Questions tagged [ssl-certificate]
SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.
3,289
questions
1
vote
1
answer
4k
views
FreeRADIUS certificate is going to expired
Recently I've created a RADIUS server (Freeradius) that authenticate with Active Directory. I follow this link to create this server:
Now, when I see the "server.cnf" file into /etc/raddb/cert , I ...
2
votes
2
answers
4k
views
SSL Certificate Not Getting Refreshed
I am trying to change the SSL Certificate for my website. I got the new certificate issued by Comodo and installed it on my web servers. My servers are running IIS7.0.
I also binded the https ...
1
vote
1
answer
200
views
How to properly create CA certificate and sign the SSL/TLS cert to use in Apache for localhost?
I've found this article and this what I used to generate CA cert:
openssl genrsa -des3 -out myCA.key 2048
openssl req -x509 -new -nodes -key myCA.key -sha256 -days 1825 -out myCA.pem
I name it "...
0
votes
0
answers
15
views
Letsencrypt autorenewal not working
I ran certbot renew on my domains, but the expiration hasn't updated. How can I tell what I did wrong?
Exact steps:
$ sudo certbot renew --force-renewal
Saving debug log to /var/log/letsencrypt/...
0
votes
3
answers
132
views
How do I properly issue Let's Encrypt certificate for my mail server?
How do I properly issue Let's Encrypt certificate for my Postfix mail server?
Right now I have a self-signed certificate and I get these messages it cannot be trusted.
I did certbot --nginx certonly -...
1
vote
0
answers
273
views
How do I redirect https://example.com to https://www.example.com?
I recently transferred my website to AWS and added an SSL certificate. The transfer was successful, however, I can't figure out how to redirect https://example.com to https://www.example.com
Only ...
0
votes
1
answer
4k
views
How to install/update/upgrade SSL certificate in Tomcat
I am about to install/update/upgrade a SSL certificate in one of the servers which has the following configuration
Server information:
Sever version: Apache Tomcat/6.0.35
OS version: Linux 2.6.18-371....
16
votes
5
answers
73k
views
Old ssl cert still showing up in browser after installing new
We have an IIS ARR server which load balances out to two different individual IIS servers.
The servers in question are our internal Staging servers. Three months ago I created a free Let's Encrypt ...
-1
votes
1
answer
8k
views
How to obtain or accept certificates from a site
I have installed Firefox and Chrome on an Ubuntu 18 machine, I'm not a regular 'nix user so I'm a bit lost as to why neither browser is accepting the SSL certificate offered at www.teamviewer.com. The ...
0
votes
1
answer
115
views
Nginx Wildcards and Subdomains with Certbot
I want to achieve a scenario where
*.dev.domain.app => Localhost 3000,
dev.domain.app => Redirects to Localhost 3000
*.domain.app (anything but dev) => Redirects Localhost 5000
domain.app =&...
0
votes
1
answer
86
views
Windows Server 2012 R2 - Adfs - renew certificate
I'm trying to replace the certificate on ADFS. I've got wildcart certificate *.abc.pl, following by these steps:
Log onto the ADFS server - done
Add the new certificate to the server. Make sure this ...
0
votes
0
answers
136
views
Creating Web Secure Proxy in GCP - Certificate Issue
I am trying to configure GCP Secure Web Proxy https://cloud.google.com/secure-web-proxy/docs/overview.
The proxy is under IP: 10.10.0.16. Besides that, it has a local DNS Zone proxy.carecode.lan that ...
0
votes
0
answers
27
views
Verifying SSL certificate for DDNS domain
I've a home server set on Raspberry Pi 5 that provide me a bunch of services that are available on my LAN. I've also exposed WireGuard VPN, so I'm able to access my services from outside of my home. I'...
0
votes
0
answers
29
views
Bypassing CERT_HAS_EXPIRED leads to 401 Unauthorized
In our Next.js app, axios requests work in client components (using useEffect) but fail with a CERT_HAS_EXPIRED error from server components. As a workaround in development, we run ...
4
votes
1
answer
30k
views
How to generate a multi-domain (and/or wildcard) OpenSSL certificate?
I tried Googling and haven't been able to find anything reliable that shows me how to generate the CSR. I have multiple domains, that I'd like added so I can't use the usual OpenSSL wizard:
*.domain1....
0
votes
1
answer
58
views
TLS through CDN
I'm trying to understand how TLS is terminated between a client and an origin when a CDN is involved.
I think it's pretty straightforward when a client connects directly to an origin, a handshake can ...
0
votes
0
answers
71
views
curl: (60) SSL: unable to obtain common name from peer certificate
I'm trying to create self-signed certificates for my webserver but it's not going well. The title is the error message curl gives me when I run
curl --noproxy "*" https://example.com
(with ...
