The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
62 views

openssl: register a CA as an unprivileged user

I'm in a situation where I have a Certificate Authority (CA) that I need to register with openssl, but no root access. Even if I had root access, I don't think it would be right to register this at a ...
5
votes
1answer
4k views

How long does it take to see a renewed SSL certificate?

I just renewed the SSL certificate for a domain and installed the new files on my AWS server running Apache. All appears to be ok, but the browser still shows the old expiration date. Is there a way I ...
1
vote
1answer
843 views

Outdated Trusted Root Certification Authority in Windows 7?

I can't access any of the Google websites (primarily) because of an "untrusted security certificate". From what I've found, it seems that the Trusted Root Certification Authorities Store is outdated. ...
2
votes
1answer
14k views

Windows 7 root certificate updates

I work for a company that uses Windows 7 for end user computing. The Windows 7 computers are updated via a WSUS installation, and access to Microsoft Update is blocked. We have a problem with a ...
1
vote
0answers
52 views

Unable to create chained SSL certificate

I'm trying to upgrade the SSL certificate on my Jira server. Currently, it is working absolutely fantastic with correct chained certificates. I have one root, two intermediates and one domain ...
0
votes
1answer
255 views

Why my SSL doesn't work? [closed]

I've tried for several days to make a HTTPS server but I cannot make it happen, I've followed this and this tutorial, where I make the server signed with the certificate, but when I probe the ...
2
votes
3answers
930 views

Certificates signed by multiple CAs

Is it possible to have a OpenSSL Certificate signed by multiple CAs? Background: We have a CA to issue certificates mainly for our machine-to-machine communications. Now we need to make some services ...
1
vote
1answer
651 views

Can I use one SSL Certificate on multiple sub-domains?

We have these separate sites: a.example.com, b.example.com, and c.example.com. Now we want to add an SSL Certificate to these sites. There is a pretty good tutorial for this, but I have a couple ...
4
votes
2answers
289 views

CertPatrol warns: “this certificate wasn't due yet”

Cert-patrol warns me on numerous websites, including gmail, that the certificate being used wasn't due yet. Is this something I need to worry about? Why does this occur? Here is a screen-shot (you ...
5
votes
3answers
400 views

import Certificate in WIndow Xp

I have created a temporary certificate. I am trying to import this certificate.I am importing Certificate to Personnel store of Local Computer and then using FindPrivateKey solution to find privatekey ...
12
votes
3answers
37k views

The certificate is not trusted because no issuer chain was provided

Could anyone explain the meaning of this error message in plain English? Should I add an exception or I should not continue on this website? Technical details: the URL is here, the browser is ...
0
votes
2answers
420 views

What limitations apply to SSL Certificates?

If I buy some certificate from, say, Thawte or Verisign etc. they have only time limits right? Or do they also have number of connections limits? I think not, and I never met this limit. But I would ...
3
votes
0answers
102 views

How do I disable the “This is probably not the site that you are looking for!” warning in Google Chrome? [duplicate]

Possible Duplicate: How do I disable the warning Chrome gives if a security certificate is not trusted? I have to regularly browse to a site where the SSL certificate appears to be ...
0
votes
0answers
184 views

How to delete or untrust all root certificates in OSX?

I right clicked on all the root certificates, but it doesn't allow me to delete them, or to untrust them all at once. How can this be done? Is it safe to do this?
-1
votes
1answer
534 views

WS2003 + IIS = Untrusted Certificate

I have configured a Windows 2003 server to allow SSL access from the Internet, particularly to enable so called Outlook Web Access, that is browse Exchange Server data from the Internet. Following ...
3
votes
5answers
17k views

Chrome is reporting GMail has Invalid Server Certificate, how do I find out who's fiddling with my certs?

Chrome is giving the following warning when ever I try and visit GMail or a bunch of other SSL sites. Invalid Server Certificate You attempted to reach mail.google.com, but the server presented an ...
1
vote
1answer
1k views

Digitally sign Gmail emails with S/MIME

When some of my contacts send mails, I see "signed by gmail" in the headers. In my mail client (Mail.app) I can see that it is a Verisign certificate. Is there a way to get a certificate from Google ...
1
vote
0answers
789 views

Revocation information not available for certificate?

