Questions tagged [ssl-certificate]
The ssl-certificate tag has no usage guidance.
0
votes
1answer
8 views
Chrome: NET::ERR_CERT_DATE_INVALID for self signed certificate?
I have a self signed certificate that doesn't expire for a year, but Chrome is complaining with:
Your connection is not private
NET::ERR_CERT_DATE_INVALID
Why is this happening if the certificate ...
0
votes
0answers
19 views
Client authentication with certificate using Paho javascript library [closed]
Is it possible to use client authentication with a certificate using Paho javascript library?
0
votes
0answers
34 views
How to connect to my Synology NAS using OpenVPN?
I have a Synology NAS at home. I have installed the VPN Server package and enabled Open VPN. I don't want to use the QuickConnect and I want to minimise the number of port for port forwarding. I ...
0
votes
0answers
11 views
Not able to access Secure SSRS report on port 443
I facing issue with SSRS report on port 443. I can configure URL but when I trying to access in in local computer or from remote server I am getting below message.
This page can’t be displayed
Make ...
-1
votes
0answers
20 views
K7 Total Security not allowing me to view ssl certificates from any domain
Whenever i try to view the ssl certificate details(by clicking the padlock), I cant view the actual issuer as k7 total security is just replacing with K7 web proxy. Tried disabling k7, removed k7 ...
0
votes
1answer
58 views
Create Certificate Signing Request (CSR) with Subject Alternative Name (SAN) on Windows without third party tools
I need to create a CSR on Windows with Subject Alternative Names. Normally I use the built in feature from IIS but it does not give the alternative to use Subject Alternative Name (SAN).
I know that ...
0
votes
1answer
53 views
netsh “Error: 87 The parameter is incorrect” when using hostnameport
I am using the following netsh command successfully:
netsh http add sslcert ipport=127.0.0.1:9000 appid={7B8DB713-2C51-41B5-AE6F-6DAA07833DBE} certhash=69fed34fdf164e7feac5e17823b94d0f30ab05c5
but ...
0
votes
0answers
37 views
Setting up trustworthy local SSL certificate for Nginx [duplicate]
I have a local deployment of Nginx to dev-test a website with self-signed certificate and I am constantly getting into Chrome's:
Your connection is not private
NET::ERR_CERT_AUTHORITY_INVALID
...
2
votes
1answer
100 views
Bridge Network in Windows 10 Generates ERR_SSL_BAD_RECORD_MAC_ALERT in Chrome
I have a weird problem, for which I researched a lot, but no luck!
I have created an External Switch in Hyper-V, which in turn creates a network bridge on my Wifi adapter. I'm facing this issue that, ...
0
votes
1answer
20 views
Why would a website include both subdomains and a wildcard in SAN field?
If you visit the XDA developers website and see the certificate information, they list both *.XDA-developers.com and each subdomain individually in the SAN field.
If they used a wildcard, why do they ...
-1
votes
2answers
193 views
How do I fix 'the SSL server certificate authority is not trusted' message in browser?
It started a few weeks ago. One of sites gives me a message
NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM
You attempted to reach some_web_site.org, but the server presented a certificate signed using a ...
0
votes
0answers
39 views
ERR_CERT_WEAK_SIGNATURE_ALGORITHM Error
Many websites I try going to, I get the following error message:
I tried doing the following things:
Delete history, cookies, etc.
Clear SSL State
ipconfig /flushdns
ipconfig /renew
I get the ...
0
votes
0answers
291 views
Error creating new authz :: DNS name does not have enough labels
When I try to generate a new certificate then its throwing error. Please check the following:
sudo certbot --apache
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Which names would you ...
1
vote
1answer
90 views
Facebook and Instagram images are broken in some browsers
On my main computer (Windows 10, 1803, 17134.165) no images or videos on Facebook or Instagram are displayed when using most browsers.
All of the images and videos (from both sites) are being served ...
0
votes
0answers
554 views
Vagrant: SSL verification error behind corporate proxy
My company uses a proxy.
I am using a Windows 10 notebook, 64 bit. Vagrant version 2.1.1.
When trying to install a Vagrant plugin, e.g.
vagrant plugin install vagrant-proxyconf
I see the following ...
2
votes
1answer
310 views
Tomcat SSL error after setting up certificate
After generating certificate and key pem file using openssl on ubuntu 16.04 I configured tomcat connector in server.xml file as given below but, when I start tomcat I get an error.
