Questions tagged [ssl-certificate]
The ssl-certificate tag has no usage guidance.
387
questions
0
votes
0
answers
30
views
Switch from Internet Explorer to Edge Chromium / Chrome
I'm working on a legacy application created with HTML 4 and PHP 5, my purpose is to run the application on Edge chromium, the style of the application is good on internet explorer but when I tried to ...
1
vote
1
answer
21
views
Public certificate and Private DNS
Essentially, I have private domain called abc.local and an internal site that I want to be using HTTPS.
I have no Private PKI and planning to create an SSL certificate using Public CA. Let's say I ...
- 11
0
votes
0
answers
34
views
acme-dns server hosted on DigitalOcean fails to issue wildcard certificates
I have the need to issue certbot wildcard certificates for different domain names hosted in different DNS providers.
I have installed acme-dns server on a Digital Ocean droplet and I am having ...
0
votes
0
answers
70
views
How to fix error ERR_SSL_VERSION_OR_CIPHER_MISMATCH
I'm working on a PHP and while the application works in Internet Explorer, within Edge, where I want to run this application, I get error ERR_SSL_VERSION_OR_CIPHER_MISMATCH.
How to fix this error?
0
votes
0
answers
33
views
installing SSL on 2 exchange servers
I have 2 exchange servers run for one email service, and I need to renew the SSL certificate. Do I need to issue 2 SSL, or one is enough?
If one is enough how can I replicate it between them?
- 21
0
votes
1
answer
114
views
Make Chrome trust the Linux system certificate store or select certificates via policies
I need to trust a self-signed certificate on a lot of managed Linux desktops.
I have imported them into the trust store of the OS, curl, wget etc. trust them.
However browsers like Firefox and Chrome (...
1
vote
0
answers
103
views
SSL verification doesn't happen with curl cacert option
This is my understanding of curl --cacert option :
We can make curl perform SSL verification against a custom truststore by providing a PEM file path to this option. It is mostly used when we are ...
- 111
0
votes
1
answer
102
views
openssl unable to pass -config and -signkey options in the same command
I am attempting to generate a self-signed certificate with my custom config file for openssl. However, the options -config and -signkey are generating errors as below when used in the same command.
...
- 131
-1
votes
1
answer
169
views
How to find the file location of a website's ssl certificate
I am trying to access the SSL certificate for a certain website (textnow.com) but I can't find where it is stored on my computer, even in the certificate manager.
Also, when I click on the lock next ...
- 99
0
votes
0
answers
49
views
SSL error from certain browsers/networks using Letsencrypt and apache2
Can someone help me figure out why there is a SSL error on my website?
I'm using Letsencrypt for the SSL certificate. I'll do my best to explain. Certain people have told me that mysite is ...
- 1
0
votes
0
answers
372
views
Can I use Nginx to redirect a sub sub domain to a subdomain with wildcards?
I want to be able to redirect domains like https://www.*.whanganuionline.com to the same sub domain of https://*.whanganuionline.com. We have a wildcard SSL for the domain *.whanganuionline.com but ...
0
votes
0
answers
32
views
delete subdomain NET::ERR_CERT_COMMON_NAME_INVALID
i want to delete subdomain dev.potatino.com from www.potatino.com using certbot
enter image description here
my web url : https://www.potatino.com/
NET::ERR_CERT_COMMON_NAME_INVALID
it cause this err
- 1
0
votes
0
answers
37
views
mistaccaly created extra ssl certificate generate -> NET::ERR_CERT_COMMON_NAME_INVALID
i am very new to web hosting and
you can check my website https://www.potatino.com/,
it show error : NET::ERR_CERT_COMMON_NAME_INVALID
i am using digital-ocean
my certificates currently are:
...
- 1
1
vote
1
answer
139
views
Does a reboot of Ubuntu cover all CA actions that an update-ca-certificates would do?
When I copy a new CA certificate, e.g., mycompany.crt into the directory /usr/local/share/ca-certificates, I have to do an update-ca-certificates in order to make this certificate known to the system.
...
- 111
1
vote
1
answer
919
views
Web browsers say certificates expired or not yet valid, even though the certificate is valid for today's date and system clock is accurate
I just formatted my computer and reinstalled Windows (Windows 7 Home Premium SP1), and when I try to visit certain websites (eg Wikipedia), the sites do not load. The sites fail to load in both Chrome ...
0
votes
0
answers
276
views
Certificate authority (CA) in Ubuntu 21.10 is installed but it does not work
I've installed certificates before within Windows and Ubuntu [server] and it works normally, but today I tried to install certificates on Ubuntu Desktop 21.10 over RDP + AD user, and it does not work ...
- 101
0
votes
1
answer
75
views
Chrome 96 - How to tell if a website is using an EV SSL certificate?
