Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ssl-certificate]

SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

0
votes
0answers
539 views

x509 certificate not valid for any names when added IP address to openssl.cnf

A self-signed certificate works well while the command used to generate it on a ubuntu machine is: openssl req -x509 -newkey rsa:4096 -keyout private.key -out cert.crt -days 365 -nodes If the ...
0
votes
0answers
186 views

How do I add my organization's self-signed certificated to the trusted list?

I am trying to provision some servers running Ubuntu 18.04 within my company and have run into errors such as Error response from daemon: Get https://registry-1.docker.io/v2/: x509: certificate ...
0
votes
1answer
138 views

GCP Https Load Balancer SSL Certificate

I am trying to create a Https load balancer using yaml and Jinja files on GCP deployment manager. But I am not sure how to provide SSL certificate. In the "sslCertificates" of "compute.v1....
0
votes
1answer
188 views

Generate LetsEncrypt SSL certificate for internal use using Certbot

I want to generate an SSL certificate using Certbot for a subdomain which points to a Docker Registry server which is not accessible from outside. Since I cannot use LetsEncrypt DNS challenge the ...
0
votes
1answer
86 views

Chrome finds certificate fault for website on one terminal session only?

On a Windows Server 2012(R2) I have users who connect to it via RDP. When using Chrome on that server just ONE user receives certificate warning when connecting to an internal HTTPS website. Chrome ...
2
votes
1answer
478 views

Nginx client cert verification: ssl_client_certificate vs ssl_trusted_certificate

The documentation for ssl_client_certificate says: Specifies a file with trusted CA certificates in the PEM format used to verify client certificates and OCSP responses if ssl_stapling is enabled. ...
1
vote
1answer
534 views

Curl SSL error certificate has expired

I'm doing with python for getting result from API URL. But it happened like this: Traceback (most recent call last): File "grafana-utils.py", line 95, in <module> grafana_backup_all() ...
0
votes
0answers
159 views

Node js: Error: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch

I have searched the website and found some answers but it didn't solve my problem, And I don't know what's I am doing is correct or not. My website is php based, for chat I am using nodejs, and ...
0
votes
1answer
216 views

NGINX SSL “ERR_TOO_MANY_REDIRECTS”

I have website build with django and nginx. After adding Let's Encrypt SSL certificat using Certbot I get the error : ERR_TOO_MANY_REDIRECTS. Please find the below nginx configuration : server { ...
0
votes
1answer
163 views

Poste.io - can't login by mail application - bad SSL certificate

I have a proble with poste.io and configuration with nginx-proxy. DOMAIN is valid domain :) This is my docker-compose for poste.io: version: '3' volumes: mailserver_posteio: services: ...
0
votes
0answers
155 views

Remotely Monitoring RDP Certificate

We use OpenSSL on a CentOS 6 server to monitor the certificate on servers for RDP. To do this we use: openssl s_client -connect SERVER01:3389 -prexit This has worked flawlessly until 4 days ago, ...
2
votes
2answers
84 views

Do I need an SSL certificate on my EC2 server even when I have a load balancer?

Starting to setup a Load Balanser in AWS, I ran into some additional questions. Basically I have a web site/app deployed in an EC2 instance. I'd like to make it secure by using an AWS generated cert ...
1
vote
2answers
44 views

Alternatives for enabling SSL on EC2

I have an existing AWS EC2 instance which contains both an application server and a web server (apache). My external DNS directs traffic from www.x.com, api.x.com, oa.x.com to the instance via it's ...
0
votes
1answer
225 views

Install CA - Not trusted certificate - Apache

I am trying to install a chain certificate from Entrust on a red hat server 7.5 that uses apache 2.4.6. Following some articles I found, I did the following: Edited /etc/httpd/conf.d/ssl.conf file in ...
3
votes
3answers
116 views

Updated SSL certs and now rewrite conditions no longer working for apache2

I'm running an Ubuntu 14.04 server with Apache2 v2.4.7. Recently our site was getting errors from Chrome saying we needed to update our certs. I just completed that earlier this week, updating the ...
0
votes
1answer
62 views

Lets encrypt certificate renew: PluginError occured

I am trying to renew the letsencrypt SSL certificate in the apache by using the following command. sudo certbot renew But I am getting the following error error was: PluginError('There has been ...
2
votes
0answers
60 views

How does SSL certificate benefit a public informational website? [closed]

