Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ssl-certificate]

SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

-1
votes
1answer
74 views

How to configure TLS certificate for an IP address?

We are hosting our backend server in ALIYUN, since we are a foreign company we don't have ICP license and domain name for that server, but we want to configure https for load balancer IP address. I ...
0
votes
1answer
431 views

Create Google Cloud Managed SSL Certificate for a subdomain

I have my main domain www.example.com hosted on Route 53 on AWS. I've created the custom domain on Google Cloud sub.example.com and set the appropriate NS records. What I want to do now is create a ...
0
votes
0answers
22 views

Is it possible to mix SSI and non-SSI bindings, same IP address and port, in IIS 8.5

I found a good resources over at a Microsoft blog which goes into detail about IIS, SNI, and even some CCS: https://blogs.msdn.microsoft.com/kaushal/2012/09/04/server-name-indication-sni-with-iis-8-...
0
votes
0answers
18 views

Apache as Forward Proxy with certificate pass-trough

apache ssl I have a certificate on a token that I need to use to connect via an apache forward proxy to a website. Currently the connection is getting closed somewhere, I believe due to the fact that ...
0
votes
1answer
98 views

SSL Certification with nginx and tomcat

I have an nginx server, which can forward request from subdomains of ropi.io. I want to secure the connection with SSL, so I generated a certificate, called ropi.pem and added it as both the ...
0
votes
0answers
183 views

SSL routines:ssl3_read_bytes:tlsv1 alert decrypt error on mutual authendication

I have configured JBOSS 5 with SSLVerifyClient="require" Client contains, server CA certs and there own certs(JDK 1.8). Server contains, client CA certs and there own certs(JDK 1.6). For ...
0
votes
0answers
294 views

MySQL SSL error: wrong version number

I'm having difficulty with MySQL and OpenSSL. I'm running MySQL 5.7 and OpenSSL 1.1.0g on Ubuntu 16.04 Regardless of what certificates I load, MySQL starts up but does not establish a connection over ...
3
votes
3answers
229 views

Server ssh certificate chain against MITM attacks?

During first contact with a server via ssh, the server's public key of the chosen key algorithm is presented to the user to validate it. After validation, the result is usually saved into the ~/.ssh/...
-1
votes
1answer
52 views

Redirecting uncertified HTTPS domains to HTTP [closed]

Is there a method for redirecting HTTPS domain without a certificate to one with a certificate in Apache 2 or to HTTP? If no certificate is found, go to HTTP instead.
0
votes
1answer
148 views

Firefox - Intranet SSL

I am running Firefox Quantum 65.0.1. I have an intranet site that I need to use SSL with. My SSL certificate works fine in Chrome and IE. I have access to the CSR, PEM, KEY, CERT, and P12 file for ...
0
votes
0answers
83 views

unable to update certificate(s) with update-ca-certificates

I'm trying to use UPDATE-CA-CERTIFICATES(8) (update-ca-certificates - update /etc/ssl/certs and ca-certificates.crt), yet not getting to desirable state: root@www:~# cd /usr/local/share/ca-...
-1
votes
1answer
34 views

CNAME that points domain A to domain B results in a Security Warning

I'm using a service (banana.com) that allows me to use my domain (orange.com) to log in. They mention to add a CNAME record like so: an.orange.com. 3600 IN CNAME service.banana.com. I did that but ...
0
votes
1answer
70 views

How to complete certificate chain last node

I am running my own RocketChat latest version on Docker. And on top of it I have Nginx as a reverse proxy running Certbot to do a https. It works perfectly fine with Firefox web browser on Android and ...
0
votes
0answers
29 views

SSL is forwarding domain

I currently ran lets encrypt auto on my ssh. When I ran it I had the option to forward all https requests. I went ahead and did so. I ran two domains at once and somehow subdomain 1.example.com is ...
0
votes
1answer
35 views

Nginx load balancer and forcing HTTPS

I have an Nginx server being used as a load balancer. I have just installed an SSL certificate with Let's Encrypt and I am now looking into forcing HTTPs. The following is my config: upstream backend ...
-1
votes
1answer
46 views

Are front and back-end SSL certificates the same? [closed]

I'm trying to set up and API on https and I get the following error : NET::ERR_CERT_AUTHORITY_INVALID I have generated the certificate using a IP address because I dont have any domain name for ...
0
votes
0answers
263 views

Rancher 2.0 High Availability and Certificates

I replied to a similar question on the Rancher Forums with no luck: https://forums.rancher.com/t/rancher-2-x-ha-install-and-ssl-termination/12515/3 When following the Rancher Docs for a HA install, a ...
1
vote
1answer
61 views

Which fields are required in a web server ssl certificate?

