Questions tagged [ssl-certificate]
The ssl-certificate tag has no usage guidance.
354
questions
1
vote
0answers
41 views
How do I restrict access to all ports with source's PublicKey like SSH does?
I want a server to block any and all incoming traffic on all ports with the exception of the traffic from those machines which can be (and are right there and then regardless of the port being ...
-1
votes
0answers
44 views
export cert via details in a SSL certificate using powershell
Any experts know what code command need to be done to export the cert via cert details selection such as key usage? which means to export certs contains only Digital Signature or Key Encipherment?
my ...
1
vote
0answers
34 views
TLS 1.2 connection with lftp
I'm trying to connect to a server from my RHEL 7 server that only accepts FTPS, TLS 1.2 connections. The only client available seems to be lftp. When I try to connect, it hangs on "TLS negotiation......
1
vote
1answer
19 views
SSL certificat returned by a server and fields interpretation
I have obtained the following certificate (I have just paste here, a part of it) via this command : openssl s_client -showcerts -connect ip:port
1 s:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure ...
0
votes
0answers
23 views
Power BI Google Cloud Postgresql 12 SQL SSL Connection Error
I'm trying to connect Microsoft's Power Bi to a Postgresql SSL database that I created on Google Cloud SQL (GCloud).
As soon as you ask to generate the client cert it generates 3 .pem files:
client-...
0
votes
0answers
32 views
How to retrieve a server certificate by just knowing the root CA
I have a client application in production which make a TLS connexion to a server.
This server will get certified by a new CA in a short future (soon Amazon TrustStore service previously it was ...
0
votes
0answers
51 views
Imported certificates go to other people windows 10
Edit: 27/04/2020
We came to the conclusion that the certificate stopped working as it does not work anymore on the old system either. So we keep working on "corrupted" certificates that may never ...
2
votes
1answer
54 views
How to allow specific SSL client certificates in Nginx?
Nginx's ssl_client_certificate and ssl_trusted_certificate directives can be used to allow client certificates signed by a given authority. But how can I allow specific certificates? I would like to ...
0
votes
1answer
21 views
Keytool -import ssl certificate from personal CA on jboss 4.0.5 server
What i am trying to do for a few days already, and it drives me crazy, is to make a java website based on jboss 4.0.5 server to use ssl certificate(https). For this I'm following these instructions:
...
0
votes
0answers
11 views
AWS SSL installation issue
I hope you all are good. I am facing some weird problem in aws. I have an instance running. I want to create ssl certificate for it. For that, I used certificate manager, load balancer and route 53 ...
0
votes
0answers
26 views
Chrome can't load HTTPS IP
I have so many applications that need to load in Chrome via IP but in https
OpenVas
Nessus
Kibana and more ..
I kept getting this on each one of them, there is no option for me to click "Visit ...
0
votes
1answer
114 views
openssl how to generate CSR with S/MIME Capabilities
what req_extensions should I pass to openssl to include "S/MIME Capabilities" into my CSR?
Please see example openssl s_client outpout below from installed certificate.
I aware of
"X509v3 ...
0
votes
0answers
39 views
How to import Sophos SSL certificate in Kali Linux
My College has put on a Sophos Firewall and we were told to import SSL certificate in Browsers to access the internet. Even though I have done it for the browsers but my Kali is not able to connect to ...
0
votes
1answer
117 views
How to renew or refresh SSL certificates of yum “rhui” repositories in GCP?
Running RHEL 7 in GCP and trying to install packages with yum, all rhui repositories give an error like:
https://cds.rhel.updates.googlecloud.com/pulp/repos/content/dist/rhel/rhui/server/7/7Server/...
0
votes
0answers
12 views
Manually renew Let's Encrypt SSL via Plesk - considerations?
I need to update the Let's Encrypt email addresses on 10 microsites for my client, in Plesk. The only way Plesk allows this to be done, is to renew the certificate manually. I tested this on one ...
0
votes
0answers
437 views
Wildcard cert on Synology NAS
I'm running Synology DSM 6.2.2-24922 Update 4 and I wish to setup a wildcard cert with Let's Encrypt. It has been over a year since I've tried this and that time it didn't go so well. I can remember I ...
