Questions tagged [ssl-certificate-errors]
The ssl-certificate-errors tag has no usage guidance.
90
questions
0
votes
1answer
33 views
.htaccess redirect from SSL root domain to another subdomain with different SSL causes NET::ERR_CERT_COMMON_NAME_INVALID
I need help to figure this out.
I have two local, separate webservers 192.168.11.5 (https://www.example.com) and 192.168.9.14 (https://project.example.com). Each has separate non-wildcard SSL ...
0
votes
0answers
30 views
mTLS connection terminated due to missing client certifcate
We are getting intermittent (~100 every 2 to 3 hour) SSL handshake failure errors and packet capture shows that client certificate is missing in such cases. Please see attached screenshot.
Client is ...
0
votes
0answers
86 views
Apache 2 421 Misdirected request using lets encrypt/certbot
Server Ubuntu 20.04LTS
Apache Version 2.4.41
I use this server to host multiple domain (example.com, example.it)
I have created different SSL Keys for both domain and all their subdomain like xyz....
3
votes
3answers
2k views
Email server certificate valid according to CheckTLS, invalid according to Thunderbird
I have set up an email server using docker-mailserver.
DKIM, SPF, and DMARC are configured fine.
SSL was set up using Let's Encrypt. Server has TLS and STARTTLS enabled.
I ran a TLS/SSL test on https:/...
0
votes
0answers
146 views
openstack command fails with SSL error on Ubunut 18.04 LTS
Openstack client commands fails after sourcing the rc file in Ubuntu 18.04 LTS with below error message; I tried the same operation in CentOS and it went well there. I am surprised why in Ubuntu 18.04 ...
0
votes
1answer
108 views
Unable to open file for reading: /etc/exim/domains on Centos 7 - err_ssl_protocol_error
How can I fix the issue below I saw at /var/log/messages
panel crond: 2020-11-13 21:17:02 1kdgRJ-0008yG-Rv Tainted filename '/etc/exim/domains/example.com/dkim.pem'
panel crond: 2020-11-13 21:17:02 ...
0
votes
0answers
155 views
Installing composer in windows server 2008 r2
I'm getting this problem while installing composer on windows server 2008 :
The Composer installer script was not successful [exit code 1].
OpenSSL failed with a 'certificate verify failed' error. ...
1
vote
1answer
529 views
SSL error: No path found from the leaf certificate to any root. Maybe an intermediate certificate is missing
I've setup a personal mail server using postfix, postfix-saslauth, courier (mysqlauthd, imap, pop) plus some well practices like SPF, DKIM and DMARC.
This set up has been working fine for the last 10 ...
1
vote
1answer
4k views
How to diagnose “CA certificate too weak” error, how to use the CA cert anyway?
I have to use a service that uses self-signed certificate (from Ubuntu). I have added the company's CA to the trusted list (Ubuntu). After that "self signed certificate in chain" error is ...
0
votes
1answer
98 views
Enabling Nginx TLSv1.3 error despite having Openssl 1.1.1g
I have Nginx 1.18.0 and OpenSSL enabled v1.1.1g. I know before this version is not possible to enable TLSv1.3 but even with this version is not possible. If I check ssl checkers website its enabled ...
0
votes
0answers
57 views
OpenSSL randomly fails to verify the certificate chain of a URL on the 443 port can verify all instance ports
I'm hoping someone can help me because I am at a loss. My team has been suffering from issues of missing intermediate certificates in our services. I was tasked with writing a script that would ...
1
vote
0answers
40 views
Not able to login to my node application after SSL certificate installation in nginx server
I have a node application having its front end deployed in Nginx http web server and the back end (molecular microservices) in node server both on an AWS ec2 Linux VM. the application URL is ...
0
votes
1answer
114 views
How to install SSL certificate for domain and subdomain
I want to install certificate on EC2 for domains and subdomains.
I'm running a website "www.example.in" on single EC2 instance which is in public subnet with public IP and also pointing some ...
0
votes
0answers
60 views
Client certificate works in Firefox but not when used in Internet Explorer (or Edge)
With a certain web site, a certain client certificate works fine with Firefox, but not with IE or Edge (all on Windows 10, as both IE and Edge behave the same, I'll use the term "IE/Edge" ...
2
votes
1answer
662 views
OpenSSL fails to detect expired intermediate CA certificate in s_client SSL connection test
By accident, I have an expired intermediate certificate at the end of my chain file in my Dovecot server's SSL configuration. It's enough of a problem that my Android e-mail client refuses to use it, ...
0
votes
1answer
167 views
Dovecot enters a failed state with exit code error
I am having problems with dovecot on a debian 9 system running webmin/virtualmin.
After an update, it seems that the renewal of a domain SSL certificate caused at least one client domain to use the ...
