Questions tagged [ssl-certificate]
The ssl-certificate tag has no usage guidance.
367
questions
0
votes
1answer
19 views
SSL for subdomain
Can anyone please tell me, we have an SSL certificate for *.example.com but now we need separate SSL certificate for abc.example.com only for one subdomain. Is it possible? *.example.com which is ...
1
vote
1answer
30 views
Redirection fail on Apache2 for SSL subdomain configuration
On my Apache2 server I've enabled this 3 subdomain sites.
database.example.com
<VirtualHost *:80>
ServerName database.example.com
ServerAlias www.database.example.com
DocumentRoot /usr/...
0
votes
2answers
26 views
How do I use the openssl command to decode a public key .PEM file?
I have my localhost TSL/SSL certificate from Chrome stored to a .PEM file. Was wondering how do I use the oppenssl command to decode it into a list of human-readable fields.
Googling this only ...
0
votes
2answers
39 views
SSL certificate authentication on Outlook 365 (cloud)
We can send emails using an Office 365 account from third-party devices using STARTTLS encryption on a SMTP server (port 587).
The device I am using does not support STARTTLS, only plain vanilla SMTP (...
0
votes
1answer
87 views
Apache tomcat 9 SSL connector: have to manually write https:// the first attempt on a browser
thanks in advance for any help.
I've set up an apache tomcat 9 environment to access my site with an SSL certificate. The issue is that I need it to be able to access to the site by just typing in the ...
0
votes
1answer
41 views
Debug CA certificates issue - DigiCert GlobalRoot CA
There is something wrong, with the way, my Linux machine checks the certificate chain, and I'm unable to debug it
Two hosts, that are currently affected, where i've tested the issue
repo.fortinet.com ...
0
votes
1answer
38 views
Why is Chrome not trusting imported, self-signed Root CA?
I receive in Chrome the error NET::ERR_CERT_AUTHORITY_INVALID even though I imported the company's Root CA into Chrome's trust store (via settings > certificates > authorities). I imported the ...
0
votes
0answers
14 views
NGINX, letsencrpyt: Security certificate is from www.github.com
This is really weird. We have a server with two subdomains something.domain.org which run different applications. Sometimes, everything works fine, but periodically the newer application is ...
0
votes
0answers
22 views
Is it possible to use SSL client certificate authentication with client programs that do not specifically accommodate them?
I have set up a webserver with several self-hosted apps for my personal use. In order to make sure that I am the only person who can connect to my server, I have generated client authentication ...
1
vote
1answer
18 views
Easy switching between multiple sets of ca certificates?
My new job requires company's custom CA certificate to be installed. It is ok until I'm working, but I don't want this CA certificate to be active during non-working time.
Are there any ways ...
1
vote
1answer
37 views
Apache2 gives me an internal 500 error while trying to force HTTPS for the client using .htaccess files when using a self-signed certificate
I have an Ubuntu Server 20.04 LTS running Apache2 web server. As what different tutorials explain, I have created a private certificate key file and also a .crt Certificate file using the following ...
0
votes
0answers
33 views
How come Chrome/Edge allow entering domains that have invalid domain SSL certificates?
If you browse to biji.co/ads.txt manually via Chrome/Edge it works. In Firefox though it fails:
Websites prove their identity via certificates. Firefox does not trust this site because it uses a ...
1
vote
1answer
190 views
How to use existing CA and Server key with EasyRsa?
i have an existing ca key and cert. how do i tell easyrsa to use that to generate server and client certs, instead of generating its own? All the docs seem to mention to do an init-pki to initialize a ...
0
votes
1answer
55 views
Is it possible to remove SAN from a certificate?
I've bought a certificate from an online provider.
The CSR only contains a single SN (mysubdomain.example.com).
The certificate issued, contains the SN i provided in my CSR, but for some reason the ...
0
votes
0answers
16 views
firefox certificate store and set using terminal - linux
im trying to find a way to set my firefox certificate options via cmd line.
i need to set automatic selection of an x509 certificate via command line, i'm working with selenium.
Or are there other ...
0
votes
0answers
29 views
SSL Client authentication Certificate and Key , Why?
I'm studying the SSL Client authentication in a server to send specific rest API. I'm using cURL to send the request and I'm following the instruction from a company. I can send the request and ...
0
votes
0answers
22 views
How to use openvpn client connect to server with self signed certificate?
