Questions tagged [ssl-certificate]

SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

Filter by
Sorted by
Tagged with
0
votes
0answers
23 views

Where do I create google-managed SSL certificate for kubernetes cluster deployment?

I'm trying to set up SSL on my site. I deployed to an autopilot kubernetes cluster. I have a domain through Google Domains which has DNS pointing to my kubernetes exposed ip with an A record. I've ...
0
votes
1answer
33 views

Can find RSA private key for uploading my SSL certificate to Google App Engine

Right now I am trying to upload a SSL certificate from GoDaddy so That I am able to enable HTTPS for my custom domain name for the website hosted on the app. Whenever, I try to upload the SSL ...
3
votes
1answer
85 views

Clarification on certificate bundle vs certificate chain

I'm in need of a clarification about SSL certificates, I have the general picture, but I'm not quite sure about all the moving parts. The specific issue I'm dealing with is about an Active Directory ...
0
votes
1answer
21 views

Nginx many subdomains and many domains

I faced issue with detecting subdomain in server_name. My users may "register" their domain in my portal. They are able register only domain (user-domain.com) or/and wildcard (*.user-domain....
1
vote
2answers
52 views

Is it possible to generate a LetsEncrypt certificate for a private subdomain if the domain is public?

I have a server running on a private subdomain, server.internal.example.com example.com is public but internal.example.com is not. I've used CertBot to generate a certificate for *.example.com but if ...
1
vote
0answers
59 views

How to add correct chain certificate when acessing url with wget? [migrated]

There is a site (https://datashare.is.ed.ac.uk/bitstream/handle/10283/3192/CINIC-10.tar.gz) which I know is misconfigured and I can get the new chained certificate from here: https://whatsmychaincert....
0
votes
0answers
39 views

Nginx SSL configuration

I want to setup Nginx for SSL termination. All request with valid client certificates will be terminated at Nginx and request will be forwarded to backend app. I have following Nginx configuration ...
0
votes
1answer
16 views

SSL Certificate with subdomain on different server

Hi i have specific problem which i haven't faced before because i never had to run different certificate for the same domain and subdomain but other company is requesting to run their own certificate ...
0
votes
1answer
33 views

.htaccess redirect from SSL root domain to another subdomain with different SSL causes NET::ERR_CERT_COMMON_NAME_INVALID

I need help to figure this out. I have two local, separate webservers 192.168.11.5 (https://www.example.com) and 192.168.9.14 (https://project.example.com). Each has separate non-wildcard SSL ...
1
vote
1answer
34 views

Is .well-known/acme-challenge ever needed after the initial domain fingerprintng?

I understand the initial challenge-response pattern when using Let's Encrypt, but I noticed that when testing renewals, no GET requests were hitting .well-known/acme-challenge. Once the domain/account ...
0
votes
1answer
74 views

Best practices for replacing a server while not breaking any URLs and not having any downtime?

I tried searching for an answer to this problem but the search term is so broad that nothing helpful popped up. We have an old server and we want to replace it with a new one (both are physical ...
-2
votes
0answers
13 views

My Amazon aws Ec2 instance is showing unhealthy when connected with Load balancer

I have created an Ec2 instance and i have created an ssl certificate and connected load balancer with this ec2 instance as target but the ec2 instance target in the load balancer is showing unhealthy ...
0
votes
0answers
20 views

Automatic SSL certificate renewal using certbot

I am using (docked) certbot to provide my sites with SSL certificates using for example: docker container run -it --rm --name certbot -v /foo/nginx/:/etc/nginx -v /foo/letsencrypt:/etc/letsencrypt -v /...
-1
votes
1answer
55 views

Creating TLS certificates providing a CSR with Dehydrated

For the time being, I'm able to generate monthly TLS certificates using Dehydrated. I run the following command using crontab: /usr/bin/dehydrated --challenge dns-01 -k /etc/le-godaddy-dns/godaddy.py -...
0
votes
2answers
43 views

How to hide “Alterative names” SSL certificates (in SSLlabs test)?

when running ssllabs.com's test on my website, the output contains "Certificate #2" for (one of the) other domains hosted on the NGINX web server. It is red and not Trusted but I prefer to ...
0
votes
0answers
29 views

Wildcard SSL or Automatically Install New Ones?

I'm very new to SSLs and trying to figure out if something is possible to do. I have a VPS with Ubuntu 20.04 and have multiple domains pointing to the /var/www/html directory. Some are pointed using ...
0
votes
0answers
17 views

OV certificate received from 'Actalis' without the key: how to use in nginx?

