Questions tagged [ssl-certificate-errors]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
19 views

Client certificate works in Firefox but not when used in Internet Explorer (or Edge)

With a certain web site, a certain client certificate works fine with Firefox, but not with IE or Edge (all on Windows 10, as both IE and Edge behave the same, I'll use the term "IE/Edge" from now on)....
2
votes
1answer
193 views

OpenSSL fails to detect expired intermediate CA certificate in s_client SSL connection test

By accident, I have an expired intermediate certificate at the end of my chain file in my Dovecot server's SSL configuration. It's enough of a problem that my Android e-mail client refuses to use it, ...
0
votes
1answer
10 views

Dovecot enters a failed state with exit code error

I am having problems with dovecot on a debian 9 system running webmin/virtualmin. After an update, it seems that the renewal of a domain SSL certificate caused at least one client domain to use the ...
0
votes
1answer
137 views

Openssl “Self-signed certificate in certificate chain” when server sends whole certificate chain with the self-signed certificate to the client

I am having the following certificate chain: Self-signed Certificate --> Intermediate --> Client cert, Server cert. I have application for ssl communication and also verify peer setting. I try to ...
0
votes
0answers
18 views

SSL do not works with the nginx and docker-container

I am having troubles with installing the SSL cerificate at the not standart ports in my web app. I have proxing nginx the provide traffic to my docker-container. I ve installed the SSL certificate ...
0
votes
0answers
101 views

Surescripts staging- C# HTTPS Post with Certificate

I'm having difficulty connecting to Surecripts’ E-Prescription (https://smr-staging.surescripts.net/erx/{PortalName}/{Version}?id= {MessageID}) I have already installed certificate (p7b file). Does ...
0
votes
0answers
207 views

SSL certificate Error in RD web access in Windows RDS 2016 Server

I have installed another RDS Server in Windows 2016 (Datacenter) & Also configured all RDS Roles with SSL Certificates. After all the configuration when i access RDweb through the URL https://...
0
votes
0answers
139 views

CSF WebUI not loading on default config with SSL certificate error?

Just installed the latest csf on my Debian 10 setup and it works fine, the Web-UI is however showing a connection refused error. Checking the lfd logs shows this error: Dec 15 12:15:04 xxxx lfd[6078]:...
0
votes
0answers
244 views

SSL client certificate authentication returns “21:unable to verify the first certificate”

I'm in the process of transferring some of my old-and-busted apache2 web servers to newer and more resilient nginx containers. On my old web server, I have an apache2 server that hosts secretbackdoor....
0
votes
1answer
36 views

Best way to monitor for SSL / Connection failures on a server that's still up [closed]

We had an outage issue today (NGinx not successfully restarted by our Let's Encrypt renewal CRON job, so not serving the renewed cert) leading to the server being up according to Pingdom but not ...
0
votes
0answers
22 views

A record points to new webhost but local clients still get certificate errors

Our main website was moved to a new webhost and a new domain. We control our DNS and were instructed to change the A record for olddomain.com to point it to the new host newdomain.ca. We lowered the ...
0
votes
1answer
264 views

Certificate hasn't got a known issuer

The TLS (SSL) certificate on one of my site expired yesterday. I obtained a new one - and installed it on the site (running on Debian 9 under nginx). Now when I access the site from a windows or mac, ...
1
vote
1answer
445 views

OpenSSL s_client returns unsupported certificate purpose on one machine but works normally on another with same certificates

I'm debugging TLS connection issue between host and docker container. My docker container has a server certificate: -----BEGIN CERTIFICATE----- ...
1
vote
1answer
191 views

openssl alternative names is missing

I generated CA, with this article, and stored it in my machine. Now, I want to create a server certificate and use it in my webserver. This is my generate server certificate code: #!/bin/bash # USE: ....
0
votes
0answers
55 views

How to SSL Certificate file max size for an IE11 Browser?

At my work have a SSL Certificate file for web services. this Certificate file size is over than 44K. But seems like IE11 browser cannot parse or read a >44K SSL Certificate file. So IE11 Browser ...
2
votes
2answers
3k views

Errors when attempting to connect to PostgreSQL 9.6 using SSL wildcard server certificate and no client certificates

I have a PostgreSQL 9.6.11 database on Amazon Linux that has been configured with a 2048-bit SSL wildcard server certificate and password-based (no client certificates) remote connections since ...
1
vote
1answer
2k views

openssl keeps creating v1 certificate instead of v3

Hell everyone, so i'm trying to create a self signed certificate for my domain and for some reason openssl keeps creating V1 certificates for my server instead of V3 and that is causing browsers to ...
-1
votes
1answer
493 views

