Questions tagged [ssl-certificate]

SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

Filter by
Sorted by
Tagged with
0
votes
0answers
17 views

Apache 2 421 Misdirected request using lets encrypt/certbot

Server Ubuntu 20.04LTS Apache Version 2.4.41 I use this server to host multiple domain (example.com, example.it) I have created different SSL Keys for both domain and all their subdomain like xyz....
0
votes
1answer
19 views

Certificate problems when sending mail via smtp (tream_socket_enable_crypto(): SSL operation failed with code 1)

I am new on this board. I also posted the issue in the CraftCMS-board, but I think it is more related to this one. I hope it fits in here. I found some similar posts here, but unfortunately, but none ...
0
votes
0answers
15 views

Argo Tunnel certificate causing strange “not signed” issue

Before Argo Tunnels I had the following setup for a particular service running on my local network: DNS entry added to point to my home IP address (test.domain.xyz » 1.2.3.4) Port 443 opened in my ...
0
votes
0answers
22 views

Must a separate virtual host be made for mail subdomains?

I was following this guide which directed me here to get SSL certificates with Let's Encrypt. I successfully added one for my example.com main domain. I realized that my mail.example.com subdomain ...
0
votes
2answers
35 views

Import PFX Certificate via PowerShell with full certificate chain

It's SSL certificate replacement time, and while I could, for my Windows servers, do this the tedious way (Certificates mmc, import manually), I'm looking for something I can automate via some ...
0
votes
0answers
24 views

No valid IP addresses found for subdomain with certbot

I am currently trying to set up an email server, and recently stumbled over getting a SSL certificate from Let's Encrypt in this question and realizing it isn't necessary if I don't have a web server, ...
0
votes
3answers
37 views

Is a web server required to run a mail server?

I'm trying to create a mail server, but I'm not able to connect to my DO droplet's domain, which I need to do to get a Let's Encrypt SSL certificate. It refuses conection. letsdebug.net says: [My ...
1
vote
1answer
27 views

Certificates in docker local registry

I'm trying to set up a docker local registry within my university network. Since they offer certificates from rediris I requested one, so I have now three different files: cert.pem intermediate.pem ...
2
votes
0answers
33 views

Placing restrictions on certificate extensions when proxying HTTPs with nginx

I'm using nginx as a reverse proxy to handle HTTPS for an application that talks HTTP. This is working great so far, but now I need to be able to restrict what kind of certificates I accept from the ...
0
votes
1answer
10 views

Step-CA doesn't work with server alternative names (SAN)

The help text for Step-CA when creating a certificate with SANs reads: Request a new certificate with multiple Subject Alternative Names. The Subject Common Name of the certificate will be 'foobar'...
0
votes
0answers
12 views

Resources using a successfully issued (I think?) ACM Certificate produce net::ERR_CERT_AUTHORITY_INVALID when accessed

We're using an ACM certificate to afford custom CNAMEs in a CloudFront Distribution and an API Gateway API. This was working correctly until we recently moved the creation and assignment of this ...
1
vote
0answers
23 views

How to create a new default keyfile/keyring for Domino

I am in the process of moving from Web Configuration to Internet Sites on a Domino 9 server. I have a specific keyring/keyfile for a Positive SSL certificate, however, it can only be applied to one ...
1
vote
0answers
42 views

Windows Server 2008 R2 Stand Alone Certificate Authority - creating a new root certificate

I seemed to have hosed up my Certificate Authority. I have a Stand Alone Certificate Authority and it's not on a domain or enterprise so there's no certificate templates. Currently all of the ...
0
votes
0answers
18 views

Apache SSL Re-Negotiation

The httpd.conf looks like below. <Location /services> SSLVerifyClient none SSLRequire %{REMOTE_ADDR} in {"x.x.x.x","y.y.y.y","z.z.z.z"} ...
1
vote
2answers
39 views

How does Apache choose which certificate to use?

Currently Apache is hosting several sub domains with host certificates generated with certbot and a http challenge. Now I want to setup a default virtual ssl host to redirect non-existing subdomains ...
0
votes
0answers
38 views

links, lynx, curl and wget don't like my new SSL certificate, but Chrome does

I recently bought an SSL certificate (positiveSSL). I configured NGINX to work with it. I can go to the https:// version of the site, and Chrome declares that the certificate is "valid and ...
0
votes
1answer
71 views

How can I make a “local” mywebsite.test on a remote server work with SSL from my local computer?

