Questions tagged [ssl-certificate-errors]
The ssl-certificate-errors tag has no usage guidance.
124
questions
0
votes
0
answers
30
views
Is it necessary to recreate a Google-managed SSL certificate when switching the SSL resolution to a different provider?
I attempted to migrate a website from GCP to AWS Lightsail and then back again in order to gain a better understanding of the process. However, I discovered that the process was not as straightforward ...
google-cloud-platform
0
votes
2
answers
40
views
alert certificate expired:../ssl/record/rec_layer_s3.c:1543:SSL alert number 45 when sending mails from the same server that hosts postfix
So, I have setup an smtp server using smtp in a Debian 11 machine. It works perfect when sending emails from my phone and my computer, but it does not work when trying to send emails from the same ...
0
votes
0
answers
38
views
SSL Certificate related - Too many redirects
I am using bitnami wordpress website.
I was trying to replace the old SSL certificates files with the new ones.
I did replaced it but now I am getting "too many redirects errors".
Can anyone ...
0
votes
0
answers
174
views
.p12 certificate not working on mac (Ventura 13.4.1) but works on windows
I generated ssl certificates for (Nifi Registry https://nifi.apache.org/registry.html) I installed them in Windows.. it worked and i get a prompt to select certificate when i open the website https://
...
- 103
0
votes
1
answer
51
views
SSL certificate not working for www subdomain on multiple domain setup
I have a LAMP server running CentOS Stream 8 and Apache 2.4.37. On this I have three domains (let's call them example.com, example.net & example.org). I have SSL certificates for each domain + the ...
- 309
0
votes
0
answers
127
views
NodeJS https server returns http 0 and SSL error:14094412 ERR_SSL_SSLV3_ALERT_BAD_CERTIFICATE
I have a nodejs https server running on my Raspberry Pi. It responses to ajax requests. When open the webpage with a desktop/laptop or an iPhone (Safari), the ajax call returns the proper result with ...
- 101
0
votes
2
answers
79
views
IIS 8 Default SSL Bindings Break
Scenario: We have two sites on Windows Server 2012 R2 running IIS8. There are two wildcard certificates for each domain.
*pharmlogs that binds to the site and subdomains pharmlogs.com and
*traxworx ...
- 1
0
votes
1
answer
129
views
Is there a way to restart apache ignoring ssl certificate errors?
My server has lots of virtualhosts, many client's domains come and go pretty frequently, and sometimes it's difficult to act quickly, finding the culprit (usually a dismissed domain) and restart ...
0
votes
0
answers
348
views
Ngninx "cannot load certificate BIO_new_file() failed (SSL: error:0200100D:system library:fopen:Permission", help fix this [emerg] error
I am running an Ubuntu 20.04 LEMP server on a Raspberry Pi 4. In my nginx errror logs I am getting the following error:
2023/05/29 11:51:40 [emerg] 3356#3356: cannot load certificate "/etc/...
- 69
3
votes
1
answer
574
views
Let's Encrypt certificate on SQL Server 2019 - "The target principal name is incorrect"
Summary
I'm having trouble getting a certificate issued by Let's Encrypt R3 to work on SQL Server 2019. When using the certificate for SSL but not trusting the server certificate explicitly (In SSMS, ...
- 31
0
votes
0
answers
146
views
SLES 12 SP1 expired letsencrypt X3 root ca certificate
I'm working with SLES 12 SP1.
When running
zypper addrepo https://download.opensuse.org/repositories/openSUSE:Factory/standard/openSUSE:Factory.repo
I get the following error
Download (curl) error ...
- 41
0
votes
0
answers
189
views
Can't enable ssl on windows apache24
So, i've already sucessfully installed ssl certificates in apache virtual hosts (2 websites) but i'm unable to access them because every time I activate SSL in httpd.conf apache service wont start
<...
- 1
0
votes
0
answers
95
views
Apache2 SSL certificate error when other website site is enabled , server not picking up the right certification or configuration
I have 2 SSL configuration files for 2 sites. Both SSL are covering www and non-www versions of the sites.
The first SSL one works for SiteA. As soon as I enabled Site B, it looks like my server uses ...
