Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ssl-certificate]

The tag has no usage guidance.

0
votes
1answer
8 views

Chrome: NET::ERR_CERT_DATE_INVALID for self signed certificate?

I have a self signed certificate that doesn't expire for a year, but Chrome is complaining with: Your connection is not private NET::ERR_CERT_DATE_INVALID Why is this happening if the certificate ...
0
votes
0answers
19 views

Client authentication with certificate using Paho javascript library [closed]

Is it possible to use client authentication with a certificate using Paho javascript library?
0
votes
0answers
34 views

How to connect to my Synology NAS using OpenVPN?

I have a Synology NAS at home. I have installed the VPN Server package and enabled Open VPN. I don't want to use the QuickConnect and I want to minimise the number of port for port forwarding. I ...
0
votes
0answers
11 views

Not able to access Secure SSRS report on port 443

I facing issue with SSRS report on port 443. I can configure URL but when I trying to access in in local computer or from remote server I am getting below message. This page can’t be displayed Make ...
-1
votes
0answers
20 views

K7 Total Security not allowing me to view ssl certificates from any domain

Whenever i try to view the ssl certificate details(by clicking the padlock), I cant view the actual issuer as k7 total security is just replacing with K7 web proxy. Tried disabling k7, removed k7 ...
0
votes
1answer
58 views

Create Certificate Signing Request (CSR) with Subject Alternative Name (SAN) on Windows without third party tools

I need to create a CSR on Windows with Subject Alternative Names. Normally I use the built in feature from IIS but it does not give the alternative to use Subject Alternative Name (SAN). I know that ...
0
votes
1answer
53 views

netsh “Error: 87 The parameter is incorrect” when using hostnameport

I am using the following netsh command successfully: netsh http add sslcert ipport=127.0.0.1:9000 appid={7B8DB713-2C51-41B5-AE6F-6DAA07833DBE} certhash=69fed34fdf164e7feac5e17823b94d0f30ab05c5 but ...
0
votes
0answers
37 views

Setting up trustworthy local SSL certificate for Nginx [duplicate]

I have a local deployment of Nginx to dev-test a website with self-signed certificate and I am constantly getting into Chrome's: Your connection is not private NET::ERR_CERT_AUTHORITY_INVALID ...
2
votes
1answer
100 views

Bridge Network in Windows 10 Generates ERR_SSL_BAD_RECORD_MAC_ALERT in Chrome

I have a weird problem, for which I researched a lot, but no luck! I have created an External Switch in Hyper-V, which in turn creates a network bridge on my Wifi adapter. I'm facing this issue that, ...
0
votes
1answer
20 views

Why would a website include both subdomains and a wildcard in SAN field?

If you visit the XDA developers website and see the certificate information, they list both *.XDA-developers.com and each subdomain individually in the SAN field. If they used a wildcard, why do they ...
-1
votes
2answers
193 views

How do I fix 'the SSL server certificate authority is not trusted' message in browser?

It started a few weeks ago. One of sites gives me a message NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM You attempted to reach some_web_site.org, but the server presented a certificate signed using a ...
0
votes
0answers
39 views

ERR_CERT_WEAK_SIGNATURE_ALGORITHM Error

Many websites I try going to, I get the following error message: I tried doing the following things: Delete history, cookies, etc. Clear SSL State ipconfig /flushdns ipconfig /renew I get the ...
0
votes
0answers
291 views

Error creating new authz :: DNS name does not have enough labels

When I try to generate a new certificate then its throwing error. Please check the following: sudo certbot --apache Saving debug log to /var/log/letsencrypt/letsencrypt.log Which names would you ...
1
vote
1answer
90 views

Facebook and Instagram images are broken in some browsers

On my main computer (Windows 10, 1803, 17134.165) no images or videos on Facebook or Instagram are displayed when using most browsers. All of the images and videos (from both sites) are being served ...
0
votes
0answers
554 views

Vagrant: SSL verification error behind corporate proxy

My company uses a proxy. I am using a Windows 10 notebook, 64 bit. Vagrant version 2.1.1. When trying to install a Vagrant plugin, e.g. vagrant plugin install vagrant-proxyconf I see the following ...
2
votes
1answer
310 views

Tomcat SSL error after setting up certificate

After generating certificate and key pem file using openssl on ubuntu 16.04 I configured tomcat connector in server.xml file as given below but, when I start tomcat I get an error. In the browser ...
0
votes
2answers
49 views

Deactivating PEM Files

To this time, I could not find this question on somewhere else. If there is one, please let me know. One of my old employee got used to use a pem file we generated (Idk when) to login in our freebsd ...
0
votes
0answers
309 views

SSL operation failed with code 1 | Self signed certificate in certificate chain

Specification: Windows 10 | Wamp | PHP 7.1.9 Trying to Install Laravel 5.5 using the documentation they provided online. Each time I run "composer global require "laravel/installer"" I get the below ...
1
vote
1answer
85 views

Is it possible to sign a message with an SSL certificate for a website?