When using Chrome 96, how do I tell if an SSL certificate is an EV SSL certificate? Here's what Chrome does display:
- 299
-1
votes
1
answer
124
views
SSL certificates for local web applications [closed]
My understanding is that there are three ways you could go about setting up a intranet web server (local network only) for HTTPS.
Self signed SSL certificate. Cons: Browsers typically don't likes ...
- 181
0
votes
0
answers
306
views
LetsEncrypt certificate (generated thru Vesta CP) does not work for subdomain at Centos 7
1 ) Add cert
I've added up a SSL certificate for a subdomain sm.webscraping.pro (VPS, Centos 7) at VestaCP using Lets Encrypt support option, see below:
2 ) Files
The certificate files are in the ...
- 163
0
votes
0
answers
37
views
How to fix SSL issue from 30-September-2021 [duplicate]
After having this SSL error, I have search and know that it start from 30/09/2021, cause from let's encrypt.
I tried updating my windows, updating chrome, manually downloaded and added some ...
- 1,231
0
votes
0
answers
62
views
IIS Web Server Certificate Invalid
Good day,
I am trying to create a self-signed certificate for a site running on IIS 6.2, I have created and issued the certificate from my local CA server but the certificate is showing as invalid.
...
1
vote
0
answers
345
views
How to troubleshoot ERR_CERT_AUTHORITY_INVALID error on specific site, on specific device, on specific browser?
I get the ERR_CERT_AUTHORITY_INVALID error only on a specific website, only on one Android phone, only using Chrome mobile.
the site works (i.e. https is accessible without error) with every other ...
user624722
0
votes
0
answers
509
views
Unable to load CA private key when creating the intermediate pair
Following the tutorial at LINK to create the root pair and intermediate pair.
Creating the root pair works fine, but when I try to create the intermediate pair using:
openssl ca -config openssl.cnf -...
- 1
37
votes
4
answers
16k
views
cURL on Ubuntu 14: all Let's Encrypt certificates are expired (error 60)
Today out of a sudden all HTTPS requests, that my Ubuntu 14 server sends to websites with SSL certificates issued by Let's Encrypt, started to fail. The error produced by cURL is:
curl: (60) SSL ...
- 1,041
0
votes
0
answers
55
views
Why is my browser showing the wrong certificate?
I have installed wordpress on my Synology and opened up the appropriate ports on my route to expose the Synology on the internet.
I have purchased a domain from GoDaddy
I have setup a ddns using no-...
- 165
0
votes
1
answer
2k
views
How to automaticly renew ZeroSSL certificate?
How can I automaticly renew ZeroSSL certificate for nginx? I tried using the ZeroSSL bot but it uses certificates from Lets encrypt instead of ZeroSSL, but I can't use Lets Encrypt certificate, ...
0
votes
1
answer
41
views
How the SSL/TLS CA certificate will update in my device if it is renewed from server maintainer?
How the SSL/TLS CA certificate will update if it renewed from website maintainer.
Actually Rooot CA certificate expiry for 1 or 2 years, after that server maintainer should go to certificate Authority ...
- 1
0
votes
1
answer
2k
views
Can't reach apache server with ssl through haproxy
In my network i have a DNS server, a HAProxy server and 2 webservers.
When i try to go through the haproxy (getting the domain IP from the DNS server) it gives me a different error then when i go ...
- 27
0
votes
1
answer
35
views
SSL for subdomain
Can anyone please tell me, we have an SSL certificate for *.example.com but now we need separate SSL certificate for abc.example.com only for one subdomain. Is it possible? *.example.com which is ...
1
vote
1
answer
89
views
Redirection fail on Apache2 for SSL subdomain configuration
On my Apache2 server I've enabled this 3 subdomain sites.
database.example.com
<VirtualHost *:80>
ServerName database.example.com
ServerAlias www.database.example.com
DocumentRoot /usr/...
- 123
1
vote
2
answers
8k
views
How do I use the openssl command to decode a public key .PEM file?
I have my localhost TSL/SSL certificate from Chrome stored to a .PEM file. Was wondering how do I use the oppenssl command to decode it into a list of human-readable fields.
Googling this only ...
0
votes
2
answers
1k
views
SSL certificate authentication on Outlook 365 (cloud)
We can send emails using an Office 365 account from third-party devices using STARTTLS encryption on a SMTP server (port 587).
The device I am using does not support STARTTLS, only plain vanilla SMTP (...
- 73
0
votes
1
answer
160
views
Apache tomcat 9 SSL connector: have to manually write https:// the first attempt on a browser
thanks in advance for any help.
I've set up an apache tomcat 9 environment to access my site with an SSL certificate. The issue is that I need it to be able to access to the site by just typing in the ...
