Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ssl-certificate]

SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

0
votes
0answers
11 views

Poste.io - can't login by mail application - bad SSL certificate

I have a proble with poste.io and configuration with nginx-proxy. DOMAIN is valid domain :) This is my docker-compose for poste.io: version: '3' volumes: mailserver_posteio: services: ...
0
votes
0answers
31 views

Pass SSL Client Certificate to backend service

Setup: remote backend service with http API which requires client ssl certificate client app - PWA (Angular) app (under our control), currently served by nginx Scenario: I want to make a request ...
-4
votes
0answers
33 views

How to self-sign SSL certificate that's won't throw an error chrome [on hold]

I have a raspberry pi at home with an nginx server. I want to sign my ssl certificate such that if I import it to the trusted root certificate store I won't get things like cert common name errors on ...
0
votes
0answers
10 views

Remotely Monitoring RDP Certificate

We use OpenSSL on a CentOS 6 server to monitor the certificate on servers for RDP. To do this we use: openssl s_client -connect SERVER01:3389 -prexit This has worked flawlessly until 4 days ago, ...
2
votes
2answers
46 views

Do I need an SSL certificate on my EC2 server even when I have a load balancer?

Starting to setup a Load Balanser in AWS, I ran into some additional questions. Basically I have a web site/app deployed in an EC2 instance. I'd like to make it secure by using an AWS generated cert ...
1
vote
2answers
32 views

Alternatives for enabling SSL on EC2

I have an existing AWS EC2 instance which contains both an application server and a web server (apache). My external DNS directs traffic from www.x.com, api.x.com, oa.x.com to the instance via it's ...
0
votes
1answer
25 views

Install CA - Not trusted certificate - Apache

I am trying to install a chain certificate from Entrust on a red hat server 7.5 that uses apache 2.4.6. Following some articles I found, I did the following: Edited /etc/httpd/conf.d/ssl.conf file in ...
2
votes
2answers
100 views

Updated SSL certs and now rewrite conditions no longer working for apache2

I'm running an Ubuntu 14.04 server with Apache2 v2.4.7. Recently our site was getting errors from Chrome saying we needed to update our certs. I just completed that earlier this week, updating the ...
0
votes
1answer
39 views

Lets encrypt certificate renew: PluginError occured

I am trying to renew the letsencrypt SSL certificate in the apache by using the following command. sudo certbot renew But I am getting the following error error was: PluginError('There has been ...
2
votes
0answers
52 views

How does SSL certificate benefit a public informational website? [closed]

One networking expert posted a video today in Facebook saying that a government website (which is a subdomain of kerala.gov.in) has no SSL certificate installed. That website is actually just for ...
1
vote
0answers
15 views

Wrong(first/default) SSL certificate served Apache 2.4 - Ubuntu 18.04 muliple domain web server

Background: We have migrated 2 old webservers to 2 new, more robust servers- Ubuntu 17.04 and 18.04. We purchased Thawte SSL certificates for the domains we host(about 20) to use on 2 servers. Each ...
3
votes
1answer
34 views

How to configure nginx + ssl with an encrypted key in .pem format

I would like to set up ssl for an existing nginx server. I got handed both a certificate and the corresponding (encrypted) private key. Both are in .pem format (each in its own file). About all ...
0
votes
0answers
19 views

how does TLS encryption work on traffic flows which are routed via a (reverse) proxy

I do not understand how encryption works in this particular case. The scenario is the following: Server A (Interface partner) --> Server B (Apache reverse proxy) --> Server C (weblogic application ...
0
votes
0answers
18 views

Installing EV multidomain ssl on SAS windows

I sold an EV multidomain SSL to an Org The SAS hostname is a SAN of the ssl. The person who will install the SSL on SAS says he needs FQHN (FQDN?) that is CN not SAN of the SSL. Is this true? Anyone ...
0
votes
2answers
79 views

Can a wildcard SSL certificate secure host names of various depths? [duplicate]

I discovered recently that my *.domain.com cannot be used on server1.apps.domain.com because it will only "wild" the one level, not two. The questions are thus twofold: Is there such a thing as a *.*...
-1
votes
1answer
12 views

haproxy and certificates mismatch

I have been wrestling with Haproxy for a few hours now and I am probably missing something in my limited know-how. I have two servers (ha1.domain.com and ha2.domain.com), both with keepalived and ...
1
vote
0answers
52 views