0
votes
1
answer
8k
views
Why do i get openssl error unknown option for -adext?
I am attempting to generate CSR using openssl with subject alternative names however i get an error stating no options for adext. See command below.. I am using OpenSSL 1.0.2k-fips
openssl req -new \
-...
0
votes
2
answers
5k
views
SSL certificate does not update
My previous SSL certificate just expired.
I tried to buy another free SSL certificate from AliCloud and also sslforfree.com. I'm pretty sure I have already installed a right certificate in the server....
3
votes
2
answers
1k
views
CFSSL to start with intermediate certificate
I am trying to setup CFSSL (v1.4.1), after following this tutorial I have generated following files (self-sign)
ROOT_CA_CSR.json
intermediate_ca-key.pem
intermediate_ca.csr
intermediate_ca.pem
...
0
votes
2
answers
8k
views
How to convert .cer and .key file to .pem?
I have a .cer certificate, .key file and I would like to convert it to the .pem format.
How do I convert them to .pem?
-1
votes
0
answers
63
views
Security concerns with self-signed Xerox device certificates during SMTP transfer
I am trying to find out what risks there are in a SMTP connection which uses a self-signed certificate for TLS.
The setup is a Xerox MFP which is being used to send emails for scan to email ...
0
votes
1
answer
5k
views
Extract correct format of key and cert files from .p12 file for a SSL MEAN App?
I'm writing a MEAN app for my university department on my Mac development machine. I started with the boilerplate from mean.io. In the configuration file config/env/all.js, there is a section for ...
7
votes
1
answer
25k
views
Letsencrypt for all subdomains *.example.com [duplicate]
I'd like to obtain one certificate working for all my subdomains *.example.com.
This works:
certbot-auto certonly --webroot --webroot-path /home/www/example/ --domain example.com
...
6
votes
4
answers
2k
views
When does this SSL certificate expire?
Below are the results from testing the SSL certificate at https://www.ssllabs.com/ssltest/analyze.html?d=bungalowsoftware.com
It looks like we have two certificates. Am I reading that right?
Does ...
0
votes
1
answer
98
views
Mikrotik: Creating Letsencrypt cert fails on RouterOS v7
From RouterOS's webfig CLI I attempted to create a LetsEncrypt cert:
certificate/enable-ssl-certificate dns-name=my.domain.com
But it returned the error:
progress: [error] http challenge validation ...
1
vote
3
answers
15k
views
Replace a TLS certificate for SMTP Server in Windows Server 2019
Some time ago I set up an SMTP server on a Windows Server 2019 machine. The FQDN for this server is smtp.mydomain.com and the smart host is set as smtp-relay.gmail.com, though I don't think that this ...
1
vote
2
answers
1k
views
How to prepare and add Godaddy SSL wildcard certificate to Wildfly/JBoss
I have a done some research into how to prepare the wildcard certificate and add it in a manner in which it could be used within WildFly/JBoss (I'm using WildFly 16, but it should be the same for ...
0
votes
2
answers
117
views
Postfix TLS with Letsencrypt configuration
I am running Postfix inside a docker container. Certificate are generated with certbot.
With the following configuration:
smtpd_tls_cert_file=/var/keys/fullchain.pem
smtpd_tls_key_file=/var/keys/...
2
votes
1
answer
495
views
How to add a domain to k3s certificate
When trying to access a k3s Kubernetes cluster that's running on another machine, I get the following error message:
E0204 19:13:27.185678 8066 proxy_server.go:147]
Error while proxying request:
...
0
votes
1
answer
70
views
IIS - 2 Issues in one > SSL Binding Cert selected but will not stick | Index was outside the bounds of the array
Using WACS, I created individual certs for each domain.
(I have been using WACS for years, but only creating one bundled Cert with all Domains in one Cert. Which has worked, but now I am creating each ...
1
vote
1
answer
7k
views
Unable to convert JKS keystore to Oracle Wallet using orapki
I have generated jks keystore using keytool and using the jks keystore I have csr. The same csr I have sent to Signing authority.
The Signing authority have given the trusted certificates(root,...
4
votes
2
answers
14k
views
How to set up an SSL Cert with Subject Alternative Name
To test a specific embedded client, I need to set up a web server serving a couple of SSL (HTTPS) sites, say "main.mysite.com" and "alternate.mysite.com". These should be handled ...
2
votes
1
answer
7k
views
Certbot: Issuing a certfiicate for internal IP address with my own PKI?
I am running my own ACME CA server that allows issuing of certificates to IP addresses. I have installed the root certificate into all the devices in my LAN. Let's say that I am running the server at ...
