Questions tagged [ssl-certificate-errors]
The ssl-certificate-errors tag has no usage guidance.
81
questions
0
votes
0answers
19 views
Client certificate works in Firefox but not when used in Internet Explorer (or Edge)
With a certain web site, a certain client certificate works fine with Firefox, but not with IE or Edge (all on Windows 10, as both IE and Edge behave the same, I'll use the term "IE/Edge" from now on)....
2
votes
1answer
193 views
OpenSSL fails to detect expired intermediate CA certificate in s_client SSL connection test
By accident, I have an expired intermediate certificate at the end of my chain file in my Dovecot server's SSL configuration. It's enough of a problem that my Android e-mail client refuses to use it, ...
0
votes
1answer
10 views
Dovecot enters a failed state with exit code error
I am having problems with dovecot on a debian 9 system running webmin/virtualmin.
After an update, it seems that the renewal of a domain SSL certificate caused at least one client domain to use the ...
0
votes
1answer
137 views
Openssl “Self-signed certificate in certificate chain” when server sends whole certificate chain with the self-signed certificate to the client
I am having the following certificate chain:
Self-signed Certificate --> Intermediate --> Client cert, Server cert. I have application for ssl communication and also verify peer setting. I try to ...
0
votes
0answers
18 views
SSL do not works with the nginx and docker-container
I am having troubles with installing the SSL cerificate at the not standart ports in my web app.
I have proxing nginx the provide traffic to my docker-container. I ve installed the SSL certificate ...
0
votes
0answers
101 views
Surescripts staging- C# HTTPS Post with Certificate
I'm having difficulty connecting to Surecripts’ E-Prescription (https://smr-staging.surescripts.net/erx/{PortalName}/{Version}?id=
{MessageID})
I have already installed certificate (p7b file).
Does ...
0
votes
0answers
207 views
SSL certificate Error in RD web access in Windows RDS 2016 Server
I have installed another RDS Server in Windows 2016 (Datacenter) & Also configured all RDS Roles with SSL Certificates. After all the configuration when i access RDweb through the URL https://...
0
votes
0answers
139 views
CSF WebUI not loading on default config with SSL certificate error?
Just installed the latest csf on my Debian 10 setup and it works fine, the Web-UI is however showing a connection refused error. Checking the lfd logs shows this error:
Dec 15 12:15:04 xxxx lfd[6078]:...
0
votes
0answers
244 views
SSL client certificate authentication returns “21:unable to verify the first certificate”
I'm in the process of transferring some of my old-and-busted apache2 web servers to newer and more resilient nginx containers.
On my old web server, I have an apache2 server that hosts secretbackdoor....
0
votes
1answer
36 views
Best way to monitor for SSL / Connection failures on a server that's still up [closed]
We had an outage issue today (NGinx not successfully restarted by our Let's Encrypt renewal CRON job, so not serving the renewed cert) leading to the server being up according to Pingdom but not ...
0
votes
0answers
22 views
A record points to new webhost but local clients still get certificate errors
Our main website was moved to a new webhost and a new domain. We control our DNS and were instructed to change the A record for olddomain.com to point it to the new host newdomain.ca.
We lowered the ...
0
votes
1answer
264 views
Certificate hasn't got a known issuer
The TLS (SSL) certificate on one of my site expired yesterday. I obtained a new one - and installed it on the site (running on Debian 9 under nginx). Now when I access the site from a windows or mac, ...
1
vote
1answer
445 views
OpenSSL s_client returns unsupported certificate purpose on one machine but works normally on another with same certificates
I'm debugging TLS connection issue between host and docker container. My docker container has a server certificate:
-----BEGIN CERTIFICATE-----
...
1
vote
1answer
191 views
openssl alternative names is missing
I generated CA, with this article, and stored it in my machine. Now, I want to create a server certificate and use it in my webserver. This is my generate server certificate code:
#!/bin/bash
# USE: ....
0
votes
0answers
55 views
How to SSL Certificate file max size for an IE11 Browser?
At my work have a SSL Certificate file for web services.
this Certificate file size is over than 44K.
But seems like IE11 browser cannot parse or read a >44K SSL Certificate file.
So IE11 Browser ...
2
votes
2answers
3k views
Errors when attempting to connect to PostgreSQL 9.6 using SSL wildcard server certificate and no client certificates
I have a PostgreSQL 9.6.11 database on Amazon Linux that has been configured with a 2048-bit SSL wildcard server certificate and password-based (no client certificates) remote connections since ...
1
vote
1answer
2k views
openssl keeps creating v1 certificate instead of v3
Hell everyone,
so i'm trying to create a self signed certificate for my domain and for some reason openssl keeps creating V1 certificates for my server instead of V3 and that is causing browsers to ...
