Questions tagged [ssl-certificate]

SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

Filter by
Sorted by
Tagged with
0
votes
0answers
9 views

How can i get legacy Android application to accept my SSL certificate now that AddTrust has expired?

I'll start by mentioning that the certificate does work on most devices. The certificate has multiple chains. The problematic one (I think) goes something like this: COMODO RSA Domain Validation ...
0
votes
0answers
6 views

After installing SSL on server website is not working . Assessment failed: Unable to connect to the server

Hi I followed this document https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-ubuntu-18-04 and after installing I unable to open my website and I checked ...
0
votes
1answer
47 views

How to force OpenSSL to use same certificate-chain validation algorithm used by Chrome Browser and SSL LABS

Question: How can I force OpenSSL to use the same certificate validation algorithm used by the Chrome Browser and SSL Labs? Details: The certificate chain sent by "adswizz.com" includes a recently ...
1
vote
0answers
41 views

Intermediate Certification Expiration trust issues between OS's

I recently had a intermediate certificate expire on my network. The sysadmins were able to push a GPO out to the Windows Servers with the new certificate chain and it restored Windows to Windows ...
0
votes
2answers
213 views

FreeIPA Intermediate CA Certificate Expired

We have 2 FreeIPA servers running in our network, today we found this: https://support.sectigo.com/articles/Knowledge/Sectigo-AddTrust-External-CA-Root-Expiring-May-30-2020 One of the intermediate ...
0
votes
2answers
24 views

I can't access my website after installing certbot SSL on gcloud

I followed this tutorial on how to install let's encrypt ssl on Google cloud Everything was working fine before installing but after install the certbot on my WordPress click to deploy site running ...
0
votes
0answers
26 views

This computer can't connect to the remote computer. Unknown key usage (1.3.6.1.4.1.311.54.1.2)

I'm unable to RDP to a server on our child domain after adding a Remote desktop certificate that is signed by one of our Certificate authorities. We have intentionally removed the self-signed RDP ...
0
votes
1answer
39 views

Old LetsEncrypt SSL certificate still being served by EC2 instance

I'm working on renewing the SSL certificate for my websites. They are all running on the same EC2 instance with the same Apache server. Two of my domains recently expired so I also tried to remove ...
6
votes
2answers
929 views

Wildcard SSL with LetsEncrypt gives error

I want to create wildcard SSL for my website via LetsEncrypt. I followed the instruction and after running Certbot, it gives me a DNS challenge and says: Please deploy a DNS TXT record under the name ...
0
votes
0answers
12 views

Multiple SSL handshakes and last handshake with TLSv1.0

When going through server logs I found that for one particular connection between our Server <> Client, there are multiple handshakes it starts with the highest TLS version ( TLSv1.2 ) but ...
9
votes
2answers
1k views

Distributing SSL Certificates to All Browsers in an Active Directory Environment

I've generated a single self-signed SSL certificate (that expires in 5000 years). The purpose of the cert is to simply encrypt the https traffic of a trusted deno application that is accessed by a ...
0
votes
1answer
20 views

Request a Digicert Secure Site EV SSL certificate from Azure Portal (or PowerShell) for use with Azure Application Gateway/App Services

I'm trying to generate/request a new certificate from Digicert in Azure. I've been instructed to purchase the EV SSL cert from Digicert's Business tier. They call it Secure Site EV SSL, but I don't ...
0
votes
1answer
31 views

What's the proper way to use certbot for subdomains served via nginx?

I figure I must be missing something, because every time I try to load content by hitting the subdomain in my browser, it says "not secure", even though I went through the steps that followed after ...
2
votes
1answer
65 views

Certbot: Issuing a certfiicate for internal IP address with my own PKI?

I am running my own ACME CA server that allows issuing of certificates to IP addresses. I have installed the root certificate into all the devices in my LAN. Let's say that I am running the server at ...
0
votes
1answer
30 views

If an SSL certificate's name must match the name entered into the browser, what do you do with SSH Local Port Forwarding?

If the SSL certificate must match the name entered into the browser; what if the name entered into the browser is https://localhost:8080, in the case of accessing a server that is behind an SSH ...
1
vote
1answer
35 views

How do I restrict access to all ports with source's PublicKey like SSH does?