I want to take my website SSL certificate and sign a message so someone else can take my website SSL certificate and my message and verify it was signed using my certificate. How can I sign a message ...
3
votes
2answers
2k views

Any way to add exception on chrome for ERR_CERT_SYMANTEC_LEGACY error?

We have an intranet site with outdated (according to chrome) certificates It throws ERR_CERT_SYMANTEC_LEGACY error Is it possible to add an exception for url or domain? I have tried importing ...
0
votes
0answers
41 views

Why does Windows show the Common Name rather than the Organisation for “Issued To” when viewing a SSL certificate

As per picture below, why does Windows use the CN (common name) rather than the O (organisation) for "Issued to:" when viewing an SSL certificate in Windows
0
votes
0answers
488 views

OpenVPN on CentOS failing TLS handshake

I'm trying to set up an OpenVPN on Centos, following the DigitalOcean guide https://www.digitalocean.com/community/tutorials/how-to-setup-and-configure-an-openvpn-server-on-centos-7 And I've done all ...
1
vote
3answers
5k views

How to make Chrome trust Windows system root CA certificate?

Our corporate machine administrators distribute corporate root CA certificates via Active Directory, but Chrome does not trust system certificates by default. Is there any way to tweak Chrome to trust ...
0
votes
0answers
22 views

Require password for ssl user certificates every time

I get this screen when I login in using my SSL user certificate: However, I am not asked for the certificate password nor my phone's pin. How can I make Android require me to enterSSLpassword or ...
0
votes
0answers
221 views

How to execute a exe on linux using wine with many arguments (openssl x590AT)

I need to execute this command in a linux server, i command line using wine: sudo wine /var/myfolder/openssl.exe x509AT -days 355 -AA /var/myfolder/cert/certificate.crt -AAkey /var/myfolder/cert/...
128
votes
3answers
21k views

Why does my browser think that https://1.1.1.1 is secure?

When I visit https://1.1.1.1, any web browser I use considers the URL to be secure. This is what Google Chrome shows: Normally, when I try to visit an HTTPS site via its IP address, I get a security ...
0
votes
0answers
63 views

Connection issue using IP address but works with server name as this relates to certificate Subject Alternative Name property

I am using a trying to connect to a server using two "connection modes", one which does not require a certificate to be installed and one which does. When I choose the mode which does not use ...
0
votes
1answer
46 views

Certificate missing SAN section

My certificate request has SAN: » openssl req -in csr/example.com.csr -noout -text Certificate Request: Data: Version: 0 (0x0) Subject: CN=example.com, O=Something, C=XX, ST=YYY, ...
10
votes
3answers
12k views

How to fix Firefox 59 no longer accepting my self signed SSL certificate on .dev virtualhost

On my local Apache environment I have a site that requires SSL for development, so I have been using a self signed certificate. The local site has worked fine in Firefox and Chrome until now, but ...
0
votes
0answers
154 views

Receiving SEC_ERROR_UNKNOWN_ISSUER when Attempting To Access Google Analytics

Whenever I attempt to access Google Analyics, I receive an "Insecure Connection" message. In more detail: analytics.google.com uses an invalid security certificate. The certificate is not trusted ...
0
votes
0answers
400 views

win10 reinstall\restore all default ssl certificates

Virus or software with a bug Delete all / some of the certificates wich come by default with win10 OS. How can I restore the situation easily? I did not find a way to export / import from another ...
0
votes
1answer
247 views

SSL Pinning - Bypassing Pinning that uses .pem

Im attempting to test Spotify and it uses a "cacert.pem" file signed by Equifax Secure Certificate Authority. Is it possible to bypass that and get the requests? At the moment im unable to sniff it. (...
0
votes
0answers
101 views