0
votes
1
answer
158
views
Debug CA certificates issue - DigiCert GlobalRoot CA
There is something wrong, with the way, my Linux machine checks the certificate chain, and I'm unable to debug it
Two hosts, that are currently affected, where i've tested the issue
repo.fortinet.com ...
- 154
0
votes
1
answer
918
views
Why is Chrome not trusting imported, self-signed Root CA?
I receive in Chrome the error NET::ERR_CERT_AUTHORITY_INVALID even though I imported the company's Root CA into Chrome's trust store (via settings > certificates > authorities). I imported the ...
- 111
0
votes
0
answers
59
views
Is it possible to use SSL client certificate authentication with client programs that do not specifically accommodate them?
I have set up a webserver with several self-hosted apps for my personal use. In order to make sure that I am the only person who can connect to my server, I have generated client authentication ...
- 299
1
vote
1
answer
22
views
Easy switching between multiple sets of ca certificates?
My new job requires company's custom CA certificate to be installed. It is ok until I'm working, but I don't want this CA certificate to be active during non-working time.
Are there any ways ...
- 197
1
vote
1
answer
58
views
Apache2 gives me an internal 500 error while trying to force HTTPS for the client using .htaccess files when using a self-signed certificate
I have an Ubuntu Server 20.04 LTS running Apache2 web server. As what different tutorials explain, I have created a private certificate key file and also a .crt Certificate file using the following ...
- 123
0
votes
0
answers
196
views
How come Chrome/Edge allow entering domains that have invalid domain SSL certificates?
If you browse to biji.co/ads.txt manually via Chrome/Edge it works. In Firefox though it fails:
Websites prove their identity via certificates. Firefox does not trust this site because it uses a ...
- 604
2
votes
1
answer
2k
views
How to use existing CA and Server key with EasyRsa?
i have an existing ca key and cert. how do i tell easyrsa to use that to generate server and client certs, instead of generating its own? All the docs seem to mention to do an init-pki to initialize a ...
- 1,821
0
votes
1
answer
274
views
Is it possible to remove SAN from a certificate?
I've bought a certificate from an online provider.
The CSR only contains a single SN (mysubdomain.example.com).
The certificate issued, contains the SN i provided in my CSR, but for some reason the ...
- 103
0
votes
0
answers
385
views
Internet Explorer drops "this site is not secure" whenever opening the Syncthing web app
On a machine where I don't have any admin privileges, I have installed Syncthing. But whenever I start/restart the software I get this warning in IE:
This site is not secure
Error ...
- 438
0
votes
0
answers
173
views
OpenVPN Server 2.3.1, how to switch from dh1024.pem to dh4096.pem
I had to generate new keys to use the latest version of OpenVPN client to connect to my Netgear R7000 router, as the stock ones used MD5 which is no longer supported.
I followed a guide to generate ...
- 231
-1
votes
1
answer
72
views
Enable SSL for any domain automatically
We are building a site builder and users can set their own domain. Is there any way to enable SSL for their domains automatically?
For example, a wildcard letsencrypt certificate but not just for *....
- 113
0
votes
1
answer
104
views
Having existing pair of crt/private key how can I generate new private key and new CSR for renewing the SSL certificate?
I need to renew SSL certificate for the first time. I do not have original CSR, but I do have certificate.crt/private.key pair. The system told me I need to specify the same data in CSR to be accepted....
- 421
1
vote
1
answer
2k
views
How does Chrome use .p12 certificates?
When I import a .p12 into Chrome, it requires a password. Once supplied, it is now stored in Chrome's key store and I never need to import my password again to use it.
How does Chrome manage this? ...
- 203
2
votes
0
answers
1k
views
Self-signed SSL Certificate for Nginx not working with Chrome
I've generated a Self-signed SSL Certificate and Authority for my localhost nginx dev environment and imported the Certificate Authority in both Firefox and Chrome.
- Firefox: works perfectly, the ...
- 121
1
vote
1
answer
346
views
Error Converting .DER file to .PEM file
I'm trying to convert this file in DER format to PEM.
Using openssl.exe utility (tried in versions 0.98.1 and 1.02 of openssl) I tried the following commands:
openssl x509 -inform der PA_AD_RB_V2_3....
- 113
0
votes
1
answer
253
views
Any Hotfix available for Windows 7 Ultimate or Windows 7 (no service packs installed) for auto updating Root certificates
I am aware that a hotfix is available for Windows 7 service pack 1 "Support for urgent Trusted Root updates for Windows Root Certificate Program in Windows", but could not find a similar ...
- 783
1
vote
1
answer
46
views
Which certificate files should I share?
I have used acme.sh (highly recommended) for generating certificates. I have got several files here in which I do not understand which should I share and which should I hold back.
These are the files ...
- 175