Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

New answers tagged

0

If you know what folder the files are located in you can just change the file extension from .pem to .crt


0

cat cert-start.pem cert-bundle.pem > chain.pem in case it would contain also the key (in some cases it is needed but depends on usage) ot would be cat cert-start.pem cert-bundle.pem key-no-pw.pem > full_chain.pem In case you would check the output you will see something like this (in case of chain.pem): -----BEGIN CERTIFICATE----- ... <base64 ...


1

You simply concatenate them cat domain.tld.key domain.tld.crt root.crt > domain.tld.pem


1

I found the problem. The CSR generated by FreeIPA includes the "X509v3 Authority Key Identifier" extension set to the key ID of the FreeIPA private key. This causes certutil to believe the CA is self-signed and does not follow the certificate chain. When signing a CSR from FreeIPA, do not copy the X509v3 Authority Key Identifier extension. Then the ...


2

The question is not totally correct. It is not SSL certificate may be intercepted. The SSL certificate of a website is a publicly available entity. The SSL connection may be intercepted, especially when your client's certificate has different hash from your own, as you confirmed in your case. Such interception is common in the large corporate IT ...


0

The answer is to use OpenSSL 1.1.1. I was thrown off by searches which gave old advice saying not to use 1.1.1. The Apache change log is a good place to find out what version is supported: https://www.apachelounge.com/Changelog-2.4.html


0

This is best solution I have found around ...other solutions provided all over the internet, will not survive system reboot ;) OS: Ubuntu 16.04 sudo vim /etc/ld.so.conf.d/libc.conf Comment lib directory settings and add good path # libc default configuration #/usr/local/lib /usr/lib When you are done editing, run this command: sudo ldconfig Then ...


0

In my case error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown:s3_pkt.c:1260:SSL alert number 46 was solved by adding ssl_verify_client_cert = yes in /etc/dovecot/dovecot.conf.


0

This could be caused by wrong order of site, issuing, intermediate and root certificates in site's public key certificate file. The browser display certs in reverse top-bottom direction (root, intermediate, issuing, site) but the certificate must be in bottom-top direction (site, issuing, intermediate, root).


Top 50 recent answers are included