0
votes
0
answers
86
views
How to Put SSL In Front of ECS Fargate Container
What is the best way to put an SSL cert in front an ECS Fargate Container? I have letsencrypt certs that are being updated every 90 days and uploaded to the SecretsManager and the Certificate Manager. ...
0
votes
1
answer
160
views
TLS 1.2 IIS hosted ssl sends reply 403.7 to Firefox but 200 to Postman on one server
I have an issue with IIS on Windows Server 2019 and TLS 1.2.
I replaced the ROOT CA, and there are new installed trusted root certificates.
Now on IIS i have some sites that require ssl is set to true....
-2
votes
3
answers
101
views
Running a website on a LAN only
This is a big question, so I'm only looking for a high-level overview answer to help me research the bits I don't know.
Essentially the problem is this: I need to take a dedicated Mac Mini (or similar ...
11
votes
1
answer
5k
views
certutil -ping fails with 30 seconds timeout - what to do?
The certificate store on my Win7 box is constantly hanging. Observe:
C:\>1.cmd
C:\>certutil -? | findstr /i ping
-ping -- Ping Active Directory Certificate Services Request interface
...
0
votes
2
answers
58
views
customer receives SSL from an unknown source
We have a customer who is logging in to our website and receiving an ERR_CERT_COMMON_NAME_INVALID. It turns out when the customer is logging in to our app they receive an SSL that isn't coming from us....
0
votes
1
answer
5k
views
How to: Make X.509 Certificates Accessible to WCF
I have followed the instructions here
http://msdn.microsoft.com/en-us/library/aa702621.aspx
I runnning windows 2003 IIS6 with a seperate user account for the Application pool
I give this user access ...
1
vote
2
answers
889
views
Configuring Web Deploy on IIS 10 and issues with the certificate
We purchased a dedicated server with public IP addresses. I have a TLS certificate for a domain example.com. This domain has a dedicated IP. Publishing a website using:
https://example.com:8172/...
0
votes
2
answers
1k
views
Does the server SSL certificate need to be kept private?
I understand that private key definitely does, but what about the certificate file? I also understand that the server sends (part of?) the certificate to a connecting client, but does it send the ...
0
votes
1
answer
94
views
Can I use my letsencrypt wildcard cert on BOTH my webserver and DoH server?
I use letsencrypt wildcard certificate on www.mydomain.com and it works all fine.
Since it is a wildcard, I can validate SSL on *.mydomain.com.
Now I have a recursive resolver running unbound that I ...
0
votes
0
answers
37
views
How to add trusted SSL certificate to LinuxForHealth FHIR Server
I'm currently facing an issue with my LinuxForHealth FHIR Server setup and SSL certificates. I have the FHIR server running as a Docker container on my server, using a self-signed certificate and ...
0
votes
1
answer
157
views
Importing SSL certificate in browser does not prevent the secure warning
I have an embedded device (ESP32) that runs an HTTPS server.
I generated the certificates in this way:
openssl req -newkey rsa:2048 -nodes -keyout prvtkey.pem -x509 -days 3650 -out cacert.pem -subj &...
1
vote
1
answer
4k
views
Prometheus: Add insecure_skip_verify via annotation or scrape config adaption for kubernetes pods
I`ve running a kubernetes cluster with a deployment of some pods. One pod provides metrics on a https secured endpoint. The problem is, that this pod create and use his own self-signed certificate and ...
0
votes
1
answer
418
views
Is it possible to pass in ssl-client-cert for a kubernetes ingress
I have this setup for my ingress in kubernetes
nginx.ingress.kubernetes.io/auth-tls-secret: "namespace/secret"
nginx.ingress.kubernetes.io/auth-tls-verify-client: "optional"
nginx....
4
votes
2
answers
4k
views
How can I specify SSL certificate when running appcmd add site?
I can create a web site in IIS using e.g. the following command:
appcmd add site
-name:portallocal
-physicalPath:"C:\dev\projects\mysite"
-bindings:https/127.0.0.1:444:mysite.dev
But how can I ...
0
votes
1
answer
78
views
Allow HTTPS traffic for an A-record pointing to a domain with a valid SSL certificate [closed]
I use a service for landing pages, with a subdomain like myname.securedomain.com. When I access this subdomain with HTTPS, there's a valid SSL certificate. All good.
That service allows me to use a ...
2
votes
2
answers
4k
views
Is it necessary to have 143 port enabled to use the 993 port for an IMAP(SSL) connection?
I have an email server running with Dovecot, and while trying to manage my email with Thunderbird I'm getting a weird error:
If I enable the port 143, and 993, Thunderbird works fine (either using ...