The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
2answers
42 views

Downloaded a Firefox Addon on addons.mozilla.COM. Ignored Untrusted Certificate. Should I worry?

This site: https://en-us.add-ons.mozilla.com has an untrusted certificate. (At least with my browser: Iceweasel 24.2.0) I find that highly suspicious. But I do not know enough about such ...
0
votes
0answers
175 views

SSL Error on Twitter

Since last night, whenever I try to go on Twitter, I get an SSL error mistake saying it's a malformed certificate and won't let me get in. My time and date is correct, I cleared my cache but to no ...
0
votes
2answers
75 views

heartbleed are CA private keys compromised?

have any CA private keys such as those used by godaddy to issue private/public key pairs compromised as a result of heartbleed?
0
votes
1answer
20 views

How to set up load balancer with SSL?

I currently have a single server with a Django stack. I have nginx with an SSL certificate for HTTPS. I want to scale the web layer by putting an nginx load balancer in front, and adding IP addresses ...
0
votes
0answers
339 views

SSL error on Chrome, IE, Safari (but not on FF)

I am getting this error on trying to access a couple of sites from Chrome - one is the webmail of our company and another is a banking website. Cannot connect to the real somesite.com Something ...
1
vote
1answer
49 views

Creating stronger self signed certificate

I've installed the calomel addon in Firefox, which gives information about the quality of an SSL certificate. I have created a self signed certificate, which scores full point on PFS and the Bulk ...
0
votes
1answer
38 views

Why ever purchase a wildcard SSL certificate?

I was looking at wildcard SSL certs recently, and the lowest price on Namecheap is $94/year. Now, a regular single domain SSL cert from them starts at $9/year. My question is this: why wouldn't I just ...
0
votes
1answer
28 views

Dismiss Firefox certificate warnings on a subdomain and apply for other subdomains under same parent

Firefox prompts to accept a certificate separately for each subdomain. Is there a way to tell it not to? For example, if the user visits aardvark.example.com and accepts the certificate, then to ...
0
votes
1answer
38 views

Can an SSL cert (not self-signed) be used to create another SSL cert for another host in the same domain?

I have a regular SSL certificate issued by Network Solutions for a given host, say "host A". Can I create another SSL cert for the wiki host that has the host A cert in its trust path and therefore ...
2
votes
1answer
140 views

Incorrect Authority Key Identifier on openssl end cert

I'm getting interesting results when signing an end-server certificate using an intermediate CA using openssl. I have a Root CA which looks like this: Serial Number: 14296918985177649921 ...
0
votes
1answer
29 views

SBS2008 Remoteapp certificate not trusted, tried everything

I imported the SBS2008 server certificate to the client from where I want to connect. This worked, and I have added it to the trust root map. However the error still appears saying that the ...
0
votes
2answers
96 views

How can I tell whether PFS is enabled?

I have kinda 2 questions.. first, is this setting considered "secure" ? Second, how do I tell whether perfect forward secrecy is enabled? ssl_session_timeout 5m; ssl_protocols TLSv1 ...
0
votes
0answers
30 views

Installed new Wildcard certificates on my server, but still appear as expired on browser

I have bought new WILDCARD certificates (*.mydomain.com) for my servers. I was able to install successfully on one server. So I know the files are correct and I was able to verify their validity. ...
0
votes
0answers
42 views

SSL certificate for CNAME record

I have the CNAME record images.bob.com, which points to the images.susan.co.uk (images.bob.com. 1800 IN CNAME images.susan.co.uk.). I would like to ask for issuing SSL certificate for the ...
2
votes
0answers
119 views

Why doesn't Firefox accept different Ports for SSL encryption other than 443

There is an IIS Webserver with different Sites (SSL Binding) because I can't configure IIS to listen on same Address and Port with different Certificates so I set the SSL Port direction in the ...
1
vote
0answers
702 views

SSL Error after upgrading to Windows 8.1

After upgrade my Windows 8 to Windows 8.1, I got this SSL Error: ...and this I have did some research and tried to change my system time up to date, reset my modem and use wireshark to see if ...
1
vote
1answer
142 views

