Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ssl-certificate]

SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

0
votes
2answers
34 views

Port 80 on Web Server Security

Currently I'm running a web server, The server itself is using both HTTP "Port 80" and HTTPS "Port 443". I purchased an SSL certificate and installed it to the issue is the manufacturer of the ...
1
vote
0answers
5 views

How to allow a newly inserted user certificate with Apache 'SSLVerifyClient optional'?

My web users are able to optionally use a Smart Card Certificate to identify themself via Firefox to my web server running Apache httpd 2.4. For this I use SSLVerifyClient optional plus for speed ...
0
votes
1answer
23 views

setting up ADFS without SSL certificate

I want to know if it's possible to set up ADFS on a domain controller without having to use an SSL certificate, and if you must use one, is it possible to have on created/validated for free?
0
votes
0answers
14 views

I have issue on SSL AWS [on hold]

I have installed proper godaddy SSL in AWS ec2 ubuntu 14.04 My issue : SSL is working perfectly for 10 mins when I restart apache 2. after 10 min SSL stop working. can anybody please help me to ...
-3
votes
0answers
31 views

how to submit CSR from iLO to Let's Encrypt [on hold]

i have read some post and found an article here: https://community.letsencrypt.org/t/how-to-automatic-certificate-install-on-an-hp-ilo4-management-processor/31038 and on this forum here: Generating ...
0
votes
1answer
84 views

How to install cer and p7b certificates to use in IIS?

I have generated the CSR request on our windows server ( we need to bind our application hosted on this server for Https) using below commands in keytool: Keytool -genkey -alias <server name> -...
0
votes
0answers
16 views

Can I Create key.pem and cert.pem files from an IIS generated Self Signed Cert?

I need to create a key.pem and cert.pem file. Can I use a self signed certificate from IIS to create those two files? I have exported the self signed cert in pfx format. When I open it in notepad, it ...
0
votes
0answers
31 views

Why does this SSL certificate seem to be rejected by Kindle Fire?

The SSL certificate for the domain cf.geekdo-static.com seems to pass all the online test for compatibility, gets an A rating from https://www.ssllabs.com, etc. But users on Kindle Fires, (and I've ...
0
votes
0answers
28 views

Wrong password during pfx certificate import Windows(10, 2016)

I've tried to import a *.pfx certificate and I get an error about "Wrong Password". The error only appears on some systems. I've tested this on a few Windows 10 computers and on one Windows Server ...
0
votes
1answer
23 views

What is the difference between AWS Certificate Manager Private Certificate Authority and AWS Certificate Manager?

What I understood yet (though not sure) is ACM is free but ACM PCA charges to generate each certificate. ACM can be used to generate certificated for ELB or CloudFront level while ACM PCA can ...
0
votes
1answer
34 views

Apache destination virtual host certificate when using mod_rewrite or ProxyPass

I am trying to use mod_rewrite or ProxyPass to redirect (PT) the client's request from virtual host A on 443 to different virtual host B on port 4434, also with SSL. Like that: SSLProxyEngine on ...
0
votes
1answer
21 views

What is the use of combining crt

I had a task to renew ssl certificates on a few websites, all went well I tested and was about to close the task when I noticed: #if on nginx prepare your certificate by combining the two files given ...
1
vote
1answer
55 views

SMTP Problems due to CN vs SNI on the Certificate?

I have a scenario where I'm using a shared mail server (cPanel) for SMTP on multiple domains for several clients. I hit an issue where Ruby's OpenSSL library complains that the hostname "smtp.domain2....
1
vote
1answer
19 views

Same Letsencrypt for mailserver and domain

I would like to know if it is possible and maybe recommendable to use only one (Letsencrypt) certiticate for encrypting traffic to a mailserver and to a website. I have a domain example.com and ...
0
votes
0answers
19 views

LDAP SSl Certificate [closed]

I am trying to establish a secure connection between a client (C# implementation) on Windows 10 and Active directory server installed on Windows server 2012 r2 using SSL port 636. The connection with ...
0
votes
1answer
19 views

Failed to Start Apache Server

I tried to configure my WebPage SSL Certificate, after configured it I restarted Apache Service and the output is the next: httpd24-httpd.service - The Apache HTTP Server Loaded: loaded (/usr/...
0
votes
0answers
12 views

What are the prerequisites of an certificate for IIS Centralized Certificate Store?