0
votes
1answer
2k views
Openssl “Self-signed certificate in certificate chain” when server sends whole certificate chain with the self-signed certificate to the client
I am having the following certificate chain:
Self-signed Certificate --> Intermediate --> Client cert, Server cert. I have application for ssl communication and also verify peer setting. I try to ...
1
vote
0answers
934 views
SSL client certificate authentication returns “21:unable to verify the first certificate”
I'm in the process of transferring some of my old-and-busted apache2 web servers to newer and more resilient nginx containers.
On my old web server, I have an apache2 server that hosts secretbackdoor....
0
votes
1answer
38 views
Best way to monitor for SSL / Connection failures on a server that's still up [closed]
We had an outage issue today (NGinx not successfully restarted by our Let's Encrypt renewal CRON job, so not serving the renewed cert) leading to the server being up according to Pingdom but not ...
0
votes
0answers
22 views
A record points to new webhost but local clients still get certificate errors
Our main website was moved to a new webhost and a new domain. We control our DNS and were instructed to change the A record for olddomain.com to point it to the new host newdomain.ca.
We lowered the ...
0
votes
1answer
856 views
Certificate hasn't got a known issuer
The TLS (SSL) certificate on one of my site expired yesterday. I obtained a new one - and installed it on the site (running on Debian 9 under nginx). Now when I access the site from a windows or mac, ...
1
vote
1answer
2k views
OpenSSL s_client returns unsupported certificate purpose on one machine but works normally on another with same certificates
I'm debugging TLS connection issue between host and docker container. My docker container has a server certificate:
-----BEGIN CERTIFICATE-----
...
1
vote
1answer
888 views
openssl alternative names is missing
I generated CA, with this article, and stored it in my machine. Now, I want to create a server certificate and use it in my webserver. This is my generate server certificate code:
#!/bin/bash
# USE: ....
0
votes
0answers
113 views
How to SSL Certificate file max size for an IE11 Browser?
At my work have a SSL Certificate file for web services.
this Certificate file size is over than 44K.
But seems like IE11 browser cannot parse or read a >44K SSL Certificate file.
So IE11 Browser ...
3
votes
2answers
6k views
Errors when attempting to connect to PostgreSQL 9.6 using SSL wildcard server certificate and no client certificates
I have a PostgreSQL 9.6.11 database on Amazon Linux that has been configured with a 2048-bit SSL wildcard server certificate and password-based (no client certificates) remote connections since ...
1
vote
2answers
5k views
openssl keeps creating v1 certificate instead of v3
Hell everyone,
so i'm trying to create a self signed certificate for my domain and for some reason openssl keeps creating V1 certificates for my server instead of V3 and that is causing browsers to ...
-1
votes
1answer
758 views
LetsEncrypt certificate (renewing) installing error
I'm trying to renew my LetsEncrypt certificate on my Raspberry Pi running apache2, but I seem to get an error when CertBot tries to generate the certificate.
Expected sha256 ...
2
votes
0answers
835 views
DLG_FLAGS_INVALID_CA and DLG_FLAGS_SEC_CERT_CN_INVALID
scenario is trying to connect via web browser to the IPMI of a new server I have; from Windows 10 either Internet Explorer 11 or Edge. Both report This site is not secure with the error being ...
1
vote
0answers
83 views
CNAME SSL Redirect Setup with Cloudflare
I’m hosting two subdomains with two (non-wildcard) Let’s Encrypt certificates outside of cloudflare:
name.feed.example.com
name.example.com
I have a CNAME alias on Cloudflare (free plan) pointing
...
0
votes
0answers
136 views
Getting random but frequent err_ssl_version_interference, err_ssl_protocol_version
I have a asp.net core api hosted in a service fabric cluster on windows server. We configured the https following this guide.
We are getting a lot of err_ssl_version_interference, ...
0
votes
0answers
108 views
SSL handshake issue for part of users
I have a website that uses Nginx web server, It's work on both HTTP and HTTPS mode, but I'm wondering that HTTPS not working for some users while working for many users at the same time!
Also, all ...
0
votes
0answers
3k views
Event ID 15021 HttpEvent on a wildcard SSL certificate but only get the error on a couple sites
I have IIS running on Windows Server 2012 R2. I have a wildcard SSL certificate on 14 subdomains. I'm seeing a lot of errors in the Event Viewer.
Event ID: 15021 Source: HttpEvent
An error occurred ...
1
vote
2answers
312 views
SSL CA certificate mismatch in browser view and OS view
I navigated to www.flipkart.com and viewed its certificate chain. There were two intermediate certificates namely Go Daddy Secure Certificate Authority - G2 and
Go Daddy Root Certificate Authority - ...
