Tagged Questions

1
vote
0answers
147 views

Establish https on nonstandard port

I'm trying to estamblish https on port 55434 (different than standard 443). My nginx configuration looks like this: server { server_name example.org; listen 55434 ssl; ssl ...
2
votes
1answer
38 views

Permissions for SSL key?

I'm trying to set up a secure connection (https) in nginx. But I'm a bit worried about the private key's permissions, which aren't mentioned in any tutorial. Should I change them? To what?
0
votes
1answer
86 views

How to create a SSL certificate signed by an intermediate certificate

I am building a web site with HTTPS. The host has both a DNS name and an IP address and I'd like the SSL certificate(s) to cover both. I've been given a certificate that is signed by a trusted party - ...
1
vote
1answer
53 views

What type of ssl certificate to select

I have a commercial site and wanted to change to SSL at least for the logged in users. Hoping someone can provide some advice: I only have one domain, but ideally I'd like to test on our development ...
1
vote
1answer
38 views

Must CSRs be generated on the server that will host the SSL certificate?

Is it necessary to generate the CSR (Certificate Signing Request) on the same machine that will host my web application and SSL certificate?
0
votes
1answer
38 views

SSL Forging With Portable Firefox?

In Portable Firefox for Windows, I looked at the options where it lists SSL certificates. I know that Windows stores SSL certificates in its own store. Does Firefox use these certificates? I am ...
0
votes
0answers
70 views

Intermittent certificate errors on windows 7

In the past few months I am getting intermittent SSL certificate errors on my windows 7 laptop. It's not specific to one particular site or browser, and I'm getting it from tortoisesvn as well as from ...
0
votes
1answer
28 views

openssl: register a CA as an unprivileged user

I'm in a situation where I have a Certificate Authority (CA) that I need to register with openssl, but no root access. Even if I had root access, I don't think it would be right to register this at a ...
0
votes
0answers
40 views

WPA2-Enterprise + SLL: Doesn't work

I'm new to WPA2-Enterprise. I'm on a WPA2E network, and there are many machines running a web server on the network. But the server wants a secured connection with SSL, I think. When I try to access ...
0
votes
0answers
89 views

add ssl certificate from Chrome (or FF) to JMeter

I'm wondering if anyone knows where to find my SSL certificate that I've saved off through chrome in order to use that certificate from the same machine in JMeter. Not sure if it's client specific. If ...
0
votes
0answers
79 views

Websphere SSL handshake with active directory cluster

We have a WebSphere based application that uses Active Directory(AD) based security configurations. Under WebSphere "Global security" we have configured the active directory server and connection ...
6
votes
3answers
8k views

The certificate is not trusted because no issuer chain was provided

Could anyone explain the meaning of this error message in plain English? Should I add an exception or I should not continue on this website? Technical details: the URL is here, the browser is ...
0
votes
2answers
152 views

What limitations apply to SSL Certificates?

If I buy some certificate from, say, Thawte or Verisign etc. they have only time limits right? Or do they also have number of connections limits? I think not, and I never met this limit. But I would ...
0
votes
0answers
141 views

Firefox says self-signed HTTPS sites error - The URL is not valid and cannot be loaded

Recently Firefox has started telling me that any HTTPS sites which use self-signed certs have Invalid URLs, where as the exact same URLs work fine in Internet Explorer 9. Internet Explorer at least ...
-1
votes
1answer
240 views

WS2003 + IIS = Untrusted Certificate

I have configured a Windows 2003 server to allow SSL access from the Internet, particularly to enable so called Outlook Web Access, that is browse Exchange Server data from the Internet. Following ...
2
votes
4answers
9k views

Chrome is reporting GMail has Invalid Server Certificate, how do I find out who's fiddling with my certs?

Chrome is giving the following warning when ever I try and visit GMail or a bunch of other SSL sites. Invalid Server Certificate You attempted to reach mail.google.com, but the server presented an ...
1
vote
1answer
317 views

Comodo-signed SSL 2.0 certificate not working with Internet Explorer

I'm having trouble getting my Comodo signed SSL Certificate to work with Internet Explorer in Apache2. Internet Explorer gives an error that there is a problem with the certificate. I tried all ...
1
vote
1answer
369 views

SVN, SSL certificate negotiation failed. However we don't use SSL certificate on our SVN Server

Can you tell me please, at my workplace we don’t use SSL certificates for SVN, however while running RUby on Rails command that checks SVN ( = Churn) still expects it and gives back the following ...
8
votes
2answers
1k views

Do web browsers cache SSL certificates?

Do any web browsers cache SSL server certificates? For example, if I change the SSL certificate on a web server, will all of the web browsers pick up the new certificate when they connect via SSL, or ...
3
votes
1answer
260 views

How to create private security certificates that behave like official ones?