One networking expert posted a video today in Facebook saying that a government website (which is a subdomain of kerala.gov.in) has no SSL certificate installed. That website is actually just for ...
2
votes
1answer
109 views

Wrong(first/default) SSL certificate served Apache 2.4 - Ubuntu 18.04 muliple domain web server

Background: We have migrated 2 old webservers to 2 new, more robust servers- Ubuntu 17.04 and 18.04. We purchased Thawte SSL certificates for the domains we host(about 20) to use on 2 servers. Each ...
4
votes
1answer
1k views

How to configure nginx + ssl with an encrypted key in .pem format

I would like to set up ssl for an existing nginx server. I got handed both a certificate and the corresponding (encrypted) private key. Both are in .pem format (each in its own file). About all ...
0
votes
0answers
22 views

how does TLS encryption work on traffic flows which are routed via a (reverse) proxy

I do not understand how encryption works in this particular case. The scenario is the following: Server A (Interface partner) --> Server B (Apache reverse proxy) --> Server C (weblogic application ...
0
votes
0answers
22 views

Installing EV multidomain ssl on SAS windows

I sold an EV multidomain SSL to an Org The SAS hostname is a SAN of the ssl. The person who will install the SSL on SAS says he needs FQHN (FQDN?) that is CN not SAN of the SSL. Is this true? Anyone ...
0
votes
2answers
302 views

Can a wildcard SSL certificate secure host names of various depths? [duplicate]

I discovered recently that my *.domain.com cannot be used on server1.apps.domain.com because it will only "wild" the one level, not two. The questions are thus twofold: Is there such a thing as a *.*...
-1
votes
1answer
16 views

haproxy and certificates mismatch

I have been wrestling with Haproxy for a few hours now and I am probably missing something in my limited know-how. I have two servers (ha1.domain.com and ha2.domain.com), both with keepalived and ...
1
vote
0answers
148 views

ECDSA certificates fail validation with curl and Firefox

I've been stuck on a problem for 2 days regarding certificates where some clients connect and some other fails the certificate validation. I'm working on CentOS 7.3 and Nginx 1.15.4. I have 3 levels ...
0
votes
1answer
35 views

Add or do not add WWW hostnames to SAN certificate

My setup is as follows: 100+ websites Each website has two host headers any.com and www.any.com Requests for www.any.com are redirected to any.com without changing protocol Some of these websites ...
0
votes
0answers
21 views

Webpack server and Express server with self signed cert works with localhost but not with IP

OS: MAC Env: DEV I've created two Self Signed Cert CN=localhost one for the webpack server and one for my express server. I've added the certs to the keychain, took me a while to get over this: ...
1
vote
0answers
1k views

0x80004005 Error When RDPing to CA-certified computers

I have a server (let's call it srv1) on my network that I use RDP to connect to and manage, from my Windows 10 computer. Recently, I deployed RDP server certificates so that I could stop the ...
0
votes
0answers
192 views

IIS 8 not serving HTTPS Securely for chrome (even with legit certificate)

I am developing an Angular 6 PWA served on IIS 8 (windows server 2012 R2) but i am facing various issues with https certificates: google chrome (both the android and desktop version) warns me that the ...
1
vote
2answers
61 views

TLS v1 enabled in nginx config but not working and certificates not available

I have an Ubuntu 18.04.1 server running PHP 5.6 with Forge on Digital Ocean. I'm trying to to enable TLSv1 and TLSv1.1 for a site. So Ive edited my NGINX config to include them: ssl_protocols TLSv1 ...
0
votes
2answers
64 views

Certificates, and multiple CNAME records

If I host a service that has endsystem.example.org as it's URL, and it is hosting a certificate for www.example.org, and I have a CNAME intermediate.example.org that points to endsystem.example.org, ...
0
votes
0answers
91 views

Ubuntu 16.04 + Nodejs (for Adonisjs app) + Mysql + Apache (just for phpmyadmin)

Server: Digital Ocean Droplet (Ubuntu 16.04), Application Deployed: Nodejs (based on the Adonis.js framework), Database: MySQL, Nginx: Reverse Proxy Server (To remove port 3333 from app URL), ...
2
votes
2answers
912 views

Old ssl cert still showing up in browser after installing new

We have an IIS ARR server which load balances out to two different individual IIS servers. The servers in question are our internal Staging servers. Three months ago I created a free Let's Encrypt ...
0
votes
1answer
239 views

Multiple Java Keystores

I created a Keypair using the following command: "%JAVA_HOME%\bin\keytool" -genkeypair -keysize 2048 -alias tomcat -keyalg RSA -sigalg SHA256withRSA I noticed there is a key store in jdk/lib/...
0
votes
0answers
263 views

How to connect jenkins to a gitlab which required a client ssl?

