Questions tagged [ssl-certificate-errors]
The ssl-certificate-errors tag has no usage guidance.
0
votes
1answer
4 views
SSL_ERROR_RX_RECORD_TOO_LONG with rstudio-server on AWS
I installed rstudio-server on an AWS EC2 instance. Everything went well, but when trying to access https://myawsserver.example.org:8787 I get the following error :
Secure Connection Failed
An ...
0
votes
0answers
57 views
MySQL SSL error: wrong version number
I'm having difficulty with MySQL and OpenSSL. I'm running MySQL 5.7 and OpenSSL 1.1.0g on Ubuntu 16.04
Regardless of what certificates I load, MySQL starts up but does not establish a connection over ...
0
votes
1answer
53 views
Setting up a SSL Certificate IN GCP load balancer
I'm trying to setup a server less pixel tracking based on thus documentation: https://cloud.google.com/solutions/serverless-pixel-tracking-tutorial
The big issue is that for some reason I'm getting a ...
google-cloud-platform
1
vote
1answer
103 views
Need help to establish secure ftp connection from linux to z/OS FTPS server
I need help to establish secure ftp connection from linux client to z/OS host running FTPS server.
From FTPS server admin I have got following information:
Host IP address, port, CA certificate file ...
1
vote
1answer
4k views
SSL issues “Peer's certificate issuer has been marked as not trusted by the user.”
We have a public facing development server that requires SSL for a particular function.
Yet EVERYTHING that uses SSL in any form returns
curl: (60) Peer's certificate issuer has been marked as not ...
0
votes
0answers
28 views
Enforce SNI on https bindings
An SSL binding was added in IIS recently for a website on our shared server, but the SNI box was mistakenly not checked.
This caused certificate errors to be displayed for all other websites on the ...
0
votes
1answer
42 views
SSL Cert says its self-signed but decoding shows it's not [closed]
I have a cert that is suddenly being presented as a self-signed cert. Its not. It has been working fine until now. When I decode the cert it shows everything I would expect. When I analyze it ...
0
votes
1answer
28 views
Is it correct to see certificate from another domain in case of missing cert? [duplicate]
I have 3 sites defined in apache, site1, site2, site3
For 1 and 2 I requested ssl certs from Let's encrypt and work OK, but NOT for site 3.
Problem is that whenever I access https://site3 I always get ...
1
vote
1answer
190 views
Seeking ground truth on TLS certificates and MacOS - browser, curl, openssl compared
On a Mac, High Sierra 10.13.5, I'm seeing a difference in TLS certification validation. Chrome and Safari are happy with TLS validation when visiting https://www.visitflorida.com. Also, curl has no ...
0
votes
1answer
20 views
Jboss is unable to connect to Apple Push Networks
I'm using Aerogear Unified Push server to deliver messages to push networks. Into my setup messages are properly delivered into Android networks but they fail to be delivered in Apple. The error seems ...
1
vote
1answer
915 views
ERR_SSL_VERSION_OR_CIPHER_MISMATCH with signed certificate in Tomcat
I have a tomcat server for which I needed a signed certificate. I generated a key using
keytool -genkey ....
and then generated a CSR and sent it to my company admin.
They gave me back a CER ...
2
votes
1answer
435 views
Mutual SSL authentication and requirements for certificates
For our internal tests I need to set up the mutual SSL authentication between our IIS server (it hosts two applications: ASP.NET web GUI and a web service) and clients (accessing the server in two ...
0
votes
1answer
23 views
Reconfigure certificates or edit certificate information
Necessary details first:
OS - Ubuntu 16.04 LTS
System: Digital Ocean droplet
I attempted to set up a self-signed certificate for SSL verification using Let's Encrypt. In either haste or ...
0
votes
1answer
312 views
How to update expired ssl certificate on server with key-pinning (hpkp)
On server with nginx web server was setup ssl section with key-pinning:
add_header Public-Key-Pins 'pin-sha256="some-key"; pin-sha256="second-key"; max-age=5184000;' always;
now certificate is ...
0
votes
1answer
43 views
HTTPS server certificate fails
Is there a way to check the certificate used for HTTPS for errors or problems in general? One of the websites I access is always shown by Chrome as Not Secure. To view the site I then have to click on ...
0
votes
1answer
626 views
Client Authentication Certificate error on Android after installing SSL certificate
I've recently installed an SSL certificate for my website fantasyfeeder.com. This appears to be installed correctly when I use the online checker at ssllabs.com (https://www.ssllabs.com/ssltest/...
