Questions tagged [ssl-certificate-errors]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
30 views

Is it necessary to recreate a Google-managed SSL certificate when switching the SSL resolution to a different provider?

I attempted to migrate a website from GCP to AWS Lightsail and then back again in order to gain a better understanding of the process. However, I discovered that the process was not as straightforward ...
FlyingPenguin's user avatar
0 votes
2 answers
40 views

alert certificate expired:../ssl/record/rec_layer_s3.c:1543:SSL alert number 45 when sending mails from the same server that hosts postfix

So, I have setup an smtp server using smtp in a Debian 11 machine. It works perfect when sending emails from my phone and my computer, but it does not work when trying to send emails from the same ...
Gottfried Rosenberger's user avatar
0 votes
0 answers
38 views

SSL Certificate related - Too many redirects

I am using bitnami wordpress website. I was trying to replace the old SSL certificates files with the new ones. I did replaced it but now I am getting "too many redirects errors". Can anyone ...
Dhaval Joshi's user avatar
0 votes
0 answers
174 views

.p12 certificate not working on mac (Ventura 13.4.1) but works on windows

I generated ssl certificates for (Nifi Registry https://nifi.apache.org/registry.html) I installed them in Windows.. it worked and i get a prompt to select certificate when i open the website https:// ...
santhosh's user avatar
  • 103
0 votes
1 answer
51 views

SSL certificate not working for www subdomain on multiple domain setup

I have a LAMP server running CentOS Stream 8 and Apache 2.4.37. On this I have three domains (let's call them example.com, example.net & example.org). I have SSL certificates for each domain + the ...
Adrien Hingert's user avatar
0 votes
0 answers
127 views

NodeJS https server returns http 0 and SSL error:14094412 ERR_SSL_SSLV3_ALERT_BAD_CERTIFICATE

I have a nodejs https server running on my Raspberry Pi. It responses to ajax requests. When open the webpage with a desktop/laptop or an iPhone (Safari), the ajax call returns the proper result with ...
BogisW's user avatar
  • 101
0 votes
2 answers
79 views

IIS 8 Default SSL Bindings Break

Scenario: We have two sites on Windows Server 2012 R2 running IIS8. There are two wildcard certificates for each domain. *pharmlogs that binds to the site and subdomains pharmlogs.com and *traxworx ...
DMunson's user avatar
0 votes
1 answer
129 views

Is there a way to restart apache ignoring ssl certificate errors?

My server has lots of virtualhosts, many client's domains come and go pretty frequently, and sometimes it's difficult to act quickly, finding the culprit (usually a dismissed domain) and restart ...
user1967184's user avatar
0 votes
0 answers
348 views

Ngninx "cannot load certificate BIO_new_file() failed (SSL: error:0200100D:system library:fopen:Permission", help fix this [emerg] error

I am running an Ubuntu 20.04 LEMP server on a Raspberry Pi 4. In my nginx errror logs I am getting the following error: 2023/05/29 11:51:40 [emerg] 3356#3356: cannot load certificate "/etc/...
DanRan's user avatar
  • 69
3 votes
1 answer
574 views

Let's Encrypt certificate on SQL Server 2019 - "The target principal name is incorrect"

Summary I'm having trouble getting a certificate issued by Let's Encrypt R3 to work on SQL Server 2019. When using the certificate for SSL but not trusting the server certificate explicitly (In SSMS, ...
fusillibips's user avatar
0 votes
0 answers
146 views

SLES 12 SP1 expired letsencrypt X3 root ca certificate

I'm working with SLES 12 SP1. When running zypper addrepo https://download.opensuse.org/repositories/openSUSE:Factory/standard/openSUSE:Factory.repo I get the following error Download (curl) error ...
user1247196's user avatar
0 votes
0 answers
189 views

Can't enable ssl on windows apache24

So, i've already sucessfully installed ssl certificates in apache virtual hosts (2 websites) but i'm unable to access them because every time I activate SSL in httpd.conf apache service wont start <...
totabank's user avatar
0 votes
0 answers
95 views