ECDSA certificates fail validation with curl and Firefox

I've been stuck on a problem for 2 days regarding certificates where some clients connect and some other fails the certificate validation. I'm working on CentOS 7.3 and Nginx 1.15.4. I have 3 levels ...
0
votes
1answer
28 views

Add or do not add WWW hostnames to SAN certificate

My setup is as follows: 100+ websites Each website has two host headers any.com and www.any.com Requests for www.any.com are redirected to any.com without changing protocol Some of these websites ...
0
votes
0answers
10 views

Webpack server and Express server with self signed cert works with localhost but not with IP

OS: MAC Env: DEV I've created two Self Signed Cert CN=localhost one for the webpack server and one for my express server. I've added the certs to the keychain, took me a while to get over this: ...
1
vote
0answers
82 views

0x80004005 Error When RDPing to CA-certified computers

I have a server (let's call it srv1) on my network that I use RDP to connect to and manage, from my Windows 10 computer. Recently, I deployed RDP server certificates so that I could stop the ...
0
votes
0answers
26 views

IIS 8 not serving HTTPS Securely for chrome (even with legit certificate)

I am developing an Angular 6 PWA served on IIS 8 (windows server 2012 R2) but i am facing various issues with https certificates: google chrome (both the android and desktop version) warns me that the ...
0
votes
0answers
31 views

Unable to locally verify the issuer's authority

I have bought the SAN SSL certificate and I am getting the error after implementation the SSL in apache web server. While wget its throwing this error. ERROR: cannot verify example.com's certificate, ...
1
vote
2answers
28 views

TLS v1 enabled in nginx config but not working and certificates not available

I have an Ubuntu 18.04.1 server running PHP 5.6 with Forge on Digital Ocean. I'm trying to to enable TLSv1 and TLSv1.1 for a site. So Ive edited my NGINX config to include them: ssl_protocols TLSv1 ...
0
votes
0answers
16 views

nginx not verifying client certificate when multiple root certificates present

Our service uses 2-way ssl with our clients connecting to our systems. With each new client we add their intermediate and root CA chain to the concatenated certificates file used by ...
0
votes
2answers
21 views

Certificates, and multiple CNAME records

If I host a service that has endsystem.example.org as it's URL, and it is hosting a certificate for www.example.org, and I have a CNAME intermediate.example.org that points to endsystem.example.org, ...
-1
votes
0answers
9 views

Video Streaming using SSL on Alibaba ECS

I have an ECS instance on Alibaba using LetsEncrypt for SSL configuration but i have an issue with PHP Video Streaming that is not working when SSL is used where Video Link gives 404 when the ...
0
votes
0answers
28 views

Ubuntu 16.04 + Nodejs (for Adonisjs app) + Mysql + Apache (just for phpmyadmin)

Server: Digital Ocean Droplet (Ubuntu 16.04), Application Deployed: Nodejs (based on the Adonis.js framework), Database: MySQL, Nginx: Reverse Proxy Server (To remove port 3333 from app URL), ...
2
votes
2answers
94 views

Old ssl cert still showing up in browser after installing new

We have an IIS ARR server which load balances out to two different individual IIS servers. The servers in question are our internal Staging servers. Three months ago I created a free Let's Encrypt ...
0
votes
1answer
23 views

Multiple Java Keystores

I created a Keypair using the following command: "%JAVA_HOME%\bin\keytool" -genkeypair -keysize 2048 -alias tomcat -keyalg RSA -sigalg SHA256withRSA I noticed there is a key store in jdk/lib/...
0
votes
0answers
52 views

How to connect jenkins to a gitlab which required a client ssl?

I need to work with a self hosted gitlab repository protected by 2 way ssl authentication. So to connect aside git's own credentials, the request to git should come with a client ssl. From the ...
0
votes
2answers
52 views

Impact of GeoTrust/Symantec distrust certs (9/13)

So Chrome 70 is going to distrust these SSL certificates beginning 9/13. Not that we aren't working towards replacing those that need it, but what about other browsers? Will they still trust after 9/...
0
votes
1answer
32 views

New certificate not being recognized in iis10

I inherited maintaining a 2012 server. The certificate for our websites expired, so i installed a new one. It is still as if it is using the old one. We have many websites all on different ports. ...
0
votes
1answer
61 views

CA root install issue on Ubuntu 16.04 LTS Server

I am setting up nginx reverse proxy on Ubuntu 16.04 LTS Server for Web-Server. There will three different Services running on Ubuntu. Services will communicate each other using API calls. Similarly ...
-1
votes
2answers
28 views

Is ssl CName important for search engine?

