Questions tagged [ssl-certificate-errors]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
33 views

.htaccess redirect from SSL root domain to another subdomain with different SSL causes NET::ERR_CERT_COMMON_NAME_INVALID

I need help to figure this out. I have two local, separate webservers 192.168.11.5 (https://www.example.com) and 192.168.9.14 (https://project.example.com). Each has separate non-wildcard SSL ...
0
votes
0answers
30 views

mTLS connection terminated due to missing client certifcate

We are getting intermittent (~100 every 2 to 3 hour) SSL handshake failure errors and packet capture shows that client certificate is missing in such cases. Please see attached screenshot. Client is ...
0
votes
0answers
86 views

Apache 2 421 Misdirected request using lets encrypt/certbot

Server Ubuntu 20.04LTS Apache Version 2.4.41 I use this server to host multiple domain (example.com, example.it) I have created different SSL Keys for both domain and all their subdomain like xyz....
3
votes
3answers
2k views

Email server certificate valid according to CheckTLS, invalid according to Thunderbird

I have set up an email server using docker-mailserver. DKIM, SPF, and DMARC are configured fine. SSL was set up using Let's Encrypt. Server has TLS and STARTTLS enabled. I ran a TLS/SSL test on https:/...
0
votes
0answers
146 views

openstack command fails with SSL error on Ubunut 18.04 LTS

Openstack client commands fails after sourcing the rc file in Ubuntu 18.04 LTS with below error message; I tried the same operation in CentOS and it went well there. I am surprised why in Ubuntu 18.04 ...
0
votes
1answer
108 views

Unable to open file for reading: /etc/exim/domains on Centos 7 - err_ssl_protocol_error

How can I fix the issue below I saw at /var/log/messages panel crond: 2020-11-13 21:17:02 1kdgRJ-0008yG-Rv Tainted filename '/etc/exim/domains/example.com/dkim.pem' panel crond: 2020-11-13 21:17:02 ...
0
votes
0answers
155 views

Installing composer in windows server 2008 r2

I'm getting this problem while installing composer on windows server 2008 : The Composer installer script was not successful [exit code 1]. OpenSSL failed with a 'certificate verify failed' error. ...
1
vote
1answer
529 views

SSL error: No path found from the leaf certificate to any root. Maybe an intermediate certificate is missing

I've setup a personal mail server using postfix, postfix-saslauth, courier (mysqlauthd, imap, pop) plus some well practices like SPF, DKIM and DMARC. This set up has been working fine for the last 10 ...
1
vote
1answer
4k views

How to diagnose “CA certificate too weak” error, how to use the CA cert anyway?

I have to use a service that uses self-signed certificate (from Ubuntu). I have added the company's CA to the trusted list (Ubuntu). After that "self signed certificate in chain" error is ...
0
votes
1answer
98 views

Enabling Nginx TLSv1.3 error despite having Openssl 1.1.1g

I have Nginx 1.18.0 and OpenSSL enabled v1.1.1g. I know before this version is not possible to enable TLSv1.3 but even with this version is not possible. If I check ssl checkers website its enabled ...
0
votes
0answers
57 views

OpenSSL randomly fails to verify the certificate chain of a URL on the 443 port can verify all instance ports

I'm hoping someone can help me because I am at a loss. My team has been suffering from issues of missing intermediate certificates in our services. I was tasked with writing a script that would ...
1
vote
0answers
40 views

Not able to login to my node application after SSL certificate installation in nginx server

I have a node application having its front end deployed in Nginx http web server and the back end (molecular microservices) in node server both on an AWS ec2 Linux VM. the application URL is ...
0
votes
1answer
114 views

How to install SSL certificate for domain and subdomain

I want to install certificate on EC2 for domains and subdomains. I'm running a website "www.example.in" on single EC2 instance which is in public subnet with public IP and also pointing some ...
0
votes
0answers
60 views

Client certificate works in Firefox but not when used in Internet Explorer (or Edge)

With a certain web site, a certain client certificate works fine with Firefox, but not with IE or Edge (all on Windows 10, as both IE and Edge behave the same, I'll use the term "IE/Edge" ...
2
votes
1answer
662 views

OpenSSL fails to detect expired intermediate CA certificate in s_client SSL connection test

By accident, I have an expired intermediate certificate at the end of my chain file in my Dovecot server's SSL configuration. It's enough of a problem that my Android e-mail client refuses to use it, ...
0
votes
1answer
167 views

Dovecot enters a failed state with exit code error

I am having problems with dovecot on a debian 9 system running webmin/virtualmin. After an update, it seems that the renewal of a domain SSL certificate caused at least one client domain to use the ...
0
votes
1answer
2k views

