The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
3answers
40 views

SSLCipherSuite settings in Apache for supporting TLS 1.0, 1.1 and 1.2

I have an Apache 2.4.7 web server running multiple domain names using a single IP address. As a result of the Poodle vulnerability, I added the following SSLCipherSuite line. It worked fine for a ...
0
votes
0answers
9 views

Enable CRL Checks In Google Chrome

I'm pretty aware of how CRL lists work in Google Chrome, but I know that those only contain trusted certificate authorities. I want to test my own self signed certificates and update and revoke them, ...
1
vote
1answer
23 views

How can I prevent a certificate from being trusted?

There exist two certificates in /etc/ssl/certs that I'd like to permanently remove. However, just deleting the pem files doesn't do it - those are regenerated when ca-certificates is updated. How ...
2
votes
1answer
221 views

I removed the SuperFish root certificate and now I get certificate errors on most websites

I removed the SuperFish root certificate from my Lenovo Yoga Pad Pro based on advice from What is the superfish SSL certificate and where did it originate. Now when I go to web sites in IE and Chrome ...
0
votes
1answer
23 views

Firefox giving SSL error message after installing new certs

Firefox users are getting the message This connection is untrusted when going to our web site. under the technical details section it lists the reason as "The certificate is not trusted because the ...
0
votes
0answers
12 views

How to get current SSH passprase from Apache2 server?

I’ve fogotten passphrase for my SSL certificate private key, however, I’ve got running Apache sever, that uses that key. Is there any way to get passprase or unencrypted version of private key from ...
0
votes
0answers
41 views

OpenSSL CA use CSR's supplied extensions

I've set up a CA with OpenSSL on my old BSD-computer. No problem at all. But if I sign a CSR, how can I adopt the x509v3 extensions submitted with the CSR? The only way I know is either to include the ...
3
votes
1answer
185 views

Expired web/SSL certificate error on only one computer

I have a strange problem with one website's SSL certificate that only affects one computer Windows 7 operating system. The site works fine on other Win 7 computers with no error, pulling valid ...
0
votes
2answers
37 views

What file to add to nginx certificate

I got a RaspberryPi on which I want to host Owncloud. So I followed this tutorial and it works well except the SSL part. I don't want to use self signed. I set my own subdomain and it works without ...
3
votes
1answer
48 views

Remote Desktop Revocation error SSL

I have a CA-certificate installed on both a Windows 10 and a Windows Server 10 machine. I have a certificate signed by the CA in use with the help of this: link. When I now connect from my Windows 10 ...
-1
votes
1answer
23 views

IE : Blocks website that has a certificate's CN different from hostname

May I know what is the settings on IE that blocks website with certificate CN different from hostname? For example I have a website myhostname but my certificate CN is NotMyHostName. Some IE will ...
-1
votes
0answers
118 views

Encrypted alert with code 21 for connection [closed]

I've got a device that connected to the server and successfully did the handshake and received application data, however later when client sends keep-alive requests server sends back encrypted alert ...
1
vote
2answers
243 views

Links SSL Error

What version of links does the user called "bytepool" have that he's able to find this workaround? Refer to link below. How to tell `links` to ignore expired SSL certificate and proceed? He writes ...
0
votes
1answer
333 views

Fedora 18 - error [Errno 14] Peer cert cannot be verified or peer cert invalid

When i run the command: sudo yum install perl-bioperl I get the error [Errno 14] Peer cert cannot be verified or peer cert invalid. My system details are: Linux localhost.localdomain ...
0
votes
0answers
111 views

How to properly install SCR3500 card reader on mac - Mac OS X 10.6.8?

I am trying to login into some secured site and I am required to use SCR3500 card reader. I found and installed some drivers - http://support.identive-group.com/download_scm/download_scm.php?lang=en. ...
1
vote
1answer
21 views

Is it particularly necessary to install an SSL certificate on a new cPanel installation on a dedicated server?