I need to work with a self hosted gitlab repository protected by 2 way ssl authentication. So to connect aside git's own credentials, the request to git should come with a client ssl. From the ...
0
votes
2answers
82 views

Impact of GeoTrust/Symantec distrust certs (9/13)

So Chrome 70 is going to distrust these SSL certificates beginning 9/13. Not that we aren't working towards replacing those that need it, but what about other browsers? Will they still trust after 9/...
0
votes
1answer
41 views

New certificate not being recognized in iis10

I inherited maintaining a 2012 server. The certificate for our websites expired, so i installed a new one. It is still as if it is using the old one. We have many websites all on different ports. ...
0
votes
1answer
365 views

CA root install issue on Ubuntu 16.04 LTS Server

I am setting up nginx reverse proxy on Ubuntu 16.04 LTS Server for Web-Server. There will three different Services running on Ubuntu. Services will communicate each other using API calls. Similarly ...
-1
votes
2answers
28 views

Is ssl CName important for search engine?

My site is under cloudflare and of course I am using free ssl from their side. So, what what can I have sanctions on the site from the search engines while using free ssl? Or what benefits will I ...
1
vote
1answer
671 views

Postfix, multi domains and multi certs on one IP

I've a postfix server which has multi domains and I want to have a specific cert per each. My server has only one IP. I've found a solution with multi IP, but without I don't know how to do this. ...
0
votes
1answer
440 views

Can't get SSL certificate from LDAPS server

I'm trying to retrieve the public SSL certificate from my organization's LDAPS server. I'm following the instructions here, which recommend I run the following openssl command: openssl s_client -...
0
votes
1answer
78 views

How to disable TLSv1 in Apache 2.4 (Debian 8)?

I have this line in /etc/apache2/mods-enabled/ssl.conf SSLProtocol -all +TLSv1.2 However SSL checker whynopadlock still shows this: Any ideas on how to completely disable TLSv1 in Apache 2.4 (...
0
votes
1answer
78 views

SSL certificate installation on Apache server via FTP [closed]

I do have a domain.crt (with two certificates) and private.key (and domain.csr) and would like to use those on an Apache server (version unknown) for SSL support. + My website is hosted by a share-...
1
vote
0answers
51 views

How is session caching affected by the renewal of a ssl certificate?

I optimized my nginx session cache like this # Optimize session cache ssl_session_cache shared:SSL:40m; ssl_session_timeout 4h; In a few days my Let's Encrypt certificate will be renewed. Does this ...
0
votes
0answers
24 views

Cert conversion from p7b to pcks12

I am trying to send email via tls to Microsoft EOP but having some issues. After working with support, they tell me I need the following certs installed https://support.office.com/en-us/article/...
0
votes
1answer
26 views

Nginx redirects with SSL for 2 domains including www

I have the .com and .co.uk versions of a domain. I want every combination of these (including www subdomains) to redirect to the https .co.uk version. By every combination I mean that all of the ...
0
votes
2answers
77 views

HSTS: Is includeSubDomains on main domain sufficient?

In my Plesk web admin edition I just activated HSTS on my main domain www.domain.tld with add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; The test on ssllabs.com ...
0
votes
2answers
71 views

Client certificate authentication - Apache2

I'm trying to set up a client authentication for one of my app but for now, it's not successfull. I bought a Gandi wildcard ssl certificate for my domain *.example.com and here is the configuration on ...
7
votes
3answers
946 views

How does HSTS handle mixed content?

I've just checked with the SSL Server Test if I implemented the SSL certificate on my server correctly. I got a grade A in their ranking but you can get an A+ if you have activated HSTS. After some ...
135
votes
8answers
17k views

Is there a reason to use an SSL certificate other than Let's Encrypt's free SSL?

Let's Encrypt are providing free SSL certificates. Are there any downsides compared to other, paid certificates e.g. AWS Certificate Manager?
1
vote
1answer
761 views

SSL “unable to get local issuer certificate” : “full chain” vs “root”?

Summary In summary I have some certificate related files and some certificate related instructions but I'm not sure which files are which ! Background I've just installed a certificate from Lets ...