The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
2answers
2k views

What is the difference between a certificate and a key with respect to SSL?

Whenever I try to understand anything about SSL I always have a hard time keeping track of what "key" and "certificate" refer to. I fear many people use them incorrectly or interchangeably. Is there ...
3
votes
3answers
7k views

Check expiry date of ssl certificate for multiple remote servers

I can find out the expiry date of ssl certificates using this OpenSSL command: openssl x509 -noout -in <filename> -enddate But if the certificates are scattered on different web servers, how ...
1
vote
0answers
38 views

How to only accept certificates issued by user-specified CA per domain?

Question Is it possible in Chromium or Firefox to only accept SSL certificates issued by a user-specified CA for a specific domain? Background When you have set up your own certificate authority ...
-1
votes
2answers
4k views

Who provides SSL certificates to Google? [closed]

Out of curiousity I was wondering who provides Google's SSL certificates. I checked the certificate information in Chrome (on vanilla https://google.com) and it shows that it is authored by: Google ...
0
votes
1answer
99 views

Should I let JungleDisk replace my /Library/Preferences/cacert.pem?

About a week ago JungleDisk Desktop backup started warning it couldn't upload a "database" file (that it uses for speed), and was falling back to a regular upload, which succeeds. Example message: ...
0
votes
2answers
169 views

How to intercept SSL authority certificate needed in a corporate environment?

My situation is the following: in our corporate network a special kind of SSL certificate issued by the company itself is used. Every time I open a site via https in Firefox a warning monit is ...
3
votes
2answers
2k views

Example of invalid or expired certificate

Are there any sites that will give me invalid and expired certificate? I need to do some work dealing with those messages, but I can't seem to find any pages that will give me those errors. Do you ...
0
votes
1answer
2k views

Do Chrome and Firefox give you a certificate error for a locally signed certificate even if the certificate is in the trusted store?

I created a self signed certificate for local testing. The certificate generates an error in firefox and chrome saying: myPC:443 uses an invalid security certificate. The certificate is not trusted ...
0
votes
1answer
114 views

separate irssi services passwords from main configuration file

I want to automatically connect to some IRC networks that don't all support authentication SSL client certificates (like OFTC) or SASL (Freenode). At the same time I want to add my irssi config to ...
5
votes
1answer
2k views

How can I verify a certificate's fingerprints?

I use gmail with mutt over imap. imaps://imap.gmail.com:993 Today when I launched mutt, it prompted me to reject or accept a certificate. Screenshot: q:Exit ?:Help This certificate belongs to: ...
0
votes
1answer
68 views

How to notice missing certificates in Firefox

When I go to some sites, part of the site is missing. I don't have this problem in other browsers. After further experimentation I figured out that the reason is that the site uses different ...
2
votes
0answers
993 views

Establish https on nonstandard port

I'm trying to estamblish https on port 55434 (different than standard 443). My nginx configuration looks like this: server { server_name example.org; listen 55434 ssl; ssl ...
1
vote
1answer
1k views

Does having an SSL certificate make ssh/sftp connections any more automatic?

When I log in to a new machine (or from a new machine) using ssh/sftp, I get prompted with the "here's this random string of hex digits; should I trust it?" question. And, since I never have the ...
2
votes
1answer
2k views

Permissions for SSL key?

I'm trying to set up a secure connection (https) in nginx. But I'm a bit worried about the private key's permissions, which aren't mentioned in any tutorial. Should I change them? To what?
0
votes
1answer
386 views

How to create a SSL certificate signed by an intermediate certificate

I am building a web site with HTTPS. The host has both a DNS name and an IP address and I'd like the SSL certificate(s) to cover both. I've been given a certificate that is signed by a trusted party - ...
1
vote
0answers
441 views

self-signed SSL certificate error: certificate has invalid digital signature

I have a c# program and part of it creates a self-signed certificate. The problem is when i try to import the certificate in MMC it says "This certificate has an invalid digital signature." And when ...
1
vote
1answer
89 views

What type of ssl certificate to select

I have a commercial site and wanted to change to SSL at least for the logged in users. Hoping someone can provide some advice: I only have one domain, but ideally I'd like to test on our development ...
1
vote
1answer
63 views

Must CSRs be generated on the server that will host the SSL certificate?