-1
votes
1answer
493 views
LetsEncrypt certificate (renewing) installing error
I'm trying to renew my LetsEncrypt certificate on my Raspberry Pi running apache2, but I seem to get an error when CertBot tries to generate the certificate.
Expected sha256 ...
2
votes
0answers
716 views
DLG_FLAGS_INVALID_CA and DLG_FLAGS_SEC_CERT_CN_INVALID
scenario is trying to connect via web browser to the IPMI of a new server I have; from Windows 10 either Internet Explorer 11 or Edge. Both report This site is not secure with the error being ...
1
vote
0answers
75 views
CNAME SSL Redirect Setup with Cloudflare
I’m hosting two subdomains with two (non-wildcard) Let’s Encrypt certificates outside of cloudflare:
name.feed.example.com
name.example.com
I have a CNAME alias on Cloudflare (free plan) pointing
...
0
votes
0answers
92 views
Getting random but frequent err_ssl_version_interference, err_ssl_protocol_version
I have a asp.net core api hosted in a service fabric cluster on windows server. We configured the https following this guide.
We are getting a lot of err_ssl_version_interference, ...
0
votes
0answers
84 views
SSL handshake issue for part of users
I have a website that uses Nginx web server, It's work on both HTTP and HTTPS mode, but I'm wondering that HTTPS not working for some users while working for many users at the same time!
Also, all ...
0
votes
0answers
1k views
Event ID 15021 HttpEvent on a wildcard SSL certificate but only get the error on a couple sites
I have IIS running on Windows Server 2012 R2. I have a wildcard SSL certificate on 14 subdomains. I'm seeing a lot of errors in the Event Viewer.
Event ID: 15021 Source: HttpEvent
An error occurred ...
1
vote
2answers
215 views
SSL CA certificate mismatch in browser view and OS view
I navigated to www.flipkart.com and viewed its certificate chain. There were two intermediate certificates namely Go Daddy Secure Certificate Authority - G2 and
Go Daddy Root Certificate Authority - ...
0
votes
1answer
351 views
Are missing certificate chains a reason for AUTHORITY INVALID?
I have recently installed a new SSL certificate on Apache 2.x with openssl and have a user report to not be able to access the page. He does the error NET::ERR_CERT_AUTHORITY_INVALID
Although I could ...
0
votes
1answer
245 views
SSL_ERROR_RX_RECORD_TOO_LONG with rstudio-server on AWS
I installed rstudio-server on an AWS EC2 instance. Everything went well, but when trying to access https://myawsserver.example.org:8787 I get the following error :
Secure Connection Failed
An ...
0
votes
0answers
1k views
MySQL SSL error: wrong version number
I'm having difficulty with MySQL and OpenSSL. I'm running MySQL 5.7 and OpenSSL 1.1.0g on Ubuntu 16.04
Regardless of what certificates I load, MySQL starts up but does not establish a connection over ...
0
votes
1answer
547 views
Setting up a SSL Certificate IN GCP load balancer
I'm trying to setup a server less pixel tracking based on thus documentation: https://cloud.google.com/solutions/serverless-pixel-tracking-tutorial
The big issue is that for some reason I'm getting a ...
google-cloud-platform
1
vote
1answer
2k views
Need help to establish secure ftp connection from linux to z/OS FTPS server
I need help to establish secure ftp connection from linux client to z/OS host running FTPS server.
From FTPS server admin I have got following information:
Host IP address, port, CA certificate file ...
2
votes
2answers
25k views
SSL issues “Peer's certificate issuer has been marked as not trusted by the user.”
We have a public facing development server that requires SSL for a particular function.
Yet EVERYTHING that uses SSL in any form returns
curl: (60) Peer's certificate issuer has been marked as not ...
0
votes
1answer
50 views
SSL Cert says its self-signed but decoding shows it's not [closed]
I have a cert that is suddenly being presented as a self-signed cert. Its not. It has been working fine until now. When I decode the cert it shows everything I would expect. When I analyze it ...
0
votes
1answer
29 views
Is it correct to see certificate from another domain in case of missing cert? [duplicate]
I have 3 sites defined in apache, site1, site2, site3
For 1 and 2 I requested ssl certs from Let's encrypt and work OK, but NOT for site 3.
Problem is that whenever I access https://site3 I always get ...
1
vote
1answer
333 views
Seeking ground truth on TLS certificates and MacOS - browser, curl, openssl compared
On a Mac, High Sierra 10.13.5, I'm seeing a difference in TLS certification validation. Chrome and Safari are happy with TLS validation when visiting https://www.visitflorida.com. Also, curl has no ...
