Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ssl-certificate-errors]

The tag has no usage guidance.

0
votes
1answer
4 views

SSL_ERROR_RX_RECORD_TOO_LONG with rstudio-server on AWS

I installed rstudio-server on an AWS EC2 instance. Everything went well, but when trying to access https://myawsserver.example.org:8787 I get the following error : Secure Connection Failed An ...
0
votes
0answers
57 views

MySQL SSL error: wrong version number

I'm having difficulty with MySQL and OpenSSL. I'm running MySQL 5.7 and OpenSSL 1.1.0g on Ubuntu 16.04 Regardless of what certificates I load, MySQL starts up but does not establish a connection over ...
0
votes
1answer
53 views

Setting up a SSL Certificate IN GCP load balancer

I'm trying to setup a server less pixel tracking based on thus documentation: https://cloud.google.com/solutions/serverless-pixel-tracking-tutorial The big issue is that for some reason I'm getting a ...
1
vote
1answer
103 views

Need help to establish secure ftp connection from linux to z/OS FTPS server

I need help to establish secure ftp connection from linux client to z/OS host running FTPS server. From FTPS server admin I have got following information: Host IP address, port, CA certificate file ...
1
vote
1answer
4k views

SSL issues “Peer's certificate issuer has been marked as not trusted by the user.”

We have a public facing development server that requires SSL for a particular function. Yet EVERYTHING that uses SSL in any form returns curl: (60) Peer's certificate issuer has been marked as not ...
0
votes
0answers
28 views

Enforce SNI on https bindings

An SSL binding was added in IIS recently for a website on our shared server, but the SNI box was mistakenly not checked. This caused certificate errors to be displayed for all other websites on the ...
0
votes
1answer
42 views

SSL Cert says its self-signed but decoding shows it's not [closed]

I have a cert that is suddenly being presented as a self-signed cert. Its not. It has been working fine until now. When I decode the cert it shows everything I would expect. When I analyze it ...
0
votes
1answer
28 views

Is it correct to see certificate from another domain in case of missing cert? [duplicate]

I have 3 sites defined in apache, site1, site2, site3 For 1 and 2 I requested ssl certs from Let's encrypt and work OK, but NOT for site 3. Problem is that whenever I access https://site3 I always get ...
1
vote
1answer
190 views

Seeking ground truth on TLS certificates and MacOS - browser, curl, openssl compared

On a Mac, High Sierra 10.13.5, I'm seeing a difference in TLS certification validation. Chrome and Safari are happy with TLS validation when visiting https://www.visitflorida.com. Also, curl has no ...
0
votes
1answer
20 views

Jboss is unable to connect to Apple Push Networks

I'm using Aerogear Unified Push server to deliver messages to push networks. Into my setup messages are properly delivered into Android networks but they fail to be delivered in Apple. The error seems ...
1
vote
1answer
915 views

ERR_SSL_VERSION_OR_CIPHER_MISMATCH with signed certificate in Tomcat

I have a tomcat server for which I needed a signed certificate. I generated a key using keytool -genkey .... and then generated a CSR and sent it to my company admin. They gave me back a CER ...
2
votes
1answer
435 views

Mutual SSL authentication and requirements for certificates

For our internal tests I need to set up the mutual SSL authentication between our IIS server (it hosts two applications: ASP.NET web GUI and a web service) and clients (accessing the server in two ...
0
votes
1answer
23 views

Reconfigure certificates or edit certificate information

Necessary details first: OS - Ubuntu 16.04 LTS System: Digital Ocean droplet I attempted to set up a self-signed certificate for SSL verification using Let's Encrypt. In either haste or ...
0
votes
1answer
312 views

How to update expired ssl certificate on server with key-pinning (hpkp)

On server with nginx web server was setup ssl section with key-pinning: add_header Public-Key-Pins 'pin-sha256="some-key"; pin-sha256="second-key"; max-age=5184000;' always; now certificate is ...
0
votes
1answer
43 views

HTTPS server certificate fails

Is there a way to check the certificate used for HTTPS for errors or problems in general? One of the websites I access is always shown by Chrome as Not Secure. To view the site I then have to click on ...
0
votes
1answer
626 views

Client Authentication Certificate error on Android after installing SSL certificate

I've recently installed an SSL certificate for my website fantasyfeeder.com. This appears to be installed correctly when I use the online checker at ssllabs.com (https://www.ssllabs.com/ssltest/...
1
vote
0answers
25 views

