0
votes
1answer
112 views

digicert secure server ca signed by unknown authority mac os

Related to: Why won't OS X trust GitHub's SSL certificate? Why when I download this certificate and drag/drop into my Keychain on OSX, it shows as I downloaded from here: ...
2
votes
1answer
98 views

Client unable to access OWA website after temporarily changing SSL certificate on the server

I have the following issue: One client computer (Windows XP) cannot access the OWA website. All other client computers can (Except another one in the same remote office). How this happened: I ...
-1
votes
1answer
771 views

Windows 7 64-bit SSL untrusted certificate error when visiting any SSL website

I have installed Windows 7 64-bit and I get an untrusted certificate error when visiting any website served via SSL, like Google.com, Gmail.com, etc. I tried this using Firefox, IE and Chrome and it ...
1
vote
2answers
77 views

Download self-signed server certicate

Summary I need to download a self-signed certificate from a server, to create a .JKS-file to use as truststore in an application. How can I do that from a Red Hat server? What I have tried I have ...
0
votes
1answer
235 views

What is the role of cakey.pem and cacert.pem in addition to .key and .crt based encryption

I have .key file which holds the private key data, .crt file which would be certificate with public key and, to my knowledge, that's it for public key encryption, right? Not exactly. In order to ...
0
votes
1answer
35 views

How to set up load balancer with SSL?

I currently have a single server with a Django stack. I have nginx with an SSL certificate for HTTPS. I want to scale the web layer by putting an nginx load balancer in front, and adding IP addresses ...
1
vote
1answer
263 views

Creating stronger self signed certificate

I've installed the calomel addon in Firefox, which gives information about the quality of an SSL certificate. I have created a self signed certificate, which scores full point on PFS and the Bulk ...
0
votes
1answer
75 views

Why ever purchase a wildcard SSL certificate?

I was looking at wildcard SSL certs recently, and the lowest price on Namecheap is $94/year. Now, a regular single domain SSL cert from them starts at $9/year. My question is this: why wouldn't I just ...
0
votes
1answer
53 views

Can an SSL cert (not self-signed) be used to create another SSL cert for another host in the same domain?

I have a regular SSL certificate issued by Network Solutions for a given host, say "host A". Can I create another SSL cert for the wiki host that has the host A cert in its trust path and therefore ...
0
votes
2answers
140 views

How can I tell whether PFS is enabled?

I have kinda 2 questions.. first, is this setting considered "secure" ? Second, how do I tell whether perfect forward secrecy is enabled? ssl_session_timeout 5m; ssl_protocols TLSv1 ...
1
vote
0answers
84 views

SSL certificate for CNAME record

I have the CNAME record images.bob.com, which points to the images.susan.co.uk (images.bob.com. 1800 IN CNAME images.susan.co.uk.). I would like to ask for issuing SSL certificate for the ...
2
votes
0answers
179 views

Why doesn't Firefox accept different Ports for SSL encryption other than 443

There is an IIS Webserver with different Sites (SSL Binding) because I can't configure IIS to listen on same Address and Port with different Certificates so I set the SSL Port direction in the ...
1
vote
0answers
949 views

SSL Error after upgrading to Windows 8.1

After upgrade my Windows 8 to Windows 8.1, I got this SSL Error: ...and this I have did some research and tried to change my system time up to date, reset my modem and use wireshark to see if ...
1
vote
1answer
609 views

Multiple SSL certificates on one server

We're hosting two websites on our fairly tiny but dedicated production server. Both website require SSL authentication. So, we have virtualhosts set up for both of them. They both reference their own ...
0
votes
1answer
297 views

Multiple websites on one server/IP; only one with SSL

I recently acquired an SSL certificate for my primary site (https://wemarsh.com/). It works great, and I've even set up an .htaccess rule so all traffic on that site is encrypted. (I'm running ...
0
votes
1answer
343 views

Where to install SSL Cert

I have Bluehost hosting my landing page and a few subdomains. One of the subdomains has a A-Record that points to an Amazon EC2 instance running tomcat. I would like the tomcat application to be ...
3
votes
1answer
3k views

How do you fix an incomplete SSL chain

I have a Go Daddy SSL cert installed, and works fine everywhere except Android. https://www.ssllabs.com/ssltest/analyze.html says the chain is incomplete, and I read on stack overflow that an SSL ...
0
votes
3answers
1k views

puppetd --test err: Could not request certificate: Connection refused - connect(2) Exiting; failed to retrieve certificate and waitforcert is disabled

I m new to puppet and i m trying to have connection to my puppet server, when i ping to my puppetmaster it runs well but when i run puppetd --test t shows me following error. puppetd --test info: ...
1
vote
1answer
681 views

How to tell `links` to ignore expired SSL certificate and proceed?