For the first time, I handled a request from a customer which absolutely need an OV certificate. I created the request, and I surprised me because it doesn't ask me for a key when creating the CSR ...
-5
votes
1answer
316 views

How do I renew my cert? ACMEv1 Brownout in Progress [closed]

I dont know what this means, their website doesn't offer any guides, and googling it doesn't provide any help. My whole website is now inaccessible and I can't fix it. Cert is due for renewal, auto-...
0
votes
0answers
25 views

“ASN1 parser: value is not valid” error when generating self-signed certificate

I'm trying to set up taskserver and I've got to the stage of generating the certificates. This is for personal use so I'm happy to use the provided script that generates self-signed certificates. ...
1
vote
2answers
56 views

My site's SSL cert is valid, why does WordPress tell me it's not?

I've generated an SSL cert for my domain (moteck.com.au) using certbot and installed it on my shared host (using the certificate, private key and CA bundle, with the last being the contents of ...
0
votes
1answer
36 views

Certbot Hostname DOES NOT VERIFY

I try to create my first ssl certificate and i use the follow comand: certbot certonly --manual -d *.flexis.cyou --agree-tos --manual-public-ip-logging-ok --preferred-challenges dns-01 --server https:/...
0
votes
1answer
48 views

How to deliver certificate randomly to browser, according to the backend IP/server picked by HAProxy?

I am a beginner in HAProxy and I was trying to achieve this. I have 4 VMs, one having HAProxy server and Apache httpd server in other 3 VMs. I have test.html on all three servers. When user hit https:/...
1
vote
1answer
37 views

Why browser is always showing certificate of only one server even if multiple certificates are configured in HAProxy?

I am a beginner in HAProxy. I have four VMs, with HAProxy in one and Apache httpd in other three. What I am trying to achieve is, when user connect to HAProxy IP using https, the connection should be ...
0
votes
2answers
26 views

Possible conflict with multiple SSL certificates?

We currently have a SSL certificate for mycompany.com in GoDaddy and they are asking me to get one for our QA department for the URL qa.mycompany.com. I have installed certificates just fine with Let'...
2
votes
2answers
30 views

Why aren't my websites configured in IIS using the correct certificates?

My sites are similarly named: hi.api.domain.tld hi.test.domain.tld The .api domain is my api and .test is the webapp that consumes the api. I've got a certificate for each one but they don't seem to ...
0
votes
1answer
50 views

Nginx won't run after import SSL certificate

I have a problem, after import commercial certificate with private key into my bitdefender gravityzone console, it stopped working. I have such errors: serv bdadmin # service nginx start Job for nginx....
1
vote
0answers
47 views

App service managed certificate for a naked domain

I've successfully created certificates (App service managed certificate) for other custom domains (for example www.cortoso.com, cortoso.com, www.cortoso.cz, cortoso.cz, ...). However, I am unable to ...
0
votes
1answer
49 views

What is the proper way to send a certificate to a web hosting company?

I have a wildcard SSL cert issued through Azure. I need to use this certificate on a shared host (for a subdomain) and they don't have an interface for me to upload it myself, so I have to email it to ...
0
votes
1answer
46 views

How to use HAProxy to override 25 Certificates per Application Load Balancer limit in AWS?

I use AWS to run a web application, which supports custom domains and subdomains. I am using AWS certificate manager to generate and manage certificates. Well, say my application is available under ...
0
votes
0answers
44 views

Why and how does a client site-wide policy block “example.com” but not “www.example.com” despite the HTTPS certificate issued to both?

The DNS situation is this: example.com. origin A record to 10.9.8.7 www.example.com. is a CNAME to fred.example.com fred.example.com A record 10.9.8.7 mail.example.com A 10.9.8.7 the certificate has ...
0
votes
0answers
32 views

NGINX 2-way SSL

Setting up 1-way SSL is trivial (i.e. get a certificate signed by a reputable CA with www.mydomain.com) However, it seems restricting access to a server is a bit more complex. I understand the pem ...
1
vote
1answer
68 views

Getting tlsv1 alert unknown ca:../ssl/record/rec_layer_s3.c:1528:SSL alert number 48 even though verification seems to be ok

I have a root CA which signed 2 intermediates CAs (client CA and server CA), and 2 certs (client cert which is signed by client CA and server cert which is signed by server CA). Now server has the ...
0
votes
0answers
27 views

Why have both CERT and TLSA DNS RR?

