The tag has no usage guidance.

learn more… | top users | synonyms

2
votes
1answer
79 views

How can I prevent a certificate from being trusted?

There exist two certificates in /etc/ssl/certs that I'd like to permanently remove. However, just deleting the pem files doesn't do it - those are regenerated when ca-certificates is updated. How ...
2
votes
2answers
417 views

I removed the SuperFish root certificate and now I get certificate errors on most websites

I removed the SuperFish root certificate from my Lenovo Yoga Pad Pro based on advice from What is the superfish SSL certificate and where did it originate. Now when I go to web sites in IE and Chrome ...
0
votes
1answer
156 views

Firefox giving SSL error message after installing new certs

Firefox users are getting the message This connection is untrusted when going to our web site. under the technical details section it lists the reason as "The certificate is not trusted because the ...
4
votes
1answer
6k views

Expired web/SSL certificate error on only one computer

I have a strange problem with one website's SSL certificate that only affects one computer Windows 7 operating system. The site works fine on other Win 7 computers with no error, pulling valid ...
0
votes
2answers
80 views

What file to add to nginx certificate

I got a RaspberryPi on which I want to host Owncloud. So I followed this tutorial and it works well except the SSL part. I don't want to use self signed. I set my own subdomain and it works without ...
3
votes
1answer
616 views

Remote Desktop Revocation error SSL

I have a CA-certificate installed on both a Windows 10 and a Windows Server 10 machine. I have a certificate signed by the CA in use with the help of this: link. When I now connect from my Windows 10 ...
-1
votes
1answer
44 views

IE : Blocks website that has a certificate's CN different from hostname

May I know what is the settings on IE that blocks website with certificate CN different from hostname? For example I have a website myhostname but my certificate CN is NotMyHostName. Some IE will ...
-1
votes
0answers
508 views

Encrypted alert with code 21 for connection [closed]

I've got a device that connected to the server and successfully did the handshake and received application data, however later when client sends keep-alive requests server sends back encrypted alert ...
1
vote
2answers
3k views

Links SSL Error

What version of links does the user called "bytepool" have that he's able to find this workaround? Refer to link below. How to tell `links` to ignore expired SSL certificate and proceed? He writes "...
2
votes
1answer
2k views

Fedora 18 - error [Errno 14] Peer cert cannot be verified or peer cert invalid

When i run the command: sudo yum install perl-bioperl I get the error [Errno 14] Peer cert cannot be verified or peer cert invalid. My system details are: Linux localhost.localdomain 3.11.10-...
0
votes
1answer
2k views

How to properly install SCR3500 card reader on mac - Mac OS X 10.6.8?

I am trying to login into some secured site and I am required to use SCR3500 card reader. I found and installed some drivers - http://support.identive-group.com/download_scm/download_scm.php?lang=en. ...
1
vote
1answer
40 views

Is it particularly necessary to install an SSL certificate on a new cPanel installation on a dedicated server?

I have a dedicated server and I am installing cPanel on it. I am wondering if I should also install an SSL certificate (that I will have to buy) just for the cpanel install itself.
4
votes
2answers
6k views

PayPal SSL error (ERR_CERT_COMMON_NAME_INVALID) Chrome, Opera, IE

I'm running Windows 8.1 Pro, almost clean OS with Norton Internet Security v. 21.5.0.19 protected. I've strange issue on Google Chrome v. 37.0.2062.124 m and Opera 24.0 while trying to visit PayPal ...
4
votes
2answers
7k views

Why is the local certificate store missing in Windows 8.1?

I am trying to import a self-signed certificate into che local certificate store of the Trusted Root CAs on my Windows 8.1 machine, but that store is missing. Importing it into the Trusted Root CAs ...
0
votes
1answer
46 views

How to sign a CSR on windows

I've got a custom certificate that I'm using as a local root authority. This certifcate has a private key on my machine and is stored in the "Personal" certificates store of the "Local Machine" ...
0
votes
1answer
737 views

digicert secure server ca signed by unknown authority mac os

Related to: Why won't OS X trust GitHub's SSL certificate? Why when I download this certificate and drag/drop into my Keychain on OSX, it shows as I downloaded from here: https://www....
2
votes
1answer
821 views

Client unable to access OWA website after temporarily changing SSL certificate on the server

I have the following issue: One client computer (Windows XP) cannot access the OWA website. All other client computers can (Except another one in the same remote office). How this happened: I ...
0
votes
0answers
274 views

SSL certificate error: multiple browsers (IE/Chrome/Firefox) and both computers on LAN (Mac & PC) affected

Both my Mac and PC (on my home network) are giving me the following error when attempting to log in to Microsoft SSL sites from my home network: I have tried logging in to another computer on a ...
0
votes
0answers
773 views

IE/Chrome add permanent SSL certificate exception?