I am learning about SSL certificates and doing some testing with a web server on my machine. I am trying to understand which field are required to be in the server certificate in order to be accepted ...
0
votes
1answer
258 views

How do I setup a CloudFlare Origin Certificate in AWS Certificate Manager?

When I try to import the Origin Certificate that CloudFlare provides into AWS Certificate Manager so I can use it with an ELB, ALB or NLB I find that it requires a key chain certificate that they didn'...
2
votes
3answers
121 views

SSL certificate for service - not for FQDN

My org deploys a data server and a client device (two devices) in customers' internal networks for them to use our solution; the client device only connects to the data server; however any one ...
0
votes
0answers
60 views

SSL certificates updating issue - domain.key .csr .crt and respective ssl.* files

I am responsible for running friends' website. It's using a free tool, call it T, which did a ton of configuration work for me. nginx config, for example, is managed by T. And same for SSL business, ...
1
vote
1answer
157 views

Curl verify certificate improperly

I used curl to launch a https request to download the file. I used below command: curl -v -o Output.pdf https://otherdomain.com/upload/manual-8mm-f35-csii-vdslr-5.pdf The result I get is: ...
0
votes
1answer
2k views

SSL: no alternative certificate subject name matches target host name

At one time our company hosted our own blog which we hosted with our wildcard cert for the domain, *.companyname.net. We moved our company blog to Hubspot and the team at Hubspot setup a second SSL ...
0
votes
0answers
27 views

Importing wildcard certificate from Barracuda appliance to IIS 10

I have a functioning wildcard certificate running on a Barracuda Load Balancer. From what I understand I can use that same certificate on other servers / appliances. The certificate is listed as ...
0
votes
1answer
94 views

Messed the SSL certificate files of my VM

I am trying to create a new SSL certificate with openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/apache-selfsigned.key -out /etc/ssl/certs/apache-selfsigned.crt. I am ...
1
vote
1answer
524 views

openssl verify error 2 at 1 depth lookup:unable to get issuer certificate

Openssl is telling me it can't verify my concatenated cert. I downloaded the intermediate cert from the issuer (AlphaSSL) and concatenated that with my domain cert I purchased (domain cert first, then ...
2
votes
1answer
336 views

Let's Encrypt wildcard certificates and Apache 2 not working

I am trying to set up a wildcard certificate using Let's Encrypt on an Ubuntu 18.04 server running apache2, for domain abc.def.com (not the real domain name) and all subdomains (*.abc.def.com) I have ...
2
votes
1answer
547 views

Laravel Forge/LetsEncrypt SSL error “SSL_ERROR_NO_CYPHER_OVERLAP”

Some users have complained that they cannot access our site due to a "secure connection failure" i.e. SSL. The actual error code provided is SSL_ERROR_NO_CYPHER_OVERLAP. Server is nginx with ubuntu ...
0
votes
0answers
33 views

How to let JupyterHub refresh the SSL certificate?

I have JupyterHub set up to use let's encrypt certificates. The problem is that they have a very short lifespan, and unless I stop&start JupyterHub, it keeps the old ones in memory, so that people ...
2
votes
1answer
462 views

What Does “L1K” indicate on an Entrust Certificate

I was working with a teammate importing certificates into a java keystore and I noticed our intermediate certificate had the ".L1K" notation, was then about to import into our Java application's ...
1
vote
0answers
44 views

SSL cert mismatch on redirect to sorry/maintenance website

We are trying to address an (IIS) SSL cert mismatch issue. We own dozens of domains name for various lines of business. We have multiple websites load balanced on a netscaler onsite. For example, ...
1
vote
2answers
46 views

Security grades of free vs paid SSL certificates

Do free or paid SSL certificates have anything to do with their security grades from a testing service such as SSL Server Test by SSL Labs or does it all depend on server's security configuration?
0
votes
1answer
199 views

CloudFlare and let's encrypt free ssl certificate subdomain

I want to know if it's possible to mix and match free ssl certificate from cloudflare and let's encrypt for subdomains. E.g. a.example.com and b.example.com use free ssl from cloudflare (I'm aware ...
-1
votes
1answer
78 views

Must I setup SSL certificate if my server is listening on only port 443 with Nginx?