- 169
0
votes
1
answer
2k
views
Ubuntu cannot verify Sectigo certificate
On a server we adminster for a customer, no application can access certain HTTPS URLs, for example:
$ wget https://open-data.bielefeld.de/sites/default/files/...
- 191
2
votes
0
answers
672
views
NGINX: Configure to setup mTLS with ssl_client_certificate, ssl_verify_client, ssl_certificate and ssl_certificate_key
Right off the bat there are a couple posts that go through this issue but I am unsure what the settings are doing exactly in order to achieve the correct result. I'm able to verify the client but not ...
1
vote
0
answers
240
views
kolla-ansible SSL certificate expired
My ssl certificate has expired in my openstack deployment and I can't login in and several services do not work well because of it.
How can I remediate to this? I tried to find a way to disable the ...
- 51
0
votes
0
answers
74
views
Certificate marked as "not trusted by CA
I have a rather surprising problem these last days on one of my certificates signed by my root CA (via AD-CS).
I noticed that my browser sends me back a message that I have never seen in place of my ...
- 1
1
vote
2
answers
807
views
Ubuntu SSL now broken after make installing openssl
I was attempting to set up a Cisco VPN and had run into some issues, in the process of trying to correct those issues I made some changes to my certificates directory and ran several commands ...
- 113
0
votes
1
answer
556
views
Server down after updating SSL certificates
I'm by no means an expert in this area, so I apologize if the question is dumb. I'm updating the SSL certificates on a client's website, but after updating the conf file the server went down. Apache ...
- 153
0
votes
1
answer
273
views
SSL Cert Issues with Proxy Server Configuration
Running into an issue when applying an SSL cert to one of our reverse proxy servers - "This server could not prove it is <servername>". I think I might be confusing some of the SAN ...
- 688
0
votes
0
answers
151
views
My server has been physically moved to a new rack with a new IP address, and now I'm getting OCSP errors? Could it be an IPv6 thing maybe?
I'm pretty sure SSL certificates are almost always tied to a domain name rather than an IP address. And the vast majority of my traffic is unaffected, generally things are working well.
However, my ...
- 1,086
0
votes
0
answers
215
views
Best Way to Force use of SSL Certificate
When a browser connects to my website by entering it's FQDN the connection is encrypted using the site's SSL Certificate.
However it has come to my attention that it is possible to bypass the SSL and ...
- 101
0
votes
0
answers
2k
views
Nginx with SSL behind another Nginx (with nginx-proxy)
I have two VMS. The first is VM1 and the second is VM2. The first is a VPN server and the second is a client.
On VM1 the Nginx is installed as a reverse proxy from the official Docker repository.
On ...
0
votes
0
answers
104
views
Unable to install Godaddy SSL on openlitespeed webserver
I'm trying to install Godaddy Ssl to openLitespeed server but it's not working.
I added .key .crt files to /usr/local/lsws/conf/cert/
then added the path to ssl listener as:
$SERVER_ROOT/conf/cert/...
0
votes
1
answer
1k
views
This site is missing a valid, trusted certificate || Apache2 webserver, Windows root CA
I'm learning about certificates, HTTPS together and after 4 days I'm out of idea how to set up to become trusted. In my lab env. I have a Windows server with a CA role.
Previously I installed a VM-...
- 23
0
votes
1
answer
3k
views
How to add server certificate exception to Chrome/Edge?
Is it possible to add server certificate exceptions for some websites (to skip warning page about certificates that are expired, self-signed or with missing or mismatched CN/SANs) in Google Chrome / ...
- 5
0
votes
1
answer
635
views
Exim4 client rejecting TLS certificate
I'm having a problem with Exim4 and the TLS certificates, when I try a test connection using gnutls-cli I get this error:
Processed 128 CA certificate(s).
Resolving 'mail.reformaspaco.es:25'...
...
1
vote
1
answer
533
views
Make gnutls-cli print local root certificate as well as server-provided certificates
I'm diagnosing a TLS certificate verification problem in Ubuntu Xenial that resulted from the recent Let's Encrypt root certificate expiration. The problem happens in cURL which uses GnuTLS under the ...