I want a server to block any and all incoming traffic on all ports with the exception of the traffic from those machines which can be (and are right there and then regardless of the port being ...
0
votes
0answers
123 views

Exposing port http and https to the docker container but still can't communicate

Edit #3: fix by disabling FirewallD. It turns out because of my lack of understanding about CentOS. I did not have this problem before because Alibaba Cloud decide it is best to just disable ...
1
vote
0answers
17 views

host a java project (war) on IIS

I created a new site sample on IIS. I put in : C:\tools\jetty\webapps : the war sample.war C:\inetpub\wwwroot\sample the file web.config --> as result : navigate with http://localhost:1122/sample, ...
0
votes
1answer
41 views

How to resolve server certificate not trusted in postfix on Debian? [duplicate]

I've configured my postfix which is installed in debian 10 to send email, it was working previously but it all of a sudden just stopped working, I don't know why it stopped sending email, I checked ...
0
votes
1answer
55 views

Google App Engine with custom domain from Google Domains with SSL

I am trying to get a custom domain linked to my Google App Engine project and am completely stuck - it will just not work. I am trying to do everything through Google - I have no third-party domain ...
0
votes
2answers
27 views

AWS CMP multiple domain certificate - dynamic

I have an application that is hosted with AWS EC2 instance which is behind a load balancer with DNS say example.com. I would like to point multiple domains on a monthly basis to this load balancer (...
1
vote
0answers
31 views

How to issue a SSL certificate for a domain I do not own

So I'm building a multi-vendor PHP shopping cart application that runs on *.mydomain.com. Now here is the problem, I host many stores on a wildcard subdomain *.mydomain.com. I'd like store owners to ...
1
vote
0answers
22 views

SNI fails on nginx - wrong cert being issued

I've been testing my various websites security at Qualsys. All my sites run off of one nginx host. The sites work fine and get an A+ on the Qualsys tests. The only issue that I really want to fix is ...
0
votes
1answer
13 views

Cannot reach Node.js application over HTTPS

I have an node.js application that is running on port 3000. Infront of it i run an nginx reverse proxy. It works fine for port 80. I have tried to install an certificate with certbot. Now i have the ...
0
votes
1answer
34 views

Microsoft hosts domains that redirect to mine. Is there an innocuous explanation?

Facebook alerted me that some SSL certificates have been issued that potentially phish one of our domains: The detailed view for one of these entries is as follows: When I access one of these ...
0
votes
0answers
21 views

How to load ssl_certificate based on requested $host [nginx virtual host]?

I have a long virtual server for my nginx server. It's going to be shared between multiple domains and changes on this file should be affected on all domains. Everything goes fine until I reached to ...
4
votes
1answer
101 views

x509 extensions: can the “extnValue” be empty?

I'm writing a script that parses x509 certificates. x509 v3 certificates have extensions which are an ASN.1 sequence containing an OID, a critical flag, and an octetString called extnValue. For the ...
1
vote
1answer
34 views

Bind domain name with an IP address with port [closed]

I have a web application which runs locally in out network (hosted in Windows Server 2019 and deployed in Tomcat server ) and it is accessible from http://192.168.19.29:8080/myapp/. I configured ...
0
votes
1answer
24 views

Could SSL (DV) certificates be used to identify a network of sites?

I'm trying to get a good grasp on what information you could actually extract from a SSL-certificate. I'm running a network of sites hosted on the same VPS, with multiple domains that all point to ...
0
votes
1answer
23 views

Azure Application Gateway for hosting an e-commerce website on Azure

Actually I have two questions about Azure Application Gateway: 1. If I want to host a website on Azure, is it necessary to get an SSL certificate ? or does Azure provide it ? 2. If not necessary, Can ...
0
votes
0answers
14 views

win server 2016 IIS 10 Server Certificated gets delete or disappear

I am trying to install SSL certficate issued from comodo for my website on our public VM windows server 2016 IIS v10 inside IIS -> server certificates -> completed certificate requests .crt file ...
1
vote
1answer
27 views

Scan a list/range of IP addresses to find out which SSL Certificates each one is using

I have a list of internal IP addresses 1000+ strong, most of which I suspect are running services on port 443 and therefore will have a certificate installed on the server. These ips all exist on ...
0
votes
0answers
23 views

openssl s_client -connect fails with codes 20 and 21, but OK when -CAfile is specified

I'm setting up a self signed certificate and I've hit a bit of a wall. I'm trying to enable an LDAPS connection that I setup with this gist guide. My problem is that when I test the connection via: ...
0
votes
0answers
24 views

What is a crt.cache file and how is it related to the certificate file?

