The ssl-certificate tag has no wiki summary.
2
votes
0answers
45 views
How to create private security certificates that behave like official ones?
I'm trying to get a valid secured environment for HTTP communication to behave like normal ones. I'm doing this for a restricted group of users.
There is a hardware server running a web service ...
1
vote
0answers
60 views
Restore default CA Certificates on Mac OSX 10.7
I've been screwing around with my Mac, trying to install self-signed certificate as trusted for our WAN site (for which we can't justify paying for a real signed certificate)
I've broken something ...
0
votes
2answers
61 views
Convergence - Notary server list?
http://perspectives-project.org/notary-servers/
-->>
data.networknotary.org/http_notary_list.txt
The site seems to be down. Does anybody has a list of Notary servers?
3
votes
1answer
51 views
How to find what elements on SSL page are insecure? [closed]
Possible Duplicate:
How to tell which resources are loaded “insecurely” with Chrome using https
I"m using a major tax site for this year's taxes, and I am getting the "Some ...
1
vote
1answer
81 views
How to accept a HTTPS server's invalid certificate in a given client machine?
A HTTPS server I'm browsing uses an invalid certificate. I want my machine to ignore this error and think that the certificate is valid. How to do that?
1
vote
1answer
60 views
Set Firefox to ignore certificates for localhost
I have several (web) servers set up in various different locations I can SSH to, using port forwarding to work with them pointing my Firefox to https://localhost:443/application (I use ssh user@server ...
0
votes
1answer
97 views
Trust SSL certificate to local system account
I have the following need:
A windows service needs to connect to a svn repository through https. The service needs also to run as local system account for IO permissions on the machine.
Now when the ...
1
vote
1answer
27 views
How to setup SSL?
I have been now researching since two days and can't find a clear answer.
I have purchased a Premium SSL certificate. Once I have
created a Certificate Signing Request (CSR) and send it to them to
...
1
vote
1answer
33 views
PKI Intermediate Certificate Trust
Lets say we have a business owned internal CA. Its certificate is trusted by one of the Trusted Roots that is present in all browsers.
With that CA, we issue a bunch of certificates for servers in ...
2
votes
0answers
39 views
Do intermediate certificates get cached in Firefox?
If someone visits site A which has a certificate issues by GoDaddy which also supplied a intermediate certificate between GoDaddy and their CA, would Firefox cache the intermediate certificate and use ...
1
vote
3answers
164 views
What happens when 's' of HTTPS is removed?
I have this: https://194.16.222.100/ which corresponds to www.skanetrafiken.se.
Using this, although the web browser says that there is a SSL error, I can access the web-page. However, when I remove ...
1
vote
3answers
71 views
Remove all root CAs from Google Chromes SSL settings?
After the disaster with diginotar I want to remove all existing root CAs from my Google Chrome installation. Can I delete the pre-installed root CA settings somehow?
The settings dialog doesn't allow ...
0
votes
1answer
77 views
How do I make Safari automatically use a particular client certificate for an entire site?
Using client certificates with Safari present a number of problems:
Safari asks to select a client certificate on each page of the site (annoying)
Safari might even re-ask you to choose a ...
0
votes
0answers
55 views
SNI SSL Certificate - where to purchase [closed]
I'm looking around to buy an SNI SSL certificate for use with Heroku, but I can't seem find any one who sells them!
The certificate needs to be trusted in any modern browser (not winXP). I don't ...
0
votes
2answers
41 views
Sign SSL certs with a master SSL cert
We have just been granted a wildcard SSL certificate for a sub-domain that we manage (e.g. *.service.test.com).
Rather than use this certificate on all of our IIS servers, I have been asked to use ...
0
votes
1answer
31 views
Extract server certificate from PCKS12
I have a p12 file which apparently contains the server certificate. I need to extract the x509 server certificate from the p12 file so that I can add it to my java trust store, the problem is that I'm ...
1
vote
2answers
232 views
Firefox “invalid certificate” error for a trusted website
I am connecting to a website (via Firefox 6.0.2 on Mac OS X 10.6.8) I know is legitimate, and the connection worked up till yesterday. However, when I connected to day I got the following error:
...