How can I add a permanent SSL certificate exception for certain websites? These sites have certificates signed by some root CA which I do not want to trust. When I tried to manually install the ...
1
vote
2answers
6k views

Windows 7 64-bit SSL untrusted certificate error when visiting any SSL website

I have installed Windows 7 64-bit and I get an untrusted certificate error when visiting any website served via SSL, like Google.com, Gmail.com, etc. I tried this using Firefox, IE and Chrome and it ...
1
vote
2answers
931 views

Download self-signed server certicate

Summary I need to download a self-signed certificate from a server, to create a .JKS-file to use as truststore in an application. How can I do that from a Red Hat server? What I have tried I have ...
1
vote
1answer
91 views

Configure WinRM to Use HTTPS makecert.exe Name Syntax

I am trying to enable the remote execution of powershell scripts on a remote server over https using this example. What I do not understand is what value to give for the hostname when generating the ...
0
votes
1answer
1k views

What is a “Certificate Preference” in Keychain Access?

I'm trying to view a website on a computer that I know is genuine. Typically, a warning screen appears in Google Chrome asking whether or not I want to trust the server. However, the page in question ...
4
votes
1answer
543 views

Imported cert into firefox/chrome, still warning

I generated a wildcard certificate for multiple (wildcard) domains (SANS, alternate domain names + IP) (see https://blog.flowl.info). I imported the certificate into Firefox, Chrome and Windows ...
0
votes
0answers
2k views

Can't connect to Synology DiskStation through HTTPS when using Windows 7 Import

a little background to my problem: I have a Synology DiskStation 213j that I use as a backup/data storage solution. When I'm at work, I would like to push and pull files from my DiskStation but I can'...
0
votes
2answers
452 views

Root certificate authority works windows/linux but not mac osx - (malformed)

I have created a self-signed root certificate authority which if I install onto windows, linux, or even using the certificate store in firefox (windows/linux/macosx) will work perfectly with my ...
0
votes
1answer
3k views

Getting SSL certificate error after changing computer date

I recently changed my computer date for some reason (I'm back in the past ..) and I can no longer go on any website that use SSL certificate with Google Chrome, how can I bypass the fact that the ...
0
votes
1answer
216 views

How to install a certificate automatically

I would like to know how to generate a certificate and make it to be imported automatically to all main browser (chrome, firefox, ie etc...). Should I upload this certificate to a public CA or ...
0
votes
0answers
664 views

Lexmark Printer Requires Local Copy of Gmail's SSL Certificate

Recently I had to fix a problem in a clients office where their "Scan to Email" function wasn't working on their Lexmark printer. A gmail account's SMTP settings had been working with SSL for several ...
3
votes
3answers
484 views

Is there a way to quickly disable all trusted root certificates in Windows 7?

(I've posted this earlier to superuser) I'd like to temporarily disable all trusted root certificates and wondering if there is a quicker way than going through every single one of them, right-click ...
0
votes
2answers
618 views

Cannot visit some pages in browser

I have just installed my new network adapter for wireless connectivity. I am using TP-LINK TL-WN727N. I installed the drivers from the manufacturers website to get the latest version. The installation ...
1
vote
1answer
2k views

What is the role of cakey.pem and cacert.pem in addition to .key and .crt based encryption

I have .key file which holds the private key data, .crt file which would be certificate with public key and, to my knowledge, that's it for public key encryption, right? Not exactly. In order to ...
1
vote
2answers
290 views

How to trust a self-signed certificate without trusting the CA?

So, I've generated a rootCA, and signed a certificate for *.a.com, how can I trust the resulting certificate in Firefox/Chrome, without trusting the CA directly? Note that adding an exception (once) ...
1
vote
2answers
578 views

Downloaded a Firefox Addon on addons.mozilla.COM. Ignored Untrusted Certificate. Should I worry?