- 352
0
votes
1
answer
1k
views
SSL certificate error when not typing FQDN and relying on default search domain
DNS and SSL aren't really in my wheelhouse more than a rudimentary understanding, I hope what I want to do isn't impossible!
Here's the situation:
We have an internal domain and DNS servers, let's ...
- 101
0
votes
2
answers
3k
views
How to remove expired Let's Encrypt cert (Debian)
I am trying to remove the expired DST Root CA X3 Let's Encrypt SSL cert (expired yesterday) from a Debian server which is still appearing when I check in SSL Labs:
RSA 2048 bits (e 65537) / ...
- 416
1
vote
2
answers
951
views
OpenDKIM-provided tools do not provide a usable key-pair for DKIM
I use opendkim-genkey -b 2048 -t -s default -d mydomain.com, resulting in files default.private and default.txt. Yes, default.private begins (correctly, SFAIK) with -----BEGIN RSA PRIVATE KEY----- and ...
- 11
0
votes
1
answer
2k
views
Exchange Server Error ID 15021
My Exchange Server 2013 writes "Error 15021" dozens of times in the Error log. It says, that there is an error using the SSL-Configuration. I googled the error but there seem to be a lot of ...
- 1
0
votes
2
answers
395
views
Nginx Revers Proxy Overwrite Certificate
I have a problem trying to overwrite a certificate using NGINX as a Reverse Proxy forwarding all request to an Apache Server with and old certificate (TLS 1.0)
This is the output for my .conf file:
...
0
votes
1
answer
1k
views
Cloudfront 502 error with ALB origin in different region
I have a CloudFront which has one of its origins as an application load balancer, this load balancer is available in a different region from the CloudFront which is only available in N.Virginia and is ...
- 1
0
votes
0
answers
2k
views
Decrypt error in TLS handshake after ServerKeyExchange
I have a WEB application deployed to Tomcat server. I connect to it with Chrome browser with HTTPS but I have decrypt error during TLS handshaking on the client side after ServerKeyExchange.
...
- 101
1
vote
1
answer
1k
views
Redirecting Error with google load balancer
I'm trying to setup Google Load Balancer and couldn't get it work. It produces either 502 or 302 error.
Wanting to direct www to non-www, http to https.
This is my rewrite rule
SetEnvIf X-...
0
votes
1
answer
878
views
Exchange 2019 ssl certificate invalid
I have installed Exchange 2019 for testing purposes.
I have purchased a domain name and a certificate.
After I installed it, the status shows: invalid.
Thank you.
Here is the result of certutil -...
- 43
1
vote
2
answers
2k
views
Gunicorn/Flask reject identical SSL certificate that works fine with Apache
What would cause a Gunicorn server running a Flask app to report a "sslv3 alert certificate unknown" error in the browser, when an Apache server running a WSGI app, using the exact same ...
- 3,600
0
votes
1
answer
456
views
.htaccess redirect from SSL root domain to another subdomain with different SSL causes NET::ERR_CERT_COMMON_NAME_INVALID
I need help to figure this out.
I have two local, separate webservers 192.168.11.5 (https://www.example.com) and 192.168.9.14 (https://project.example.com). Each has separate non-wildcard SSL ...
- 11
4
votes
3
answers
4k
views
Email server certificate valid according to CheckTLS, invalid according to Thunderbird
I have set up an email server using docker-mailserver.
DKIM, SPF, and DMARC are configured fine.
SSL was set up using Let's Encrypt. Server has TLS and STARTTLS enabled.
I ran a TLS/SSL test on https:/...
1
vote
1
answer
2k
views
SSL error: No path found from the leaf certificate to any root. Maybe an intermediate certificate is missing
I've setup a personal mail server using postfix, postfix-saslauth, courier (mysqlauthd, imap, pop) plus some well practices like SPF, DKIM and DMARC.
This set up has been working fine for the last 10 ...
- 508
4
votes
1
answer
32k
views
How to diagnose "CA certificate too weak" error, how to use the CA cert anyway?
I have to use a service that uses self-signed certificate (from Ubuntu). I have added the company's CA to the trusted list (Ubuntu). After that "self signed certificate in chain" error is ...