My site is under cloudflare and of course I am using free ssl from their side. So, what what can I have sanctions on the site from the search engines while using free ssl? Or what benefits will I ...
1
vote
1answer
141 views

Postfix, multi domains and multi certs on one IP

I've a postfix server which has multi domains and I want to have a specific cert per each. My server has only one IP. I've found a solution with multi IP, but without I don't know how to do this. ...
0
votes
1answer
74 views

Can't get SSL certificate from LDAPS server

I'm trying to retrieve the public SSL certificate from my organization's LDAPS server. I'm following the instructions here, which recommend I run the following openssl command: openssl s_client -...
0
votes
1answer
28 views

How to disable TLSv1 in Apache 2.4 (Debian 8)?

I have this line in /etc/apache2/mods-enabled/ssl.conf SSLProtocol -all +TLSv1.2 However SSL checker whynopadlock still shows this: Any ideas on how to completely disable TLSv1 in Apache 2.4 (...
0
votes
1answer
48 views

SSL certificate installation on Apache server via FTP [closed]

I do have a domain.crt (with two certificates) and private.key (and domain.csr) and would like to use those on an Apache server (version unknown) for SSL support. + My website is hosted by a share-...
1
vote
0answers
36 views

How is session caching affected by the renewal of a ssl certificate?

I optimized my nginx session cache like this # Optimize session cache ssl_session_cache shared:SSL:40m; ssl_session_timeout 4h; In a few days my Let's Encrypt certificate will be renewed. Does this ...
0
votes
0answers
10 views

Cert conversion from p7b to pcks12

I am trying to send email via tls to Microsoft EOP but having some issues. After working with support, they tell me I need the following certs installed https://support.office.com/en-us/article/...
0
votes
1answer
15 views

Nginx redirects with SSL for 2 domains including www

I have the .com and .co.uk versions of a domain. I want every combination of these (including www subdomains) to redirect to the https .co.uk version. By every combination I mean that all of the ...
0
votes
2answers
21 views

HSTS: Is includeSubDomains on main domain sufficient?

In my Plesk web admin edition I just activated HSTS on my main domain www.domain.tld with add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; The test on ssllabs.com ...
0
votes
2answers
37 views

Client certificate authentication - Apache2

I'm trying to set up a client authentication for one of my app but for now, it's not successfull. I bought a Gandi wildcard ssl certificate for my domain *.example.com and here is the configuration on ...
7
votes
3answers
754 views

How does HSTS handle mixed content?

I've just checked with the SSL Server Test if I implemented the SSL certificate on my server correctly. I got a grade A in their ranking but you can get an A+ if you have activated HSTS. After some ...
132
votes
8answers
16k views

Is there a reason to use an SSL certificate other than Let's Encrypt's free SSL?

Let's Encrypt are providing free SSL certificates. Are there any downsides compared to other, paid certificates e.g. AWS Certificate Manager?
0
votes
1answer
180 views

SSL “unable to get local issuer certificate” : “full chain” vs “root”?

Summary In summary I have some certificate related files and some certificate related instructions but I'm not sure which files are which ! Background I've just installed a certificate from Lets ...
0
votes
1answer
23 views

IIS Windows 2016 ecdsa signed certificate

Does anyone know if IIS supports certificates signed with sha256ecdsa? If viewed with openssl, i have the following parameters: Signature Algorithm: ecdsa-with-SHA256 Public Key Info: NIST CURVE: P-...
0
votes
1answer
34 views

Can't connect HTTPS site to Apache on Arch

I've been trying to set up my own apache server for my website sammurphey.net Everythings been running smoothly up until SSL. I have the following virtual hosts in my httpd.conf <VirtualHost *:80&...
0
votes
3answers
45 views

Dovecot SSL - IMAP works, SMTP fails

I'm setting up a small mail server using postfix+dovecot. When running oppenssl s_client -connect mail.myserver.com:993 (IMAP), the server's certificate is displayed and I'm able to get an email ...
0
votes
2answers
42 views

How do I get a “valid SSL public certificate” from Windows Certificate ? (for stunnel configuration)

In these directions for configuring Stunnel on Windows the following text appears : Copy a valid SSL public certificate to the directory "C:\Program Files (x86)\stunnel." To make things more ...