Apache2 SSL certificate error when other website site is enabled , server not picking up the right certification or configuration

I have 2 SSL configuration files for 2 sites. Both SSL are covering www and non-www versions of the sites. The first SSL one works for SiteA. As soon as I enabled Site B, it looks like my server uses ...
mlclm's user avatar
  • 169
0 votes
1 answer
2k views

Ubuntu cannot verify Sectigo certificate

On a server we adminster for a customer, no application can access certain HTTPS URLs, for example: $ wget https://open-data.bielefeld.de/sites/default/files/...
jdm's user avatar
  • 191
2 votes
0 answers
672 views

NGINX: Configure to setup mTLS with ssl_client_certificate, ssl_verify_client, ssl_certificate and ssl_certificate_key

Right off the bat there are a couple posts that go through this issue but I am unsure what the settings are doing exactly in order to achieve the correct result. I'm able to verify the client but not ...
Christian Matthew's user avatar
1 vote
0 answers
240 views

kolla-ansible SSL certificate expired

My ssl certificate has expired in my openstack deployment and I can't login in and several services do not work well because of it. How can I remediate to this? I tried to find a way to disable the ...
Wodel's user avatar
  • 51
0 votes
0 answers
74 views

Certificate marked as "not trusted by CA

I have a rather surprising problem these last days on one of my certificates signed by my root CA (via AD-CS). I noticed that my browser sends me back a message that I have never seen in place of my ...
Sagaroth's user avatar
1 vote
2 answers
807 views

Ubuntu SSL now broken after make installing openssl

I was attempting to set up a Cisco VPN and had run into some issues, in the process of trying to correct those issues I made some changes to my certificates directory and ran several commands ...
dan178's user avatar
  • 113
0 votes
1 answer
556 views

Server down after updating SSL certificates

I'm by no means an expert in this area, so I apologize if the question is dumb. I'm updating the SSL certificates on a client's website, but after updating the conf file the server went down. Apache ...
Jillian Hoenig's user avatar
0 votes
1 answer
273 views

SSL Cert Issues with Proxy Server Configuration

Running into an issue when applying an SSL cert to one of our reverse proxy servers - "This server could not prove it is <servername>". I think I might be confusing some of the SAN ...
jrd1989's user avatar
  • 688
0 votes
0 answers
151 views

My server has been physically moved to a new rack with a new IP address, and now I'm getting OCSP errors? Could it be an IPv6 thing maybe?

I'm pretty sure SSL certificates are almost always tied to a domain name rather than an IP address. And the vast majority of my traffic is unaffected, generally things are working well. However, my ...
Codemonkey's user avatar
  • 1,086
0 votes
0 answers
215 views

Best Way to Force use of SSL Certificate

When a browser connects to my website by entering it's FQDN the connection is encrypted using the site's SSL Certificate. However it has come to my attention that it is possible to bypass the SSL and ...
Huw Evans's user avatar
  • 101
0 votes
0 answers
2k views

Nginx with SSL behind another Nginx (with nginx-proxy)

I have two VMS. The first is VM1 and the second is VM2. The first is a VPN server and the second is a client. On VM1 the Nginx is installed as a reverse proxy from the official Docker repository. On ...
Kirill Gonchar's user avatar
0 votes
0 answers
104 views

Unable to install Godaddy SSL on openlitespeed webserver

I'm trying to install Godaddy Ssl to openLitespeed server but it's not working. I added .key .crt files to /usr/local/lsws/conf/cert/ then added the path to ssl listener as: $SERVER_ROOT/conf/cert/...
Hamodea Net's user avatar
0 votes
1 answer
1k views

This site is missing a valid, trusted certificate || Apache2 webserver, Windows root CA

I'm learning about certificates, HTTPS together and after 4 days I'm out of idea how to set up to become trusted. In my lab env. I have a Windows server with a CA role. Previously I installed a VM-...
Finaria's user avatar
  • 23
0 votes
1 answer
3k views

How to add server certificate exception to Chrome/Edge?

