Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

Questions tagged [ssl-certificate]

SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

5
votes
4answers
385 views

Is there a reason to use an SSL certificate other than Let's Encrypt's free SSL?

Let's Encrypt are providing free SSL certificates. Are there any downsides compared to other, paid certificates e.g. AWS Certificate Manager?
0
votes
1answer
20 views

SSL “unable to get local issuer certificate” : “full chain” vs “root”?

Summary In summary I have some certificate related files and some certificate related instructions but I'm not sure which files are which ! Background I've just installed a certificate from Lets ...
-1
votes
0answers
8 views

ssl_certificate_key directive under if

I am trying to update nginx to load certs from one of two location depending on host. so either the certs will exists under /var/certs/hostclassifier/publichost/cert.pem or under /var/certs/...
0
votes
1answer
15 views

IIS Windows 2016 ecdsa signed certificate

Does anyone know if IIS supports certificates signed with sha256ecdsa? If viewed with openssl, i have the following parameters: Signature Algorithm: ecdsa-with-SHA256 Public Key Info: NIST CURVE: P-...
0
votes
1answer
13 views

Can't connect HTTPS site to Apache on Arch

I've been trying to set up my own apache server for my website sammurphey.net Everythings been running smoothly up until SSL. I have the following virtual hosts in my httpd.conf <VirtualHost *:80&...
0
votes
3answers
19 views

Dovecot SSL - IMAP works, SMTP fails

I'm setting up a small mail server using postfix+dovecot. When running oppenssl s_client -connect mail.myserver.com:993 (IMAP), the server's certificate is displayed and I'm able to get an email ...
0
votes
2answers
33 views

How do I get a “valid SSL public certificate” from Windows Certificate ? (for stunnel configuration)

In these directions for configuring Stunnel on Windows the following text appears : Copy a valid SSL public certificate to the directory "C:\Program Files (x86)\stunnel." To make things more ...
0
votes
0answers
13 views

Updated certificate in GPO not being deployed to Trusted Root Certification Authorities

I created a GPO to deploy a new trusted root CA certificate to end-user machines. This worked correctly and the certificate was deployed. Unfortunately I'd made a mistake with the certificate and I ...
1
vote
2answers
40 views

WIldcard certificate installed on server not hosting www subdomain

I am looking for clarification/guidance on the following. I have www.example.com installed on CMS powered by Cloudflare CDN. I want to secure subdomains used for other applications hosted on ...
0
votes
1answer
33 views

SSL Certificate installed successfully but website not accessible

I have installed Let's Encrypt SSL Certificate on a windows-server-2012-r2 machine running iis-8.5. It is an ASP.NET 4.5 website running on an Azure VM. The installation was successful and I can see ...
-1
votes
1answer
32 views

Same SSL Certificate with same common name on two diferent Peoplesoft Websphere webserver [closed]

We have two different webservers (on two different Linux server), pointing to two different Environment. We ordered a Signed Certificate for one of the server and we apply it to one of the webserver, ...
0
votes
0answers
21 views

Adding ACM SSL certificate to Load Balancer not working for EC2 instance

I have a Bitnami Wordpress EC2 instance. I want to add SSL certificate so that my blog can be accessed with https. I tried all the steps available in all the tutorials and AWS guide. Below is the ...
0
votes
0answers
4 views

Tomcat hangs after setting the certificates

I'm trying to set up some certificates on Tomcat for using SSL. After a few failures using Apache APR, I decided using NIO. After settinng the file name and its password, tomcat starts correctly and ...
0
votes
1answer
25 views

The requested URL was not found on this server

I am trying to enable SSL for port 4100 for an Amazon EC2 Instance. When I access the site https://test.example.com:4100/login, I get an error as follows - The requested URL /login was not found on ...
2
votes
1answer
40 views

Why is my ssl certificate self signed?

I followed the following steps to install an ssl-certificate on a website; https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-centos-7. However, the website is ...
0
votes
1answer
53 views

How can I generate a self signed certificate that will not fire a SSL_ERROR_BAD_CERT_DOMAIN?