Alert unknown ca

This is my stunnel conf: » cat dev_https pid = cert = stunnel.pem foreground = yes debug = 5 verify = 0 [https] accept=44110 connect=44111 I am using a self generated ...
1
vote
0answers
56 views

Disabling the self-signed certificate exception for Java

I'm trying to access a Java Applet over https, the big burden is the applet is self-signed (which I currently have no control over) and the https port changes every time because it is behind a private ...
0
votes
0answers
257 views

SSL issue when trying curl with -k

I am running into some kind of SSL issue, when trying to run a curl command against my service running on port 443. here is the command i ran curl -k -v https://10.10.10.10 and this is my output * ...
1
vote
0answers
230 views

Strongswan ikev2: https stops working on client when connected to vpn server

I have set up strongswan 5.3.3-1 on OpenWRT 15.05 based router. Followed this tutorial The certificate for Server side authentication is issued by Let's Encrypt - I use it for my synology box and it ...
0
votes
0answers
20 views

Set Certificate Revocation List database in YaST2?

I am trying to un-revoke a client certificate in a CRL by regenerating the CRL. I have a .cnf config file that specifies the text file database that the CRL uses to keep track of which client ...
0
votes
0answers
252 views

CentOS 5 ssl update failure

On Centos 5 I'm trying to download via HTTPS but I'm getting cert errors: $ curl https://nixos.org/nix/install curl: (60) SSL certificate problem, verify that the CA cert is OK. Details: error:...
0
votes
1answer
307 views

Making a ssl connection with only root CA in the trust store

I have a SSL client/server application. My SSL client has only one root certificate authority (lets call it rootCA1) configured in its trust store. However my ssl server produces a certificate that is ...
0
votes
1answer
215 views

Difficulty importing a .crt self signed certificate in Windows 10

I am trying to import a .crt certificate using the wizard in MMC. When I try to import it I receive the error "The file type is not recognisable. Select another file." Opening the file in Notepad, it ...
0
votes
0answers
54 views

Trusting Certificate on iOS

I am working on a proxy implementation for handling traffic from a set of iOS devices. I have full access to the devices to install my proxy's root certificate on the device and add it as trusted, as ...
0
votes
1answer
53 views

Should I register with A record or with CNAME?

I have an app service and the client gave me a SSL certificate for both x.com and www.x.com. Should I register it in the DNS as a CNAME or as an A record? In Azure (app service) I have access to ...
0
votes
1answer
246 views

Forcing Firefox to present the wrong client certificate

I'm developing a web application which expects clients to authenticate with client certificates. In order to test its behavior, I want to be able to throw wrong certificates at it. Of course I could ...
0
votes
0answers
3k views

NET::ERR_CERT_AUTHORITY_INVALID on Chrome

I have generated self signed certificate for my server. After importing root CA cert to my browser, I was trying to access my website via Chrome, I am however getting "NET::ERR_CERT_AUTHORITY_INVALID" ...
1
vote
1answer
2k views

How to view SSL-certificate details in Firefox mobile

In the desktop versions of Firefox it's possible to view details of a sites SSL-certificate by clicking on the lock symbol and then navigating through the popup. Is there a way of viewing the ...
1
vote
0answers
2k views

certificate verify failed - Open VPN

When establishing open vpn connection, i am facing error "TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed" SSL ...
0
votes
0answers
146 views

Certificate chain processed, but terminated in XP's Outlook Express

I know someone with Windows XP (SP3) who suddenly can no longer send messages in Gmail via Outlook Express without answering "yes" to the following message: There is no problem whatsoever receiving ...
1
vote
0answers
110 views

Add exception to the list of disabled signature algorithms on Firefox?

I'm currently accessing some internal websites with Firefox. The certificates for the websites are signed with RSASSA-PSS, which is trusted by Chrome but not by Firefox. I understand that Mozilla ...
0
votes
0answers
47 views

Self-signed certificate for IIS

I want to self-sign a certificate for Internet Information Services(IIS). I want more than just a Common Name. I want the Country, Organization, Organizational Unit, State or Province, Locality, and ...
0
votes
1answer
200 views

GlobalSign R1 not in default trust on CentOS. Why?

It seems GlobalSign's R1 root certificate is not in the default trust CA in CentOS 7.3. I check the list of Trusted CA's like this: awk -v cmd='openssl x509 -noout -subject' ' /BEGIN/{close(cmd)...