Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ssl-certificate]

SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

0
votes
2answers
101 views

How do I get a “valid SSL public certificate” from Windows Certificate ? (for stunnel configuration)

In these directions for configuring Stunnel on Windows the following text appears : Copy a valid SSL public certificate to the directory "C:\Program Files (x86)\stunnel." To make things more ...
0
votes
0answers
206 views

Updated certificate in GPO not being deployed to Trusted Root Certification Authorities

I created a GPO to deploy a new trusted root CA certificate to end-user machines. This worked correctly and the certificate was deployed. Unfortunately I'd made a mistake with the certificate and I ...
1
vote
2answers
63 views

WIldcard certificate installed on server not hosting www subdomain

I am looking for clarification/guidance on the following. I have www.example.com installed on CMS powered by Cloudflare CDN. I want to secure subdomains used for other applications hosted on ...
0
votes
1answer
44 views

SSL Certificate installed successfully but website not accessible

I have installed Let's Encrypt SSL Certificate on a windows-server-2012-r2 machine running iis-8.5. It is an ASP.NET 4.5 website running on an Azure VM. The installation was successful and I can see ...
0
votes
0answers
110 views

Adding ACM SSL certificate to Load Balancer not working for EC2 instance

I have a Bitnami Wordpress EC2 instance. I want to add SSL certificate so that my blog can be accessed with https. I tried all the steps available in all the tutorials and AWS guide. Below is the ...
0
votes
0answers
19 views

Tomcat hangs after setting the certificates

I'm trying to set up some certificates on Tomcat for using SSL. After a few failures using Apache APR, I decided using NIO. After settinng the file name and its password, tomcat starts correctly and ...
0
votes
1answer
238 views

The requested URL was not found on this server

I am trying to enable SSL for port 4100 for an Amazon EC2 Instance. When I access the site https://test.example.com:4100/login, I get an error as follows - The requested URL /login was not found on ...
2
votes
1answer
63 views

Why is my ssl certificate self signed?

I followed the following steps to install an ssl-certificate on a website; https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-centos-7. However, the website is ...
0
votes
1answer
77 views

How can I generate a self signed certificate that will not fire a SSL_ERROR_BAD_CERT_DOMAIN?

I need to generate a self signed certificate for my application and I want to be able to make it valid if a self generated root certificate have been added to the web browser manually. The problem is ...
0
votes
1answer
334 views

vsftpd error 530 Login incorrect error occurs with valid credentials

Though there are a number of similar existing question/answers that reference vsftpd and error code 530, but they do not seem to be helpful in this case: vsftpd login error: 530 VSFTPD 530 Login ...
0
votes
1answer
3k views

vsftpd fails to start (status=2)

The problem is that the vsftpd service fails to start after transferring a working configuration from another server. Of vsftpd's configuration files, only these were modified: /etc/vsftpd....
0
votes
1answer
317 views

Install trusted Certificate on stunnel

I would like to be able to use a trusted certificate on Stunnel proxy, The default one does not seem to allow me to do this. Is there a way to do this please? Would need to be free.
1
vote
1answer
552 views

Why does nginx require default ssl server to have a certificate?

I have a testing site with 2 domains and I want to enable SSL for both. Also, I want to have a default server to display an error page if a client is accessing some page out of those 2 domains. This ...
0
votes
1answer
693 views

curl - SSL peer does not support certificates of the type it received

Trying to send a request with a client certificate to an Apache server, I have the following request and error: $ curl -X POST https://my-server.com/dummy/user -H 'Cache-Control: no-cache' -H '...
0
votes
1answer
212 views

Openldap and SSL certificate chain validation

I just set up TLS for slapd on one server, using a simple PKI, like this one: ldap cert < intermediate CA cert < root CA cert In order to connect to the ldap server using TLS from a client, I ...
3
votes
1answer
116 views

DomainComponent error with openssl

I am creating a simple PKI to use TLS with an LDAP server. I created the root CA request and certificate with this in the config file: [ ca_dn ] 0.domainComponent = "org" 1.domainComponent ...
-1
votes
1answer
63 views

Let's Encrypt Expire Bot showing different date then command line

Today I got an email notification from Let's Encrypt Expire Bot that the SSL certificate for my domain will be expired on the 31, july, 2018. but when I log in to the server, and check the ...
0
votes
1answer
58 views

Certbot misbehaves by creating a certificate for a domain with “www”

