Skip to main content
OverflowAI is here! AI power for your Stack Overflow for Teams knowledge community. Learn more

New answers tagged

0 votes

x509 certificate not valid for any names when added IP address to openssl.cnf

create file extfile.cnf and insert: subjectAltName=DNS:yoursubdomain.yourdomain.com change the command to: openssl req -x509 -newkey rsa:4096 -keyout private.key -out cert.crt -days 365 -nodes -...
behnamizadi's user avatar
0 votes

Curl SSL Certificate: unable to get local issuer certificate

when i see But if I send the same command with sudo, the connection is setup successfully, i think it`s the same issue. check more with the link. rm "$(brew --prefix)"/etc/{openssl@{1.1,3},...
suiwenfeng's user avatar
1 vote
Accepted

Issue with using IP address SSL

http://212.38.94.32:3001/api/ "This request has been blocked; the content must be served over HTTPS". Don't you see a discrepancy? I do: you are attempting to connect using http:// which is ...
Nikita Kipriyanov's user avatar
0 votes

stunnel - certificate verification

I tried a similar python code to connect to stunnel: import redis r = redis.Redis( host='xx.xxx.xx.xxx', ssl=True, ssl_certfile='certs/client.crt', ssl_keyfile='certs/client.key', # ...
x-yuri's user avatar
  • 2,308
0 votes

Issue with using IP address SSL

Granted you have followed the relevant documentation and have build mongod with --ssl, and how to load the perhaps free Let's Encrypt SSL certificate in your cluster set, you now only need to require ...
Marcel's user avatar
  • 1,865
1 vote

Displaying a remote SSL certificate details using CLI tools

For anyone using curl 7.88.0 or greater, there is a new option as explained in https://daniel.haxx.se/blog/2022/12/28/curl-w-certs/ curl -w %{certs} https://www.example.com/ --silent -o /dev/null ...
cherouvim's user avatar
  • 834
0 votes

certbot Could not automatically find a matching server block for subdom.mydom.com. Set the `server_name` directive

I got this solved now. I managed to get it working by generating the certificate with --cert-only and with some research I was able to get the certbot generated server block and adjust the rest to my ...
antimatter's user avatar
0 votes

nginx tlsv1 alert unknown ca:SSL alert number 48

I had the same problem. I solved it by using a chained certiicate instead of the main certificate. You can create a chained certificate free at https://tools.keycdn.com/certificate-chain
Albert Omwega's user avatar
1 vote

How to confirm SSL certificate expiration date on an API site?

You can use Edge to check the certificate. Just enter the API address in the address bar. You don't need a useful answer from the API, any request will make an SSL handshake, letting you inspect the ...
Gerald Schneider's user avatar
0 votes

How to generate a multi-domain (and/or wildcard) OpenSSL certificate?

openssl req -new -newkey rsa:2048 -nodes -keyout private.key -out csr.pem \ -subj "/C=US/ST=California/L=San Francisco/O=Your Company/OU=Your Department/CN=example.com" \ -addext "...
Ali Sadeghi Ardestani's user avatar
1 vote

How to confirm SSL certificate expiration date on an API site?

To check the SSL certificate expiration date for an API website in Microsoft Edge, you'll need to use tools like OpenSSL as Edge lacks a direct method. In IIS, to confirm the selected certificate for ...
Mia smith's user avatar
0 votes
Accepted

Nginx unable to find new certificate

So I've found what was the issue. The live directory does not actually have files. These are softlinks/symlinks: root@server:/data/certbot/letsencrypt/live/my.domain.com# ls -l fullchain.pem ...
Michał J. Gąsior's user avatar
2 votes

How to confirm SSL certificate expiration date on an API site?

An essential step is to query certificate mappings stored in Windows HTTP API via netsh, netsh http show sslcert Once you know the certificate hash and its association with the site bindings, you can ...
Lex Li's user avatar
  • 1,303
2 votes

How to confirm SSL certificate expiration date on an API site?

openssl s_client -connect <site:protocol> -showcerts
mfinni's user avatar
  • 36.3k
0 votes

Can you use old SSL keystore to import a new certificate with possibly a different private key?

This heavily depends on how you're using the keystore -- how many certificate you need in there, etc. However, if this is just the default case where you are running one server which serves one ...
brotatochip's user avatar
1 vote

Nginx unable to find new certificate

If you look at your error message, you'll see "/etc/letsencrypt/live//fullchain.pem" as the name of the file it's trying to load. Your certificate is at /etc/letsencrypt/live/$...
tsc_chazz's user avatar
  • 2,021
4 votes
Accepted

What is the role of Subject Name (SN) / Subject Alternative Name (SAN) in Microsoft Public Key Infrastructure (PKI)?

A certificate binds a public key to a subject. The subject of a certificate is the details of the holder. Your question is like asking "What is the purpose of a Name on a passport?". Both ...
garethTheRed's user avatar
  • 4,874
0 votes

Can I use the same SSL/TLS certificate as both a "server" and "client"?

It is ok to use one certificate for both cases? Is this a common practice or do most choose to use 2 separate certificates? I have a similar case but couldn't use the same cert because: the back-end ...
Et7f3XIV's user avatar
  • 101
0 votes

What is the role of Subject Name (SN) / Subject Alternative Name (SAN) in Microsoft Public Key Infrastructure (PKI)?

Subject Names are simply the FQDN of the domain you want the public certificate to be valid for. Subject Alternative Names (SANs) are any additional FQDNs that you want the same certificate to also be ...
Christopher Sinclair's user avatar
0 votes

What is the role of Subject Name (SN) / Subject Alternative Name (SAN) in Microsoft Public Key Infrastructure (PKI)?

The subject name identifies the name for which the certificate is issued. For example for a website like google.com one of them is google.com and the alternative would be www.google.com
Acenl12's user avatar
  • 11

Top 50 recent answers are included