Is it necessary to generate the CSR (Certificate Signing Request) on the same machine that will host my web application and SSL certificate?
0
votes
1answer
72 views

SSL Forging With Portable Firefox?

In Portable Firefox for Windows, I looked at the options where it lists SSL certificates. I know that Windows stores SSL certificates in its own store. Does Firefox use these certificates? I am ...
5
votes
3answers
22k views

How to turn off Opera server certificate messages?

While I'm browsing the Internet, Opera always pop out a lots of from these Server certificate expired boxes. Several times it pops out a tons from them and I have to click to Approve on each of them ...
2
votes
2answers
3k views

How do I get my browser to ignore certificate on trusted domain

I got this message when I tried to login to my own dedi or one of the cpanel. The security certificate presented by this website was issued for a different website's address. It's my site. I ...
0
votes
1answer
379 views

IE - Personal Certificates - where does it read it from?

If I go to Internet Explorer Options -> Content Tab -> Certificates Button -> Personal Tab, I see a list of certificates there - where does IE read from? Several of these certificates are different ...
2
votes
0answers
510 views

Safari forces user to select client certificate even if it is optional

This question is loosely related to another one: IIS7.5 SSL Question, Safari users get a prompt of certificate to select, but since it was asked more than a year ago I thought that there may be some ...
1
vote
1answer
59 views

use HTTPS to browse locally used site

I have a website used locally in my domain using IIS7 installed on Windows 2008. This website is bound to HTTP, and I need to bind it using HTTPS. I searched around and I saw that it's possible with ...
2
votes
0answers
72 views

Permanently use certificate for site on chrome

I have installed a certificate in chrome for a website I am running. Whenever I go to the site, chrome prompts me for which certificate I want to use. I only have one certificate for the site. Is ...
1
vote
1answer
138 views

Creating a certificate for apache without hostname

I created a .crt certificate for Apache, however I could only import it to my java cacerts with the hostname I generated it with. This is for testing only and is self signed. I have both a hostname ...
0
votes
1answer
52 views

openssl: register a CA as an unprivileged user

I'm in a situation where I have a Certificate Authority (CA) that I need to register with openssl, but no root access. Even if I had root access, I don't think it would be right to register this at a ...
3
votes
1answer
2k views

How long does it take to see a renewed SSL certificate?

I just renewed the SSL certificate for a domain and installed the new files on my AWS server running Apache. All appears to be ok, but the browser still shows the old expiration date. Is there a way I ...
1
vote
1answer
743 views

Outdated Trusted Root Certification Authority in Windows 7?

I can't access any of the Google websites (primarily) because of an "untrusted security certificate". From what I've found, it seems that the Trusted Root Certification Authorities Store is outdated. ...
2
votes
1answer
9k views

Windows 7 root certificate updates

I work for a company that uses Windows 7 for end user computing. The Windows 7 computers are updated via a WSUS installation, and access to Microsoft Update is blocked. We have a problem with a ...
1
vote
0answers
50 views

Unable to create chained SSL certificate

I'm trying to upgrade the SSL certificate on my Jira server. Currently, it is working absolutely fantastic with correct chained certificates. I have one root, two intermediates and one domain ...
0
votes
1answer
199 views

Why my SSL doesn't work? [closed]

I've tried for several days to make a HTTPS server but I cannot make it happen, I've followed this and this tutorial, where I make the server signed with the certificate, but when I probe the ...
2
votes
3answers
301 views

Certificates signed by multiple CAs

Is it possible to have a OpenSSL Certificate signed by multiple CAs? Background: We have a CA to issue certificates mainly for our machine-to-machine communications. Now we need to make some services ...
1
vote
1answer
505 views

Can I use one SSL Certificate on multiple sub-domains?

