Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ssl-certificate]

SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

0
votes
0answers
14 views

MySQL SSL error: wrong version number

I'm having difficulty with MySQL and OpenSSL. I'm running MySQL 5.7 and OpenSSL 1.1.0g on Ubuntu 16.04 Regardless of what certificates I load, MySQL starts up but does not establish a connection over ...
3
votes
3answers
160 views

Server ssh certificate chain against MITM attacks?

During first contact with a server via ssh, the server's public key of the chosen key algorithm is presented to the user to validate it. After validation, the result is usually saved into the ~/.ssh/...
0
votes
1answer
32 views

Redirecting uncertified HTTPS domains to HTTP

Is there a method for redirecting HTTPS domain without a certificate to one with a certificate in Apache 2 or to HTTP? If no certificate is found, go to HTTP instead.
0
votes
1answer
37 views

Firefox - Intranet SSL

I am running Firefox Quantum 65.0.1. I have an intranet site that I need to use SSL with. My SSL certificate works fine in Chrome and IE. I have access to the CSR, PEM, KEY, CERT, and P12 file for ...
0
votes
0answers
17 views

unable to update certificate(s) with update-ca-certificates

I'm trying to use UPDATE-CA-CERTIFICATES(8) (update-ca-certificates - update /etc/ssl/certs and ca-certificates.crt), yet not getting to desirable state: root@www:~# cd /usr/local/share/ca-...
-1
votes
1answer
30 views

CNAME that points domain A to domain B results in a Security Warning

I'm using a service (banana.com) that allows me to use my domain (orange.com) to log in. They mention to add a CNAME record like so: an.orange.com. 3600 IN CNAME service.banana.com. I did that but ...
0
votes
1answer
41 views

How to complete certificate chain last node

I am running my own RocketChat latest version on Docker. And on top of it I have Nginx as a reverse proxy running Certbot to do a https. It works perfectly fine with Firefox web browser on Android and ...
0
votes
0answers
13 views

SSL is forwarding domain

I currently ran lets encrypt auto on my ssh. When I ran it I had the option to forward all https requests. I went ahead and did so. I ran two domains at once and somehow subdomain 1.example.com is ...
0
votes
1answer
26 views

Nginx load balancer and forcing HTTPS

I have an Nginx server being used as a load balancer. I have just installed an SSL certificate with Let's Encrypt and I am now looking into forcing HTTPs. The following is my config: upstream backend ...
-1
votes
1answer
31 views

Are front and back-end SSL certificates the same? [closed]

I'm trying to set up and API on https and I get the following error : NET::ERR_CERT_AUTHORITY_INVALID I have generated the certificate using a IP address because I dont have any domain name for ...
0
votes
0answers
33 views

Rancher 2.0 High Availability and Certificates

I replied to a similar question on the Rancher Forums with no luck: https://forums.rancher.com/t/rancher-2-x-ha-install-and-ssl-termination/12515/3 When following the Rancher Docs for a HA install, a ...
1
vote
1answer
44 views

Which fields are required in a web server ssl certificate?

I am learning about SSL certificates and doing some testing with a web server on my machine. I am trying to understand which field are required to be in the server certificate in order to be accepted ...
0
votes
1answer
11 views

How do I setup a CloudFlare Origin Certificate in AWS Certificate Manager?

When I try to import the Origin Certificate that CloudFlare provides into AWS Certificate Manager so I can use it with an ELB, ALB or NLB I find that it requires a key chain certificate that they didn'...
2
votes
3answers
42 views

SSL certificate for service - not for FQDN

My org deploys a data server and a client device (two devices) in customers' internal networks for them to use our solution; the client device only connects to the data server; however any one ...
0
votes
0answers
48 views

SSL certificates updating issue - domain.key .csr .crt and respective ssl.* files

I am responsible for running friends' website. It's using a free tool, call it T, which did a ton of configuration work for me. nginx config, for example, is managed by T. And same for SSL business, ...
1
vote
1answer
80 views

Curl verify certificate improperly

I used curl to launch a https request to download the file. I used below command: curl -v -o Output.pdf https://otherdomain.com/upload/manual-8mm-f35-csii-vdslr-5.pdf The result I get is: ...
0
votes
1answer
81 views

SSL: no alternative certificate subject name matches target host name

At one time our company hosted our own blog which we hosted with our wildcard cert for the domain, *.companyname.net. We moved our company blog to Hubspot and the team at Hubspot setup a second SSL ...
0
votes
0answers
19 views