0
votes
0answers
41 views
ncat server with self-signed certificate accepts connections from ncat client without cetificate
When starting a ncat server with self-signed certificate i was still able to connect to the server as a ncat client without using the certificate. The command to start the server:
ncat --listen --ssl ...
0
votes
0answers
14 views
Renewed RootCA doesn't verify child certs
So i have a self signed rootCA which is expiring soon, so i created a new csr with updated info about the cert and company but im still using the same private key.
I create the new rootCA and install ...
0
votes
0answers
119 views
Websphere TLS handshake issue null cert chain
I'm having an issue with an application using TLSv1.2 for authentication.If I enforce TLSv1.2 from WebSphere, the connection breaks -> handshake failure, it works only when I let it choose the ...
2
votes
1answer
114 views
Can I create client certificates from a server certificate that I buy from a certificate authority?
If i buy a certificate from Godaddy or a trusted certificate authority for my website. let's say example.com and i want to issue client certificates so i can validate certificates of clients ...
0
votes
0answers
333 views
SSL Certificate issues for everything
I recently factory reset my Windows 10 computer. I can no longer access Internet on any app. I tried chrome, steam, ie. I get "invalid SSL certificate" or "ERR_PROXY_CERTIFICATE_INVALID". This seems ...
1
vote
0answers
31 views
Angularjs PUT & DELETE Aborted on PreFlight with IE11
Our AngularJs WebApp communicates CORS CRUD operations against a WebApi service hosted in IIS that is SSL, and requires Certificates. All Verbs - GET, POST, PUT, DELETE, work in Chrome, but... IE11 ...
0
votes
1answer
69 views
SSL Protocol error in jmeter recording
I am trying to record Android app scenario through Jmeter.
Have enabled the proxy and applied the certificates, but in-between the recording , i am seeing SSL error issue where i am unable to proceed ...
2
votes
1answer
707 views
Using HTTPS in client browsers on a local network without internet connection
I'm working on a web application running on a server. There will be clients (smartphone browsers) connecting to the server via HTTPS over a WiFi that wouldn't be connected to the internet. It would ...
2
votes
1answer
337 views
Accept self-signed certificate system-wide without installing as root CA
For an intranet server I use a self-signed certificate which I want to trust system-wide. I added the certificate exception to Firefox, but this is not possible in Chrome, console applications, IDEs, ....
0
votes
1answer
263 views
How do I solve the certificate error in debian. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
So I am trying to install React on my computer which runs ChromeOS but I am running debian side by side. When I try to execute the command curl -sL https://deb.nodesource.com/setup_12.x | sudo -E bash ...
1
vote
1answer
11k views
Website spits out PR_CONNECT_RESET_ERROR in firefox's incognito
So I have a site that uses letsencrypt and ssl works fine when I'm browsing my site in firefox. The moment I try browsing my site using incognito mode in firefox my browser throws this secure ...
0
votes
0answers
11 views
Problems with certificate validation on Ubuntu 16.04LTS and Cloudflare
I am running a webserver on Ubuntu 16.04 LTS. My CMS relies for updates on a site hosted with a Cloudflare certificate. My problem is that is started recently to be not accessible anymore.
When I ...
0
votes
1answer
103 views
How to remove Server Temp Key from SSL Certificate Chain
When I test my connection to my server:
echo q | openssl s_client -connect abc.def.com:8443
I get back (extract):
No client certificate CA names sent
Peer signing digest: SHA512.
Server ...
2
votes
0answers
42 views
Since installing an SSL certificate the featured images from my portfolio aren't displaying on my website homepage
I'm using Wordpress for my website with a Phlox theme and the Elementor and Phlox plug-ins. Since installing the SSL certificate the feature images are not displaying on my home page. The area it ...
0
votes
0answers
31 views
How to compare 2 SSL Certs
I'm having a problem, which I'm trying to fix from last few days.
We have a production server, which has a cert and it supports TLS1, TSL1.1, TLS1.2.
We also have a staging server, which is used for ...
0
votes
0answers
49 views
Update certbot organization on already existing certificate NGINX
On nginx is there a way to update the organization name on a already existing certificate. There appears to be no command in certbot and I can't use the auto I can only use certonly.
sudo certbot ...
0
votes
1answer
416 views
Configuring Certbot for my website: “Network is unreachable”
I am trying to add SSL certificate on my website, I use for this Cerbot from this guide. And when I am typing this command
sudo certbot --nginx
I see this error:
root@vps685363:~# sudo certbot --...