I have a XUbuntu server that I can connect to via XFCE and load https://mywebsite.test with a valid local certificate I created using mkcert. However, connecting via XFCE makes the website lag a lot, ...
0
votes
0answers
47 views

Wildcard ServerAlias not using SSL of main domain

I am trying to achieve this >> *.com.mydomain.com has an SSL Certificate from LetsEncrypt I want *.net.mydomain.com and 1000+ TLD (top level domain) to use *.com.mydomain.com certificate ...
0
votes
1answer
56 views

How to get .pfx file for renewed SSL certificate

We have a SSL certificate associated with a .dev domain purchased from GoDaddy about 2 years ago. The domain is associated with a website hosted in Azure, the initial certificate was uploaded as a ....
1
vote
1answer
52 views

Why do I keep getting “There is no SSL certificate configured for this domain.” even other people see my web page?

I recently created a domain and put some file on it, on: https://gitareradovic.com/ https://www.gitareradovic.com/ either one should be working. However, I always get the message "There is no ...
-1
votes
1answer
40 views

Can I create Let’s Encrypt certificate for my domain from macOS? [closed]

I have a domain parking that returns a security error for HTTPS and is not possible to create a Let’s Encrypt certificate on the server, but it is possible to upload a certificate. Would it be ...
0
votes
0answers
27 views

Running multiple instances of Traefik with LetsEncrypt enabled and load balancing between them

As you may know, unfortunately the new version of Traefik does not support HA for lets encrypt certificate management, so I'm looking for some way to achieve this. One way that I'm thinking about, is ...
3
votes
1answer
88 views

Configuring mailiers in Phabricator

After a clean installation using the bitnami image I followed the instructions to set up the mailers. It looks like this: [ { "key": "stmp-mailer", "type": &...
0
votes
0answers
46 views

NGINX, accept or reject end-user certificates by issuing CA

I have one root CA and ten sub-CA-s. In mu NGINX configuration I want to accept authentication requests for certificates issued by two sub-CA-s and reject all requests for certificates issued by any ...
1
vote
0answers
25 views

Failed authorization procedure on DigitalOcean & CloudFlare SSL generate

I have hundreds of domains & sub-domains on DigitalOcean with nginx and every domain is using letsencrypt for generating SSL encryption. Recently, I added Cloudflare for CDN and need to create a ...
0
votes
1answer
176 views

Cerbot with DNS Plugins running on multiple Nginx for to renew the same certificate

Am trying to deploy using Ansible (Ansible is not really relevant to the question but is just to give the whole picture) the Certbot configuration in order to obtain wildcard certificates to a cluster ...
0
votes
1answer
82 views

Fetch request to backend within same domain fails net::ERR_CERT_AUTHORITY_INVALID

I have a react application zz that has a backend and frontend that are hosted separately. The front is hosted on https://toing.com/zz (on a stock hosting plan) that needs to connect to the backend at ...
0
votes
2answers
99 views

Using certbot DNS authorization with multiple API accounts?

I'm using EFF certbot ACME client to generate a single TLS certificates on my webserver that is hosting multiple domains using Subject Alternative Names (SAN). Up until now all of the domains where ...
3
votes
3answers
2k views

Email server certificate valid according to CheckTLS, invalid according to Thunderbird

I have set up an email server using docker-mailserver. DKIM, SPF, and DMARC are configured fine. SSL was set up using Let's Encrypt. Server has TLS and STARTTLS enabled. I ran a TLS/SSL test on https:/...
0
votes
0answers
33 views

Getting Lets encrypt certificates for subdomains

I have several servers under domain myorg.example.com. For example git.myorg.example.com. I am planning to start using certificates provided by Lets Encrypt for these servers. Most of these servers ...
0
votes
0answers
34 views

I am unable to provide a valid PEM file to HaProxy despite validating the PEM file and installing the self-signed certificate in the correct places

I will post my private key in its entirety because it is an example for development and debugging purposes. This is the process by which I have created my PEM file: https://serversforhackers.com/c/...
0
votes
1answer
27 views

NGINX support both subdomains and normal

Not an NGINX guru but I've made the changes that I believe will work. This is PROD server so don't just want to push to it and hope for the best. What I'm trying to do is have both subdomains and ...
0
votes
0answers
9 views

SSL certificate for Cockpit running on separate machine?

I have a machine hosting web content (using Apache) for my domain (let's say example.com). It has a certificate that was created using certbot and is setup to auto-renew. I've recently added another ...
0
votes
1answer
358 views

Windows 10 Pro as RDP Host with SSL Certificate. How?