I am using Amazon Load Balancer to receive requests on Port 443. Then I am sending off these request to my EC2 server on port 80. If I try to send the request on port 443 to EC2 nginx error.log file ...
1
vote
1answer
65 views

Properly redirect traffic with nginx for java client-server apps that use their own certificates

I have a server and a client app, that communicate with each other using Https connection and their own certificates (.jks file). The server listens on port 443 and the client connects to it using the ...
0
votes
1answer
123 views

No certificates match the selected hostname in Azure Functionapp

I cant add ssl binding to my Azure Function. I have uploaded the certificat, but when i try to bind it to a custom domain name I get "No certificates match the selescted hostname" as shown in the ...
0
votes
2answers
42 views

Is AWS certificate manager the one in charge for HTTPS connection?

I am confused about AWS Certificate Manager and the SSL certificates it provides: If I use it, will my website that's hosted on an EC2 instance have the green lock with https connection? I am ...
2
votes
2answers
859 views

Install AWS SSL Certificate to EC2 instance without load balancer

I'm new with AWS and facing some confusion with ACM SSL certificate installation to an EC2 instance. Is it possible to install the certificate without using ELB or Cloudfront. I don't need load ...
-1
votes
1answer
154 views

Generate SSL certificate files from text file

I have generated a free SSL from zerossl.com through their wizard, and finally I got a pure text file containing pure text with two BEGIN and END. I want to know how to generate .crt and key from ...
0
votes
0answers
444 views

SSL certificate in system store not trusted by Chrome

I have a gitlab server running in our company for which I have obtained a certificate signed by our company's CA. Since I can access the site from a machine within our domain without getting SSL ...
-1
votes
1answer
579 views

How to check if letsencrypt ssl certificate is installed? [closed]

I installed Lets Encrypt plugin in my WHM and run for one of my site but it when I'm checking to sslshopper site to confirm that certificate is installed or not it shows : Common name: example.io ...
0
votes
0answers
59 views

Is there a way to configure IIS to tell us we received an untrusted client certificate?

We have a Web API endpoint configured to allow, but not require, client certificates. We're logging the certificate we receive, then checking to make sure it is what we expect, logging the result, ...
0
votes
0answers
64 views

PCI Compliance - SSL certificate doesn't match hostname (port 25)

I'm working on an Ubuntu server hosting multiple websites for one company. Trying to get one of the domains to be PCI compliant, but it's failing on port 25 (SMTP) because the SSL certificate hostname ...
0
votes
1answer
105 views

combinging Rocketchat and Nextcloud installed with snap on one server, same port

I installed a fresh Ubuntu18 server with Nextcloud and Rocketchat installed through snap. After enabling letsencrypt, Nextcloud listens on port 443 and Rocketchat on port 3000. I would like both to ...
0
votes
1answer
91 views

Lets Encrypt - Server Error in '/letsencrypt' Application, A Task was Cancelled

I have the let's encrypt extension added on Azure through Kudu. This extension has been working fine until recently and now when I try to apply a SSL certificate to a website a get the following error:...
0
votes
1answer
29 views

What will happen if client call Apache server by IP and there are two SNI virtual hosts [duplicate]

We have a Apache 2.4 web server with a couple of virtual hosts with different certificates. I have set up SNI name based virtualhosts : ap.mmm.com and ac.mmm.com, it's working great. All on same IP (...
2
votes
0answers
195 views

FreeRADIUS with Let's Enrypt Certificate (trusted connection without provisioning?)

I have a FreeRADIUS server set up for PEAP/MSCHAPv2 connections with an SQL user backend. On that server, I have set up a Let's encrypt certificate for domain access.example.org. This certificate is ...
0
votes
1answer
80 views

NGINX Calling page will download strange file + Certbot can't install certificate

Problem: Certbot returns a urn:ietf:params:acme:error:connection-error when trying to install a certificate for subdomain rainloop.example.com. EDIT: As to be seen in the "EDIT" segment below there'...
0
votes
1answer
121 views

How to properly redirect all request to non-www inside nginx with reverse proxy [duplicate]

I have a react website served by reverse proxy inside nginx. On top of that, I have SSL. Certbot is handling redirects from http to https. I would also like to setup redirects from www to non-www. I ...
0
votes
0answers
244 views

Zabbix web-scenario with Authentication

I want to check service availability with zabbix. On my server I have Tomcat and java app deployed, which is contacting external server (GET request), and it is working (when the service is available)....