0
votes
1answer
25 views
Jboss is unable to connect to Apple Push Networks
I'm using Aerogear Unified Push server to deliver messages to push networks. Into my setup messages are properly delivered into Android networks but they fail to be delivered in Apple. The error seems ...
2
votes
2answers
4k views
ERR_SSL_VERSION_OR_CIPHER_MISMATCH with signed certificate in Tomcat
I have a tomcat server for which I needed a signed certificate. I generated a key using
keytool -genkey ....
and then generated a CSR and sent it to my company admin.
They gave me back a CER ...
3
votes
1answer
1k views
Mutual SSL authentication and requirements for certificates
For our internal tests I need to set up the mutual SSL authentication between our IIS server (it hosts two applications: ASP.NET web GUI and a web service) and clients (accessing the server in two ...
0
votes
1answer
24 views
Reconfigure certificates or edit certificate information
Necessary details first:
OS - Ubuntu 16.04 LTS
System: Digital Ocean droplet
I attempted to set up a self-signed certificate for SSL verification using Let's Encrypt. In either haste or ...
0
votes
1answer
633 views
How to update expired ssl certificate on server with key-pinning (hpkp)
On server with nginx web server was setup ssl section with key-pinning:
add_header Public-Key-Pins 'pin-sha256="some-key"; pin-sha256="second-key"; max-age=5184000;' always;
now certificate is ...
0
votes
1answer
50 views
HTTPS server certificate fails
Is there a way to check the certificate used for HTTPS for errors or problems in general? One of the websites I access is always shown by Chrome as Not Secure. To view the site I then have to click on ...
0
votes
1answer
951 views
Client Authentication Certificate error on Android after installing SSL certificate
I've recently installed an SSL certificate for my website fantasyfeeder.com. This appears to be installed correctly when I use the online checker at ssllabs.com (https://www.ssllabs.com/ssltest/...
1
vote
0answers
29 views
Apache settings to prevent browser from redirect
I have a question regarding redirects.
We currently have set up an Apache with a wildcard certificate *.shopdomain.com and run different shops on different subdomains like shop-a.shopdomain.com, shop-...
0
votes
1answer
146 views
Single domain SSL certificate installed in subdomain shows in another subdomain
Single domain SSL certificate installed in subdomain shows in another subdomain
Server information :
Ubuntu 14.04
Apache2, Mysql, PHP7
Control Panel ISPConfig 3.1
Single IP for all domain
I ...
0
votes
2answers
498 views
Certificate with SubjectAlternativeName (SAN) gives ERR_CONNECTION_RESET in Google Chrome
There is a non-public-facing application. I am trying to make sure that there are no HTTPS-related warnings/errors.
The error I receive after putting the certificate with SAN field (signed by a ...
0
votes
1answer
250 views
Cannot create SSL Engine: The target principle name is incorrect, SSL and SAP HANA
I'm getting the following error when attempting to connect to a tenant database in a multi-tenant SAP HANA Server running on SUSE Linux:
I can connect via SSL to the system database of the HANA ...
-3
votes
2answers
282 views
Valid CA issued SSL certificate gives privacy error in browser [closed]
(I had originally asked this question on StackOverflow and did not get any answers for more than 5 days. Since I found more SSL related discussions in this forum I deleted from SO and have re-asked ...
0
votes
0answers
5k views
curl.error: (35, 'error reading X.509 key or certificate file')
I created a certificate using this:
openssl req -x509 -nodes -newkey rsa:4096 -keyout server.key -out server.crt -days 365
Then I run:
curl -l --tlsv1.2 -E server.crt -v https://test-as.sgx....
0
votes
0answers
475 views
Error renewing SSL certificate with certbot
root@nl6g:~# sudo certbot --nginx -d cienciadelgaza.com -d www.cienciadelgaza.com
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Cert is due for renewal, auto-renewing...
Renewing an ...
0
votes
1answer
546 views
SSL certificate with error “Attackers might be trying to steal your information from 192.168.56.74 ”
I configured a root and intermediate CA using MS2012. I encountered error when I accessing the apache webserver using the SSL Certificate issued by the CA.
The error is
"Attackers might be trying to ...
2
votes
1answer
2k views
openssl not find certificates unless specified with -CAfile
I'm struggling with openssl since some days.
I've compiled openssl on an ARM device and when I run openssl s_client -connect google.com:443 the connection will fail with error 20: unable to get local ...
2
votes
1answer
2k views
CloudFront redirection with ssl gives “invalid certificate” error when accessing https://company.com, but why?
I've configured an AWS CloudFront redirection (with SSL) using [this guide].1
I've configured an A record with Alias which points company.com. to the CloudFront domain name.
When I access the ...