- 183
0
votes
1
answer
443
views
Enabling Nginx TLSv1.3 error despite having Openssl 1.1.1g
I have Nginx 1.18.0 and OpenSSL enabled v1.1.1g. I know before this version is not possible to enable TLSv1.3 but even with this version is not possible. If I check ssl checkers website its enabled ...
- 166
0
votes
0
answers
315
views
OpenSSL randomly fails to verify the certificate chain of a URL on the 443 port can verify all instance ports
I'm hoping someone can help me because I am at a loss. My team has been suffering from issues of missing intermediate certificates in our services. I was tasked with writing a script that would ...
2
votes
0
answers
203
views
Not able to login to my node application after SSL certificate installation in nginx server
I have a node application having its front end deployed in Nginx http web server and the back end (molecular microservices) in node server both on an AWS ec2 Linux VM. the application URL is ...
0
votes
1
answer
2k
views
How to install SSL certificate for domain and subdomain
I want to install certificate on EC2 for domains and subdomains.
I'm running a website "www.example.in" on single EC2 instance which is in public subnet with public IP and also pointing some ...
0
votes
0
answers
246
views
Client certificate works in Firefox but not when used in Internet Explorer (or Edge)
With a certain web site, a certain client certificate works fine with Firefox, but not with IE or Edge (all on Windows 10, as both IE and Edge behave the same, I'll use the term "IE/Edge" ...
- 468
2
votes
1
answer
2k
views
OpenSSL fails to detect expired intermediate CA certificate in s_client SSL connection test
By accident, I have an expired intermediate certificate at the end of my chain file in my Dovecot server's SSL configuration. It's enough of a problem that my Android e-mail client refuses to use it, ...
- 396
0
votes
1
answer
716
views
Dovecot enters a failed state with exit code error
I am having problems with dovecot on a debian 9 system running webmin/virtualmin.
After an update, it seems that the renewal of a domain SSL certificate caused at least one client domain to use the ...
- 111
0
votes
1
answer
6k
views
Openssl "Self-signed certificate in certificate chain" when server sends whole certificate chain with the self-signed certificate to the client
I am having the following certificate chain:
Self-signed Certificate --> Intermediate --> Client cert, Server cert. I have application for ssl communication and also verify peer setting. I try to ...
Related Tags
ssl-certificate × 70
ssl × 55
openssl × 24
nginx × 15
https × 11
lets-encrypt × 9
certificate × 7
apache2 × 7
apache-2.4 × 7
load-balancing × 6
linux × 5
ubuntu × 4
debian × 3
curl × 3
google-chrome × 3
certbot × 2
centos7 × 2
more related tags
Hot Network Questions
- How to reducy Poly count just for a specific area?
- Orion stars distance from Earth
- Flutter Xcode 15 Error (Xcode): DT_TOOLCHAIN_DIR cannot be used to evaluate LIBRARY_SEARCH_PATHS
- Banking System in C++ [V2]
- What is the right age to teach your kids about weather-appropriate clothing?
- Am I Doing It Wrong? Why Can't I Use Multiple 5-Line Staves to Represent Guitar's Open Strings?
- During World War II, did the Luftwaffe try to bomb 10 Downing Street?
- How big would a dog like the one described need to be to survive an attack by the big cat I’ve described?
- A common term for errors that are the result of other errors?
- Why are humans and AI often treated differently in cases where they perform nearly identical processes?
- efetch multiple records at once
- Should I decline a PhD offer due to writing problems?
- Can I lessen the use of boolean flag variables in this snippet?
- Is it beneficial to rest a quick bread batter w/o leavening agent? ex. banana bread
- How were standard serial port baud rates chosen?
- what benefit is there to obfuscate the geometry with algebra?
- Recent advances in computer science since 2010?
- Reducing π to zero (again)
- Does Kant think we have an imperfect duty to not take intoxicants?
- Peaks, plateaus and ledges
- Is my wooden deck salvageable? Repair tips and Stain vs Paint questions
- Online shopping: order date vs shipping date vs charge date
- Is it okay if I use a historical figure's name for a work of fiction completely unrelated to history?
- Selecting string elements from list by using strings from another list