In the browser ...
0
votes
2answers
49 views
Deactivating PEM Files
To this time, I could not find this question on somewhere else. If there is one, please let me know.
One of my old employee got used to use a pem file we generated (Idk when) to login in our freebsd ...
0
votes
0answers
309 views
SSL operation failed with code 1 | Self signed certificate in certificate chain
Specification: Windows 10 | Wamp | PHP 7.1.9
Trying to Install Laravel 5.5 using the documentation they provided online.
Each time I run "composer global require "laravel/installer"" I get the below ...
1
vote
1answer
85 views
Is it possible to sign a message with an SSL certificate for a website?
I want to take my website SSL certificate and sign a message so someone else can take my website SSL certificate and my message and verify it was signed using my certificate.
How can I sign a message ...
3
votes
2answers
2k views
Any way to add exception on chrome for ERR_CERT_SYMANTEC_LEGACY error?
We have an intranet site with outdated (according to chrome) certificates
It throws ERR_CERT_SYMANTEC_LEGACY error
Is it possible to add an exception for url or domain?
I have tried importing ...
0
votes
0answers
41 views
Why does Windows show the Common Name rather than the Organisation for “Issued To” when viewing a SSL certificate
As per picture below, why does Windows use the CN (common name) rather than the O (organisation) for "Issued to:" when viewing an SSL certificate in Windows
0
votes
0answers
488 views
OpenVPN on CentOS failing TLS handshake
I'm trying to set up an OpenVPN on Centos, following the DigitalOcean guide https://www.digitalocean.com/community/tutorials/how-to-setup-and-configure-an-openvpn-server-on-centos-7
And I've done all ...
1
vote
3answers
5k views
How to make Chrome trust Windows system root CA certificate?
Our corporate machine administrators distribute corporate root CA certificates via Active Directory, but Chrome does not trust system certificates by default. Is there any way to tweak Chrome to trust ...
0
votes
0answers
22 views
Require password for ssl user certificates every time
I get this screen when I login in using my SSL user certificate:
However, I am not asked for the certificate password nor my phone's pin.
How can I make Android require me to enterSSLpassword or ...
0
votes
0answers
221 views
How to execute a exe on linux using wine with many arguments (openssl x590AT)
I need to execute this command in a linux server, i command line using wine:
sudo wine /var/myfolder/openssl.exe x509AT -days 355 -AA /var/myfolder/cert/certificate.crt -AAkey /var/myfolder/cert/...
128
votes
3answers
21k views
Why does my browser think that https://1.1.1.1 is secure?
When I visit https://1.1.1.1, any web browser I use considers the URL to be secure.
This is what Google Chrome shows:
Normally, when I try to visit an HTTPS site via its IP address, I get a security ...
0
votes
0answers
63 views
Connection issue using IP address but works with server name as this relates to certificate Subject Alternative Name property
I am using a trying to connect to a server using two "connection modes", one which does not require a certificate to be installed and one which does.
When I choose the mode which does not use ...
0
votes
1answer
46 views
Certificate missing SAN section
My certificate request has SAN:
» openssl req -in csr/example.com.csr -noout -text
Certificate Request:
Data:
Version: 0 (0x0)
Subject: CN=example.com, O=Something, C=XX, ST=YYY, ...
10
votes
3answers
12k views
How to fix Firefox 59 no longer accepting my self signed SSL certificate on .dev virtualhost
On my local Apache environment I have a site that requires SSL for development, so I have been using a self signed certificate. The local site has worked fine in Firefox and Chrome until now, but ...
0
votes
0answers
154 views
Receiving SEC_ERROR_UNKNOWN_ISSUER when Attempting To Access Google Analytics
Whenever I attempt to access Google Analyics, I receive an "Insecure Connection" message.
In more detail:
analytics.google.com uses an invalid security certificate.
The certificate is not trusted ...
0
votes
0answers
400 views
win10 reinstall\restore all default ssl certificates
Virus or software with a bug Delete all / some of the certificates wich come by default with win10 OS.
How can I restore the situation easily?
I did not find a way to export / import from another ...
0
votes
1answer
247 views
SSL Pinning - Bypassing Pinning that uses .pem
Im attempting to test Spotify and it uses a "cacert.pem" file signed by Equifax Secure Certificate Authority.
Is it possible to bypass that and get the requests? At the moment im unable to sniff it. (...