2
votes
3answers
330 views
Security Warning: The Server you are connected to is using a security certificate that cannot be verified. The Target principal name is incorrect
I'm trying to get my mails using Outlook 2007 and POP3 using SSL but I get this security warning every time I try to receive mails:
The Server you are connected to is using a security certificate ...
1
vote
1answer
72 views
Can Windows Live Writer 2011 be configured to accept self-signed SSL certificates?
I'd like to use Windows Live Writer 2011 with a blog that is configured to use self-signed SSL certificates. Unfortunately when connecting to the blog Windows Live Writer 2010 refuses to connect to ...
3
votes
1answer
218 views
One user sometimes gets an unknown certificate error opening Outlook
Let me clarify a little. This isn't an unknown certificate error it's an unknown certificate error in so much as I can't figure out where the certificate comes from. This happens on a Win 7 Enterprise ...
0
votes
2answers
184 views
How to easily deploy HTTPS in ubuntu 10.04?
I have an apache web server running on Ubuntu 10.04 and I would like to switch everything to HTTPS.
2
votes
1answer
107 views
How does SSL work? Isn't there a hole?
I was reading this article, specifically the "SSL in action" part. It says:
When Client connects to company.com on its SSL-secured port, the company sends back its public key (and some other ...
1
vote
0answers
59 views
Self-Signed Certificate and IIS 6.0, How to generate a Client Certificate
I am looking at generating a self-signed certificate, and only allow users who has client certificate installed on my web server. I am using IIS 6.0 with selfSSL to generate my .pfx web server ...
0
votes
1answer
237 views
Apache failed to start (no errors) after first time SSL config. Do I need different command/passcode?
I'm setting up SSL for the first time.
I edited my config files in sites-enabled and ran apache2ctl configtest. Got back Syntax OK.
I then ran apache2ctl graceful. There weren't any errors or ...
4
votes
1answer
2k views
IE9: Permanently accept untrusted certificate
When accessing a website via HTTPS which has an untrusted certificate, Internet Explorer 9 always shows me the following error message:
Is there a way to import the certificate permanently, so that ...
1
vote
1answer
506 views
How to configure GlassFish v3.1 to use SSL?
We are looking for simple step-by-step manuals how to configure GlassFish v3.1 to use SSL. We are running few legacy application under GlassFish and we hope there is no need to change them: so that ...
3
votes
1answer
103 views
What is the true level of danger when a SSL certificate is invalid?
I'm relatively tech-savvy, but I'm no security expert. To my understanding, an invalid SSL certificate is only a problem if you're going to provide some sort of potentially exploitable information to ...
0
votes
1answer
223 views
Validating Account BIS Exchange
I have installed Exchange 2010 and trying to setup BIS (via my cellular providers website) to sync to one of my users email.
I have entered correctly all the account details but I cant get the users ...
1
vote
2answers
101 views
Getting an invalid certificate warning on elance
I'm getting an invalid certificate error on https://www.elance.com
Is that normal or is it just my machine?
0
votes
1answer
204 views
StartSSL Free Certificate and Plesk, https connection still unsecure
I'd just installed my certs correctly into my Plesk 8.3.0, I encountered some trouble with the "CA didn't sign the certificate" warning message but I solved it.
Right now it seems to me that I ...
0
votes
0answers
287 views
Outlook Error: There is a problem with the proxy server's security certificate
I am trying to configure my office Outlook on my local machine. When I enter the exchange server details, it shows the below error. Seems the exchange server's certificate is expired. But Still, when ...
0
votes
0answers
211 views
How do I troubleshoot a certificate Outlook refuses to use?
I have a certificate for my email, that my friends no longer can use for encrypted mail. The root is a Comodo certificate, and it stopped working recently, so it might be connected to their security ...
2
votes
1answer
221 views
Where do I install certificates so that wget and other MacPorts programs will find them?
I have to install custom certificates so that they work with wget installed via MacPorts. I can't find the right directory.
I've tried installing in /System/Library/OpenSSL/certs but that directory ...