1
vote
0answers
25 views
Apache settings to prevent browser from redirect
I have a question regarding redirects.
We currently have set up an Apache with a wildcard certificate *.shopdomain.com and run different shops on different subdomains like shop-a.shopdomain.com, shop-...
0
votes
1answer
78 views
Single domain SSL certificate installed in subdomain shows in another subdomain
Single domain SSL certificate installed in subdomain shows in another subdomain
Server information :
Ubuntu 14.04
Apache2, Mysql, PHP7
Control Panel ISPConfig 3.1
Single IP for all domain
I ...
0
votes
2answers
293 views
Certificate with SubjectAlternativeName (SAN) gives ERR_CONNECTION_RESET in Google Chrome
There is a non-public-facing application. I am trying to make sure that there are no HTTPS-related warnings/errors.
The error I receive after putting the certificate with SAN field (signed by a ...
0
votes
1answer
133 views
Cannot create SSL Engine: The target principle name is incorrect, SSL and SAP HANA
I'm getting the following error when attempting to connect to a tenant database in a multi-tenant SAP HANA Server running on SUSE Linux:
I can connect via SSL to the system database of the HANA ...
-3
votes
2answers
192 views
Valid CA issued SSL certificate gives privacy error in browser [closed]
(I had originally asked this question on StackOverflow and did not get any answers for more than 5 days. Since I found more SSL related discussions in this forum I deleted from SO and have re-asked ...
0
votes
0answers
3k views
curl.error: (35, 'error reading X.509 key or certificate file')
I created a certificate using this:
openssl req -x509 -nodes -newkey rsa:4096 -keyout server.key -out server.crt -days 365
Then I run:
curl -l --tlsv1.2 -E server.crt -v https://test-as.sgx....
0
votes
0answers
372 views
Error renewing SSL certificate with certbot
root@nl6g:~# sudo certbot --nginx -d cienciadelgaza.com -d www.cienciadelgaza.com
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Cert is due for renewal, auto-renewing...
Renewing an ...
0
votes
1answer
250 views
SSL certificate with error “Attackers might be trying to steal your information from 192.168.56.74 ”
I configured a root and intermediate CA using MS2012. I encountered error when I accessing the apache webserver using the SSL Certificate issued by the CA.
The error is
"Attackers might be trying to ...
1
vote
1answer
836 views
openssl not find certificates unless specified with -CAfile
I'm struggling with openssl since some days.
I've compiled openssl on an ARM device and when I run openssl s_client -connect google.com:443 the connection will fail with error 20: unable to get local ...
1
vote
1answer
1k views
CloudFront redirection with ssl gives “invalid certificate” error when accessing https://company.com, but why?
I've configured an AWS CloudFront redirection (with SSL) using [this guide].1
I've configured an A record with Alias which points company.com. to the CloudFront domain name.
When I access the ...
4
votes
4answers
11k views
Two Way SSL Error - 400 The SSL certificate error just for client certificate
I am trying to configure two-way SSL with SSL certs (for server and client) signed by Intermediate CAs. This is what I have done so far following this tutorial.
Server - nginx application
Nginx is ...
1
vote
1answer
775 views
Haproxy appears do be issuing the wrong certificate
I am trying to secure a domain with haproxy. When I load the URL: bitbucket.kl.company.com, I get the error:
bitbucket.kl.company.com uses an invalid security certificate.
This certificate is only ...
0
votes
1answer
191 views
SSL certificate on the CDN and the origin
One of our SSL certificate is about to expire next month. We use limelight CDN and we had provided them certificate when we started working with them.
We also use same certificates on our sites. All ...
4
votes
2answers
132 views
Can't secure sub domain with SSL
I am trying to secure a sub domain:
bitbucket.kl.company.com
The certificate is for *.company.com. So I get an error:
bitbucket.kl.company.com uses an invalid security certificate. The certificate ...
1
vote
0answers
833 views
Installing wildcard SSL Certificate on Tomcat 6 and 7
I have followed the information given in the goDaddy web-site to get the SSL certificate and installing it but Not successful.
I created the keystore:
keytool -keysize 2048 -genkey -alias tomcat -...
0
votes
1answer
50 views
Should I allow any URL in order to SSL Certificates be authenticated?
I'm configuring my company's network.
There are a few different levels of access, which determine what kind of websites the users can access.
The users on the lowest access level should only be ...
0
votes
1answer
650 views
Difference between openssl's verify and s_client
openssl verify gives me a 20 error code whereas s_client gives me a 1 return code and correctly gets the root certificate.