I need to generate a self signed certificate for my application and I want to be able to make it valid if a self generated root certificate have been added to the web browser manually. The problem is ...
0
votes
1answer
15 views

vsftpd error 530 Login incorrect error occurs with valid credentials

Though there are a number of similar existing question/answers that reference vsftpd and error code 530, but they do not seem to be helpful in this case: vsftpd login error: 530 VSFTPD 530 Login ...
0
votes
1answer
27 views

vsftpd fails to start (status=2)

The problem is that the vsftpd service fails to start after transferring a working configuration from another server. Of vsftpd's configuration files, only these were modified: /etc/vsftpd....
0
votes
1answer
21 views

Install trusted Certificate on stunnel

I would like to be able to use a trusted certificate on Stunnel proxy, The default one does not seem to allow me to do this. Is there a way to do this please? Would need to be free.
-1
votes
0answers
27 views

Can you generate a certificate enrollment request on one machine and complete it on another? [duplicate]

I have recently been tasked with automating our certificate issuance/renewal process via PowerShell. Having never worked in this space prior, I'm doing a lot of on the fly learning. Please excuse my ...
1
vote
1answer
73 views

Why does nginx require default ssl server to have a certificate?

I have a testing site with 2 domains and I want to enable SSL for both. Also, I want to have a default server to display an error page if a client is accessing some page out of those 2 domains. This ...
0
votes
1answer
58 views

curl - SSL peer does not support certificates of the type it received

Trying to send a request with a client certificate to an Apache server, I have the following request and error: $ curl -X POST https://my-server.com/dummy/user -H 'Cache-Control: no-cache' -H '...
0
votes
1answer
39 views

Openldap and SSL certificate chain validation

I just set up TLS for slapd on one server, using a simple PKI, like this one: ldap cert < intermediate CA cert < root CA cert In order to connect to the ldap server using TLS from a client, I ...
3
votes
1answer
24 views

DomainComponent error with openssl

I am creating a simple PKI to use TLS with an LDAP server. I created the root CA request and certificate with this in the config file: [ ca_dn ] 0.domainComponent = "org" 1.domainComponent ...
-1
votes
1answer
37 views

Let's Encrypt Expire Bot showing different date then command line

Today I got an email notification from Let's Encrypt Expire Bot that the SSL certificate for my domain will be expired on the 31, july, 2018. but when I log in to the server, and check the ...
-1
votes
1answer
46 views

Certbot misbehaves by creating a certificate for a domain with “www”

This time when I used certbot it created a certificate for "www.$website" instead of $website. This is not what I need. Here it is: $ website="my_website123.com" $ sudo certbot certonly --...
0
votes
2answers
77 views

SSL Self-Signed Certificate Vulnerability Keeps Returning

So, I've been dealing with a recurring problem with my workstations self-generating certificates. They're appearing in the "Personal" certificate store. Even after I manually delete them from the ...
0
votes
0answers
62 views

How to selfsign an SSL Certificate for HPE Integrated Lights-Out (iLO 5)

PROBLEM: When I access the ilo via browser, it return to me an error with SSL certificate. WHAT I TRIED: I created a CSR (ilo.csr) from iLO web interface --> Security --> SSL Certificate After I ...
0
votes
2answers
101 views

Apache: SSLCertificateFile: file does not exist or is empty

I created a Private Key, CSR, and CRT using the below commands to run a Website using HTTPS on Apache 2.4.6. And the Operating System is Cent OS 7. // To generate a Private Key 1. openssl genrsa -...
1
vote
0answers
20 views

certbot creates a certificate with “wwww” instead of a bare domain one - unlike before [duplicate]

I've been creating certificates this way for over a year: export website="my_domain1111.com" sudo certbot certonly --standalone -d $website -d www.$website --email hello@$website and it's always ...
2
votes
0answers
17 views

MAAS install CA to new machines

How could we add custom trusted Certificate Authority to the new deployed ubuntu 16.04 machines on MAAS v2.3 ? is there a direct way to do that, or we have to perform custom installation nodes ?
0
votes
0answers
27 views

MariaDB Galera Cluster ECDSA certificate and cipher

I have created a working MariaDB Galera Cluster and would like to secure it with SSL encryption. I have an ECDSA certificate (ecdsa-with-SHA512) and have setup SSL between the Nodes, but I get the ...
0
votes
0answers
68 views

Letsencrypt expired certificate renewal failure (NGinx)

I'm hosting a website on AWS. I created SSL certificates through letsencrypt for my domain xxxxx.com as well as www.xxxxx.com. (Throughout this post I'm putting 'xxxx's for potentially sensitive ...
1
vote
1answer
89 views

How to debug curl? gnutls_handshake failed -unexpected TLS packet (OpenSSL)

How can I debug curl error further when Apache error.log is not showing any? (35) gnutls_handshake() failed: An unexpected TLS packet was received. curl -v https://example.com * Rebuilt URL to: ...
0
votes
1answer
72 views

Set up certs for multiple domains in Postfix and Dovecot

I don't know how to set up main.conf postfix config file and 10-ssl.conf dovecot config files in order to make my mail server capable to handle with multiple certificates. Let me explain... I have two ...
0
votes
2answers
80 views

How to certify a domain that's used only for redirections and has no hosting?