Is it possible to add server certificate exceptions for some websites (to skip warning page about certificates that are expired, self-signed or with missing or mismatched CN/SANs) in Google Chrome / ...
jacob_w's user avatar
0 votes
1 answer
635 views

Exim4 client rejecting TLS certificate

I'm having a problem with Exim4 and the TLS certificates, when I try a test connection using gnutls-cli I get this error: Processed 128 CA certificate(s). Resolving 'mail.reformaspaco.es:25'... ...
GGGuilleGGG's user avatar
1 vote
1 answer
533 views

Make gnutls-cli print local root certificate as well as server-provided certificates

I'm diagnosing a TLS certificate verification problem in Ubuntu Xenial that resulted from the recent Let's Encrypt root certificate expiration. The problem happens in cURL which uses GnuTLS under the ...
ivan_pozdeev's user avatar
0 votes
1 answer
1k views

SSL certificate error when not typing FQDN and relying on default search domain

DNS and SSL aren't really in my wheelhouse more than a rudimentary understanding, I hope what I want to do isn't impossible! Here's the situation: We have an internal domain and DNS servers, let's ...
Vitalydotn's user avatar
0 votes
2 answers
3k views

How to remove expired Let's Encrypt cert (Debian)

I am trying to remove the expired DST Root CA X3 Let's Encrypt SSL cert (expired yesterday) from a Debian server which is still appearing when I check in SSL Labs: RSA 2048 bits (e 65537) / ...
omega1's user avatar
  • 416
1 vote
2 answers
951 views

OpenDKIM-provided tools do not provide a usable key-pair for DKIM

I use opendkim-genkey -b 2048 -t -s default -d mydomain.com, resulting in files default.private and default.txt. Yes, default.private begins (correctly, SFAIK) with -----BEGIN RSA PRIVATE KEY----- and ...
Eric Dynamic's user avatar
0 votes
1 answer
2k views

Exchange Server Error ID 15021

My Exchange Server 2013 writes "Error 15021" dozens of times in the Error log. It says, that there is an error using the SSL-Configuration. I googled the error but there seem to be a lot of ...
tux's user avatar
  • 1
0 votes
2 answers
395 views

Nginx Revers Proxy Overwrite Certificate

I have a problem trying to overwrite a certificate using NGINX as a Reverse Proxy forwarding all request to an Apache Server with and old certificate (TLS 1.0) This is the output for my .conf file: ...
Julian Rios's user avatar
0 votes
1 answer
1k views

Cloudfront 502 error with ALB origin in different region

I have a CloudFront which has one of its origins as an application load balancer, this load balancer is available in a different region from the CloudFront which is only available in N.Virginia and is ...
Odasaku's user avatar
0 votes
0 answers
2k views

Decrypt error in TLS handshake after ServerKeyExchange

I have a WEB application deployed to Tomcat server. I connect to it with Chrome browser with HTTPS but I have decrypt error during TLS handshaking on the client side after ServerKeyExchange. ...
Ferenc T's user avatar
  • 101
1 vote
1 answer
1k views

Redirecting Error with google load balancer

I'm trying to setup Google Load Balancer and couldn't get it work. It produces either 502 or 302 error. Wanting to direct www to non-www, http to https. This is my rewrite rule SetEnvIf X-...
FlyingPenguin's user avatar
0 votes
1 answer
878 views

Exchange 2019 ssl certificate invalid

I have installed Exchange 2019 for testing purposes. I have purchased a domain name and a certificate. After I installed it, the status shows: invalid. Thank you. Here is the result of certutil -...
Alain's user avatar
  • 43
1 vote
2 answers
2k views

Gunicorn/Flask reject identical SSL certificate that works fine with Apache

What would cause a Gunicorn server running a Flask app to report a "sslv3 alert certificate unknown" error in the browser, when an Apache server running a WSGI app, using the exact same ...
Cerin's user avatar
  • 3,600
0 votes
1 answer
456 views