I have a dedicated server and I am installing cPanel on it. I am wondering if I should also install an SSL certificate (that I will have to buy) just for the cpanel install itself.
0
votes
0answers
615 views

Common Name invalid error on Chrome and Opera

I'm running Windows 8.1 Pro, almost clean OS with Norton Internet Security v. 21.5.0.19 protected. I've strange issue on Google Chrome v. 37.0.2062.124 m and Opera 24.0 while trying to visit PayPal ...
0
votes
0answers
142 views

Stunnel on PFSense

Replaced a linux router with pfsense to handle NAT. Before stunnel worked from a remote site to a port on the linux router that forwarded to an internal mysql server. Now I haven't been able to get ...
3
votes
1answer
1k views

Why is the local certificate store missing in Windows 8.1?

I am trying to import a self-signed certificate into che local certificate store of the Trusted Root CAs on my Windows 8.1 machine, but that store is missing. Importing it into the Trusted Root CAs ...
0
votes
0answers
162 views

Force Chrome to accept any SSL certificate regardless of who it was signed by?

Is it possible to get Chrome to trust an SSL certificate, regardless of who it was signed by? I've seen this discussion on getting Chrome to accept self signed certificates on StackOverflow, but it ...
0
votes
1answer
30 views

How to sign a CSR on windows

I've got a custom certificate that I'm using as a local root authority. This certifcate has a private key on my machine and is stored in the "Personal" certificates store of the "Local Machine" ...
0
votes
1answer
271 views

digicert secure server ca signed by unknown authority mac os

Related to: Why won't OS X trust GitHub's SSL certificate? Why when I download this certificate and drag/drop into my Keychain on OSX, it shows as I downloaded from here: ...
2
votes
1answer
300 views

Client unable to access OWA website after temporarily changing SSL certificate on the server

I have the following issue: One client computer (Windows XP) cannot access the OWA website. All other client computers can (Except another one in the same remote office). How this happened: I ...
0
votes
0answers
167 views

SSL certificate error: multiple browsers (IE/Chrome/Firefox) and both computers on LAN (Mac & PC) affected

Both my Mac and PC (on my home network) are giving me the following error when attempting to log in to Microsoft SSL sites from my home network: I have tried logging in to another computer on a ...
0
votes
0answers
647 views

IE/Chrome add permanent SSL certificate exception?

How can I add a permanent SSL certificate exception for certain websites? These sites have certificates signed by some root CA which I do not want to trust. When I tried to manually install the ...
-1
votes
1answer
3k views

Windows 7 64-bit SSL untrusted certificate error when visiting any SSL website

I have installed Windows 7 64-bit and I get an untrusted certificate error when visiting any website served via SSL, like Google.com, Gmail.com, etc. I tried this using Firefox, IE and Chrome and it ...
1
vote
2answers
241 views

Download self-signed server certicate

Summary I need to download a self-signed certificate from a server, to create a .JKS-file to use as truststore in an application. How can I do that from a Red Hat server? What I have tried I have ...
0
votes
0answers
72 views

import .cer file into ubuntu for curl

I am trying to use fiddler to act as a ssl proxy for debugging. I am trying to install fiddlers root certificate. I am mainly doing it so I can debug my python program. Using python I get a cert ...
1
vote
1answer
54 views

Configure WinRM to Use HTTPS makecert.exe Name Syntax

I am trying to enable the remote execution of powershell scripts on a remote server over https using this example. What I do not understand is what value to give for the hostname when generating the ...
0
votes
1answer
248 views

What is a “Certificate Preference” in Keychain Access?

I'm trying to view a website on a computer that I know is genuine. Typically, a warning screen appears in Google Chrome asking whether or not I want to trust the server. However, the page in question ...
4
votes
1answer
219 views

Imported cert into firefox/chrome, still warning

I generated a wildcard certificate for multiple (wildcard) domains (SANS, alternate domain names + IP) (see https://blog.flowl.info). I imported the certificate into Firefox, Chrome and Windows ...
0
votes
0answers
1k views

Can't connect to Synology DiskStation through HTTPS when using Windows 7 Import

a little background to my problem: I have a Synology DiskStation 213j that I use as a backup/data storage solution. When I'm at work, I would like to push and pull files from my DiskStation but I ...
0
votes
2answers
257 views

Root certificate authority works windows/linux but not mac osx - (malformed)

I have created a self-signed root certificate authority which if I install onto windows, linux, or even using the certificate store in firefox (windows/linux/macosx) will work perfectly with my ...
0
votes
1answer
1k views