I am taking over a legacy IT infrastructure and I have limited info of it, i.e. I am kind of figuring out. I found the certificates as .crt files and inspected the content and they seem correct. Next ...
0
votes
1answer
97 views

How should certificates for multiple separate sub-domain servers be issued/renewed with Let's Encrypt?

Upgrading my home infrastructure to learn as well as be more secure, I have not been able to find out how best to get certificate(s) issues and installed across my servers, which comprise: Firewall (...
1
vote
0answers
35 views

Does Chrome support X509v3 Permitted Name Constraints?

I'm trying to set permitted name constraints on a private CA certificate. For example, I have the following constraints on my root certificate X509v3 Name Constraints: critical Permitted: ...
5
votes
2answers
901 views

Let's Encrypt Certificate for Internal Site

I am hoping to clear up some confusion I have regarding the use of Let's Encrypt for an internal site/application. I have not been able to find this information elsewhere. I want to use Let's Encrypt ...
0
votes
0answers
25 views

Solaris 11.4 ldapclient with Microsoft AD root certificate

I am admin of a couple of Solaris 11.4 x86 servers and of a group of members of my company's Microsoft AD. I am not admin of the whole Microsoft AD, I am just able of adding and deleting members in ...
0
votes
1answer
134 views

How is a proxy able to decrypt HTTPS traffic without the server certificates?

I'm working on a project that involves proxying traffic between some client applications and servers. For this I'm using AnyProxy. My project requires decrypting HTTPS. I'm able to this with AnyProxy,...
-1
votes
1answer
28 views

Generate PFX file using P7B file with private key data in text format

I have the certificate in P7B format and along with I have private key data in text file format as below. Can anyone please help how can I generate the PFX certificate using this data? -----BEGIN ...
0
votes
0answers
13 views

CAS Server get 403 error using apache and ssl

Using an Ubuntu server, I used the CASSAVA WordPress plugin. Wordpress is the CAS SERVER in PHP. Logging into Wordpress allows logins into other clients. It works fine on one of my apache servers ...
0
votes
0answers
38 views

unfi-controller running in docker SSL issues

I'm trying to setup the Unifi-Controller in a docker. I used a macvlan bridge to give the docker access to the web. The problem is when I try to access the controller via https://<ipaddress>:...
0
votes
1answer
90 views

Letsencrypt for all subdomains *.example.com [duplicate]

I'd like to obtain one certificate working for all my subdomains *.example.com. This works: certbot-auto certonly --webroot --webroot-path /home/www/example/ --domain example.com ...
0
votes
0answers
22 views

SSL certificate valid in Chrome but not in Firefox

I have installed an ssl certificate with letsencrypt (actually, my provider has an automated workflow for this which I used). As the title says: in Chrome (Chromium in Linux) it says that it is safe. ...
0
votes
1answer
135 views

Openssl “Self-signed certificate in certificate chain” when server sends whole certificate chain with the self-signed certificate to the client

I am having the following certificate chain: Self-signed Certificate --> Intermediate --> Client cert, Server cert. I have application for ssl communication and also verify peer setting. I try to ...
0
votes
1answer
65 views

Do I need to use certbot if I have an SSL certificate from my domain registrar?

I have an SSL certificate under my domain registrar (Porkbun). I also installed Nginx on my VPS (Vultr) running Ubuntu 19.10. HTTPS doesn't seem to be working at the moment. Do I need to install the ...
2
votes
0answers
51 views

Conditionally set SSL certificate request header in Apache

I have an Apache 2.4 server configured as a reverse proxy to accept incoming HTTPS requests and reverse-proxy them to another server over HTTP with custom HTTP headers containing any provided client ...
1
vote
0answers
26 views

Importing root certificates using keystore

I attempted to import AmazonRootCA*.cer into our webserver (Centos 7.7) cacert store running Coldfusion 2018 using the keystore tool. However I'm getting the following message and I'm not quite sure ...
0
votes
0answers
12 views

Update CA certificates bundle

I am looking for some noninteracive way to update whole CA certificates bundle in Ubuntu server. It appears to me update-ca-certificates does nothing unless I download and install missing sertificates ...
1
vote
1answer
121 views

https with sni two certs tho server names but same config. can I use one server block?

I often encounter following problem. I have an nginx server serving two hostnames via https on the same IP and the same port. Each host name has it's own cert. What I am doing so far is to have two ...

1
2 3 4 5
56