IIS Centralized Certificate Store (CCS) seems to be a nice solution to not having to Import certificates and picking them for a specific binding in IIS. Unfortunately there seem to be prerequisites ...
0
votes
0answers
14 views

Certificate Chain Issues in Draytek Vigor Router 2862

I have a Draytek Vigor 2862 that I am trying to configure SSL on. I have imported the Comodo Cert in as a Local Certificate, added the intermediate certificates as trusted certificates and then ...
-1
votes
1answer
57 views

Openssl is not working for windows 2016

Even after setting the environment path , the openssl command is not working. Kindly help me for this.
0
votes
0answers
17 views

create a https proxy server that redirects all traffic hitting http url to https url (using ssl cert) in nodejs

i have a http server running, Now i want to create a https proxy server that redirects all traffic hitting http url to https url . I have 2 cert files from godaddy ( one of them is bundle.crt) but no ...
0
votes
0answers
16 views

Fixing broken SSL between Cloudflare and Heroku

Having spent three days and read dozens and dozens of blogposts and articles and tried every possible combination of CNAME records & target URLs, I still cannot get my Heroku app working with my ...
0
votes
0answers
27 views

Comibne two different domain SSL certificates to single certificate

Suppose, I have two domain 1. example1.com 2. example2.com I have SSL certificates for this two domain. For example1.com example1.crt and example1.key and for example2.com example2.crt and example2....
0
votes
2answers
40 views

Let's Encrypt setup for subdomain which is pointed to other host

I'm trying to setup a two server system, where one is doing webhosting and the another is delivering content (CDN) for the webhost server. I currently own two servers and they both have Let's Encrypt ...
0
votes
1answer
17 views

IBM HTTP Server Randomly closing SSL connection

I'm using IBM IHS Http-Server, with an SSL-enabled VirtualHost. My problem is, that the server is requesting a client-certificate randomly after the client-requests, however it should request only ...
0
votes
0answers
9 views

Creating SSL Certificate files for Jira

I am trying to create the relevant files for my certificate so I can set up Jira and Confluence to use jira.mydomain.com/confluence.mydomain.com and work over SSL, using Apache. I was following this ...
1
vote
2answers
45 views

How to find an SSL certificate that supports certain ciphers

We have a site and need to connect to a 3rd party service that uses a system with certain cipher support. I've tried LetsEncrypt and Comodo but neither work. Is there a resource that I can locate to ...
0
votes
0answers
40 views

Server version: Apache/2.4.37 (Debian): When enabling “Protocols h2 h2c http/1.1” apache starts but website throws errors:SSL_ERROR_RX_UNKNOWN_ALERT

sudo tail /var/log/apache2/d8_zenk_it_error.log [gnutls:debug] [pid 9683:tid 140562383218432] gnutls_hooks.c(175): [client 80.90.156.22:58551] prepare_alpn_proposals: Found 2 protocol upgrade(s) ...
-2
votes
1answer
46 views

Install SSL Certificate for a DNS redirection

We have an application developped on a internal server. A DNS redirection to the livebox IP has been done for our customers to access a service online via OVH. The online URL is client.lexcelera.com. ...
0
votes
0answers
41 views

iis 8.5 NET::ERR_CERT_REVOKED yet able to download CRL files

Customer has existing SSL from godaddy with multiple SAN and we're migrating to IIS 8.5 on 2012 server. Generated sha256 CSR to godaddy for this Windows server and downloaded two files for IIS. Placed ...
1
vote
1answer
93 views

403 - Forbidden: Access is denied in Chrome

I installed a new certificate on IIS7. After I installed the certificate, I opened the site in Chrome and received the following message: I clicked Ok and now when I browse to the site in Chrome, I ...
0
votes
1answer
64 views

SSL Certificate, Redirect, No-www done right (apache)?

MY GOAL I would like to make a website accessible only via SSL (encrypted) and with many domains redirecting to only one master domain (no duplicate content) and all www variants should be no-www. ...
-1
votes
2answers
44 views

How to use AWS SSL certificate in free tier?

I have hosted the application on AWS using free tier and now I want to have the application running securely using Amazon SSL certification but what I come to know that I have to use Route 53 which I ...
1
vote
1answer
132 views

Unable to configure apache to listen to port 443 in Ubuntu

I’ve setup Certbot on Ubuntu, the certificate was created successfully outputting the following: Congratulations! Your certificate and chain have been saved at: /etc/letsencrypt/live/bin-depot.co....
0
votes
0answers
48 views

x509 certificate not valid for any names when added IP address to openssl.cnf

A self-signed certificate works well while the command used to generate it on a ubuntu machine is: openssl req -x509 -newkey rsa:4096 -keyout private.key -out cert.crt -days 365 -nodes If the ...
0
votes
0answers
32 views

How do I add my organization's self-signed certificated to the trusted list?

