Questions tagged [ssl-certificate]

SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

Filter by
Sorted by
Tagged with
2
votes
1answer
826 views

Control which certificate an NPS network policy selects when the certificate is auto-renewed

I have multiple NPS network policies using Microsoft PEAP with a self-signed certificate. When our internal CA automatically renews the certificate, all of the network policies switch to another (it ...
1
vote
1answer
3k views

Apache2 fails to start with some specific SSLCipherSuite config

I have a xxx-ssl.conf config in /etc/apache2/sites-available/ with the following SSL options in it: SSLEngine on SSLCertificateFile /var/www/ssl/webserver_cert.der SSLCertificateKeyFile /var/...
2
votes
1answer
131 views

What are the supported TLDs for AWS Certificate Manager?

Just trying to setup either a wildcard *.mydomain.nz or mydomain.nz, but resulting in Invalid public domain failed status. Their learn more link doesn't hint at what TLDs are supported.
1
vote
0answers
399 views

activating ldaps support, getting implementation specific error

System: Ubuntu 16.04 running OpenLDAP 2.4.42 I'm following the tutorial to configure OpenLDAP for TLS. The LDIF file that I ended up creating is as follows: dn: cn=config changetype: modify replace: ...
0
votes
1answer
556 views

SSL - Nginx Error When Making Request To API Upstream

SSL is running fine on my frontend_server. However, when my front end makes a request to the unicorn API server (on the same server, just running in a Unicorn process), I get the following error: GET ...
3
votes
1answer
655 views

Why does Chrome trust the same authority on this certificate, but not the other?

Why does Chrome trust the certificate authority for this site, but not for this one? This is the same machine, same browser, signed by the same authority, and Chrome shows the intermediate chain ...
1
vote
1answer
2k views

OpenSSL returns the expired certificate while browser shows the correct one

I am using Let's Encrypt via Certbot on RHEL to get SSL for my server. Recently I had to renew my certificate, which I did. Everything went fine with certbot renewal dry-run, and I updated my ...
0
votes
1answer
8k views

Cannot connect to server via wss

I have the below nginx.conf file set to handle http and https. I'm currently using a self-signed certificate to test over ssl. server { listen 80; listen 443 ssl; server_name ...
1
vote
2answers
317 views

SSL cert errors for certain browsers. How can I find out what SSL features old browsers don't support, which my site relies on?

The SSL Server test from ssllabs will test your HTTPS server and give you a score on how well your HTTPS server is set up. You can use that results to get the most secure HTTPS server. I have a HTTPS ...
1
vote
1answer
453 views

Is it necessary to have 143 port enabled to use the 993 port for an IMAP(SSL) connection?

I have an email server running with Dovecot, and while trying to manage my email with Thunderbird I'm getting a weird error: If I enable the port 143, and 993, Thunderbird works fine (either using ...
1
vote
2answers
1k views

Nginx in Ubuntu doesn't have access to a ssl certificate

I've generated a certificate on Ubuntu 16 and I'm trying to run nginx and get this: $ nginx -t nginx: [warn] the "user" directive makes sense only if the master process runs with super-user ...
0
votes
1answer
87 views

Browser warns of invalid certificate but redirects correctly

I'm running apache httpd 2.4 on a AWS instance. I have the following httpd configuration: <VirtualHost *:443> ServerName jenkins.example.com SSLEngine on SSLCipherSuite ALL:!ADH:!...
1
vote
2answers
163 views

OpenSSL config expansion

I created own Certificate Authority and server (virtualhost) certificate based on this specification: https://jamielinux.com/docs/openssl-certificate-authority/index.html It's successfully created, ...
-1
votes
1answer
190 views

Who's right about when to renew Let's Encrypt certificates?

I received the following, sans unsubscribe link: Hello, Your certificate (or certificates) for the names listed below will expire in 1 days (on 14 Aug 16 23:07 +0000). Please make sure to ...
0
votes
1answer
506 views

Why can't I add a security exception to HSTS protected site?

I have two webapps. Both are used for testing in a reverse proxy scenario. SAN certificate is used (Subject Alternative Name) for both. 1 allows adding a security exception, the other does not. ...
2
votes
1answer
1k views

How To Redirect Before Checking for SSL?