0
votes
1answer
657 views
Are missing certificate chains a reason for AUTHORITY INVALID?
I have recently installed a new SSL certificate on Apache 2.x with openssl and have a user report to not be able to access the page. He does the error NET::ERR_CERT_AUTHORITY_INVALID
Although I could ...
0
votes
1answer
510 views
SSL_ERROR_RX_RECORD_TOO_LONG with rstudio-server on AWS
I installed rstudio-server on an AWS EC2 instance. Everything went well, but when trying to access https://myawsserver.example.org:8787 I get the following error :
Secure Connection Failed
An error ...
1
vote
0answers
2k views
MySQL SSL error: wrong version number
I'm having difficulty with MySQL and OpenSSL. I'm running MySQL 5.7 and OpenSSL 1.1.0g on Ubuntu 16.04
Regardless of what certificates I load, MySQL starts up but does not establish a connection over ...
0
votes
1answer
641 views
Setting up a SSL Certificate IN GCP load balancer
I'm trying to setup a server less pixel tracking based on thus documentation: https://cloud.google.com/solutions/serverless-pixel-tracking-tutorial
The big issue is that for some reason I'm getting a ...
google-cloud-platform
1
vote
1answer
4k views
Need help to establish secure ftp connection from linux to z/OS FTPS server
I need help to establish secure ftp connection from linux client to z/OS host running FTPS server.
From FTPS server admin I have got following information:
Host IP address, port, CA certificate file ...
3
votes
2answers
40k views
SSL issues “Peer's certificate issuer has been marked as not trusted by the user.”
We have a public facing development server that requires SSL for a particular function.
Yet EVERYTHING that uses SSL in any form returns
curl: (60) Peer's certificate issuer has been marked as not ...
0
votes
1answer
62 views
SSL Cert says its self-signed but decoding shows it's not [closed]
I have a cert that is suddenly being presented as a self-signed cert. Its not. It has been working fine until now. When I decode the cert it shows everything I would expect. When I analyze it ...
0
votes
1answer
29 views
Is it correct to see certificate from another domain in case of missing cert? [duplicate]
I have 3 sites defined in apache, site1, site2, site3
For 1 and 2 I requested ssl certs from Let's encrypt and work OK, but NOT for site 3.
Problem is that whenever I access https://site3 I always get ...
1
vote
1answer
384 views
Seeking ground truth on TLS certificates and MacOS - browser, curl, openssl compared
On a Mac, High Sierra 10.13.5, I'm seeing a difference in TLS certification validation. Chrome and Safari are happy with TLS validation when visiting https://www.visitflorida.com. Also, curl has no ...
0
votes
1answer
41 views
Jboss is unable to connect to Apple Push Networks
I'm using Aerogear Unified Push server to deliver messages to push networks. Into my setup messages are properly delivered into Android networks but they fail to be delivered in Apple. The error seems ...
2
votes
2answers
7k views
ERR_SSL_VERSION_OR_CIPHER_MISMATCH with signed certificate in Tomcat
I have a tomcat server for which I needed a signed certificate. I generated a key using
keytool -genkey ....
and then generated a CSR and sent it to my company admin.
They gave me back a CER ...
3
votes
1answer
1k views
Mutual SSL authentication and requirements for certificates
For our internal tests I need to set up the mutual SSL authentication between our IIS server (it hosts two applications: ASP.NET web GUI and a web service) and clients (accessing the server in two ...
0
votes
1answer
27 views
Reconfigure certificates or edit certificate information
Necessary details first:
OS - Ubuntu 16.04 LTS
System: Digital Ocean droplet
I attempted to set up a self-signed certificate for SSL verification using Let's Encrypt. In either haste or ...
0
votes
1answer
744 views
How to update expired ssl certificate on server with key-pinning (hpkp)
On server with nginx web server was setup ssl section with key-pinning:
add_header Public-Key-Pins 'pin-sha256="some-key"; pin-sha256="second-key"; max-age=5184000;' always;
now certificate is ...
0
votes
1answer
50 views
HTTPS server certificate fails
Is there a way to check the certificate used for HTTPS for errors or problems in general? One of the websites I access is always shown by Chrome as Not Secure. To view the site I then have to click on ...
0
votes
1answer
1k views
Client Authentication Certificate error on Android after installing SSL certificate
I've recently installed an SSL certificate for my website fantasyfeeder.com. This appears to be installed correctly when I use the online checker at ssllabs.com (https://www.ssllabs.com/ssltest/...
1
vote
0answers
31 views
Apache settings to prevent browser from redirect
I have a question regarding redirects.
We currently have set up an Apache with a wildcard certificate *.shopdomain.com and run different shops on different subdomains like shop-a.shopdomain.com, shop-...