I'm using the links browser and trying to connect to an HTTPS site. I then get: Verification failure: certificate has expired this is "fine" (i.e. was decided to be tolerated) for this ...
0
votes
1answer
114 views

SSL Certificates for Plesk dedicated server

We have a dedicated server that is using Plesk 11 and we would like to buy and install a certificate to acheive the following: Remove the "There is a problem with this website's security ...
2
votes
2answers
2k views

What is the difference between a certificate and a key with respect to SSL?

Whenever I try to understand anything about SSL I always have a hard time keeping track of what "key" and "certificate" refer to. I fear many people use them incorrectly or interchangeably. Is there ...
1
vote
0answers
40 views

How to only accept certificates issued by user-specified CA per domain?

Question Is it possible in Chromium or Firefox to only accept SSL certificates issued by a user-specified CA for a specific domain? Background When you have set up your own certificate authority ...
-1
votes
2answers
4k views

Who provides SSL certificates to Google? [closed]

Out of curiousity I was wondering who provides Google's SSL certificates. I checked the certificate information in Chrome (on vanilla https://google.com) and it shows that it is authored by: Google ...
0
votes
1answer
106 views

Should I let JungleDisk replace my /Library/Preferences/cacert.pem?

About a week ago JungleDisk Desktop backup started warning it couldn't upload a "database" file (that it uses for speed), and was falling back to a regular upload, which succeeds. Example message: ...
0
votes
2answers
188 views

How to intercept SSL authority certificate needed in a corporate environment?

My situation is the following: in our corporate network a special kind of SSL certificate issued by the company itself is used. Every time I open a site via https in Firefox a warning monit is ...
2
votes
0answers
1k views

Establish https on nonstandard port

I'm trying to estamblish https on port 55434 (different than standard 443). My nginx configuration looks like this: server { server_name example.org; listen 55434 ssl; ssl ...
2
votes
1answer
2k views

Permissions for SSL key?

I'm trying to set up a secure connection (https) in nginx. But I'm a bit worried about the private key's permissions, which aren't mentioned in any tutorial. Should I change them? To what?
0
votes
1answer
403 views

How to create a SSL certificate signed by an intermediate certificate

I am building a web site with HTTPS. The host has both a DNS name and an IP address and I'd like the SSL certificate(s) to cover both. I've been given a certificate that is signed by a trusted party - ...
1
vote
1answer
90 views

What type of ssl certificate to select

I have a commercial site and wanted to change to SSL at least for the logged in users. Hoping someone can provide some advice: I only have one domain, but ideally I'd like to test on our development ...
1
vote
1answer
64 views

Must CSRs be generated on the server that will host the SSL certificate?

Is it necessary to generate the CSR (Certificate Signing Request) on the same machine that will host my web application and SSL certificate?
0
votes
1answer
75 views

SSL Forging With Portable Firefox?

In Portable Firefox for Windows, I looked at the options where it lists SSL certificates. I know that Windows stores SSL certificates in its own store. Does Firefox use these certificates? I am ...
0
votes
1answer
53 views

openssl: register a CA as an unprivileged user

I'm in a situation where I have a Certificate Authority (CA) that I need to register with openssl, but no root access. Even if I had root access, I don't think it would be right to register this at a ...
10
votes
3answers
24k views

The certificate is not trusted because no issuer chain was provided

Could anyone explain the meaning of this error message in plain English? Should I add an exception or I should not continue on this website? Technical details: the URL is here, the browser is ...
0
votes
2answers
346 views

What limitations apply to SSL Certificates?