This site: https://en-us.add-ons.mozilla.com has an untrusted certificate. (At least with my browser: Iceweasel 24.2.0) I find that highly suspicious. But I do not know enough about such ...
0
votes
2answers
106 views

heartbleed are CA private keys compromised?

have any CA private keys such as those used by godaddy to issue private/public key pairs compromised as a result of heartbleed?
0
votes
1answer
68 views

How to set up load balancer with SSL?

I currently have a single server with a Django stack. I have nginx with an SSL certificate for HTTPS. I want to scale the web layer by putting an nginx load balancer in front, and adding IP addresses ...
0
votes
0answers
2k views

SSL error on Chrome, IE, Safari (but not on FF)

I am getting this error on trying to access a couple of sites from Chrome - one is the webmail of our company and another is a banking website. Cannot connect to the real somesite.com Something ...
1
vote
1answer
683 views

Creating stronger self signed certificate

I've installed the calomel addon in Firefox, which gives information about the quality of an SSL certificate. I have created a self signed certificate, which scores full point on PFS and the Bulk ...
0
votes
1answer
206 views

Why ever purchase a wildcard SSL certificate?

I was looking at wildcard SSL certs recently, and the lowest price on Namecheap is $94/year. Now, a regular single domain SSL cert from them starts at $9/year. My question is this: why wouldn't I just ...
0
votes
1answer
166 views

Dismiss Firefox certificate warnings on a subdomain and apply for other subdomains under same parent

Firefox prompts to accept a certificate separately for each subdomain. Is there a way to tell it not to? For example, if the user visits aardvark.example.com and accepts the certificate, then to ...
0
votes
1answer
123 views

Can an SSL cert (not self-signed) be used to create another SSL cert for another host in the same domain?

I have a regular SSL certificate issued by Network Solutions for a given host, say "host A". Can I create another SSL cert for the wiki host that has the host A cert in its trust path and therefore ...
3
votes
1answer
2k views

Incorrect Authority Key Identifier on openssl end cert

I'm getting interesting results when signing an end-server certificate using an intermediate CA using openssl. I have a Root CA which looks like this: Serial Number: 14296918985177649921 (...
0
votes
1answer
223 views

SBS2008 Remoteapp certificate not trusted, tried everything

I imported the SBS2008 server certificate to the client from where I want to connect. This worked, and I have added it to the trust root map. However the error still appears saying that the ...
0
votes
2answers
324 views

How can I tell whether PFS is enabled?

I have kinda 2 questions.. first, is this setting considered "secure" ? Second, how do I tell whether perfect forward secrecy is enabled? ssl_session_timeout 5m; ssl_protocols TLSv1 ...
1
vote
0answers
186 views

SSL certificate for CNAME record

I have the CNAME record images.bob.com, which points to the images.susan.co.uk (images.bob.com. 1800 IN CNAME images.susan.co.uk.). I would like to ask for issuing SSL certificate for the alias....
2
votes
0answers
456 views

Why doesn't Firefox accept different Ports for SSL encryption other than 443

There is an IIS Webserver with different Sites (SSL Binding) because I can't configure IIS to listen on same Address and Port with different Certificates so I set the SSL Port direction in the ...
1
vote
0answers
1k views

SSL Error after upgrading to Windows 8.1

After upgrade my Windows 8 to Windows 8.1, I got this SSL Error: ...and this I have did some research and tried to change my system time up to date, reset my modem and use wireshark to see if ...
1
vote
1answer
1k views

Multiple SSL certificates on one server

We're hosting two websites on our fairly tiny but dedicated production server. Both website require SSL authentication. So, we have virtualhosts set up for both of them. They both reference their own ...
0
votes
1answer
689 views

Multiple websites on one server/IP; only one with SSL

I recently acquired an SSL certificate for my primary site (https://wemarsh.com/). It works great, and I've even set up an .htaccess rule so all traffic on that site is encrypted. (I'm running Apache.)...
1
vote
1answer
567 views

Mumble - Can't log in as SuperUser for the first time

I am trying to set up a Mumble LAN server for my household. I have downloaded and installed Mumble and Murmur and set up murmur.ini but when I try to log in as SuperUser for the first time to ...