LetsEncrypt certificate (renewing) installing error

I'm trying to renew my LetsEncrypt certificate on my Raspberry Pi running apache2, but I seem to get an error when CertBot tries to generate the certificate. Expected sha256 ...
2
votes
0answers
716 views

DLG_FLAGS_INVALID_CA and DLG_FLAGS_SEC_CERT_CN_INVALID

scenario is trying to connect via web browser to the IPMI of a new server I have; from Windows 10 either Internet Explorer 11 or Edge. Both report This site is not secure with the error being ...
1
vote
0answers
75 views

CNAME SSL Redirect Setup with Cloudflare

I’m hosting two subdomains with two (non-wildcard) Let’s Encrypt certificates outside of cloudflare: name.feed.example.com name.example.com I have a CNAME alias on Cloudflare (free plan) pointing ...
0
votes
0answers
92 views

Getting random but frequent err_ssl_version_interference, err_ssl_protocol_version

I have a asp.net core api hosted in a service fabric cluster on windows server. We configured the https following this guide. We are getting a lot of err_ssl_version_interference, ...
0
votes
0answers
84 views

SSL handshake issue for part of users

I have a website that uses Nginx web server, It's work on both HTTP and HTTPS mode, but I'm wondering that HTTPS not working for some users while working for many users at the same time! Also, all ...
0
votes
0answers
1k views

Event ID 15021 HttpEvent on a wildcard SSL certificate but only get the error on a couple sites

I have IIS running on Windows Server 2012 R2. I have a wildcard SSL certificate on 14 subdomains. I'm seeing a lot of errors in the Event Viewer. Event ID: 15021 Source: HttpEvent An error occurred ...
1
vote
2answers
215 views

SSL CA certificate mismatch in browser view and OS view

I navigated to www.flipkart.com and viewed its certificate chain. There were two intermediate certificates namely Go Daddy Secure Certificate Authority - G2 and Go Daddy Root Certificate Authority - ...
0
votes
1answer
351 views

Are missing certificate chains a reason for AUTHORITY INVALID?

I have recently installed a new SSL certificate on Apache 2.x with openssl and have a user report to not be able to access the page. He does the error NET::ERR_CERT_AUTHORITY_INVALID Although I could ...
0
votes
1answer
245 views

SSL_ERROR_RX_RECORD_TOO_LONG with rstudio-server on AWS

I installed rstudio-server on an AWS EC2 instance. Everything went well, but when trying to access https://myawsserver.example.org:8787 I get the following error : Secure Connection Failed An ...
0
votes
0answers
1k views

MySQL SSL error: wrong version number

I'm having difficulty with MySQL and OpenSSL. I'm running MySQL 5.7 and OpenSSL 1.1.0g on Ubuntu 16.04 Regardless of what certificates I load, MySQL starts up but does not establish a connection over ...
0
votes
1answer
547 views

Setting up a SSL Certificate IN GCP load balancer

I'm trying to setup a server less pixel tracking based on thus documentation: https://cloud.google.com/solutions/serverless-pixel-tracking-tutorial The big issue is that for some reason I'm getting a ...
1
vote
1answer
2k views

Need help to establish secure ftp connection from linux to z/OS FTPS server

I need help to establish secure ftp connection from linux client to z/OS host running FTPS server. From FTPS server admin I have got following information: Host IP address, port, CA certificate file ...
2
votes
2answers
25k views

SSL issues “Peer's certificate issuer has been marked as not trusted by the user.”

We have a public facing development server that requires SSL for a particular function. Yet EVERYTHING that uses SSL in any form returns curl: (60) Peer's certificate issuer has been marked as not ...
0
votes
1answer
50 views

SSL Cert says its self-signed but decoding shows it's not [closed]

I have a cert that is suddenly being presented as a self-signed cert. Its not. It has been working fine until now. When I decode the cert it shows everything I would expect. When I analyze it ...
0
votes
1answer
29 views

Is it correct to see certificate from another domain in case of missing cert? [duplicate]

I have 3 sites defined in apache, site1, site2, site3 For 1 and 2 I requested ssl certs from Let's encrypt and work OK, but NOT for site 3. Problem is that whenever I access https://site3 I always get ...
1
vote
1answer
333 views

Seeking ground truth on TLS certificates and MacOS - browser, curl, openssl compared

On a Mac, High Sierra 10.13.5, I'm seeing a difference in TLS certification validation. Chrome and Safari are happy with TLS validation when visiting https://www.visitflorida.com. Also, curl has no ...
0
votes
1answer
25 views