Can anyone point me out to how to verify a downloaded certificate ?
...
1
vote
1answer
474 views
CertPathValidatorException with Windows server and Android client
I installed a new PositiveSSL certificate from Comodo on a Windows Server 2008 R2 computer. I successfully connected from the following clients
Chrome for Windows
Chrome for Android
Firefox for ...
0
votes
1answer
1k views
no trusted rsa public key found
I am trying to setup ikev2 with strongswan using a wildcard certificate.
The config seems to work for iOS with this certificate but doesn't work for Android, getting this error - no trusted rsa ...
-1
votes
2answers
640 views
How to setup 404 nginx config for default host on port 443
For the past few weeks I am hunting for a solutions to setup 404 nginx config for default host on port 443. And no solution so far.
To clarify the question properly. Lets take quora.com as example ...
0
votes
1answer
574 views
VPNGate Connections - OpenVPN Certificate Errors [closed]
I've been trying to figure this out for the past few days but couldn't find anything specific to this case. It doesn't look complicated, but I also don't know how to fix it from my end.
VPNGate ...
0
votes
1answer
3k views
openssl certificate error “signed fields invalid”
On Linux, we are running this command:
openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -config openssl.cnf -keyout mycompany.key -out mycompany.crt
after posting this, I think the command we ...
0
votes
1answer
116 views
Microsoft Certification Authority: How to make certificates work on domain active directory
I have been struggling with Microsoft Certification Authority lately.
Most resources only explain how SSL works and what certificates are, how they work, how they are issued and what they are used ...
0
votes
3answers
71 views
Wildcard Certificate Setup
We recently had a project pushed through that I didn't have time to research first. We were asked to set up a site and purchased a wildcard certificate from GoDaddy. The instructions for most of the ...
3
votes
1answer
4k views
Cannot get cURL or wget to validate some SSL certificates
I've noticed that our link checker, which uses cURL, fails more and more often to validate SSL certificates. I'm trying to get to the bottom of this.
https://www.bgetem.de/, for instance, opens just ...
0
votes
1answer
886 views
Enterprise CA Certificate request error
I've recently set up a new Windows 2012 R2 Enterprise SHA2 issuing CA to replace an old Windows 2008 R2 SHA1 issuing CA. This also has Web Enrollment installed as is accessed by the public so all DNS ...
4
votes
1answer
4k views
SSL_ERROR_NO_CYPHER_OVERLAP error with signed certifcate
My company has supplied a Tomcat/MySQL based application to a customer that by default uses http. At the request of the customer I enabled this to use https by creating a self-signed certificate. This ...
0
votes
1answer
10k views
Error “SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate” on lighttpd
I'm using a valid certificate but I'm not able to get client certificate. The lighttpd service fails with error:
(connections-glue.c.200) SSL: 1 error:140890C7:SSL routines:...
2
votes
1answer
5k views
nginx ssl configuration per virtual host
I am switching configuration from a single host to several virtual hosts on the nginx server. Until my changes, ssl was working correctly, but after adding several virtual hosts, each with unique ...
-1
votes
1answer
117 views
How to support more HTTPS Ciphers?
I am debugging an IoT device that I am making. I am having it try and connect to my website (EC2 hosted) over HTTPS. The device is running into an issue negotiating the TLS handshake, and it is ...
1
vote
1answer
220 views
Multi domain SSL not working with www on SAN
I am using godaddy multi domain SSL on windows server 2008 with IIS 7.5. My main website www.abc.org working fine with www and non www but other domain ex.
DNS Name=www.abc.org
DNS Name=abc.org
DNS ...
2
votes
0answers
279 views
Connecting to ssl mysql always fails with error 2026
I have mariadb version
10.1.21-MariaDB-1~jessie
(on debian 8) running a master-server replication scenario via ssl and it's working :
MariaDB [(none)]> show slave status\G;
******************...
1
vote
2answers
257 views
How to resolve SSLProtocol Syntax Error
I am trying to install an SSL Certificate.
When I restart apache I get this error:
SSLProtocol: Illegal protocol '\xe2\x80\x93SSLv2'
Here are my conf file directives:
<VirtualHost *:443>
...
0
votes
1answer
2k views
postfix SSL routines:SSL3_GET_KEY_EXCHANGE:unable to find ecdh parameters
We recently had this error while our postfix MTA tries to encrypt a connection via TLS:
postfix/smtp[20716]: warning: TLS library problem: 20716:error:1408D13A:SSL routines:SSL3_GET_KEY_EXCHANGE:...
