Questions tagged [ssl-certificate]

SSL certificates are used to encrypt and authenticate connections to network servers, most popularly for web servers but also email, file transfers, and other network connections.

SSL (Secure Sockets Layer) is a protocol that is used to encrypt and authenticate connections between clients and servers. Certificates are configured on the server so that the client can verify that the connection has not been hijacked, as well as verify that the connection is secure from end to end.

3250 questions
6
votes
2 answers

Exporting SSL Cert private keys in IIS 7.0

In IIS 6 on Server 2003, I can go to a web site's properties and walk through the wizard to generate a new cert request. Once I complete the request and have the cert installed on the web site, I can go into the cert store and export the certificate…
Andy Schneider
  • 1,543
  • 5
  • 19
  • 28
6
votes
2 answers

Import SSL Cert into IIS when I have the text of the certificate and private key

I am working on moving a site from Rackspace Cloud Sites onto a server running IIS and need to get the SSL certificate imported into IIS. All I have at the moment for the SSL certificate is what Rackspace gives me. The text of the…
Bela
6
votes
2 answers

SSL certificate for FTPS, is it the same as for HTTPS?

This question is about "FTP over SSL", if I understand correctly FTPS and HTTPS are just the standard FTP and HTTP protocols running on top of SSL, is this correct? The actual question is: is the certificate that you use for FTPS the exact same that…
BlackTigerX
  • 319
  • 1
  • 4
  • 8
6
votes
4 answers

Double Wildcard SSL Certificates

Is there a registar that offers SSL certificates for: ..domain.com or something_fixed.*.domain.com? -- M.
Nostef
6
votes
3 answers

How do I renew a Web Server certificate in Windows Server 2008?

The SSL certificate for my web site just expired a few days ago, and I would like to renew it. I originally issued it two years ago using my Windows 2008 Certificate Authority, and it's worked without a hitch in all that time, so I would like to…
Mark Seemann
  • 193
  • 1
  • 2
  • 6
6
votes
2 answers

Which type of certificate for encrypting SQL Server?

Does it matter? We buy our certificates from Thawte, and I don't see a special type of certificate for SQL Server as opposed to a certificate you'd buy for a web server. Please be gentle with me if this is a dumb question. I'm a developer, not a…
David Stratton
  • 453
  • 2
  • 10
6
votes
3 answers

How to migrate to Google managed certificates without downtime?

I'm moving example.com from an external (non-Google) hosting provider into GCP. When setting up the load balancer, I noticed that I have to point example.com to the load balancer in order for the Google managed certificate to validate. I'm supposed…
6
votes
2 answers

How to bundle intermediate certs into one file

I manage an apache web server for a government site. The SSL cert will expired in a few weeks so they sent me a zip file with 3 intermediate certs and the ssl certificate (I have the private key from the csr generator and the crt file provided by…
BioRod
  • 303
  • 4
  • 13
5
votes
1 answer

Chrome desktop and android refuses to accept trusted self-signed cert

I created a self-signed certificate using the following command using OpenSSL 1.1.1b (26 Feb 2019): openssl req -nodes -new --days 900 -subj /CN=192.168.0.104:8080 -x509 -keyout server.key -out server.crt I then used windows mmc imported the…
B T
  • 155
  • 2
  • 8
5
votes
3 answers

How do you issue trusted self signed certificates?

Which CA shop provides a product that allows you to sign your own SSL certificates? (say named to a sub-domain) Are there any viable alternatives? Additional Information: We are deploying a product with a secure web interface to a sizeable number…
MandoMando
  • 245
  • 2
  • 6
5
votes
3 answers

IIS LAN and WAN separate SSL certificates for the same server

I have a public web server that's also extensively used from the LAN. We're standing up a Windows AD CA server for the LAN side but we'll also need a public SSL Certificate for the web server. The website url resolves to the interal ip on the LAN so…
5
votes
2 answers

How do I setup a CloudFlare Origin Certificate in AWS Certificate Manager?

When I try to import the Origin Certificate that CloudFlare provides into AWS Certificate Manager so I can use it with an ELB, ALB or NLB I find that it requires a key chain certificate that they didn't provide to me. Where can I get that?
flickerfly
  • 2,753
  • 3
  • 25
  • 27
5
votes
1 answer

openssl verify error 2 at 1 depth lookup:unable to get issuer certificate

Openssl is telling me it can't verify my concatenated cert. I downloaded the intermediate cert from the issuer (AlphaSSL) and concatenated that with my domain cert I purchased (domain cert first, then the AlphaSSL intermediate cert) as instructed by…
L. Blanc
  • 151
  • 1
  • 1
  • 2
5
votes
1 answer

Which ciphers satisfies the "Authenticated encryption (AEAD) cipher suites" SSL Labs test requirement?

I've run SSL Labs test and it reports a warning that This server does not support Authenticated encryption (AEAD) cipher suites. Grade will be capped to B from March 2018. Unfortunately, I have found nowhere nor in the linked documentation which…
alik
  • 369
  • 1
  • 4
  • 11
5
votes
0 answers

Manually trigger Root Certificate Update on Windows

Is there a way to manually trigger a Root Certificate Update? I'm troubleshooting a problem with a certificate that keeps disappearing from the Certificate Store. I think this is related to Trusted root certificate being automatically removed from…
sashoalm
  • 177
  • 1
  • 11