I have exhausted my patience looking for how to add an SSL certificate to my Windows 10 Pro machine so that when I connect from another place, I don't get certificate errors. So far, every guide I run ...
1
vote
1answer
142 views

TLS 1.0 is obsolete. Enable TLS 1.2 or later. nginx

I have the following nginx configuration under /etc/nginx/sites-enabled/example_com for domain example.com: server { server_name example.com; location / { proxy_set_header X-...
-1
votes
2answers
147 views

ERR_CERT_COMMON_NAME_INVALID on chrome based browsers

When trying to login to my website (pvapp.umwelt-campus.de/user/loghin) on Chrome based browsers I get the error: POST https://143.93.46.35:60702/user/login net::ERR_CERT_COMMON_NAME_INVALID that's ...
1
vote
1answer
187 views

Apache Client SSL Certificate validation Vulnerability Check

I am looking for a neat security implementation for clients to talk to my Apache instance.Its basically a system to system API communication and not involves any clients outside the organisation. What ...
1
vote
0answers
134 views

FreeIPA - Login failed due to an unknown reason - SSL certificate: unable to get local issuer certificate

I believe my FreeIPA instance has a certificate issue, which manifests in the "Login failed due to an unknown reason" error on the web ui. This seems to be really close to the issue ...
0
votes
0answers
35 views

How to automatically update an SSL certificate on Nginx as it gets renewed?

I have a website hosted on an EC2 instance with Ubuntu and nginx installed. My domain is managed through GoDaddy which is where I also issue the SSL certificate for the domain. Recently I got service ...
1
vote
2answers
49 views

SSL invalid on Lightsail Bitnami Wordpress Multisites after new instance made from snapshot

We'll likely need to upgrade a Lightsail Bitnami WordPress Multisite instance in the future, so I'm testing doing it. After I take a snapshot and then create a new, lager instance from it, then switch ...
0
votes
2answers
202 views

What is the cause of Windows Server Event ID: 15021? [closed]

I have 4 identical Exchange 2016 servers. A little over a month ago, I renewed my wildcard cert on all 4 servers and assigned it to services IIS and SMTP -- on all 4 servers. Today, I noticed that one ...
0
votes
3answers
157 views

OpenLDAP server: chaining of SSL certificates (let's encrypt) does not work as expected

Okay, this is gonna be a long one, I fear. Please bear with me. setting I have an OpenLDAP 2.4.50 server running on Alpine 3.12.1. It's serving LDAPS only with a let's encrypt staging certificate (at ...
0
votes
0answers
37 views

ERR_TUNNEL_CONNECTION_FAILED for my website after installing new SSL certificate

My website groceryshoptest.com was hosted in Digital Ocean droplets with a Nginx server. I've used free SSL from Lets encrypts certbot, I've just put few commands which added some configuration in etc/...
1
vote
1answer
30 views

Why my signed certificate is not accepted by IOS (valid in Firefox)

I tried to generate my own CA with TLS Server Certificates. In Firefox I also do not have problems and the certificate is accepted after import of the root certificate. But after importing the root ...
0
votes
0answers
63 views

Installing composer in windows server 2008 r2

I'm getting this problem while installing composer on windows server 2008 : The Composer installer script was not successful [exit code 1]. OpenSSL failed with a 'certificate verify failed' error. ...
0
votes
0answers
38 views

Multiple ssl certificates with one ip and same port but different host headers is having problems in one domain (IIS 10)

I have post this question in stackoverflow, but seems not quite get the solutions. So I think serverfault will be more appropriate place to ask the question. I have iis 10.0 which host two domains ssl ...
0
votes
0answers
39 views

Mystery SSL certificate

Starting relatively recently, I noticed that some users in my organization began getting a Security Alert popup when opening outlook. Only some users get this popup. This is a small organization with ...
0
votes
0answers
49 views

Acquiring a wildcard certificate from Let's Encrypt via `acme-client(1)`

I have a valid certificate from Let's Encrypt that covers both foo.bar and www.foo.bar. I'd like to add a wiki.foo.bar and likely many others in the future, so a wildcard certificate sounds ...
0
votes
0answers
14 views

SSL Setup For Two Domains With Same Webroot

I have two different domains (abc.com and def.com). They both uses the same code base, thus pointing on the same web root / document root. The def.com is set as an alias to the abc.com domain. Can I ...
0
votes
0answers
55 views

Unable to apply Cloudflare SSL to Google Cloud/Worpress/Bitnami deployment

I have set up a website on Google Cloud Platform using WordPress/Bitnami and basically watched YouTube videos to do it, so a lot of the terminology is something I'm not familiar with! So, as mentioned,...

1
2 3 4 5
58