I have an SSL certificate for my domain, let's call it example.com. Also I have another domain, let's call it example.net When I get HTTPS requests for domain example.net it fails but example.com it ...
-6
votes
1answer
1k views

What is the common size of SSL certificate? (give or take)

I can't find any information about the usual size of SSL certificate. What is their common size ? (give or take ?) I am not looking for an exact value, something like usually between 8MB and 10MB ...
1
vote
2answers
2k views

HAProxy: configuring SSL with Let's Encrypt

I just generate a new SSL certificate using Let's Encrypt. Now I'm trying to configure HAProxy. These are the folders and certificates: 700 archive |--------> 755 company.cxx ...
0
votes
1answer
1k views

Redirection from http to https in Apache httpd24 with mod24_ssl is not working

I have my Amazon linux server and I had installed httpd24 and mod24_ssl. I had been setup ssl certificate in /etc/httpd/conf.d/ssl.conf file with https redirect instructions: <VirtualHost *:80> ...
10
votes
1answer
58k views

What does “tlsv1 alert unknown ca” mean?

I am trying to do a curl request using a client certificate like so: curl -E my.pem https://some.site And I get the following error message: curl: (35) error:14094418:SSL routines:SSL3_READ_BYTES:...
2
votes
1answer
5k views

Missing “Server Certificates” icon in IIS8

I'm trying to configure SSL on my Windows 2012R2 server, but I can't find the "Server Certificates" icon that I normally use to request and manage certificates. Is there a Feature or Role I need to ...
5
votes
1answer
6k views

How to edit hostname in https binding on IIS 7.5?

On Windows Server 2008 R2, the "Host name" box for editing the https binding is disabled. I'm unable to enable it so that I can enter the hostname for which to bind. The certificate "issued to" ...
1
vote
6answers
9k views

Use Windows Hosts File To Redirect External Url to Subdomain?

I'm going to just post this question and I'll edit it if the community determines it needs elaboration or clarification. The Issue I got what I thought was a brilliant idea today. I shop Amazon.com ...
0
votes
1answer
1k views

“SSL_ERROR_INTERNAL_ERROR_ALERT” Using Let's Encrypt & Nginx

I've been running my Nginx web server for almost a week and all of the sudden, it started throwing this error (using HTTPS only) & redirecting to /defaultsite when using HTTP. The website link is ...
14
votes
1answer
10k views

Why is my SSL certificate untrusted on Android?

The SSL certificate is trusted on most Desktop computers, but only some Android devices. However, even on Android devices where the certificate is untrusted, the root certificate is installed. I must ...
0
votes
1answer
5k views

Cannot load modules/mod_ssl.so into server: /etc/httpd/modules/mod_ssl.so: undefined symbol: ap_array_str_contains

I am trying to run Apache on Amazon Linux with SSL for my website and I configured all ssl prerequisites. But when I start the Apache it throws the error saying: Starting httpd: httpd: Syntax error ...
0
votes
2answers
2k views

Nginx redirects: enforce subdomain and SSL

There are a lot of questions on ServerFault that cover parts of this question, but I'm having a hard time piecing them together. I have a fresh nginx server with a Wildcard SSL cert installed. All ...
4
votes
3answers
7k views

Centos7 don't trust certificate issued by lets encrypt

I have apache nginx server running with https:// correctly configured with letsencrypt certificate. I can connect with firefox, chrome, ie. All of them reports connection as secure. However centos7 ...
2
votes
1answer
4k views

Convert Crt and Key to Pfx

I made a new certificate with ZeroSSL and now I have a crt file and a Key file for the domain. I'm using no tools because I would like to get the process runing first by hand. To use it with IIS 8.5 ...
-1
votes
1answer
50 views

SyntaxError at phyton script [closed]

I try to run an python script but I get errors. File "./ics2owncloud.py", line 41 r = requests.put('%s/%s.ics' % (base_url, uid) verify=False), SyntaxError: invalid syntax How must i add the verify=...
0
votes
1answer
618 views

Certificate SAN support regexp stemming?

Searched on this, but can't find any clear answer - can a certificate SAN contain a name like "citrix*.domain.com", to permit use with citrixdirector.domain.com and citrixprod.domain.com, for example?
1
vote
0answers
287 views

PCI Scan failed with SSL certificate with wrong name

I've an IIS server which is hosted around 250 + sites. I am running a PCI scan against one website and its failing with these 2 errors: Common name of SSL certificate presented on this server is for ...
1
vote
1answer
90 views

HTTP Strict Transport Security global cert refresh

So, I probably screwed up when I set up HSTS and didn't refresh my certificate in time. Browsers now have a cache of my old certificate and don't seem to be contacting my server to request a fresh ...
10
votes
3answers
4k views

Can I use Public-Key-Pins with LetsEncrypt?