I am trying to provision some servers running Ubuntu 18.04 within my company and have run into errors such as Error response from daemon: Get https://registry-1.docker.io/v2/: x509: certificate ...
0
votes
1answer
45 views

GCP Https Load Balancer SSL Certificate

I am trying to create a Https load balancer using yaml and Jinja files on GCP deployment manager. But I am not sure how to provide SSL certificate. In the "sslCertificates" of "compute.v1....
0
votes
0answers
23 views

Proftpd and DSA certificate for TLS

I'm trying to configure a Docker image based on an Alpine 3.8 to run a Proftpd server. Everything works well even with TLS RSA Certificate. Proftpd run well and I can upload and download files. But ...
0
votes
1answer
55 views

Generate LetsEncrypt SSL certificate for internal use using Certbot

I want to generate an SSL certificate using Certbot for a subdomain which points to a Docker Registry server which is not accessible from outside. Since I cannot use LetsEncrypt DNS challenge the ...
0
votes
1answer
63 views

Chrome finds certificate fault for website on one terminal session only?

On a Windows Server 2012(R2) I have users who connect to it via RDP. When using Chrome on that server just ONE user receives certificate warning when connecting to an internal HTTPS website. Chrome ...
0
votes
1answer
107 views

Nginx client cert verification: ssl_client_certificate vs ssl_trusted_certificate

The documentation for ssl_client_certificate says: Specifies a file with trusted CA certificates in the PEM format used to verify client certificates and OCSP responses if ssl_stapling is enabled. ...
1
vote
1answer
84 views

Curl SSL error certificate has expired

I'm doing with python for getting result from API URL. But it happened like this: Traceback (most recent call last): File "grafana-utils.py", line 95, in <module> grafana_backup_all() ...
0
votes
0answers
45 views

Node js: Error: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch

I have searched the website and found some answers but it didn't solve my problem, And I don't know what's I am doing is correct or not. My website is php based, for chat I am using nodejs, and ...
0
votes
1answer
41 views

NGINX SSL “ERR_TOO_MANY_REDIRECTS”

I have website build with django and nginx. After adding Let's Encrypt SSL certificat using Certbot I get the error : ERR_TOO_MANY_REDIRECTS. Please find the below nginx configuration : server { ...
0
votes
1answer
46 views

Poste.io - can't login by mail application - bad SSL certificate

I have a proble with poste.io and configuration with nginx-proxy. DOMAIN is valid domain :) This is my docker-compose for poste.io: version: '3' volumes: mailserver_posteio: services: ...
0
votes
0answers
87 views

Pass SSL Client Certificate to backend service

Setup: remote backend service with http API which requires client ssl certificate client app - PWA (Angular) app (under our control), currently served by nginx Scenario: I want to make a request ...
0
votes
0answers
29 views

Remotely Monitoring RDP Certificate

We use OpenSSL on a CentOS 6 server to monitor the certificate on servers for RDP. To do this we use: openssl s_client -connect SERVER01:3389 -prexit This has worked flawlessly until 4 days ago, ...
2
votes
2answers
65 views

Do I need an SSL certificate on my EC2 server even when I have a load balancer?

Starting to setup a Load Balanser in AWS, I ran into some additional questions. Basically I have a web site/app deployed in an EC2 instance. I'd like to make it secure by using an AWS generated cert ...
1
vote
2answers
41 views

Alternatives for enabling SSL on EC2

I have an existing AWS EC2 instance which contains both an application server and a web server (apache). My external DNS directs traffic from www.x.com, api.x.com, oa.x.com to the instance via it's ...
0
votes
1answer
68 views

Install CA - Not trusted certificate - Apache

I am trying to install a chain certificate from Entrust on a red hat server 7.5 that uses apache 2.4.6. Following some articles I found, I did the following: Edited /etc/httpd/conf.d/ssl.conf file in ...
3
votes
3answers
115 views

Updated SSL certs and now rewrite conditions no longer working for apache2

I'm running an Ubuntu 14.04 server with Apache2 v2.4.7. Recently our site was getting errors from Chrome saying we needed to update our certs. I just completed that earlier this week, updating the ...