Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [self-signed-certificate]

A self signed certificate is signed with its own private key instead of the private key of a higher or publicly trusted certificate authority (CA).

135 questions
2
votes
2 answers

create a self-signed certificate for a subdomain, the main domain does not belong to me

I have my internet box provider who offers me a free subdomain to connect to my network, ex: xxxxx.provider.com I have generated a self-signed certificate for the subdomain foo.provider.com I tried to install it in windows but it does not validate…
Pascal de Sélys
  • 41
  • 3
2
votes
1 answer

How does load balancer verify self-signed certificates from the server

In my application, I have multiple instances of the server running behind a load balancer. Usually, SSL offloading takes place at the load-balancer in the case of AWS Application Load Balancers, and the connection between the ALB and server…
Cyborg7459
  • 21
  • 2
2
votes
0 answers

How to make squid proxy to accept self-signed certificate?

I have an use-case were I have to accept self-signed certificate in Squid. The endpoints are Kubernetes clusters using self-signed certificates. The clusters will be recreated on demand with different self-signed certificate and therefore the need…
Zioalex
  • 131
  • 6
2
votes
1 answer

Replace Self Signed RDP Cert with CA Signed Cert

A few servers are getting picked up by security scans with the following message: The following certificate was at the top of the certificate chain sent by the remote host, but it is signed by an unknown certificate authority. | Subject :…
jrd1989
  • 698
  • 15
  • 48
2
votes
0 answers

Which clients support self-signed certificates with DANE?

We've been considering to make more use of DANE as a decentralised authority for our certificates. Especially with S/MIME. However, the key obstacle is... how widely are DANE treated as an authority with mail clients? Is there a list with all the…
Haneef Ibn Ahmad
  • 21
  • 1
  • 5
2
votes
1 answer

Generate end-entity certificate with OpenSSL for localhost on IIS

I would like to ask how to generate end entity certificate based on my own CA root certificate? I've generated root CA this way: openssl req -x509 -newkey rsa:4096 -sha256 -days 3650 -nodes \ -keyout example.key -out example.crt -subj…
bug_2
  • 31
  • 1
  • 5
1
vote
0 answers

making HTTPS work on LAN with self signed certificate

This is on a local area network (LAN). There is no internet connection. One admin has admin access to both the linux server and windows10 pc's. I have a linux server running third party software to establish an over-the-network OpenGL remote…
ron
  • 805
  • 3
  • 11
  • 21
1
vote
1 answer

Unable to Backup or Restore Certificate Authority?

I migrated Certificate Authority Enterprise from windows server 2012 R2 to Windows Server 2019. Both Server are VMs Here are the steps I took: Baskup CA database, key and registry config of the windows server 2012 Unplug the network for the windows…
Kefash
  • 111
  • 3
1
vote
2 answers

How to add a header to my apache2 server

I have an apache2 web server for testing only (not a production server). It is running on Ubuntu 18.04. I have configured it with TLS. I want to add a header. So I navigated to this file: /etc/apache2/sites-available/default-ssl.conf The file…
qbq
  • 25
  • 1
  • 1
  • 6
1
vote
1 answer

How long it takes for the Issued certificates to reach the requester's computer?

Windows server 2019 with CA role, made a certificate template and enabled the option "CA certificate manager approval" in it, then issued it on my CA server. now on a client I went to the personal certificate store and requested that certificate,…
user299093
1
vote
2 answers

Cannot validate certificate hostname without SNI

I am using 2 proxies to intercept the communication between my phone and my server. Here is my topology: phone --> proxy 1 --> proxy 2 --> server proxy1 is listening to port 8080, proxy 2 is listening to port 8080 but I redirect all what it gets to…
yosra
  • 111
  • 5
1
vote
1 answer

Apache 2.4 mutual authentication - AH01797: client denied by server configuration

So I'm trying to set up Apache 2.4 mutual authentication on a virtual host configuration. Given the below environment, what am I missing? Server is: Slackware 14.2 x64, Apache 2.4.39, OpenSSL 1.0.2r Client is: Windows 8.1 x64, Firefox Quantum 66.0.3…
Mogens TrasherDK
  • 141
  • 7
1
vote
0 answers

Self-signed certificate for SSTP VPN server

I'm developing a custom VPN solution that needs to support SSTP for Windows clients. For this, the SSTP specifications (and Windows) require my server to authenticate itself using a certificate during the SSL handshake. Windows will then use its…
Markus A.
  • 419
  • 7
  • 18
1
vote
0 answers

How to create self-signed certificate to sign Office macros

I need to create a self-signed certificate which I can use to sign different kind of Office macros (for Outlook, Excel etc.). I must be able to use this certificate on all workstations in my domain, so about 40 different computers. They all use the…
SimonS
  • 785
  • 4
  • 14
  • 29
1
vote
0 answers

Node.js HTTPS error (SSL_ERROR_NO_CYPHER_OVERLAP) - no common encryption algorithm(s)

I have seen other similar questions but non addresses my problem. I have generated my TLS (openSSL) Self-Signed certificate, but seems not working on my NodeJS server. Instructions to generate SSL openssl req -newkey rsa:2048 -keyout key.pem -x509…
Nah
  • 123
  • 8
1 2
3
…
8 9