I migrated a site from oldsite.example to newsite.example. HTTPS was enforced all over, so most incoming links to oldsite are going to https://www.oldsite.example. My oldsite.example domain used to ...
0
votes
1answer
33 views

Download certificates: gnutls or openssl

I need to download a certificate from a site. Up to now, I've been using gnutls command in order to get it. $ gnutls-cli --save-cert=ra-sec.pem vault.ra-sec.svc I've found out I', able to use ...
0
votes
1answer
37 views

SSL Cert says its self-signed but decoding shows it's not [closed]

I have a cert that is suddenly being presented as a self-signed cert. Its not. It has been working fine until now. When I decode the cert it shows everything I would expect. When I analyze it ...
0
votes
0answers
27 views

Unable to configure SSL on port 4001 in Apache2

I'm trying to configure apache2 with SSL on port 4001, I have done the following so far: ports.conf Listen 4001 <IfModule ssl_module> Listen 4001 </IfModule> default-ssl.conf &...
0
votes
2answers
36 views

SSL certificate for both www and non-www

I bought a SSL certificate from Globalsign (AlphaSSl). According to their site, all certificates secures both www and non-www. But when I go to https://www.kanzan.se, I get invalid SSL certificate (...
1
vote
1answer
33 views

SSL Check - Exchange Server responding with Self-Signed Cert

How do I set an Exchange server to respond to a Web Based SSL Certificate checks on a specific port number with the Public Cert? If I do an SSL cert check on port 443 it gets the Public cert as the ...
1
vote
2answers
120 views

Self-signed certificate to protect website

We have a website which is accessible on the internet. But we only want our partners to access our website, so we generate a self-signed server certificate and certificates signed by our self-...
-1
votes
1answer
30 views

openssl self signed sertificate, need 3 files, got only 2

Hello I try to config my mail server, I do : sudo openssl req -newkey rsa:4096 -nodes -sha512 -x509 -days 3650 -nodes -out /etc/ssl/certs/server.pem -keyout /etc/ssl/private/server.pem but in ...
0
votes
1answer
23 views

Is it correct to see certificate from another domain in case of missing cert? [duplicate]

I have 3 sites defined in apache, site1, site2, site3 For 1 and 2 I requested ssl certs from Let's encrypt and work OK, but NOT for site 3. Problem is that whenever I access https://site3 I always get ...
0
votes
3answers
62 views

Multi-domain certificate failing for one domain

I've been hosting some nginx servers with letsencrypt SSL certificates. domain-a.org is on server 1 with it's own certificate. sub.domain-a.org is on server 2 with it's own certificate At first ...
0
votes
1answer
92 views

LDAP TSL ldap_modify: error 80

I was read few suggestion from this and many others forums and try to fix problem on my own, but without result. I need to add cert to ldap and always it return error 80. I was add permission to ...
0
votes
1answer
19 views

What are the implications of requiring SSL and a client certificate, but leaving anonymous authentication on in IIS

I have been configuring IIS to use a client certificate. I set this as REQUIRED. In my ASP.NET (WCF) service, a <clientcertificate> tag I used to specify the thumbprint of the client certificate ...
0
votes
0answers
63 views

Nginx virtual hosts redirection not working

I am having trouble configuring Nginx to redirect to two different web applications on CentOS 7. I have 2 web applications running on Node.js. First app A running on port 1000 has domain www.domainA....
0
votes
1answer
78 views

Redirect from example.com to www.example.com if a certificate for example.com is invalid

I have no valid SSL certificate for my "example.com". I can't issue/renew a certificate for "example.com" at the moment. However, I have a valid one for "www.example.com" I want all the requests, ...
0
votes
0answers
73 views

Can't validate certificate chain JBoss AS 7.1 with APR

I'm trying to get HTTPS working with JBoss AS 7.1, using the web-native connector (APR/Apache Portable Runtime based). This is my configuration: <subsystem xmlns="urn:jboss:domain:web:1.1" ...