This time when I used certbot it created a certificate for "www.$website" instead of $website. This is not what I need. Here it is: $ website="my_website123.com" $ sudo certbot certonly --...
0
votes
2answers
915 views

SSL Self-Signed Certificate Vulnerability Keeps Returning

So, I've been dealing with a recurring problem with my workstations self-generating certificates. They're appearing in the "Personal" certificate store. Even after I manually delete them from the ...
1
vote
1answer
1k views

How to selfsign an SSL Certificate for HPE Integrated Lights-Out (iLO 5)

PROBLEM: When I access the ilo via browser, it return to me an error with SSL certificate. WHAT I TRIED: I created a CSR (ilo.csr) from iLO web interface --> Security --> SSL Certificate After I ...
0
votes
2answers
2k views

Apache: SSLCertificateFile: file does not exist or is empty

I created a Private Key, CSR, and CRT using the below commands to run a Website using HTTPS on Apache 2.4.6. And the Operating System is Cent OS 7. // To generate a Private Key 1. openssl genrsa -...
1
vote
0answers
21 views

certbot creates a certificate with “wwww” instead of a bare domain one - unlike before [duplicate]

I've been creating certificates this way for over a year: export website="my_domain1111.com" sudo certbot certonly --standalone -d $website -d www.$website --email hello@$website and it's always ...
2
votes
1answer
50 views

MAAS install CA to new machines

How could we add custom trusted Certificate Authority to the new deployed ubuntu 16.04 machines on MAAS v2.3 ? is there a direct way to do that, or we have to perform custom installation nodes ?
0
votes
0answers
81 views

MariaDB Galera Cluster ECDSA certificate and cipher

I have created a working MariaDB Galera Cluster and would like to secure it with SSL encryption. I have an ECDSA certificate (ecdsa-with-SHA512) and have setup SSL between the Nodes, but I get the ...
0
votes
0answers
289 views

Letsencrypt expired certificate renewal failure (NGinx)

I'm hosting a website on AWS. I created SSL certificates through letsencrypt for my domain xxxxx.com as well as www.xxxxx.com. (Throughout this post I'm putting 'xxxx's for potentially sensitive ...
2
votes
1answer
1k views

How to debug curl? gnutls_handshake failed -unexpected TLS packet (OpenSSL)

How can I debug curl error further when Apache error.log is not showing any? (35) gnutls_handshake() failed: An unexpected TLS packet was received. curl -v https://example.com * Rebuilt URL to: ...
1
vote
2answers
498 views

Set up certs for multiple domains in Postfix and Dovecot

I don't know how to set up main.conf postfix config file and 10-ssl.conf dovecot config files in order to make my mail server capable to handle with multiple certificates. Let me explain... I have two ...
0
votes
2answers
89 views

How to certify a domain that's used only for redirections and has no hosting?

I migrated a site from oldsite.example to newsite.example. HTTPS was enforced all over, so most incoming links to oldsite are going to https://www.oldsite.example. My oldsite.example domain used to ...
0
votes
1answer
237 views

Download certificates: gnutls or openssl

I need to download a certificate from a site. Up to now, I've been using gnutls command in order to get it. $ gnutls-cli --save-cert=ra-sec.pem vault.ra-sec.svc I've found out I', able to use ...
0
votes
1answer
42 views

SSL Cert says its self-signed but decoding shows it's not [closed]

I have a cert that is suddenly being presented as a self-signed cert. Its not. It has been working fine until now. When I decode the cert it shows everything I would expect. When I analyze it ...
0
votes
0answers
37 views

Unable to configure SSL on port 4001 in Apache2

I'm trying to configure apache2 with SSL on port 4001, I have done the following so far: ports.conf Listen 4001 <IfModule ssl_module> Listen 4001 </IfModule> default-ssl.conf &...
0
votes
2answers
252 views

SSL certificate for both www and non-www

I bought a SSL certificate from Globalsign (AlphaSSl). According to their site, all certificates secures both www and non-www. But when I go to https://www.kanzan.se, I get invalid SSL certificate (...
1
vote
1answer
51 views

SSL Check - Exchange Server responding with Self-Signed Cert

How do I set an Exchange server to respond to a Web Based SSL Certificate checks on a specific port number with the Public Cert? If I do an SSL cert check on port 443 it gets the Public cert as the ...
1
vote
2answers
131 views