I am figuring out how can we use a self signed certificate to connect to openvpn server .
on the server end I generated server key and csr.
openssl req -out server.csr -new -newkey rsa:4096 -sha256 -...
0
votes
0answers
180 views
Internet Explorer drops “this site is not secure” whenever opening the Syncthing web app
On a machine where I don't have any admin privileges, I have installed Syncthing. But whenever I start/restart the software I get this warning in IE:
This site is not secure
Error ...
0
votes
0answers
40 views
OpenVPN Server 2.3.1, how to switch from dh1024.pem to dh4096.pem
I had to generate new keys to use the latest version of OpenVPN client to connect to my Netgear R7000 router, as the stock ones used MD5 which is no longer supported.
I followed a guide to generate ...
-1
votes
1answer
70 views
Enable SSL for any domain automatically
We are building a site builder and users can set their own domain. Is there any way to enable SSL for their domains automatically?
For example, a wildcard letsencrypt certificate but not just for *....
0
votes
0answers
172 views
How to create a oracle wallet with chain certificates?
I have three certificates, root, intermediate and server. Intermediate certificate is signed by root certificate and server certificate is signed by intermediate certificate. What are the steps to add ...
0
votes
1answer
46 views
Having existing pair of crt/private key how can I generate new private key and new CSR for renewing the SSL certificate?
I need to renew SSL certificate for the first time. I do not have original CSR, but I do have certificate.crt/private.key pair. The system told me I need to specify the same data in CSR to be accepted....
1
vote
1answer
537 views
How does Chrome use .p12 certificates?
When I import a .p12 into Chrome, it requires a password. Once supplied, it is now stored in Chrome's key store and I never need to import my password again to use it.
How does Chrome manage this? ...
2
votes
0answers
527 views
Self-signed SSL Certificate for Nginx not working with Chrome
I've generated a Self-signed SSL Certificate and Authority for my localhost nginx dev environment and imported the Certificate Authority in both Firefox and Chrome.
- Firefox: works perfectly, the ...
0
votes
0answers
96 views
Can not install semanage tool on RedHat virtual machine
I'm trying to change the MongoDB default port on my AWS Virtual Machine but semanage is not found on the server
semanage port -a -t mongod_port_t -p tcp 27042
-bash: semanage: command not found
Trying ...
1
vote
1answer
62 views
Error Converting .DER file to .PEM file
I'm trying to convert this file in DER format to PEM.
Using openssl.exe utility (tried in versions 0.98.1 and 1.02 of openssl) I tried the following commands:
openssl x509 -inform der PA_AD_RB_V2_3....
0
votes
1answer
89 views
Any Hotfix available for Windows 7 Ultimate or Windows 7 (no service packs installed) for auto updating Root certificates
I am aware that a hotfix is available for Windows 7 service pack 1 "Support for urgent Trusted Root updates for Windows Root Certificate Program in Windows", but could not find a similar ...
1
vote
1answer
29 views
Which certificate files should I share?
I have used acme.sh (highly recommended) for generating certificates. I have got several files here in which I do not understand which should I share and which should I hold back.
These are the files ...
0
votes
1answer
56 views
How can I deploy a CA Certificate on several machines through network [closed]
Is there a way to deploy a CA's X509 certificate on several client machine's (Windows) in a Intranet environment?
0
votes
1answer
225 views
Convert DER encoded certifcate to PGP file
I have company.cer file which is a DER encoded certificate which I received from someone. I need to convert this file to a PGP file so that I can use
gpg --import <key>
How can I do this?
I ...
2
votes
1answer
315 views
macOS - Getting SSL certificate error on valid certificate when accessing via git
2 days ago we started to get an error in git when pulling updates from our repository via HTTPs:
"SSL certificate problem: certificate has expired"
Seems like a duplicate of the issue below, but ...
1
vote
1answer
71 views
Invalid Certificate for a NAS WebDAV. Dangerous?
I just set up a NAS cloud (WD MyCloud EX2) and I access to it via local network and https WebDAV for remote locations, as mobile phones and computers. My IP is Dynamic, so I use DynDNS.
The problem ...
0
votes
1answer
115 views
SSL | Error WARNING: cannot verify certificate
Last week one of my domains stopped loading http content.
Domain pings, apache is active, I restarted apache.
It looks like the reason is there is a problem with the SSL certificate.
Should I just do ...