Multiple SSL certificates on one server

We're hosting two websites on our fairly tiny but dedicated production server. Both website require SSL authentication. So, we have virtualhosts set up for both of them. They both reference their own ...
0
votes
1answer
98 views

Multiple websites on one server/IP; only one with SSL

I recently acquired an SSL certificate for my primary site (https://wemarsh.com/). It works great, and I've even set up an .htaccess rule so all traffic on that site is encrypted. (I'm running ...
1
vote
0answers
151 views

Mumble - Can't log in as SuperUser for the first time

I am trying to set up a Mumble LAN server for my household. I have downloaded and installed Mumble and Murmur and set up murmur.ini but when I try to log in as SuperUser for the first time to ...
2
votes
0answers
152 views

How can I automatically trust a Root CA in Firefox given a PEM file?

I have: Firefox 24.0 on Windows 7 Enterprise A frequent need to have Firefox trust a specific Root CA in Base64-encoded "PEM" format on disk, e.g. C:\foo.pem (for instance) The certificate I need ...
0
votes
1answer
230 views

Where to install SSL Cert

I have Bluehost hosting my landing page and a few subdomains. One of the subdomains has a A-Record that points to an Amazon EC2 instance running tomcat. I would like the tomcat application to be ...
1
vote
1answer
929 views

How do you fix an incomplete SSL chain

I have a Go Daddy SSL cert installed, and works fine everywhere except Android. https://www.ssllabs.com/ssltest/analyze.html says the chain is incomplete, and I read on stack overflow that an SSL ...
0
votes
0answers
27 views

Removing ssl alert appears when checking https:// NGINX

simply I am using nginx, and I configured rewrite to go through https:// but the thing that its just a website so many people when checking it out, and see the red alert because of the certificate ...
0
votes
0answers
46 views

certificate store name set to null for ssl certificate

I'm viewing my SSL certificate by running the command "netsh http show ssl" in the command prompt. On the certificate that comes back I see that the Certificate Store Name is null instead of MY. Any ...
0
votes
2answers
406 views

puppetd --test err: Could not request certificate: Connection refused - connect(2) Exiting; failed to retrieve certificate and waitforcert is disabled

I m new to puppet and i m trying to have connection to my puppet server, when i ping to my puppetmaster it runs well but when i run puppetd --test t shows me following error. puppetd --test info: ...
0
votes
0answers
32 views

SSl for a Ruby Website

How to install a SSl certificate for a Ruby website where in the same Linux web server PHP blog is running? Both the primary website(Ruby) "www.example.com" and Blog(php) blog.example.com are running ...
0
votes
1answer
298 views

How to tell `links` to ignore expired SSL certificate and proceed?

I'm using the links browser and trying to connect to an HTTPS site. I then get: Verification failure: certificate has expired this is "fine" (i.e. was decided to be tolerated) for this ...
5
votes
1answer
6k views

How to add a self-signed certificate as an exception in Chrome?

I have a number of network devices that I access over HTTPS. However, they are self-signed certificates, so Chrome displays a warning page. In earlier versions of chrome, I seem to remember an "add ...
0
votes
1answer
62 views

How do I view a browser's root certifying authority/certificate hierarchy

I am trying to follow the instructions in this link(the first one with 12 reputation points) - ...
0
votes
0answers
114 views

Apache won't start after changing SSL certificate

I've changed two SSL certificates on my server. Copied the old certificates to another directory Copied the new ones Changed the paths in each VirtualHost Changed LogLevel to Debug But Apache ...
0
votes
1answer
93 views

SSL Certificates for Plesk dedicated server

We have a dedicated server that is using Plesk 11 and we would like to buy and install a certificate to acheive the following: Remove the "There is a problem with this website's security ...
1
vote
2answers
594 views

What is the difference between a certificate and a key with respect to SSL?

Whenever I try to understand anything about SSL I always have a hard time keeping track of what "key" and "certificate" refer to. I fear many people use them incorrectly or interchangeably. Is there ...
2
votes
3answers
4k views

Check expiry date of ssl certificate for multiple remote servers

I can find out the expiry date of ssl certificates using this OpenSSL command: openssl x509 -noout -in <filename> -enddate But if the certificates are scattered on different web servers, how ...
1
vote
0answers
33 views

How to only accept certificates issued by user-specified CA per domain?