Jboss is unable to connect to Apple Push Networks

I'm using Aerogear Unified Push server to deliver messages to push networks. Into my setup messages are properly delivered into Android networks but they fail to be delivered in Apple. The error seems ...
2
votes
2answers
4k views

ERR_SSL_VERSION_OR_CIPHER_MISMATCH with signed certificate in Tomcat

I have a tomcat server for which I needed a signed certificate. I generated a key using keytool -genkey .... and then generated a CSR and sent it to my company admin. They gave me back a CER ...
3
votes
1answer
1k views

Mutual SSL authentication and requirements for certificates

For our internal tests I need to set up the mutual SSL authentication between our IIS server (it hosts two applications: ASP.NET web GUI and a web service) and clients (accessing the server in two ...
0
votes
1answer
24 views

Reconfigure certificates or edit certificate information

Necessary details first: OS - Ubuntu 16.04 LTS System: Digital Ocean droplet I attempted to set up a self-signed certificate for SSL verification using Let's Encrypt. In either haste or ...
0
votes
1answer
633 views

How to update expired ssl certificate on server with key-pinning (hpkp)

On server with nginx web server was setup ssl section with key-pinning: add_header Public-Key-Pins 'pin-sha256="some-key"; pin-sha256="second-key"; max-age=5184000;' always; now certificate is ...
0
votes
1answer
50 views

HTTPS server certificate fails

Is there a way to check the certificate used for HTTPS for errors or problems in general? One of the websites I access is always shown by Chrome as Not Secure. To view the site I then have to click on ...
0
votes
1answer
951 views

Client Authentication Certificate error on Android after installing SSL certificate

I've recently installed an SSL certificate for my website fantasyfeeder.com. This appears to be installed correctly when I use the online checker at ssllabs.com (https://www.ssllabs.com/ssltest/...
1
vote
0answers
29 views

Apache settings to prevent browser from redirect

I have a question regarding redirects. We currently have set up an Apache with a wildcard certificate *.shopdomain.com and run different shops on different subdomains like shop-a.shopdomain.com, shop-...
0
votes
1answer
146 views

Single domain SSL certificate installed in subdomain shows in another subdomain

Single domain SSL certificate installed in subdomain shows in another subdomain Server information : Ubuntu 14.04 Apache2, Mysql, PHP7 Control Panel ISPConfig 3.1 Single IP for all domain I ...
0
votes
2answers
498 views

Certificate with SubjectAlternativeName (SAN) gives ERR_CONNECTION_RESET in Google Chrome

There is a non-public-facing application. I am trying to make sure that there are no HTTPS-related warnings/errors. The error I receive after putting the certificate with SAN field (signed by a ...
0
votes
1answer
250 views

Cannot create SSL Engine: The target principle name is incorrect, SSL and SAP HANA

I'm getting the following error when attempting to connect to a tenant database in a multi-tenant SAP HANA Server running on SUSE Linux: I can connect via SSL to the system database of the HANA ...
-3
votes
2answers
282 views

Valid CA issued SSL certificate gives privacy error in browser [closed]

(I had originally asked this question on StackOverflow and did not get any answers for more than 5 days. Since I found more SSL related discussions in this forum I deleted from SO and have re-asked ...
0
votes
0answers
5k views

curl.error: (35, 'error reading X.509 key or certificate file')

I created a certificate using this: openssl req -x509 -nodes -newkey rsa:4096 -keyout server.key -out server.crt -days 365 Then I run: curl -l --tlsv1.2 -E server.crt -v https://test-as.sgx....
0
votes
0answers
475 views

Error renewing SSL certificate with certbot

root@nl6g:~# sudo certbot --nginx -d cienciadelgaza.com -d www.cienciadelgaza.com Saving debug log to /var/log/letsencrypt/letsencrypt.log Cert is due for renewal, auto-renewing... Renewing an ...
0
votes
1answer
546 views

SSL certificate with error “Attackers might be trying to steal your information from 192.168.56.74 ”

I configured a root and intermediate CA using MS2012. I encountered error when I accessing the apache webserver using the SSL Certificate issued by the CA. The error is "Attackers might be trying to ...
2
votes
1answer
2k views

openssl not find certificates unless specified with -CAfile

I'm struggling with openssl since some days. I've compiled openssl on an ARM device and when I run openssl s_client -connect google.com:443 the connection will fail with error 20: unable to get local ...
2
votes
1answer
2k views

CloudFront redirection with ssl gives “invalid certificate” error when accessing https://company.com, but why?

I've configured an AWS CloudFront redirection (with SSL) using [this guide].1 I've configured an A record with Alias which points company.com. to the CloudFront domain name. When I access the ...