Openssl “Self-signed certificate in certificate chain” when server sends whole certificate chain with the self-signed certificate to the client

I am having the following certificate chain: Self-signed Certificate --> Intermediate --> Client cert, Server cert. I have application for ssl communication and also verify peer setting. I try to ...
1
vote
0answers
934 views

SSL client certificate authentication returns “21:unable to verify the first certificate”

I'm in the process of transferring some of my old-and-busted apache2 web servers to newer and more resilient nginx containers. On my old web server, I have an apache2 server that hosts secretbackdoor....
0
votes
1answer
38 views

Best way to monitor for SSL / Connection failures on a server that's still up [closed]

We had an outage issue today (NGinx not successfully restarted by our Let's Encrypt renewal CRON job, so not serving the renewed cert) leading to the server being up according to Pingdom but not ...
0
votes
0answers
22 views

A record points to new webhost but local clients still get certificate errors

Our main website was moved to a new webhost and a new domain. We control our DNS and were instructed to change the A record for olddomain.com to point it to the new host newdomain.ca. We lowered the ...
0
votes
1answer
856 views

Certificate hasn't got a known issuer

The TLS (SSL) certificate on one of my site expired yesterday. I obtained a new one - and installed it on the site (running on Debian 9 under nginx). Now when I access the site from a windows or mac, ...
1
vote
1answer
2k views

OpenSSL s_client returns unsupported certificate purpose on one machine but works normally on another with same certificates

I'm debugging TLS connection issue between host and docker container. My docker container has a server certificate: -----BEGIN CERTIFICATE----- ...
1
vote
1answer
888 views

openssl alternative names is missing

I generated CA, with this article, and stored it in my machine. Now, I want to create a server certificate and use it in my webserver. This is my generate server certificate code: #!/bin/bash # USE: ....
0
votes
0answers
113 views

How to SSL Certificate file max size for an IE11 Browser?

At my work have a SSL Certificate file for web services. this Certificate file size is over than 44K. But seems like IE11 browser cannot parse or read a >44K SSL Certificate file. So IE11 Browser ...
3
votes
2answers
6k views

Errors when attempting to connect to PostgreSQL 9.6 using SSL wildcard server certificate and no client certificates

I have a PostgreSQL 9.6.11 database on Amazon Linux that has been configured with a 2048-bit SSL wildcard server certificate and password-based (no client certificates) remote connections since ...
1
vote
2answers
5k views

openssl keeps creating v1 certificate instead of v3

Hell everyone, so i'm trying to create a self signed certificate for my domain and for some reason openssl keeps creating V1 certificates for my server instead of V3 and that is causing browsers to ...
-1
votes
1answer
758 views

LetsEncrypt certificate (renewing) installing error

I'm trying to renew my LetsEncrypt certificate on my Raspberry Pi running apache2, but I seem to get an error when CertBot tries to generate the certificate. Expected sha256 ...
2
votes
0answers
835 views

DLG_FLAGS_INVALID_CA and DLG_FLAGS_SEC_CERT_CN_INVALID

scenario is trying to connect via web browser to the IPMI of a new server I have; from Windows 10 either Internet Explorer 11 or Edge. Both report This site is not secure with the error being ...
1
vote
0answers
83 views

CNAME SSL Redirect Setup with Cloudflare

I’m hosting two subdomains with two (non-wildcard) Let’s Encrypt certificates outside of cloudflare: name.feed.example.com name.example.com I have a CNAME alias on Cloudflare (free plan) pointing ...
0
votes
0answers
136 views

Getting random but frequent err_ssl_version_interference, err_ssl_protocol_version

I have a asp.net core api hosted in a service fabric cluster on windows server. We configured the https following this guide. We are getting a lot of err_ssl_version_interference, ...
0
votes
0answers
108 views

SSL handshake issue for part of users

I have a website that uses Nginx web server, It's work on both HTTP and HTTPS mode, but I'm wondering that HTTPS not working for some users while working for many users at the same time! Also, all ...
0
votes
0answers
3k views

Event ID 15021 HttpEvent on a wildcard SSL certificate but only get the error on a couple sites

I have IIS running on Windows Server 2012 R2. I have a wildcard SSL certificate on 14 subdomains. I'm seeing a lot of errors in the Event Viewer. Event ID: 15021 Source: HttpEvent An error occurred ...
1
vote
2answers
312 views

SSL CA certificate mismatch in browser view and OS view

I navigated to www.flipkart.com and viewed its certificate chain. There were two intermediate certificates namely Go Daddy Secure Certificate Authority - G2 and Go Daddy Root Certificate Authority - ...
0
votes
1answer
657 views

Are missing certificate chains a reason for AUTHORITY INVALID?