Importing wildcard certificate from Barracuda appliance to IIS 10

I have a functioning wildcard certificate running on a Barracuda Load Balancer. From what I understand I can use that same certificate on other servers / appliances. The certificate is listed as ...
0
votes
1answer
20 views

Messed the SSL certificate files of my VM

I am trying to create a new SSL certificate with openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/apache-selfsigned.key -out /etc/ssl/certs/apache-selfsigned.crt. I am ...
1
vote
1answer
88 views

openssl verify error 2 at 1 depth lookup:unable to get issuer certificate

Openssl is telling me it can't verify my concatenated cert. I downloaded the intermediate cert from the issuer (AlphaSSL) and concatenated that with my domain cert I purchased (domain cert first, then ...
2
votes
1answer
71 views

Let's Encrypt wildcard certificates and Apache 2 not working

I am trying to set up a wildcard certificate using Let's Encrypt on an Ubuntu 18.04 server running apache2, for domain abc.def.com (not the real domain name) and all subdomains (*.abc.def.com) I have ...
-1
votes
0answers
24 views

Https same CSR for 2 windows servers

I have 2 IIS Servers, running on Windows Server. I have 2 different subdomains: server1.mydomain.com server2.mydomain.com I want to buy a wildcard https certificate for mydomain.com I can provide ...
0
votes
1answer
59 views

Laravel Forge/LetsEncrypt SSL error “SSL_ERROR_NO_CYPHER_OVERLAP”

Some users have complained that they cannot access our site due to a "secure connection failure" i.e. SSL. The actual error code provided is SSL_ERROR_NO_CYPHER_OVERLAP. Server is nginx with ubuntu ...
0
votes
0answers
15 views

How to let JupyterHub refresh the SSL certificate?

I have JupyterHub set up to use let's encrypt certificates. The problem is that they have a very short lifespan, and unless I stop&start JupyterHub, it keeps the old ones in memory, so that people ...
2
votes
1answer
58 views

What Does “L1K” indicate on an Entrust Certificate

I was working with a teammate importing certificates into a java keystore and I noticed our intermediate certificate had the ".L1K" notation, was then about to import into our Java application's ...
1
vote
0answers
38 views

SSL cert mismatch on redirect to sorry/maintenance website

We are trying to address an (IIS) SSL cert mismatch issue. We own dozens of domains name for various lines of business. We have multiple websites load balanced on a netscaler onsite. For example, ...
1
vote
2answers
43 views

Security grades of free vs paid SSL certificates

Do free or paid SSL certificates have anything to do with their security grades from a testing service such as SSL Server Test by SSL Labs or does it all depend on server's security configuration?
0
votes
1answer
32 views

CloudFlare and let's encrypt free ssl certificate subdomain

I want to know if it's possible to mix and match free ssl certificate from cloudflare and let's encrypt for subdomains. E.g. a.example.com and b.example.com use free ssl from cloudflare (I'm aware ...
-1
votes
1answer
48 views

Must I setup SSL certificate if my server is listening on only port 443 with Nginx?

I am using Amazon Load Balancer to receive requests on Port 443. Then I am sending off these request to my EC2 server on port 80. If I try to send the request on port 443 to EC2 nginx error.log file ...
1
vote
1answer
36 views

Properly redirect traffic with nginx for java client-server apps that use their own certificates

I have a server and a client app, that communicate with each other using Https connection and their own certificates (.jks file). The server listens on port 443 and the client connects to it using the ...
0
votes
1answer
47 views

No certificates match the selected hostname in Azure Functionapp

I cant add ssl binding to my Azure Function. I have uploaded the certificat, but when i try to bind it to a custom domain name I get "No certificates match the selescted hostname" as shown in the ...
0
votes
2answers
36 views

Is AWS certificate manager the one in charge for HTTPS connection?