I'm trying to download SQL Server 2008 R2 Enterprise Edition from MSDNAA on my Windows 7 laptop. When I attempted to start the download, I was shown the following prompt: Revocation Information ...
1
vote
1answer
741 views

Comodo-signed SSL 2.0 certificate not working with Internet Explorer

I'm having trouble getting my Comodo signed SSL Certificate to work with Internet Explorer in Apache2. Internet Explorer gives an error that there is a problem with the certificate. I tried all ...
1
vote
1answer
616 views

SVN, SSL certificate negotiation failed. However we don't use SSL certificate on our SVN Server

Can you tell me please, at my workplace we don’t use SSL certificates for SVN, however while running RUby on Rails command that checks SVN ( = Churn) still expects it and gives back the following ...
1
vote
0answers
109 views

https sites have stopped working on all browsers [duplicate]

Possible Duplicate: Continually getting Certificate Errors on all browsers I cannot open any https site on my Windows 7 computer without getting security errors (using any browser) My date ...
0
votes
2answers
373 views

How can I find out why a server's SSL certificate was revoked?

When Firefox tries to go to a site with a revoked SSL certificate, it displays an error page telling me that the certificate was revoked, but doesn't have any information about why this is. Is there ...
12
votes
3answers
5k views

Do web browsers cache SSL certificates?

Do any web browsers cache SSL server certificates? For example, if I change the SSL certificate on a web server, will all of the web browsers pick up the new certificate when they connect via SSL, or ...
0
votes
1answer
367 views

Certificate generation with Keytool, I can't confirm personal data

I'm trying to generate a self-signed certificate in order to sign some source code. I use: keytool -genkey -storepass mypass -alias lorenzos -keystore nbproject/private/keystore Then I fill in ...
6
votes
1answer
939 views

How to create private security certificates that behave like official ones?

I'm trying to get a valid secured environment for HTTP communication to behave like normal ones. I'm doing this for a restricted group of users. There is a hardware server running a web service ...
2
votes
0answers
710 views

Restore default CA Certificates on Mac OSX 10.7

I've been screwing around with my Mac, trying to install self-signed certificate as trusted for our WAN site (for which we can't justify paying for a real signed certificate) I've broken something ...
0
votes
2answers
291 views

Convergence - Notary server list?

http://perspectives-project.org/notary-servers/ -->> data.networknotary.org/http_notary_list.txt The site seems to be down. Does anybody has a list of Notary servers?
3
votes
1answer
860 views

How to find what elements on SSL page are insecure? [duplicate]

Possible Duplicate: How to tell which resources are loaded “insecurely” with Chrome using https I"m using a major tax site for this year's taxes, and I am getting the "Some ...
1
vote
1answer
3k views

How to accept a HTTPS server's invalid certificate in a given client machine?

A HTTPS server I'm browsing uses an invalid certificate. I want my machine to ignore this error and think that the certificate is valid. How to do that?
1
vote
1answer
2k views

Set Firefox to ignore certificates for localhost

I have several (web) servers set up in various different locations I can SSH to, using port forwarding to work with them pointing my Firefox to https://localhost:443/application (I use ssh user@server ...
5
votes
2answers
6k views

Trust SSL certificate to local system account

I have the following need: A windows service needs to connect to a svn repository through https. The service needs also to run as local system account for IO permissions on the machine. Now when the ...
1
vote
1answer
132 views

How to setup SSL?

I have been now researching since two days and can't find a clear answer. I have purchased a Premium SSL certificate. Once I have created a Certificate Signing Request (CSR) and send it to them to ...
1
vote
1answer
165 views

PKI Intermediate Certificate Trust

Lets say we have a business owned internal CA. Its certificate is trusted by one of the Trusted Roots that is present in all browsers. With that CA, we issue a bunch of certificates for servers in ...
7
votes
1answer
527 views

Do intermediate certificates get cached in Firefox?

If someone visits site A which has a certificate issues by GoDaddy which also supplied a intermediate certificate between GoDaddy and their CA, would Firefox cache the intermediate certificate and use ...
1
vote
3answers
1k views

What happens when 's' of HTTPS is removed?