Question Is it possible in Chromium or Firefox to only accept SSL certificates issued by a user-specified CA for a specific domain? Background When you have set up your own certificate authority ...
-1
votes
2answers
3k views

Who provides SSL certificates to Google? [closed]

Out of curiousity I was wondering who provides Google's SSL certificates. I checked the certificate information in Chrome (on vanilla https://google.com) and it shows that it is authored by: Google ...
0
votes
1answer
88 views

Should I let JungleDisk replace my /Library/Preferences/cacert.pem?

About a week ago JungleDisk Desktop backup started warning it couldn't upload a "database" file (that it uses for speed), and was falling back to a regular upload, which succeeds. Example message: ...
0
votes
2answers
115 views

How to intercept SSL authority certificate needed in a corporate environment?

My situation is the following: in our corporate network a special kind of SSL certificate issued by the company itself is used. Every time I open a site via https in Firefox a warning monit is ...
2
votes
2answers
1k views

Example of invalid or expired certificate

Are there any sites that will give me invalid and expired certificate? I need to do some work dealing with those messages, but I can't seem to find any pages that will give me those errors. Do you ...
0
votes
1answer
443 views

Do Chrome and Firefox give you a certificate error for a locally signed certificate even if the certificate is in the trusted store?

I created a self signed certificate for local testing. The certificate generates an error in firefox and chrome saying: myPC:443 uses an invalid security certificate. The certificate is not trusted ...
0
votes
0answers
24 views

OpenSSL certificate valid immediately

I am simply looking for the option in the openssl.cnf where to set the certificate validity immediately. Actually all certs I create with my CA are valid after 30min after signing. I want them valid ...
0
votes
1answer
89 views

separate irssi services passwords from main configuration file

I want to automatically connect to some IRC networks that don't all support authentication SSL client certificates (like OFTC) or SASL (Freenode). At the same time I want to add my irssi config to ...
4
votes
1answer
1k views

How can I verify a certificate's fingerprints?

I use gmail with mutt over imap. imaps://imap.gmail.com:993 Today when I launched mutt, it prompted me to reject or accept a certificate. Screenshot: q:Exit ?:Help This certificate belongs to: ...
0
votes
0answers
79 views

Generate CSR for SSL in Keychain Access

I have to generate CSR file for SSL. How to generate CSR for SSL using Keychaing Access? Is it possible? Thanks.
0
votes
1answer
63 views

How to notice missing certificates in Firefox

When I go to some sites, part of the site is missing. I don't have this problem in other browsers. After further experimentation I figured out that the reason is that the site uses different ...
1
vote
0answers
649 views

Establish https on nonstandard port

I'm trying to estamblish https on port 55434 (different than standard 443). My nginx configuration looks like this: server { server_name example.org; listen 55434 ssl; ssl ...
1
vote
1answer
886 views

Does having an SSL certificate make ssh/sftp connections any more automatic?

When I log in to a new machine (or from a new machine) using ssh/sftp, I get prompted with the "here's this random string of hex digits; should I trust it?" question. And, since I never have the ...
2
votes
1answer
1k views

Permissions for SSL key?

I'm trying to set up a secure connection (https) in nginx. But I'm a bit worried about the private key's permissions, which aren't mentioned in any tutorial. Should I change them? To what?
0
votes
1answer
316 views

How to create a SSL certificate signed by an intermediate certificate

I am building a web site with HTTPS. The host has both a DNS name and an IP address and I'd like the SSL certificate(s) to cover both. I've been given a certificate that is signed by a trusted party - ...
1
vote
0answers
323 views

self-signed SSL certificate error: certificate has invalid digital signature

I have a c# program and part of it creates a self-signed certificate. The problem is when i try to import the certificate in MMC it says "This certificate has an invalid digital signature." And when ...
1
vote
1answer
76 views

What type of ssl certificate to select

I have a commercial site and wanted to change to SSL at least for the logged in users. Hoping someone can provide some advice: I only have one domain, but ideally I'd like to test on our development ...