I am confused about AWS Certificate Manager and the SSL certificates it provides: If I use it, will my website that's hosted on an EC2 instance have the green lock with https connection? I am ...
1
vote
2answers
203 views

Install AWS SSL Certificate to EC2 instance without load balancer

I'm new with AWS and facing some confusion with ACM SSL certificate installation to an EC2 instance. Is it possible to install the certificate without using ELB or Cloudfront. I don't need load ...
-1
votes
1answer
53 views

Generate SSL certificate files from text file

I have generated a free SSL from zerossl.com through their wizard, and finally I got a pure text file containing pure text with two BEGIN and END. I want to know how to generate .crt and key from ...
0
votes
0answers
108 views

SSL certificate in system store not trusted by Chrome

I have a gitlab server running in our company for which I have obtained a certificate signed by our company's CA. Since I can access the site from a machine within our domain without getting SSL ...
0
votes
1answer
88 views

How to check if letsencrypt ssl certificate is installed? [closed]

I installed Lets Encrypt plugin in my WHM and run for one of my site but it when I'm checking to sslshopper site to confirm that certificate is installed or not it shows : Common name: example.io ...
0
votes
0answers
56 views

Is there a way to configure IIS to tell us we received an untrusted client certificate?

We have a Web API endpoint configured to allow, but not require, client certificates. We're logging the certificate we receive, then checking to make sure it is what we expect, logging the result, ...
0
votes
0answers
51 views

PCI Compliance - SSL certificate doesn't match hostname (port 25)

I'm working on an Ubuntu server hosting multiple websites for one company. Trying to get one of the domains to be PCI compliant, but it's failing on port 25 (SMTP) because the SSL certificate hostname ...
0
votes
1answer
44 views

combinging Rocketchat and Nextcloud installed with snap on one server, same port

I installed a fresh Ubuntu18 server with Nextcloud and Rocketchat installed through snap. After enabling letsencrypt, Nextcloud listens on port 443 and Rocketchat on port 3000. I would like both to ...
0
votes
1answer
64 views

Lets Encrypt - Server Error in '/letsencrypt' Application, A Task was Cancelled

I have the let's encrypt extension added on Azure through Kudu. This extension has been working fine until recently and now when I try to apply a SSL certificate to a website a get the following error:...
0
votes
1answer
23 views

What will happen if client call Apache server by IP and there are two SNI virtual hosts [duplicate]

We have a Apache 2.4 web server with a couple of virtual hosts with different certificates. I have set up SNI name based virtualhosts : ap.mmm.com and ac.mmm.com, it's working great. All on same IP (...
2
votes
0answers
40 views

FreeRADIUS with Let's Enrypt Certificate (trusted connection without provisioning?)

I have a FreeRADIUS server set up for PEAP/MSCHAPv2 connections with an SQL user backend. On that server, I have set up a Let's encrypt certificate for domain access.example.org. This certificate is ...
0
votes
1answer
70 views

NGINX Calling page will download strange file + Certbot can't install certificate

Problem: Certbot returns a urn:ietf:params:acme:error:connection-error when trying to install a certificate for subdomain rainloop.example.com. EDIT: As to be seen in the "EDIT" segment below there'...
0
votes
1answer
52 views

How to properly redirect all request to non-www inside nginx with reverse proxy [duplicate]

I have a react website served by reverse proxy inside nginx. On top of that, I have SSL. Certbot is handling redirects from http to https. I would also like to setup redirects from www to non-www. I ...
0
votes
0answers
88 views

Zabbix web-scenario with Authentication

I want to check service availability with zabbix. On my server I have Tomcat and java app deployed, which is contacting external server (GET request), and it is working (when the service is available)....
0
votes
0answers
78 views

SSL Certificate Configuration Error on XAMPP server

I have been following this guide in order to configure SSL certificate on XAMPP server where I have enabled SSL on 4433 (as well as 443 after encoutering errors but no result, below config and error ...
1
vote
2answers
45 views

Port 80 on Web Server Security

Currently I'm running a web server, The server itself is using both HTTP "Port 80" and HTTPS "Port 443". I purchased an SSL certificate and installed it to the issue is the manufacturer of the ...
1
vote
0answers
10 views

How to allow a newly inserted user certificate with Apache 'SSLVerifyClient optional'?

My web users are able to optionally use a Smart Card Certificate to identify themself via Firefox to my web server running Apache httpd 2.4. For this I use SSLVerifyClient optional plus for speed ...
0
votes
1answer
40 views

setting up ADFS without SSL certificate

I want to know if it's possible to set up ADFS on a domain controller without having to use an SSL certificate, and if you must use one, is it possible to have on created/validated for free?
0
votes
1answer
240 views

How to install cer and p7b certificates to use in IIS?

I have generated the CSR request on our windows server ( we need to bind our application hosted on this server for Https) using below commands in keytool: Keytool -genkey -alias <server name> -...