Questions tagged [ssl-certificate]

SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

Filter by
Sorted by
Tagged with
1 vote
1 answer
4k views

FreeRADIUS certificate is going to expired

Recently I've created a RADIUS server (Freeradius) that authenticate with Active Directory. I follow this link to create this server: Now, when I see the "server.cnf" file into /etc/raddb/cert , I ...
2 votes
2 answers
4k views

SSL Certificate Not Getting Refreshed

I am trying to change the SSL Certificate for my website. I got the new certificate issued by Comodo and installed it on my web servers. My servers are running IIS7.0. I also binded the https ...
1 vote
1 answer
200 views

How to properly create CA certificate and sign the SSL/TLS cert to use in Apache for localhost?

I've found this article and this what I used to generate CA cert: openssl genrsa -des3 -out myCA.key 2048 openssl req -x509 -new -nodes -key myCA.key -sha256 -days 1825 -out myCA.pem I name it "...
0 votes
0 answers
15 views

Letsencrypt autorenewal not working

I ran certbot renew on my domains, but the expiration hasn't updated. How can I tell what I did wrong? Exact steps: $ sudo certbot renew --force-renewal Saving debug log to /var/log/letsencrypt/...
0 votes
3 answers
132 views

How do I properly issue Let's Encrypt certificate for my mail server?

How do I properly issue Let's Encrypt certificate for my Postfix mail server? Right now I have a self-signed certificate and I get these messages it cannot be trusted. I did certbot --nginx certonly -...
1 vote
0 answers
273 views

How do I redirect https://example.com to https://www.example.com?

I recently transferred my website to AWS and added an SSL certificate. The transfer was successful, however, I can't figure out how to redirect https://example.com to https://www.example.com Only ...
0 votes
1 answer
4k views

How to install/update/upgrade SSL certificate in Tomcat

I am about to install/update/upgrade a SSL certificate in one of the servers which has the following configuration Server information: Sever version: Apache Tomcat/6.0.35 OS version: Linux 2.6.18-371....
16 votes
5 answers
73k views

Old ssl cert still showing up in browser after installing new

We have an IIS ARR server which load balances out to two different individual IIS servers. The servers in question are our internal Staging servers. Three months ago I created a free Let's Encrypt ...
-1 votes
1 answer
8k views

How to obtain or accept certificates from a site

I have installed Firefox and Chrome on an Ubuntu 18 machine, I'm not a regular 'nix user so I'm a bit lost as to why neither browser is accepting the SSL certificate offered at www.teamviewer.com. The ...
0 votes
1 answer
115 views

Nginx Wildcards and Subdomains with Certbot

I want to achieve a scenario where *.dev.domain.app => Localhost 3000, dev.domain.app => Redirects to Localhost 3000 *.domain.app (anything but dev) => Redirects Localhost 5000 domain.app =&...
0 votes
1 answer
86 views

Windows Server 2012 R2 - Adfs - renew certificate

I'm trying to replace the certificate on ADFS. I've got wildcart certificate *.abc.pl, following by these steps: Log onto the ADFS server - done Add the new certificate to the server. Make sure this ...
0 votes
0 answers
136 views

Creating Web Secure Proxy in GCP - Certificate Issue

I am trying to configure GCP Secure Web Proxy https://cloud.google.com/secure-web-proxy/docs/overview. The proxy is under IP: 10.10.0.16. Besides that, it has a local DNS Zone proxy.carecode.lan that ...
0 votes
0 answers
27 views

Verifying SSL certificate for DDNS domain

I've a home server set on Raspberry Pi 5 that provide me a bunch of services that are available on my LAN. I've also exposed WireGuard VPN, so I'm able to access my services from outside of my home. I'...
0 votes
0 answers
29 views

Bypassing CERT_HAS_EXPIRED leads to 401 Unauthorized

In our Next.js app, axios requests work in client components (using useEffect) but fail with a CERT_HAS_EXPIRED error from server components. As a workaround in development, we run ...
4 votes
1 answer
30k views

How to generate a multi-domain (and/or wildcard) OpenSSL certificate?

I tried Googling and haven't been able to find anything reliable that shows me how to generate the CSR. I have multiple domains, that I'd like added so I can't use the usual OpenSSL wizard: *.domain1....
0 votes
1 answer
58 views

TLS through CDN

I'm trying to understand how TLS is terminated between a client and an origin when a CDN is involved. I think it's pretty straightforward when a client connects directly to an origin, a handshake can ...
0 votes
0 answers
71 views

curl: (60) SSL: unable to obtain common name from peer certificate

I'm trying to create self-signed certificates for my webserver but it's not going well. The title is the error message curl gives me when I run curl --noproxy "*" https://example.com (with ...
0 votes
1 answer
8k views

Why do i get openssl error unknown option for -adext?