.htaccess redirect from SSL root domain to another subdomain with different SSL causes NET::ERR_CERT_COMMON_NAME_INVALID

I need help to figure this out. I have two local, separate webservers 192.168.11.5 (https://www.example.com) and 192.168.9.14 (https://project.example.com). Each has separate non-wildcard SSL ...
JJustine's user avatar
4 votes
3 answers
4k views

Email server certificate valid according to CheckTLS, invalid according to Thunderbird

I have set up an email server using docker-mailserver. DKIM, SPF, and DMARC are configured fine. SSL was set up using Let's Encrypt. Server has TLS and STARTTLS enabled. I ran a TLS/SSL test on https:/...
thanks_in_advance's user avatar
1 vote
1 answer
2k views

SSL error: No path found from the leaf certificate to any root. Maybe an intermediate certificate is missing

I've setup a personal mail server using postfix, postfix-saslauth, courier (mysqlauthd, imap, pop) plus some well practices like SPF, DKIM and DMARC. This set up has been working fine for the last 10 ...
peris's user avatar
  • 508
4 votes
1 answer
32k views

How to diagnose "CA certificate too weak" error, how to use the CA cert anyway?

I have to use a service that uses self-signed certificate (from Ubuntu). I have added the company's CA to the trusted list (Ubuntu). After that "self signed certificate in chain" error is ...
Petr Gladkikh's user avatar
0 votes
1 answer
443 views

Enabling Nginx TLSv1.3 error despite having Openssl 1.1.1g

I have Nginx 1.18.0 and OpenSSL enabled v1.1.1g. I know before this version is not possible to enable TLSv1.3 but even with this version is not possible. If I check ssl checkers website its enabled ...
danone's user avatar
  • 166
0 votes
0 answers
315 views

OpenSSL randomly fails to verify the certificate chain of a URL on the 443 port can verify all instance ports

I'm hoping someone can help me because I am at a loss. My team has been suffering from issues of missing intermediate certificates in our services. I was tasked with writing a script that would ...
JustCallMeNick's user avatar
2 votes
0 answers
203 views

Not able to login to my node application after SSL certificate installation in nginx server

I have a node application having its front end deployed in Nginx http web server and the back end (molecular microservices) in node server both on an AWS ec2 Linux VM. the application URL is ...
Abhishek Chaubey's user avatar
0 votes
1 answer
2k views

How to install SSL certificate for domain and subdomain

I want to install certificate on EC2 for domains and subdomains. I'm running a website "www.example.in" on single EC2 instance which is in public subnet with public IP and also pointing some ...
rajeev singh's user avatar
0 votes
0 answers
246 views

Client certificate works in Firefox but not when used in Internet Explorer (or Edge)

With a certain web site, a certain client certificate works fine with Firefox, but not with IE or Edge (all on Windows 10, as both IE and Edge behave the same, I'll use the term "IE/Edge" ...
David Balažic's user avatar
2 votes
1 answer
2k views

OpenSSL fails to detect expired intermediate CA certificate in s_client SSL connection test

By accident, I have an expired intermediate certificate at the end of my chain file in my Dovecot server's SSL configuration. It's enough of a problem that my Android e-mail client refuses to use it, ...
BaseZen's user avatar
  • 396
0 votes
1 answer
716 views

Dovecot enters a failed state with exit code error

I am having problems with dovecot on a debian 9 system running webmin/virtualmin. After an update, it seems that the renewal of a domain SSL certificate caused at least one client domain to use the ...
adam's user avatar
  • 111
0 votes
1 answer
6k views

Openssl "Self-signed certificate in certificate chain" when server sends whole certificate chain with the self-signed certificate to the client

I am having the following certificate chain: Self-signed Certificate --> Intermediate --> Client cert, Server cert. I have application for ssl communication and also verify peer setting. I try to ...
ananetworking's user avatar