I have this: https://194.16.222.100/ which corresponds to www.skanetrafiken.se. Using this, although the web browser says that there is a SSL error, I can access the web-page. However, when I remove ...
1
vote
3answers
1k views

Remove all root CAs from Google Chromes SSL settings?

After the disaster with diginotar I want to remove all existing root CAs from my Google Chrome installation. Can I delete the pre-installed root CA settings somehow? The settings dialog doesn't allow ...
7
votes
3answers
10k views

How do I make Safari automatically use a particular client certificate for an entire site?

Using client certificates with Safari present a number of problems: Safari asks to select a client certificate on each page of the site (annoying) Safari might even re-ask you to choose a ...
0
votes
2answers
86 views

Sign SSL certs with a master SSL cert

We have just been granted a wildcard SSL certificate for a sub-domain that we manage (e.g. *.service.test.com). Rather than use this certificate on all of our IIS servers, I have been asked to use ...
1
vote
1answer
3k views

Extract server certificate from PCKS12

I have a p12 file which apparently contains the server certificate. I need to extract the x509 server certificate from the p12 file so that I can add it to my java trust store, the problem is that I'm ...
5
votes
2answers
7k views

Firefox “invalid certificate” error for a trusted website (sec_error_reused_issuer_and_serial)

I am connecting to a website (via Firefox 6.0.2 on Mac OS X 10.6.8) I know is legitimate, and the connection worked up till yesterday. However, when I connected to day I got the following error: ...
3
votes
3answers
6k views

Security Warning: The Server you are connected to is using a security certificate that cannot be verified. The Target principal name is incorrect

I'm trying to get my mails using Outlook 2007 and POP3 using SSL but I get this security warning every time I try to receive mails: The Server you are connected to is using a security certificate ...
2
votes
1answer
492 views

Can Windows Live Writer 2011 be configured to accept self-signed SSL certificates?

I'd like to use Windows Live Writer 2011 with a blog that is configured to use self-signed SSL certificates. Unfortunately when connecting to the blog Windows Live Writer 2010 refuses to connect to ...
3
votes
1answer
4k views

One user sometimes gets an unknown certificate error opening Outlook [closed]

Let me clarify a little. This isn't an unknown certificate error it's an unknown certificate error in so much as I can't figure out where the certificate comes from. This happens on a Win 7 Enterprise ...
0
votes
2answers
2k views

How to easily deploy HTTPS in Ubuntu 10.04?

I have an Apache web server running on Ubuntu 10.04, and I would like to switch everything to HTTPS.
3
votes
1answer
417 views

How does SSL work? Isn't there a hole?

I was reading this article, specifically the "SSL in action" part. It says: When Client connects to company.com on its SSL-secured port, the company sends back its public key (and some other ...
1
vote
0answers
412 views

Self-Signed Certificate and IIS 6.0, How to generate a Client Certificate

I am looking at generating a self-signed certificate, and only allow users who has client certificate installed on my web server. I am using IIS 6.0 with selfSSL to generate my .pfx web server ...
1
vote
1answer
5k views

Apache failed to start (no errors) after first time SSL config. Do I need different command/passcode?

I'm setting up SSL for the first time. I edited my config files in sites-enabled and ran apache2ctl configtest. Got back Syntax OK. I then ran apache2ctl graceful. There weren't any errors or ...
22
votes
1answer
65k views

IE9: Permanently accept untrusted certificate

When accessing a website via HTTPS which has an untrusted certificate, Internet Explorer 9 always shows me the following error message: Is there a way to import the certificate permanently, so that ...
2
votes
1answer
8k views

How to configure GlassFish v3.1 to use SSL?

We are looking for simple step-by-step manuals how to configure GlassFish v3.1 to use SSL. We are running few legacy application under GlassFish and we hope there is no need to change them: so that ...
4
votes
2answers
425 views

What is the true level of danger when a SSL certificate is invalid?

I'm relatively tech-savvy, but I'm no security expert. To my understanding, an invalid SSL certificate is only a problem if you're going to provide some sort of potentially exploitable information to ...