If I buy some certificate from, say, Thawte or Verisign etc. they have only time limits right? Or do they also have number of connections limits? I think not, and I never met this limit. But I would ...
-1
votes
1answer
449 views

WS2003 + IIS = Untrusted Certificate

I have configured a Windows 2003 server to allow SSL access from the Internet, particularly to enable so called Outlook Web Access, that is browse Exchange Server data from the Internet. Following ...
3
votes
5answers
12k views

Chrome is reporting GMail has Invalid Server Certificate, how do I find out who's fiddling with my certs?

Chrome is giving the following warning when ever I try and visit GMail or a bunch of other SSL sites. Invalid Server Certificate You attempted to reach mail.google.com, but the server presented an ...
1
vote
1answer
602 views

Comodo-signed SSL 2.0 certificate not working with Internet Explorer

I'm having trouble getting my Comodo signed SSL Certificate to work with Internet Explorer in Apache2. Internet Explorer gives an error that there is a problem with the certificate. I tried all ...
1
vote
1answer
568 views

SVN, SSL certificate negotiation failed. However we don't use SSL certificate on our SVN Server

Can you tell me please, at my workplace we don’t use SSL certificates for SVN, however while running RUby on Rails command that checks SVN ( = Churn) still expects it and gives back the following ...
10
votes
2answers
3k views

Do web browsers cache SSL certificates?

Do any web browsers cache SSL server certificates? For example, if I change the SSL certificate on a web server, will all of the web browsers pick up the new certificate when they connect via SSL, or ...
5
votes
1answer
719 views

How to create private security certificates that behave like official ones?

I'm trying to get a valid secured environment for HTTP communication to behave like normal ones. I'm doing this for a restricted group of users. There is a hardware server running a web service ...
3
votes
1answer
751 views

How to find what elements on SSL page are insecure? [duplicate]

Possible Duplicate: How to tell which resources are loaded “insecurely” with Chrome using https I"m using a major tax site for this year's taxes, and I am getting the "Some ...
3
votes
1answer
4k views

Trust SSL certificate to local system account

I have the following need: A windows service needs to connect to a svn repository through https. The service needs also to run as local system account for IO permissions on the machine. Now when the ...
1
vote
1answer
121 views

How to setup SSL?

I have been now researching since two days and can't find a clear answer. I have purchased a Premium SSL certificate. Once I have created a Certificate Signing Request (CSR) and send it to them to ...
1
vote
3answers
864 views

What happens when 's' of HTTPS is removed?

I have this: https://194.16.222.100/ which corresponds to www.skanetrafiken.se. Using this, although the web browser says that there is a SSL error, I can access the web-page. However, when I remove ...
0
votes
2answers
80 views

Sign SSL certs with a master SSL cert

We have just been granted a wildcard SSL certificate for a sub-domain that we manage (e.g. *.service.test.com). Rather than use this certificate on all of our IIS servers, I have been asked to use ...
3
votes
3answers
5k views

Security Warning: The Server you are connected to is using a security certificate that cannot be verified. The Target principal name is incorrect

I'm trying to get my mails using Outlook 2007 and POP3 using SSL but I get this security warning every time I try to receive mails: The Server you are connected to is using a security certificate ...
0
votes
2answers
2k views

How to easily deploy HTTPS in Ubuntu 10.04?

I have an Apache web server running on Ubuntu 10.04, and I would like to switch everything to HTTPS.
3
votes
1answer
383 views

How does SSL work? Isn't there a hole?

I was reading this article, specifically the "SSL in action" part. It says: When Client connects to company.com on its SSL-secured port, the company sends back its public key (and some other ...
1
vote
0answers
359 views

Self-Signed Certificate and IIS 6.0, How to generate a Client Certificate

I am looking at generating a self-signed certificate, and only allow users who has client certificate installed on my web server. I am using IIS 6.0 with selfSSL to generate my .pfx web server ...
2
votes
1answer
7k views

How to configure GlassFish v3.1 to use SSL?

We are looking for simple step-by-step manuals how to configure GlassFish v3.1 to use SSL. We are running few legacy application under GlassFish and we hope there is no need to change them: so that ...