0
votes
0answers
48 views
Does Google Chrome enforces Certificate Transparency check?
Does Chrome enforces CT checks? If so, what is the point of Expect-CT header that servers send?
My understanding is that servers that want to opt in enforcing CT policy send this header. However, it ...
0
votes
0answers
244 views
Remove security exception on Firefox Android 68
I have a small website with a self-signed cert that I'm running on a private network, accessible on my phone through a VPN.
I connected to the website before importing my custom CA certificate in ...
1
vote
0answers
30 views
How do I manually connect to a WPA2 EAP-TLS school network using cloudpath on linux?
I’ve been trying to join my school’s wifi network with little success.
Our school uses Cloudpath Enrollment System (used to be called Xpressconnect or something). All devices have to install and run ...
0
votes
0answers
31 views
Trusted Root Certificate
I want to use an SSL certificate, or any certificate that is good, in which I can use to have better security in my emails and also for identification purposes. I have never done this and was looking ...
0
votes
0answers
37 views
SSL Certficate installation
I just installed an SSL Certificate that I bought from name.com on my Windows VPS about 3 days ago.
But today I have to open my website only with VPN and I can't open it without VPN and Iran's IP! I'...
0
votes
1answer
71 views
SSL lock invalid certificate
So I installed a self signed root certificate on my windows and then accessed my domain using https, chrome acknowledges the certificate from my domain but still has a not secure error instead of ...
0
votes
0answers
107 views
Owncloud - Collabora Online error: cURL error 77: error setting certificate verify locations
I received the following error message at the Docker Owncloud / collabora:
Blockquote Collabora Online unbekannter Fehler: cURL error 77: error setting certificate verify locations: CAfile: /tmp/...
0
votes
1answer
563 views
Docker CA Cert Issue on docker login
Please note before marking this as a duplicate, this question HAS been asked elsewhere but the answers provided are not solving my problem.
I am following the instructions at: https://docs.docker.com/...
0
votes
0answers
123 views
How do I disable certificate checking in Maven/rake?
I'm trying to build this Java program with sudo rake called SportBukkit and it requires downloading some resources from a repository site that has an expired certificate. Since it refuses to download ...
0
votes
0answers
35 views
Unable to GitLab after changing the ExternalUrl parameter in gitlab.rb
here is a what we tried to do. We installed GitLab few weeks ago with a FQDN, say xyz.company.com as the ExternalUrl. We used the software for last couple of weeks and everything was working just fine ...
0
votes
0answers
6 views
TSL warnings after changing hoster
It seems like having changed the hosting company and getting new SSL certificates some of our site visitors are having issues connecting to our website on the new server.
They get the follwing TLS ...
0
votes
0answers
87 views
Unable to access Blob storage from docker linux container
I am new to docker and seeking for experts help.
I am trying to store a blob in azure blob container from asp.net core application which is hosted in docker linux container but i am facing ssl ...
0
votes
0answers
190 views
How to add self-signed certificate to my PC?
My PC is Windows 10 Pro x64 and I have Edge and Chrome browsers installed.
I installed my firewall's Certificate Authority into the windows certificate store by going to MMC, adding Certificates, and ...
0
votes
0answers
11 views
Calling https url from native app. Not able to see certificate in the console
I am doing an https get call from postman native app. Call is successful and i am able to pull the data. I just want to understand what certificates are being used so i pressed ctrl+alt+c but i do not ...
0
votes
0answers
763 views
Rekall Tool : SSL Error - Certificate_verify_failed (_ssl.c:1076)
I have a problem with SSL certificate. I would like to explain my problem.
I'm trying to install Rekall tool and it's memory forensic framework. I installed Python 3.7 then I created new virtualenv ...
0
votes
0answers
584 views
Eigen download ssl certificate verify failed
I am trying to install the finite element software Firedrake, but I'm getting the following error message:
...
Failed to clone loopy using ssh, falling back to https.
Successfully cloned repository ...
9
votes
2answers
6k views
ERR_SSL_KEY_USAGE_INCOMPATIBLE Solution
I recently encountered the error message ERR_SSL_KEY_USAGE_INCOMPATIBLE in chrome using a self signed certificate. I spent hours trying to solve the problem before finally re-generating the ...