I'm trying to get a valid secured environment for HTTP communication to behave like normal ones. I'm doing this for a restricted group of users. There is a hardware server running a web service ...
3
votes
1answer
445 views

How to find what elements on SSL page are insecure? [duplicate]

Possible Duplicate: How to tell which resources are loaded “insecurely” with Chrome using https I"m using a major tax site for this year's taxes, and I am getting the "Some ...
2
votes
1answer
2k views

Trust SSL certificate to local system account

I have the following need: A windows service needs to connect to a svn repository through https. The service needs also to run as local system account for IO permissions on the machine. Now when the ...
1
vote
1answer
83 views

How to setup SSL?

I have been now researching since two days and can't find a clear answer. I have purchased a Premium SSL certificate. Once I have created a Certificate Signing Request (CSR) and send it to them to ...
1
vote
3answers
542 views

What happens when 's' of HTTPS is removed?

I have this: https://194.16.222.100/ which corresponds to www.skanetrafiken.se. Using this, although the web browser says that there is a SSL error, I can access the web-page. However, when I remove ...
0
votes
0answers
178 views

SNI SSL Certificate - where to purchase [closed]

I'm looking around to buy an SNI SSL certificate for use with Heroku, but I can't seem find any one who sells them! The certificate needs to be trusted in any modern browser (not winXP). I don't ...
0
votes
2answers
70 views

Sign SSL certs with a master SSL cert

We have just been granted a wildcard SSL certificate for a sub-domain that we manage (e.g. *.service.test.com). Rather than use this certificate on all of our IIS servers, I have been asked to use ...
3
votes
3answers
2k views

Security Warning: The Server you are connected to is using a security certificate that cannot be verified. The Target principal name is incorrect

I'm trying to get my mails using Outlook 2007 and POP3 using SSL but I get this security warning every time I try to receive mails: The Server you are connected to is using a security certificate ...
0
votes
2answers
1k views

How to easily deploy HTTPS in ubuntu 10.04?

I have an apache web server running on Ubuntu 10.04 and I would like to switch everything to HTTPS.
2
votes
1answer
305 views

How does SSL work? Isn't there a hole?

I was reading this article, specifically the "SSL in action" part. It says: When Client connects to company.com on its SSL-secured port, the company sends back its public key (and some other ...
1
vote
0answers
252 views

Self-Signed Certificate and IIS 6.0, How to generate a Client Certificate

I am looking at generating a self-signed certificate, and only allow users who has client certificate installed on my web server. I am using IIS 6.0 with selfSSL to generate my .pfx web server ...
1
vote
1answer
4k views

How to configure GlassFish v3.1 to use SSL?

We are looking for simple step-by-step manuals how to configure GlassFish v3.1 to use SSL. We are running few legacy application under GlassFish and we hope there is no need to change them: so that ...
3
votes
2answers
204 views

What is the true level of danger when a SSL certificate is invalid?

I'm relatively tech-savvy, but I'm no security expert. To my understanding, an invalid SSL certificate is only a problem if you're going to provide some sort of potentially exploitable information to ...
1
vote
1answer
746 views

Removing certificates in Firefox doesn't work

I'm trying to remove my certificates going to Preferences > Advanced > Encryption > View Certificates. Then I select the certificates I want to remove and delete them. But when I go again to the ...
0
votes
1answer
824 views

How Do I Set Up Authentication with Client Certifcates on WebSphere 7

Can someone point me to documentation on setting up authentication using client certificates on Websphere 7? What does WAS send to the browser so the browser knows to send a certificate to the ...
6
votes
2answers
430 views

How to tell which resources are loaded “insecurely” with Chrome using https

I understand this is because I'm loading some stuff via http:// but does that mean a single http reference can't appear in the source? Even in examples like <a href="http://...">...</a>? ...
1
vote
2answers
87 views

Client certificate selection

I have a https apache server that needs client verification. But when somebody is browsing this site there is need to select proper cert from list of certificates installed in browsers. What can I do ...
1
vote
1answer
1k views

Heroku Hostname based SSL: How does it work? [closed]

Heroku offers the option to use Hostname based SSL. Apparently this is a solution which they use to offer multiple SSL hostnames on the same IP address, without using SNI (which doesn't work on ...
2
votes
1answer
286 views

Are there any good resources that describe how https/SSL/TLS works?

I find it really hard to find online resources which go through the details of the following aspects of SSL work. Is a certificate of a website signed with the public key of a Certificate Authority, ...
11
votes
6answers
1k views

Why is an unsigned SSL cert treated worse than no SSL cert?

If I view a site that has a unsigned or self-signed SSL cert, my browser gives me a warning. Yet the same browser has no problem allowing credentials to be sent across unsecured pages. Why is the ...