I am attempting to generate CSR using openssl with subject alternative names however i get an error stating no options for adext. See command below.. I am using OpenSSL 1.0.2k-fips openssl req -new \ -...
0 votes
2 answers
5k views

SSL certificate does not update

My previous SSL certificate just expired. I tried to buy another free SSL certificate from AliCloud and also sslforfree.com. I'm pretty sure I have already installed a right certificate in the server....
3 votes
2 answers
1k views

CFSSL to start with intermediate certificate

I am trying to setup CFSSL (v1.4.1), after following this tutorial I have generated following files (self-sign) ROOT_CA_CSR.json intermediate_ca-key.pem intermediate_ca.csr intermediate_ca.pem ...
0 votes
2 answers
8k views

How to convert .cer and .key file to .pem?

I have a .cer certificate, .key file and I would like to convert it to the .pem format. How do I convert them to .pem?
-1 votes
0 answers
63 views

Security concerns with self-signed Xerox device certificates during SMTP transfer

I am trying to find out what risks there are in a SMTP connection which uses a self-signed certificate for TLS. The setup is a Xerox MFP which is being used to send emails for scan to email ...
0 votes
1 answer
5k views

Extract correct format of key and cert files from .p12 file for a SSL MEAN App?

I'm writing a MEAN app for my university department on my Mac development machine. I started with the boilerplate from mean.io. In the configuration file config/env/all.js, there is a section for ...
7 votes
1 answer
25k views

Letsencrypt for all subdomains *.example.com [duplicate]

I'd like to obtain one certificate working for all my subdomains *.example.com. This works: certbot-auto certonly --webroot --webroot-path /home/www/example/ --domain example.com ...
6 votes
4 answers
2k views

When does this SSL certificate expire?

Below are the results from testing the SSL certificate at https://www.ssllabs.com/ssltest/analyze.html?d=bungalowsoftware.com It looks like we have two certificates. Am I reading that right? Does ...
0 votes
1 answer
98 views

Mikrotik: Creating Letsencrypt cert fails on RouterOS v7

From RouterOS's webfig CLI I attempted to create a LetsEncrypt cert: certificate/enable-ssl-certificate dns-name=my.domain.com But it returned the error: progress: [error] http challenge validation ...
1 vote
3 answers
15k views

Replace a TLS certificate for SMTP Server in Windows Server 2019

Some time ago I set up an SMTP server on a Windows Server 2019 machine. The FQDN for this server is smtp.mydomain.com and the smart host is set as smtp-relay.gmail.com, though I don't think that this ...
1 vote
2 answers
1k views

How to prepare and add Godaddy SSL wildcard certificate to Wildfly/JBoss

I have a done some research into how to prepare the wildcard certificate and add it in a manner in which it could be used within WildFly/JBoss (I'm using WildFly 16, but it should be the same for ...
0 votes
2 answers
117 views

Postfix TLS with Letsencrypt configuration

I am running Postfix inside a docker container. Certificate are generated with certbot. With the following configuration: smtpd_tls_cert_file=/var/keys/fullchain.pem smtpd_tls_key_file=/var/keys/...
2 votes
1 answer
495 views

How to add a domain to k3s certificate

When trying to access a k3s Kubernetes cluster that's running on another machine, I get the following error message: E0204 19:13:27.185678 8066 proxy_server.go:147] Error while proxying request: ...
0 votes
1 answer
70 views

IIS - 2 Issues in one > SSL Binding Cert selected but will not stick | Index was outside the bounds of the array

Using WACS, I created individual certs for each domain. (I have been using WACS for years, but only creating one bundled Cert with all Domains in one Cert. Which has worked, but now I am creating each ...
1 vote
1 answer
7k views

Unable to convert JKS keystore to Oracle Wallet using orapki

I have generated jks keystore using keytool and using the jks keystore I have csr. The same csr I have sent to Signing authority. The Signing authority have given the trusted certificates(root,...
4 votes
2 answers
14k views

How to set up an SSL Cert with Subject Alternative Name

To test a specific embedded client, I need to set up a web server serving a couple of SSL (HTTPS) sites, say "main.mysite.com" and "alternate.mysite.com". These should be handled ...
2 votes
1 answer
7k views

Certbot: Issuing a certfiicate for internal IP address with my own PKI?