Apache settings to prevent browser from redirect

I have a question regarding redirects. We currently have set up an Apache with a wildcard certificate *.shopdomain.com and run different shops on different subdomains like shop-a.shopdomain.com, shop-...
0
votes
1answer
78 views

Single domain SSL certificate installed in subdomain shows in another subdomain

Single domain SSL certificate installed in subdomain shows in another subdomain Server information : Ubuntu 14.04 Apache2, Mysql, PHP7 Control Panel ISPConfig 3.1 Single IP for all domain I ...
0
votes
2answers
293 views

Certificate with SubjectAlternativeName (SAN) gives ERR_CONNECTION_RESET in Google Chrome

There is a non-public-facing application. I am trying to make sure that there are no HTTPS-related warnings/errors. The error I receive after putting the certificate with SAN field (signed by a ...
0
votes
1answer
133 views

Cannot create SSL Engine: The target principle name is incorrect, SSL and SAP HANA

I'm getting the following error when attempting to connect to a tenant database in a multi-tenant SAP HANA Server running on SUSE Linux: I can connect via SSL to the system database of the HANA ...
-3
votes
2answers
192 views

Valid CA issued SSL certificate gives privacy error in browser [closed]

(I had originally asked this question on StackOverflow and did not get any answers for more than 5 days. Since I found more SSL related discussions in this forum I deleted from SO and have re-asked ...
0
votes
0answers
3k views

curl.error: (35, 'error reading X.509 key or certificate file')

I created a certificate using this: openssl req -x509 -nodes -newkey rsa:4096 -keyout server.key -out server.crt -days 365 Then I run: curl -l --tlsv1.2 -E server.crt -v https://test-as.sgx....
0
votes
0answers
372 views

Error renewing SSL certificate with certbot

root@nl6g:~# sudo certbot --nginx -d cienciadelgaza.com -d www.cienciadelgaza.com Saving debug log to /var/log/letsencrypt/letsencrypt.log Cert is due for renewal, auto-renewing... Renewing an ...
0
votes
1answer
250 views

SSL certificate with error “Attackers might be trying to steal your information from 192.168.56.74 ”

I configured a root and intermediate CA using MS2012. I encountered error when I accessing the apache webserver using the SSL Certificate issued by the CA. The error is "Attackers might be trying to ...
1
vote
1answer
836 views

openssl not find certificates unless specified with -CAfile

I'm struggling with openssl since some days. I've compiled openssl on an ARM device and when I run openssl s_client -connect google.com:443 the connection will fail with error 20: unable to get local ...
1
vote
1answer
1k views

CloudFront redirection with ssl gives “invalid certificate” error when accessing https://company.com, but why?

I've configured an AWS CloudFront redirection (with SSL) using [this guide].1 I've configured an A record with Alias which points company.com. to the CloudFront domain name. When I access the ...
4
votes
4answers
11k views

Two Way SSL Error - 400 The SSL certificate error just for client certificate

I am trying to configure two-way SSL with SSL certs (for server and client) signed by Intermediate CAs. This is what I have done so far following this tutorial. Server - nginx application Nginx is ...
1
vote
1answer
775 views

Haproxy appears do be issuing the wrong certificate

I am trying to secure a domain with haproxy. When I load the URL: bitbucket.kl.company.com, I get the error: bitbucket.kl.company.com uses an invalid security certificate. This certificate is only ...
0
votes
1answer
191 views

SSL certificate on the CDN and the origin

One of our SSL certificate is about to expire next month. We use limelight CDN and we had provided them certificate when we started working with them. We also use same certificates on our sites. All ...
4
votes
2answers
132 views

Can't secure sub domain with SSL

I am trying to secure a sub domain: bitbucket.kl.company.com The certificate is for *.company.com. So I get an error: bitbucket.kl.company.com uses an invalid security certificate. The certificate ...
1
vote
0answers
833 views

Installing wildcard SSL Certificate on Tomcat 6 and 7

I have followed the information given in the goDaddy web-site to get the SSL certificate and installing it but Not successful. I created the keystore: keytool -keysize 2048 -genkey -alias tomcat -...
0
votes
1answer
50 views

Should I allow any URL in order to SSL Certificates be authenticated?