0
votes
0answers
101 views
Alert unknown ca
This is my stunnel conf:
» cat dev_https
pid =
cert = stunnel.pem
foreground = yes
debug = 5
verify = 0
[https]
accept=44110
connect=44111
I am using a self generated ...
1
vote
0answers
56 views
Disabling the self-signed certificate exception for Java
I'm trying to access a Java Applet over https, the big burden is the applet is self-signed (which I currently have no control over) and the https port changes every time because it is behind a private ...
0
votes
0answers
257 views
SSL issue when trying curl with -k
I am running into some kind of SSL issue, when trying to run a curl command against my service running on port 443.
here is the command i ran
curl -k -v https://10.10.10.10
and this is my output
* ...
1
vote
0answers
230 views
Strongswan ikev2: https stops working on client when connected to vpn server
I have set up strongswan 5.3.3-1 on OpenWRT 15.05 based router.
Followed this tutorial
The certificate for Server side authentication is issued by Let's Encrypt - I use it for my synology box and it ...
0
votes
0answers
20 views
Set Certificate Revocation List database in YaST2?
I am trying to un-revoke a client certificate in a CRL by regenerating the CRL. I have a .cnf config file that specifies the text file database that the CRL uses to keep track of which client ...
0
votes
0answers
252 views
CentOS 5 ssl update failure
On Centos 5 I'm trying to download via HTTPS but I'm getting cert errors:
$ curl https://nixos.org/nix/install
curl: (60) SSL certificate problem, verify that the CA cert is OK. Details:
error:...
0
votes
1answer
307 views
Making a ssl connection with only root CA in the trust store
I have a SSL client/server application.
My SSL client has only one root certificate authority (lets call it rootCA1) configured in its trust store.
However my ssl server produces a certificate that is ...
0
votes
1answer
215 views
Difficulty importing a .crt self signed certificate in Windows 10
I am trying to import a .crt certificate using the wizard in MMC. When I try to import it I receive the error "The file type is not recognisable. Select another file."
Opening the file in Notepad, it ...
0
votes
0answers
54 views
Trusting Certificate on iOS
I am working on a proxy implementation for handling traffic from a set of iOS devices. I have full access to the devices to install my proxy's root certificate on the device and add it as trusted, as ...
0
votes
1answer
53 views
Should I register with A record or with CNAME?
I have an app service and the client gave me a SSL certificate for both x.com and www.x.com.
Should I register it in the DNS as a CNAME or as an A record?
In Azure (app service) I have access to ...
0
votes
1answer
246 views
Forcing Firefox to present the wrong client certificate
I'm developing a web application which expects clients to authenticate with client certificates. In order to test its behavior, I want to be able to throw wrong certificates at it. Of course I could ...
0
votes
0answers
3k views
NET::ERR_CERT_AUTHORITY_INVALID on Chrome
I have generated self signed certificate for my server. After importing root CA cert to my browser, I was trying to access my website via Chrome, I am however getting "NET::ERR_CERT_AUTHORITY_INVALID" ...
1
vote
1answer
2k views
How to view SSL-certificate details in Firefox mobile
In the desktop versions of Firefox it's possible to view details of a sites SSL-certificate by clicking on the lock symbol and then navigating through the popup.
Is there a way of viewing the ...
1
vote
0answers
2k views
certificate verify failed - Open VPN
When establishing open vpn connection, i am facing error "TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed"
SSL ...
0
votes
0answers
146 views
Certificate chain processed, but terminated in XP's Outlook Express
I know someone with Windows XP (SP3) who suddenly can no longer send messages in Gmail via Outlook Express without answering "yes" to the following message:
There is no problem whatsoever receiving ...
1
vote
0answers
110 views
Add exception to the list of disabled signature algorithms on Firefox?
I'm currently accessing some internal websites with Firefox. The certificates for the websites are signed with RSASSA-PSS, which is trusted by Chrome but not by Firefox. I understand that Mozilla ...
0
votes
0answers
47 views
Self-signed certificate for IIS
I want to self-sign a certificate for Internet Information Services(IIS). I want more than just a Common Name. I want the Country, Organization, Organizational Unit, State or Province, Locality, and ...
0
votes
1answer
200 views
GlobalSign R1 not in default trust on CentOS. Why?
It seems GlobalSign's R1 root certificate is not in the default trust CA in CentOS 7.3.
I check the list of Trusted CA's like this:
awk -v cmd='openssl x509 -noout -subject' '
/BEGIN/{close(cmd)...