I am running my own ACME CA server that allows issuing of certificates to IP addresses. I have installed the root certificate into all the devices in my LAN. Let's say that I am running the server at ...
0 votes
0 answers
86 views

How to Put SSL In Front of ECS Fargate Container

What is the best way to put an SSL cert in front an ECS Fargate Container? I have letsencrypt certs that are being updated every 90 days and uploaded to the SecretsManager and the Certificate Manager. ...
0 votes
1 answer
160 views

TLS 1.2 IIS hosted ssl sends reply 403.7 to Firefox but 200 to Postman on one server

I have an issue with IIS on Windows Server 2019 and TLS 1.2. I replaced the ROOT CA, and there are new installed trusted root certificates. Now on IIS i have some sites that require ssl is set to true....
-2 votes
3 answers
101 views

Running a website on a LAN only

This is a big question, so I'm only looking for a high-level overview answer to help me research the bits I don't know. Essentially the problem is this: I need to take a dedicated Mac Mini (or similar ...
11 votes
1 answer
5k views

certutil -ping fails with 30 seconds timeout - what to do?

The certificate store on my Win7 box is constantly hanging. Observe: C:\>1.cmd C:\>certutil -? | findstr /i ping -ping -- Ping Active Directory Certificate Services Request interface ...
0 votes
2 answers
58 views

customer receives SSL from an unknown source

We have a customer who is logging in to our website and receiving an ERR_CERT_COMMON_NAME_INVALID. It turns out when the customer is logging in to our app they receive an SSL that isn't coming from us....
0 votes
1 answer
5k views

How to: Make X.509 Certificates Accessible to WCF

I have followed the instructions here http://msdn.microsoft.com/en-us/library/aa702621.aspx I runnning windows 2003 IIS6 with a seperate user account for the Application pool I give this user access ...
1 vote
2 answers
889 views

Configuring Web Deploy on IIS 10 and issues with the certificate

We purchased a dedicated server with public IP addresses. I have a TLS certificate for a domain example.com. This domain has a dedicated IP. Publishing a website using: https://example.com:8172/...
0 votes
2 answers
1k views

Does the server SSL certificate need to be kept private?

I understand that private key definitely does, but what about the certificate file? I also understand that the server sends (part of?) the certificate to a connecting client, but does it send the ...
0 votes
1 answer
94 views

Can I use my letsencrypt wildcard cert on BOTH my webserver and DoH server?

I use letsencrypt wildcard certificate on www.mydomain.com and it works all fine. Since it is a wildcard, I can validate SSL on *.mydomain.com. Now I have a recursive resolver running unbound that I ...
0 votes
0 answers
37 views

How to add trusted SSL certificate to LinuxForHealth FHIR Server

I'm currently facing an issue with my LinuxForHealth FHIR Server setup and SSL certificates. I have the FHIR server running as a Docker container on my server, using a self-signed certificate and ...
0 votes
1 answer
157 views

Importing SSL certificate in browser does not prevent the secure warning

I have an embedded device (ESP32) that runs an HTTPS server. I generated the certificates in this way: openssl req -newkey rsa:2048 -nodes -keyout prvtkey.pem -x509 -days 3650 -out cacert.pem -subj &...
1 vote
1 answer
4k views

Prometheus: Add insecure_skip_verify via annotation or scrape config adaption for kubernetes pods

I`ve running a kubernetes cluster with a deployment of some pods. One pod provides metrics on a https secured endpoint. The problem is, that this pod create and use his own self-signed certificate and ...
0 votes
1 answer
418 views

Is it possible to pass in ssl-client-cert for a kubernetes ingress

I have this setup for my ingress in kubernetes nginx.ingress.kubernetes.io/auth-tls-secret: "namespace/secret" nginx.ingress.kubernetes.io/auth-tls-verify-client: "optional" nginx....
4 votes
2 answers
4k views

How can I specify SSL certificate when running appcmd add site?

I can create a web site in IIS using e.g. the following command: appcmd add site -name:portallocal -physicalPath:"C:\dev\projects\mysite" -bindings:https/127.0.0.1:444:mysite.dev But how can I ...
0 votes
1 answer
78 views

Allow HTTPS traffic for an A-record pointing to a domain with a valid SSL certificate [closed]

I use a service for landing pages, with a subdomain like myname.securedomain.com. When I access this subdomain with HTTPS, there's a valid SSL certificate. All good. That service allows me to use a ...
2 votes
2 answers
4k views

Is it necessary to have 143 port enabled to use the 993 port for an IMAP(SSL) connection?

I have an email server running with Dovecot, and while trying to manage my email with Thunderbird I'm getting a weird error: If I enable the port 143, and 993, Thunderbird works fine (either using ...

1
2 3 4 5
66