Self-signed certificate to protect website

We have a website which is accessible on the internet. But we only want our partners to access our website, so we generate a self-signed server certificate and certificates signed by our self-...
-1
votes
1answer
37 views

openssl self signed sertificate, need 3 files, got only 2

Hello I try to config my mail server, I do : sudo openssl req -newkey rsa:4096 -nodes -sha512 -x509 -days 3650 -nodes -out /etc/ssl/certs/server.pem -keyout /etc/ssl/private/server.pem but in ...
0
votes
1answer
28 views

Is it correct to see certificate from another domain in case of missing cert? [duplicate]

I have 3 sites defined in apache, site1, site2, site3 For 1 and 2 I requested ssl certs from Let's encrypt and work OK, but NOT for site 3. Problem is that whenever I access https://site3 I always get ...
0
votes
3answers
70 views

Multi-domain certificate failing for one domain

I've been hosting some nginx servers with letsencrypt SSL certificates. domain-a.org is on server 1 with it's own certificate. sub.domain-a.org is on server 2 with it's own certificate At first ...
0
votes
1answer
603 views

LDAP TSL ldap_modify: error 80

I was read few suggestion from this and many others forums and try to fix problem on my own, but without result. I need to add cert to ldap and always it return error 80. I was add permission to ...
0
votes
1answer
37 views

What are the implications of requiring SSL and a client certificate, but leaving anonymous authentication on in IIS

I have been configuring IIS to use a client certificate. I set this as REQUIRED. In my ASP.NET (WCF) service, a <clientcertificate> tag I used to specify the thumbprint of the client certificate ...
0
votes
0answers
94 views

Nginx virtual hosts redirection not working

I am having trouble configuring Nginx to redirect to two different web applications on CentOS 7. I have 2 web applications running on Node.js. First app A running on port 1000 has domain www.domainA....
0
votes
1answer
85 views

Redirect from example.com to www.example.com if a certificate for example.com is invalid

I have no valid SSL certificate for my "example.com". I can't issue/renew a certificate for "example.com" at the moment. However, I have a valid one for "www.example.com" I want all the requests, ...
0
votes
0answers
120 views

Can't validate certificate chain JBoss AS 7.1 with APR

I'm trying to get HTTPS working with JBoss AS 7.1, using the web-native connector (APR/Apache Portable Runtime based). This is my configuration: <subsystem xmlns="urn:jboss:domain:web:1.1" ...
-1
votes
1answer
762 views

Setting up a Windows domain CA with a wildcard certificate

As the title suggests, I'm trying to set up a new Windows domain. Seemingly a simple thing, and one I've already done before, but this time around, management wants this to be synced up with Office ...
0
votes
0answers
29 views

Nginx SSL request process

I have a Nginx 1.10 with this 2 sites: site A: server { listen 443 ssl http2; listen [::]:443 ssl http2; ssl_certificate /etc/ssl/example.com/fullchain.pem; ...
0
votes
1answer
109 views

How to build an OCSP certificate chain for dual-stack RSA + ECC certificates

Nginx lets us use multiple certificates so that we can use both ECC and RSA certificates ssl_certificate /etc/ssl/example.com.combined.crt; ssl_certificate_key /etc/ssl/example.com.key; ...
0
votes
1answer
269 views

GCP SSL Certificate Installation Error "The Certificate data is invalid. Please ensure that the private key and public certificate match

I bought an SSL certificate from godaddy.com. My website is hosted on Google Cloud Portal (GCP). I generated the private rsa key using the methods provided on the GCP support website. First I ...
0
votes
1answer
386 views

Certbot and letsencrypt: after renewing my certificate has 2 weeks more of validity instead of 3 months

My letsencrypt certificate will expire soon. I ran "certbot" to renew it for the next 3 months: $ sudo certbot certonly --standalone -d $website --email admin@$website Saving debug log to /var/...
1
vote
1answer
190 views

Seeking ground truth on TLS certificates and MacOS - browser, curl, openssl compared

On a Mac, High Sierra 10.13.5, I'm seeing a difference in TLS certification validation. Chrome and Safari are happy with TLS validation when visiting https://www.visitflorida.com. Also, curl has no ...
0
votes
0answers
15 views

SAML SP Certificate Changing: do changes actually need to happen at the Identity Provider for a CA-issued cert?

Our certificate that we use for signing SAML redirect requests is expiring. We've renewed the certificate by a trusted CA, but I've been told that once we update the certificate, we need to notify ...
1
vote
2answers
199 views

Local SSL CA always expires 30 days after creation

I'm following similar steps as this answer to create a local CA. Despite setting the default_days option to 1825 (days) in my config file, the resulting CA certificate is always set to expire 30 days ...