I have recently installed a new SSL certificate on Apache 2.x with openssl and have a user report to not be able to access the page. He does the error NET::ERR_CERT_AUTHORITY_INVALID Although I could ...
0
votes
1answer
510 views

SSL_ERROR_RX_RECORD_TOO_LONG with rstudio-server on AWS

I installed rstudio-server on an AWS EC2 instance. Everything went well, but when trying to access https://myawsserver.example.org:8787 I get the following error : Secure Connection Failed An error ...
1
vote
0answers
2k views

MySQL SSL error: wrong version number

I'm having difficulty with MySQL and OpenSSL. I'm running MySQL 5.7 and OpenSSL 1.1.0g on Ubuntu 16.04 Regardless of what certificates I load, MySQL starts up but does not establish a connection over ...
0
votes
1answer
641 views

Setting up a SSL Certificate IN GCP load balancer

I'm trying to setup a server less pixel tracking based on thus documentation: https://cloud.google.com/solutions/serverless-pixel-tracking-tutorial The big issue is that for some reason I'm getting a ...
1
vote
1answer
4k views

Need help to establish secure ftp connection from linux to z/OS FTPS server

I need help to establish secure ftp connection from linux client to z/OS host running FTPS server. From FTPS server admin I have got following information: Host IP address, port, CA certificate file ...
3
votes
2answers
40k views

SSL issues “Peer's certificate issuer has been marked as not trusted by the user.”

We have a public facing development server that requires SSL for a particular function. Yet EVERYTHING that uses SSL in any form returns curl: (60) Peer's certificate issuer has been marked as not ...
0
votes
1answer
62 views

SSL Cert says its self-signed but decoding shows it's not [closed]

I have a cert that is suddenly being presented as a self-signed cert. Its not. It has been working fine until now. When I decode the cert it shows everything I would expect. When I analyze it ...
0
votes
1answer
29 views

Is it correct to see certificate from another domain in case of missing cert? [duplicate]

I have 3 sites defined in apache, site1, site2, site3 For 1 and 2 I requested ssl certs from Let's encrypt and work OK, but NOT for site 3. Problem is that whenever I access https://site3 I always get ...
1
vote
1answer
384 views

Seeking ground truth on TLS certificates and MacOS - browser, curl, openssl compared

On a Mac, High Sierra 10.13.5, I'm seeing a difference in TLS certification validation. Chrome and Safari are happy with TLS validation when visiting https://www.visitflorida.com. Also, curl has no ...
0
votes
1answer
41 views

Jboss is unable to connect to Apple Push Networks

I'm using Aerogear Unified Push server to deliver messages to push networks. Into my setup messages are properly delivered into Android networks but they fail to be delivered in Apple. The error seems ...
2
votes
2answers
7k views

ERR_SSL_VERSION_OR_CIPHER_MISMATCH with signed certificate in Tomcat

I have a tomcat server for which I needed a signed certificate. I generated a key using keytool -genkey .... and then generated a CSR and sent it to my company admin. They gave me back a CER ...
3
votes
1answer
1k views

Mutual SSL authentication and requirements for certificates

For our internal tests I need to set up the mutual SSL authentication between our IIS server (it hosts two applications: ASP.NET web GUI and a web service) and clients (accessing the server in two ...
0
votes
1answer
27 views

Reconfigure certificates or edit certificate information

Necessary details first: OS - Ubuntu 16.04 LTS System: Digital Ocean droplet I attempted to set up a self-signed certificate for SSL verification using Let's Encrypt. In either haste or ...
0
votes
1answer
744 views

How to update expired ssl certificate on server with key-pinning (hpkp)

On server with nginx web server was setup ssl section with key-pinning: add_header Public-Key-Pins 'pin-sha256="some-key"; pin-sha256="second-key"; max-age=5184000;' always; now certificate is ...
0
votes
1answer
50 views

HTTPS server certificate fails

Is there a way to check the certificate used for HTTPS for errors or problems in general? One of the websites I access is always shown by Chrome as Not Secure. To view the site I then have to click on ...
0
votes
1answer
1k views

Client Authentication Certificate error on Android after installing SSL certificate

I've recently installed an SSL certificate for my website fantasyfeeder.com. This appears to be installed correctly when I use the online checker at ssllabs.com (https://www.ssllabs.com/ssltest/...
1
vote
0answers
31 views

Apache settings to prevent browser from redirect

I have a question regarding redirects. We currently have set up an Apache with a wildcard certificate *.shopdomain.com and run different shops on different subdomains like shop-a.shopdomain.com, shop-...