Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [ssl-certificate-renewal]

The process of issuing a new certificate with existing public and private keys. Common reasons for this are: extending its validity, changing thumbprint hash algorithm or even changing content (common name (CN) or subject alternative name (SAN)).

33 questions
0
votes
1 answer

Installing SSL certificate on windows server 2008 without removing the old one

I am a newbie in field of SSL certificates. My SSL certificate is expiring and i have received a new certificate from my CA. Currently the option which i have tried out is replacing the old with the new one. However I want to install the new…
ankush dhawan
  • 1
0
votes
0 answers

SSL Certificate related - Too many redirects

I am using bitnami wordpress website. I was trying to replace the old SSL certificates files with the new ones. I did replaced it but now I am getting "too many redirects errors". Can anyone help me out? I am using CLoudflare CDN. When I enable…
Dhaval Joshi
  • 1
0
votes
2 answers

How to Renew an SSL Certificate from a PFX file?

I have a .PFX file, and want to use it to update an existing SSL certificate in IIS. I can use the Import command. This prompts me for my PFX file and password. That's exactly what I want except that it creates a new certificate instead of updating…
Jonathan Wood
  • 269
  • 1
  • 3
  • 13
0
votes
0 answers

ADFS2 secondary server not listening on port 443

Our monitoring sensor connection for https 443 to our secondary ADFS server is refused. We recently renewed theADFS SSL certificate, and since the secondary server is not listening on port 443. All changes appeared to have been replicated…
Zenith2k3
  • 1
0
votes
1 answer

ADCS WebServer Autoenrollment best practise

As in any IT environment, the number of web server certificates is constantly increasing. With the reduction of the duration to 1 year, the administration effort increases at the same time if such processes are not automated. Currently we have a…
Sinista
  • 87
  • 1
  • 2
  • 10
0
votes
0 answers

For an IoT device is there a way to associate a certificate authority that will not expire in a year so the device can roll certs periodically?

To me it is a chicken and egg thing. I want an architecture that will always have the device renewing keys on updates or periodically. Initially, I can have manufacturer setup the CA on the device. But that can't be a long term thing like 30 years…
Christian Matthew
  • 155
  • 4
0
votes
1 answer

The certificate request was submitted to the online authority, but was not issued. The request was denied

I've a Hyper-V lab with few VMs. I'm trying to renew expired server certificate for one of my virtual machines which is running Windows Server 2019 (version 1809). I'm trying to renew the certificate from IIS: Certificate authority is residing on…
RBT
  • 251
  • 1
  • 3
  • 12
0
votes
1 answer

Postgres SSL server certificate upgrade / renew with openssl

I have inherited a Company Postgres Server with SSL clients. Its around 100 users so far. Two Problems: My Ca Cert (root.crt) expires next year and it seems to be still TlsV1.0. So an upgrade(renew) is urgently needed. What I should avoid is making…
aufmschlauch
  • 1
  • 2
0
votes
1 answer

Backend services root certificate expiration

We are using mTLS for our backend services authentication and the root certificate is set to expire in 2022. Here are the expiration details for all certificates: The root certificate will expire in 2022 The intermediate certificates will expire in…
StefB
  • 1
  • 1
0
votes
1 answer

curl: (60) SSL certificate : unable to get local issuer certificate - ubuntu

We run the following software versions: Ubuntu 18.04.5 Apache 2.4.29 curl 7.58.0 We run an education application, and as part of this we have numerous APIs which upload files to a third party website https://api.turnitinuk.com from our webserver…
mac987
  • 1
  • 1
  • 1
  • 2
0
votes
1 answer

New SSL Cert now showing up for Postfix in browser (Ubuntu, Namecheap)

I'm a newbie trying to wing it after our Sys Admin left. I needed to update our wildcard certificate and copy it onto our mail server. I renewed the cert at Namecheap, downloaded it, and installed it on our webservers. Everything is showing up fine…
DevOpsSauce
  • 348
  • 1
  • 5
  • 22
0
votes
0 answers

How to automatically update an SSL certificate on Nginx as it gets renewed?

I have a website hosted on an EC2 instance with Ubuntu and nginx installed. My domain is managed through GoDaddy which is where I also issue the SSL certificate for the domain. Recently I got service disruption as the SSL certificate expired. The…
Microtribute
  • 101
  • 1
0
votes
2 answers

Renew ssl cert but only have private key and fullchain file

Is it possible to renew certs from letsencrypt with just the private key and fullchain file? If not, can one just remove all the letsencrypt files and .well-known directory and apply for new certification using certbot or other programs? Or would I…
Rob
  • 344
  • 3
  • 15
0
votes
2 answers

SSLProtocol: Illegal protocol 'TLSv1.1' in linux

I know u think this a duplicate question but hear me out first. I am not able to find the answer with a system with same conf as min so here is my server conf: Red Hat 4.1.2-44 CentOS release 5 OpenSSL 1.0.2a Server version: Apache/2.2.3 I am having…
DadyByte
  • 101
  • 1
  • 3
0
votes
1 answer

How to fix LetsEncrypt renewal failing with error "Unable to reach credentials server"?

I have successfully acquired a certificate using Win-Acme installed on Windows Server 2012. The software is setup to renew using the Route53 plugin to automatically verify ownership via DNS. Win-acme does run the renewal task but it fails with an…
Rich C
  • 103
  • 6
1
2
3