Getting SSL certificate error after changing computer date

I recently changed my computer date for some reason (I'm back in the past ..) and I can no longer go on any website that use SSL certificate with Google Chrome, how can I bypass the fact that the ...
0
votes
1answer
126 views

How to install a certificate automatically

I would like to know how to generate a certificate and make it to be imported automatically to all main browser (chrome, firefox, ie etc...). Should I upload this certificate to a public CA or ...
0
votes
0answers
216 views

Lexmark Printer Requires Local Copy of Gmail's SSL Certificate

Recently I had to fix a problem in a clients office where their "Scan to Email" function wasn't working on their Lexmark printer. A gmail account's SMTP settings had been working with SSL for several ...
3
votes
3answers
158 views

Is there a way to quickly disable all trusted root certificates in Windows 7?

(I've posted this earlier to superuser) I'd like to temporarily disable all trusted root certificates and wondering if there is a quicker way than going through every single one of them, right-click ...
0
votes
2answers
305 views

Cannot visit some pages in browser

I have just installed my new network adapter for wireless connectivity. I am using TP-LINK TL-WN727N. I installed the drivers from the manufacturers website to get the latest version. The installation ...
0
votes
1answer
629 views

What is the role of cakey.pem and cacert.pem in addition to .key and .crt based encryption

I have .key file which holds the private key data, .crt file which would be certificate with public key and, to my knowledge, that's it for public key encryption, right? Not exactly. In order to ...
1
vote
2answers
151 views

How to trust a self-signed certificate without trusting the CA?

So, I've generated a rootCA, and signed a certificate for *.a.com, how can I trust the resulting certificate in Firefox/Chrome, without trusting the CA directly? Note that adding an exception (once) ...
1
vote
2answers
321 views

Downloaded a Firefox Addon on addons.mozilla.COM. Ignored Untrusted Certificate. Should I worry?

This site: https://en-us.add-ons.mozilla.com has an untrusted certificate. (At least with my browser: Iceweasel 24.2.0) I find that highly suspicious. But I do not know enough about such ...
0
votes
0answers
325 views

SSL Error on Twitter

Since last night, whenever I try to go on Twitter, I get an SSL error mistake saying it's a malformed certificate and won't let me get in. My time and date is correct, I cleared my cache but to no ...
0
votes
2answers
99 views

heartbleed are CA private keys compromised?

have any CA private keys such as those used by godaddy to issue private/public key pairs compromised as a result of heartbleed?
0
votes
1answer
47 views

How to set up load balancer with SSL?

I currently have a single server with a Django stack. I have nginx with an SSL certificate for HTTPS. I want to scale the web layer by putting an nginx load balancer in front, and adding IP addresses ...
0
votes
0answers
2k views

SSL error on Chrome, IE, Safari (but not on FF)

I am getting this error on trying to access a couple of sites from Chrome - one is the webmail of our company and another is a banking website. Cannot connect to the real somesite.com Something ...
1
vote
1answer
355 views

Creating stronger self signed certificate

I've installed the calomel addon in Firefox, which gives information about the quality of an SSL certificate. I have created a self signed certificate, which scores full point on PFS and the Bulk ...
0
votes
1answer
111 views

Why ever purchase a wildcard SSL certificate?

I was looking at wildcard SSL certs recently, and the lowest price on Namecheap is $94/year. Now, a regular single domain SSL cert from them starts at $9/year. My question is this: why wouldn't I just ...
0
votes
1answer
87 views

Dismiss Firefox certificate warnings on a subdomain and apply for other subdomains under same parent

Firefox prompts to accept a certificate separately for each subdomain. Is there a way to tell it not to? For example, if the user visits aardvark.example.com and accepts the certificate, then to ...
0
votes
1answer
57 views

Can an SSL cert (not self-signed) be used to create another SSL cert for another host in the same domain?

I have a regular SSL certificate issued by Network Solutions for a given host, say "host A". Can I create another SSL cert for the wiki host that has the host A cert in its trust path and therefore ...
2
votes
1answer
768 views

Incorrect Authority Key Identifier on openssl end cert

I'm getting interesting results when signing an end-server certificate using an intermediate CA using openssl. I have a Root CA which looks like this: Serial Number: 14296918985177649921 ...