0
votes
0answers
648 views
setup vpnc to use vpnclient certificate for authentication
I am trying to access my company VPN using my Centos 5.5 laptop. I have the vpn client certificate issued by my company's IT dept. I am able to access the webmail using the same certificate which I ...
0
votes
1answer
202 views
Xerobank and Tor
I use XeroBank Browser to access the tor network on windows. For the last few days the default homepage, start.xerobank.com has a certificate error and always shows my connection as insecure.
Since ...
1
vote
1answer
336 views
Removing certificates in Firefox doesn't work
I'm trying to remove my certificates going to Preferences > Advanced > Encryption > View Certificates. Then I select the certificates I want to remove and delete them.
But when I go again to the ...
1
vote
1answer
501 views
Generating self-signed SSL certificate for apache on Windows Vista
I do not have any idea how to generate self-signed SSL certificate for Apache on Windows Vista, but I have to do that.
How I can do that?
0
votes
0answers
125 views
Generate CSR for Microsoft ForeFront
We have a server that runs Microsoft ForeFront Threat Management Gateway 2010. The server has no IIs installed since FrontFront took over. We need to generate CSR for a SSL certificate. I've been ...
0
votes
1answer
76 views
SSL certificate: suggestions for choosing the CA [closed]
I am running a public web application.
I would like to get a SSL certificate from a CA.
Have you got any suggestions or a CA that you are happy of using (or the opposite)?
What are the things I ...
0
votes
1answer
30 views
Would it be appropriate for an OS to include itself as a Certification Authority in the browsers it ships?
I'm just wondering if this is dubious practice considerig that the OS vendor might not have been externally audited for example about how safe the private key is etc.
Is there any references to ...
0
votes
1answer
192 views
How Do I Set Up Authentication with Client Certifcates on WebSphere 7
Can someone point me to documentation on setting up authentication using client certificates on Websphere 7? What does WAS send to the browser so the browser knows to send a certificate to the ...
1
vote
0answers
225 views
Setting subversion “password-stores” does nothing?
The Subversion documentation says that I can set a parameter in ~/.subversion/config like
[auths]
password-stores = gnome-keyring
to have it cache my certificate password in gnome-keyring. I set ...
6
votes
2answers
170 views
How to tell which resources are loaded “insecurely” with Chrome using https
I understand this is because I'm loading some stuff via http:// but does that mean a single http reference can't appear in the source? Even in examples like <a href="http://...">...</a>?
...
0
votes
1answer
542 views
How to make an x.509 certificate from a PEM one?
I'm trying to test a script, locally, which involves uploading a file using a Java-based program to a FileZilla FTPES server.
For the real thing, there is a real certificate on the FZ server, and the ...
0
votes
1answer
391 views
IIS7.5 SSL Question, Safari users get a prompt of certificate to select
Does this error:
Has something to do with this: Apple KB item
Should I set it to ignore? is that it? or is that not recommended? I use the SSL for a registration/sign-up form,
2
votes
2answers
134 views
How would you change a home wireless router with a self-signed admin site certificate to be more secure?
littleblackbox is publishing "private keys" that are accessible on publicly available firmwares. Debian calls these "snake-oil" certs. Most of these routers are securing their HTTPS certs with these, ...
1
vote
2answers
59 views
Client certificate selection
I have a https apache server that needs client verification. But when somebody is browsing this site there is need to select proper cert from list of certificates installed in browsers. What can I do ...
1
vote
2answers
439 views
OpenSSL without prompt
I am using following code to generate keys:
apt-get -qq -y install openssl;
mkdir -p /etc/apache2/ssl;
openssl genrsa -des3 -out server.key 1024;
openssl req -new -key server.key -out ...
2
votes
1answer
926 views
Troubleshooting certificate issues
I'm trying to access my (European Parliament) Webmail from a Linux/Firefox machine at the following address and I get security warning messages explaining that the identity of the site cannot be ...
0
votes
1answer
515 views
Heroku Hostname based SSL: How does it work? [closed]
Heroku offers the option to use Hostname based SSL. Apparently this is a solution which they use to offer multiple SSL hostnames on the same IP address, without using SNI (which doesn't work on ...