I'm configuring my company's network. There are a few different levels of access, which determine what kind of websites the users can access. The users on the lowest access level should only be ...
0
votes
1answer
650 views

Difference between openssl's verify and s_client

openssl verify gives me a 20 error code whereas s_client gives me a 1 return code and correctly gets the root certificate. Can anyone point me out to how to verify a downloaded certificate ? ...
1
vote
1answer
474 views

CertPathValidatorException with Windows server and Android client

I installed a new PositiveSSL certificate from Comodo on a Windows Server 2008 R2 computer. I successfully connected from the following clients Chrome for Windows Chrome for Android Firefox for ...
0
votes
1answer
1k views

no trusted rsa public key found

I am trying to setup ikev2 with strongswan using a wildcard certificate. The config seems to work for iOS with this certificate but doesn't work for Android, getting this error - no trusted rsa ...
-1
votes
2answers
640 views

How to setup 404 nginx config for default host on port 443

For the past few weeks I am hunting for a solutions to setup 404 nginx config for default host on port 443. And no solution so far. To clarify the question properly. Lets take quora.com as example ...
0
votes
1answer
574 views

VPNGate Connections - OpenVPN Certificate Errors [closed]

I've been trying to figure this out for the past few days but couldn't find anything specific to this case. It doesn't look complicated, but I also don't know how to fix it from my end. VPNGate ...
0
votes
1answer
3k views

openssl certificate error “signed fields invalid”

On Linux, we are running this command: openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -config openssl.cnf -keyout mycompany.key -out mycompany.crt after posting this, I think the command we ...
0
votes
1answer
116 views

Microsoft Certification Authority: How to make certificates work on domain active directory

I have been struggling with Microsoft Certification Authority lately. Most resources only explain how SSL works and what certificates are, how they work, how they are issued and what they are used ...
0
votes
3answers
71 views

Wildcard Certificate Setup

We recently had a project pushed through that I didn't have time to research first. We were asked to set up a site and purchased a wildcard certificate from GoDaddy. The instructions for most of the ...
3
votes
1answer
4k views

Cannot get cURL or wget to validate some SSL certificates

I've noticed that our link checker, which uses cURL, fails more and more often to validate SSL certificates. I'm trying to get to the bottom of this. https://www.bgetem.de/, for instance, opens just ...
0
votes
1answer
886 views

Enterprise CA Certificate request error

I've recently set up a new Windows 2012 R2 Enterprise SHA2 issuing CA to replace an old Windows 2008 R2 SHA1 issuing CA. This also has Web Enrollment installed as is accessed by the public so all DNS ...
4
votes
1answer
4k views

SSL_ERROR_NO_CYPHER_OVERLAP error with signed certifcate

My company has supplied a Tomcat/MySQL based application to a customer that by default uses http. At the request of the customer I enabled this to use https by creating a self-signed certificate. This ...
0
votes
1answer
10k views

Error “SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate” on lighttpd

I'm using a valid certificate but I'm not able to get client certificate. The lighttpd service fails with error: (connections-glue.c.200) SSL: 1 error:140890C7:SSL routines:...
2
votes
1answer
5k views

nginx ssl configuration per virtual host

I am switching configuration from a single host to several virtual hosts on the nginx server. Until my changes, ssl was working correctly, but after adding several virtual hosts, each with unique ...
-1
votes
1answer
117 views

How to support more HTTPS Ciphers?

I am debugging an IoT device that I am making. I am having it try and connect to my website (EC2 hosted) over HTTPS. The device is running into an issue negotiating the TLS handshake, and it is ...
1
vote
1answer
220 views

Multi domain SSL not working with www on SAN

I am using godaddy multi domain SSL on windows server 2008 with IIS 7.5. My main website www.abc.org working fine with www and non www but other domain ex. DNS Name=www.abc.org DNS Name=abc.org DNS ...
2
votes
0answers
279 views

Connecting to ssl mysql always fails with error 2026

I have mariadb version 10.1.21-MariaDB-1~jessie (on debian 8) running a master-server replication scenario via ssl and it's working : MariaDB [(none)]> show slave status\G; ******************...
1
vote
2answers
257 views

How to resolve SSLProtocol Syntax Error

I am trying to install an SSL Certificate. When I restart apache I get this error: SSLProtocol: Illegal protocol '\xe2\x80\x93SSLv2' Here are my conf file directives: <VirtualHost *:443> ...
0
votes
1answer
2k views

postfix SSL routines:SSL3_GET_KEY_EXCHANGE:unable to find ecdh parameters

We recently had this error while our postfix MTA tries to encrypt a connection via TLS: postfix/smtp[20716]: warning: TLS library problem: 20716:error:1408D13A:SSL routines:SSL3_GET_KEY_EXCHANGE:...