We have these separate sites: a.example.com, b.example.com, and c.example.com. Now we want to add an SSL Certificate to these sites. There is a pretty good tutorial for this, but I have a couple ...
4
votes
2answers
263 views

CertPatrol warns: “this certificate wasn't due yet”

Cert-patrol warns me on numerous websites, including gmail, that the certificate being used wasn't due yet. Is this something I need to worry about? Why does this occur? Here is a screen-shot (you ...
5
votes
3answers
353 views

import Certificate in WIndow Xp

I have created a temporary certificate. I am trying to import this certificate.I am importing Certificate to Personnel store of Local Computer and then using FindPrivateKey solution to find privatekey ...
10
votes
3answers
22k views

The certificate is not trusted because no issuer chain was provided

Could anyone explain the meaning of this error message in plain English? Should I add an exception or I should not continue on this website? Technical details: the URL is here, the browser is ...
0
votes
2answers
329 views

What limitations apply to SSL Certificates?

If I buy some certificate from, say, Thawte or Verisign etc. they have only time limits right? Or do they also have number of connections limits? I think not, and I never met this limit. But I would ...
3
votes
0answers
100 views

How do I disable the “This is probably not the site that you are looking for!” warning in Google Chrome? [duplicate]

Possible Duplicate: How do I disable the warning Chrome gives if a security certificate is not trusted? I have to regularly browse to a site where the SSL certificate appears to be ...
0
votes
0answers
160 views

How to delete or untrust all root certificates in OSX?

I right clicked on all the root certificates, but it doesn't allow me to delete them, or to untrust them all at once. How can this be done? Is it safe to do this?
-1
votes
1answer
431 views

WS2003 + IIS = Untrusted Certificate

I have configured a Windows 2003 server to allow SSL access from the Internet, particularly to enable so called Outlook Web Access, that is browse Exchange Server data from the Internet. Following ...
3
votes
5answers
12k views

Chrome is reporting GMail has Invalid Server Certificate, how do I find out who's fiddling with my certs?

Chrome is giving the following warning when ever I try and visit GMail or a bunch of other SSL sites. Invalid Server Certificate You attempted to reach mail.google.com, but the server presented an ...
1
vote
1answer
848 views

Digitally sign Gmail emails with S/MIME

When some of my contacts send mails, I see "signed by gmail" in the headers. In my mail client (Mail.app) I can see that it is a Verisign certificate. Is there a way to get a certificate from Google ...
1
vote
0answers
719 views

Revocation information not available for certificate?

I'm trying to download SQL Server 2008 R2 Enterprise Edition from MSDNAA on my Windows 7 laptop. When I attempted to start the download, I was shown the following prompt: Revocation Information ...
1
vote
1answer
582 views

Comodo-signed SSL 2.0 certificate not working with Internet Explorer

I'm having trouble getting my Comodo signed SSL Certificate to work with Internet Explorer in Apache2. Internet Explorer gives an error that there is a problem with the certificate. I tried all ...
1
vote
1answer
556 views

SVN, SSL certificate negotiation failed. However we don't use SSL certificate on our SVN Server

Can you tell me please, at my workplace we don’t use SSL certificates for SVN, however while running RUby on Rails command that checks SVN ( = Churn) still expects it and gives back the following ...
1
vote
0answers
105 views

https sites have stopped working on all browsers [duplicate]

Possible Duplicate: Continually getting Certificate Errors on all browsers I cannot open any https site on my Windows 7 computer without getting security errors (using any browser) My date ...
0
votes
2answers
289 views

How can I find out why a server's SSL certificate was revoked?

When Firefox tries to go to a site with a revoked SSL certificate, it displays an error page telling me that the certificate was revoked, but doesn't have any information about why this is. Is there ...
10
votes
2answers
3k views

Do web browsers cache SSL certificates?

Do any web browsers cache SSL server certificates? For example, if I change the SSL certificate on a web server, will all of the web browsers pick up the new certificate when they connect via SSL, or ...
0
votes
1answer
327 views

Certificate generation with Keytool, I can't confirm personal data

I'm trying to generate a self-signed certificate in order to sign some source code. I use: keytool -genkey -storepass mypass -alias lorenzos -keystore nbproject/private/keystore Then I fill in ...