7
votes
3answers
6k views
Getting SSL certificate error on valid certificate when accessing via Curl
I have a wildcard SSL certificate which powers *.mysite.com. The site is accessible from all browsers without any problem. There is also a service (on a different server)
with URL: service.mysite.com....
0
votes
0answers
34 views
Chrome issue, get [ERR_CERT_COMMON_NAME_INVALID] for every google related sites
I just found my chrome on my Macbook doesn't work. Whenever I search for something on the address bar. I can only get the page saying 'Your connection is not private'. And the the certificate is ...
1
vote
0answers
42 views
How do I restrict access to all ports with source's PublicKey like SSH does?
I want a server to block any and all incoming traffic on all ports with the exception of the traffic from those machines which can be (and are right there and then regardless of the port being ...
1
vote
0answers
874 views
TLS 1.2 connection with lftp
I'm trying to connect to a server from my RHEL 7 server that only accepts FTPS, TLS 1.2 connections. The only client available seems to be lftp. When I try to connect, it hangs on "TLS negotiation......
1
vote
1answer
20 views
SSL certificat returned by a server and fields interpretation
I have obtained the following certificate (I have just paste here, a part of it) via this command : openssl s_client -showcerts -connect ip:port
1 s:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure ...
0
votes
0answers
49 views
How to retrieve a server certificate by just knowing the root CA
I have a client application in production which make a TLS connexion to a server.
This server will get certified by a new CA in a short future (soon Amazon TrustStore service previously it was ...
0
votes
1answer
2k views
Imported certificates go to other people windows 10
Edit: 27/04/2020
We came to the conclusion that the certificate stopped working as it does not work anymore on the old system either. So we keep working on "corrupted" certificates that may never ...
3
votes
1answer
796 views
How to allow specific SSL client certificates in Nginx?
Nginx's ssl_client_certificate and ssl_trusted_certificate directives can be used to allow client certificates signed by a given authority. But how can I allow specific certificates? I would like to ...
0
votes
1answer
82 views
Keytool -import ssl certificate from personal CA on jboss 4.0.5 server
What i am trying to do for a few days already, and it drives me crazy, is to make a java website based on jboss 4.0.5 server to use ssl certificate(https). For this I'm following these instructions:
...
0
votes
0answers
33 views
Chrome can't load HTTPS IP
I have so many applications that need to load in Chrome via IP but in https
OpenVas
Nessus
Kibana and more ..
I kept getting this on each one of them, there is no option for me to click "Visit ...
1
vote
1answer
505 views
openssl how to generate CSR with S/MIME Capabilities
what req_extensions should I pass to openssl to include "S/MIME Capabilities" into my CSR?
Please see example openssl s_client outpout below from installed certificate.
I aware of
"X509v3 ...
0
votes
1answer
1k views
How to renew or refresh SSL certificates of yum “rhui” repositories in GCP?
Running RHEL 7 in GCP and trying to install packages with yum, all rhui repositories give an error like:
https://cds.rhel.updates.googlecloud.com/pulp/repos/content/dist/rhel/rhui/server/7/7Server/...
0
votes
0answers
1k views
Wildcard cert on Synology NAS
I'm running Synology DSM 6.2.2-24922 Update 4 and I wish to setup a wildcard cert with Let's Encrypt. It has been over a year since I've tried this and that time it didn't go so well. I can remember I ...
0
votes
0answers
14 views
Renewed RootCA doesn't verify child certs
So i have a self signed rootCA which is expiring soon, so i created a new csr with updated info about the cert and company but im still using the same private key.
I create the new rootCA and install ...
2
votes
1answer
279 views
Can I create client certificates from a server certificate that I buy from a certificate authority?
If i buy a certificate from Godaddy or a trusted certificate authority for my website. let's say example.com and i want to issue client certificates so i can validate certificates of clients ...
0
votes
0answers
397 views
SSL Certificate issues for everything
I recently factory reset my Windows 10 computer. I can no longer access Internet on any app. I tried chrome, steam, ie. I get "invalid SSL certificate" or "ERR_PROXY_CERTIFICATE_INVALID". This seems ...
1
vote
0answers
61 views
Angularjs PUT & DELETE Aborted on PreFlight with IE11
Our AngularJs WebApp communicates CORS CRUD operations against a WebApi service hosted in IIS that is SSL, and requires Certificates. All Verbs - GET, POST, PUT, DELETE, work in Chrome, but... IE11 ...