Can I setup Public-Key-Pins when I setup a cronjob to renew the LetsEncrypt certificate every 30 days? If the certificate is renewed then the Public-Key-Pin is also renewed right?
1
vote
1answer
6k views

This server's certificate chain is incomplete

After running a test on SSL Server Test, I got This server's certificate chain is incomplete. Later I read in orange: Chain issues Incomplete, Contains anchor. I tried to understand what was wrong ...
2
votes
0answers
137 views

Trust certificate for OCSP, but not for client certs?

According to the nginx docs, you can specify certificates to be trusted for both OCSP response and client certificate verification: ssl_trusted_certificate / ssl_client_certificate Specifies a ...
3
votes
1answer
614 views

Using my own private key for Let's Encrypt's certbot due to HPKP

I am currently using certificates from StartCom for my hosted virtual server. Since StartCom's OCSP servers are quite unstable at times, I was considering moving to Let's Encrypt. Their service is ...
3
votes
1answer
3k views

Full end to end encryption with AWS Elastic Load Balancer, Nginx and SSL

You will see a lot of places on the web telling you the way to setup SSL with an AWS ELB is to set up a certificate on the load balancer and then forward traffic from port 443 to 80 so that traffic ...
0
votes
0answers
695 views

AD LDS - Can't enable LDAP over SSL

I have basically read some kilometers of documentation and I still can't enable LDAPS on AD LDS... I installed a self-signed certificate and a certification authority following for instance this link ...
1
vote
0answers
1k views

Change of Server (IP Address) Affects Access to the server from Domain SSL Certificated by LetsEncrypt

According to many answers the Certificate is not bound to the IP address but bound to the domain. But still I can not reach the application by using the domain. Is there a way to notify the DNS that ...
1
vote
1answer
2k views

Squid reverse proxy with multiple SSL-certificates via SNI

Does squid Proxy Server offer the possibility to supply multiple SSL certificates to it? I have a server with various virtual machines running Apache web servers for different customers. As an ...
0
votes
2answers
114 views

SSL wildcard pattern not working when prefixing URL with “www.”

If I have a certificate which is issued to *.abc.dk, I can get to the site with for example vm.abc.dk fine (changes automatically to https://www.vm.abc.dk) but when I try to write www.vm.abc.dk I get ...
4
votes
1answer
16k views

Error in converting crt certificate to pem

I generated a CA certificate using easyRSA and I intend to use it with FreeRadius to use starttls, now I found that the FreeRadius uses pem format for certificates, but in my case the cert is in ...
-1
votes
1answer
796 views

Force use of new SSL certificate?

I recently let an ssl certificate expire. I then purchased and installed a new certificate (didn't renew the old one do to the cost of renewing an ev cert vs a new basic cert). Everything works fine, ...
0
votes
1answer
571 views

Letsencrypt and SRV records

I have the following setup: A Domain example.com 2 Servers: server1.example.com and server2.example.com I would like to use srv records to have expressive domain names for each of my services. For ...
-1
votes
2answers
1k views

Apache SSL not working in Centos 6.5

I have a simple LAMP stack with httpd/Apache installed on Centos 6.5. I've set my vhost up in /etc/httpd/sites-available/acute.conf like so: <VirtualHost *:80> ServerName acutemedical.co ...
1
vote
1answer
2k views

Active Directory, wildcard security certificate, and remote access

Is there any way to secure an entire Active Directory (AD) domain using a single trusted, third-party Certification Authority (CA)-signed wildcard security certificate so that remote access will be ...
-4
votes
1answer
342 views

Wildcard certificate supporting both www and non-www domain [closed]

I have a GeoTrust wildcard certificate installed on my website www.example.com. It is working fine with https://www.example.com but it is not supporting https://example.com. It shows a security ...
2
votes
1answer
234 views

MySQL SSL Connection

I'm trying set ssl connection with MySQL Server. I've read this and many more articles https://dev.mysql.com/doc/refman/5.7/en/using-secure-connections.html There is one thing i still don't know, ...
0
votes
2answers
3k views

Nginx working with SSL but Private Key mismatch error

Used to work I bought a Rapid SSL from name.com and used the below command to generate the .csr and .key files: sudo openssl req -nodes -days 365 -newkey rsa:2048 -keyout /etc/nginx/ssl/server.key -...

1 17 18 19 20 21 55