pem. Here is my Linux ...
user avatar
  • 2,571
0 votes
2 answers
35 views

IIS10 SSL Renewal cert disappears

we were notified by GD that our wildcard SSL cert would be expiring and they helpfully have supplied a new one.. .I say new one I mean 3 files (a .crt, a .pem and a .p7b though I've no idea what the ...
user avatar
0 votes
0 answers
24 views

Which certificates are to be used for SSL verification programatically?

I am trying to invoke an API using python and it requires me to do SSL verification. I have a jks certificate which I converted to a pem file using below commands. keytool -importkeystore -...
user avatar
0 votes
0 answers
46 views

SSL for IoT local network

How to implement the valid SSL for a local network without internet access? I am developing an IoT device that exposes its own access point and shows a web page for configurations. The webpage is ...
user avatar
  • 1
0 votes
1 answer
91 views

Cannot Create a CSR for Windows 2016 Server with Windows Server Essentials Experience Installed

I have a Windows 2016 server with the Windows Server Essentials Experience installed for Anywhere Access and everything was working fine until the SSL Cert expired and I needed to create a new CSR. ...
user avatar
1 vote
1 answer
86 views

How do I sign my own SSL certificates so that they cover www and non-www domain names?

When using a commercial Certificate Authority, generating a csr for the common name www.mysite.com and sending it to them will result in a certificate being issued that works for both www.mysite.com ...
user avatar
  • 4,413
0 votes
1 answer
32 views

Missing "Server Certificates" icon in IIS10

I want to create a CSR file in windows server but Server Certificates is missing. The picture below shows it.
user avatar
  • 101
0 votes
2 answers
43 views

Configure Domain name to Virtual Machine - Azure

I have a virtual machine in my Azure subscription running Windows Server, having a public ip address on a specific port (https://ipaddress:port). This ip address is linked to a website in the Windows ...
user avatar
0 votes
1 answer
37 views

Apache serves with new and old SSL Root certificate

I am hosting a website at https://www.tabletop.cloud A while back I switched from the DST Root CA X3 root certificate to the ISRG Root X1 certificate. When I access my website in every browser the SSL ...
user avatar
  • 103

1
2 3 4 5
63