I know of at least 2 DNS resource record types that serve the purpose of enabling domain owners the ability to control approved/revoked certificates either self-signed or by CA's namely the CERT and ...
1
vote
3answers
171 views

nginx tlsv1 alert unknown ca:SSL alert number 48

I'm currently trying to set up nginx as a proxy for a website which requires certificate authentication. The following curl command works perfectly: curl --cacert ca-cert.pem -v --key client.key --...
1
vote
1answer
68 views

New Let'sencrypt certificate ERR_CERT_DATE_INVALID

Ubuntu 20.04 Nginx I obtained a certificate with certbot like sudo certbot --nginx -d pvapp-2021.umwelt-campus.de. And included the paths to the certificate to my two nginx config files (one for the ...
1
vote
1answer
54 views

Do i need SSL when redirecting to https and if so, does multi-domain SSL work?

I have a question regarding the need for SSL certificates in the following situation: I will have www.example.app which will be registered and hosted by supplier A. In the hosting, a SSL certificate ...
0
votes
0answers
109 views

force nginx to use SSL/TLS alert on invalid client certificate

If I am using a Apache to verify the client certificate and the client certificate is invalid (e.g. revoked) than I can get the appropriate SSL/TLS alert which can be evaluated by the client: curl -v -...
1
vote
1answer
56 views

Maximum SSL certificate duration

Using openSSL, it looks like the maximum -days I can use is 11499 based on the conversation here. However, if I want to sign it by a certification authority, how long will be the maximum certification ...
2
votes
1answer
83 views

On CentOS Certbot / Lets Encrypt uses snap to keep SSL certificates up to date. Is there another method that will keep certificates up to date?

Environment: Centos 8, Certbot, Lets Encrypt On CentOS distributions certbot / Lets Encrypt uses snap to keep SSL certificates up to date. Below are the instructions. certbot instructions: Nginx on ...
0
votes
1answer
24 views

New SSL Cert now showing up for Postfix in browser (Ubuntu, Namecheap)

I'm a newbie trying to wing it after our Sys Admin left. I needed to update our wildcard certificate and copy it onto our mail server. I renewed the cert at Namecheap, downloaded it, and installed it ...
0
votes
1answer
100 views

nginx proxy to node and ssl on vue/node

EDIT: Error.log 2021/02/23 07:30:07 [warn] 233791#233791: "ssl_stapling" ignored, issuer certificate not found for certificate "/etc/nginx/selfSignedCerts/example.crt" 2021/02/24 ...
0
votes
0answers
27 views

How to protect the access to a local server with a certificate, Apache httpd, and ngrok?

If we have the following scenario: a Ubuntu 18.04.5 LTS machine a third party server running on port 10000 of this machine and already configuring a self-signed certificate (https://localhost:10000) ...
0
votes
2answers
45 views

How to create a certificate with SAN and specific encryption in Windows?

I want to create a certificate with: Subject Alternative Name SHA256 as hash algorithm On a Windows 10 Ent machine, both the above options are not available by default when creating a certificate. ...
0
votes
1answer
16 views

How to remove a “not safe” flag when getting into a RHEL cockpit portal on my intranet (AD based)?

I have an ERP server hosted on RHEL 8.3, and for management I use cockpit portal from my web browser. Everytime I enter to this portal I get a message saying the website is not trustable, and I want ...
1
vote
0answers
19 views

Finding example domain that uses AAACertificateServices cert

How can I find a domain whose root certificate is AAACertificateServices? Note this is a Comodo certificate. To prepare for a dependent server whose certificate will change soon, it looks my servers ...
0
votes
0answers
18 views

Multiple sites with different certificates and different DNS with same IP address on IIS : Error

I have two DNS mappings for single IP address (DNS1: site1.net, DNS2: site2.net) and also I have created two different certificates for two sites as (Cert1: site1.net, Cert2: site2.net). When I create ...
0
votes
0answers
32 views

Azure App Certificate FraudDetected

My client has purchased a domain through my GoDaddy reseller account, and is attempting to bind it to his Azure App Certificate. The certificate never gets issued. After doing some research I found ...
0
votes
0answers
88 views

EMC VNX 5300 Storage Processor Shell Management Commands

I am trying to solve an issue I have with an EMC VNX 5300. It appears that no /dev/md* devices can be mounted. I believe these network mounts provide the files in the /nas directory on the control ...
0
votes
0answers
80 views

SSL Root CA certificate is not recognized, although present in the trust store

We need to implement MTLS on nodejs - client side. This is my code: const fs = require('fs') , path = require('path') , certFile = fs.readFileSync('./client.crt') , keyFile = fs....
1
vote
2answers
73 views

GCP Google Cloud - When hosting microsites on GCP, what is the most efficient way to handle SSL Certs for HTTPs

My product built on GCP creates microsites. They are served by a Google Cloud Function connected to a GCP Load balancer. My customer's want to point their own domain names to my product's microsites. ...

1
2 3 4 5
59