Questions tagged [ssl-certificate]

An SSL certificate is an X.509 certificate that is used to provide authentication, privacy and integrity for a secure connection. Although the acronym refers to Secure Sockets Layer, the SSL protocol is deprecated and the certificates are more commonly used for Transport Layer Security (TLS) connections.

An SSL certificate is an X.509 certificate that is used to provide authentication, privacy and integrity for a secure connection. Although the acronym refers to Secure Sockets Layer, the SSL protocol is deprecated and the certificates are more commonly used for Transport Layer Security (TLS) connections.

10580 questions
99
votes
14 answers

Problems with X509Store Certificates.Find FindByThumbprint

I'm having a problem when I use the method X509Store.Certificates.Find public static X509Certificate2 FromStore(StoreName storeName, StoreLocation storeLocation, X509FindType findType, string findValue) { X509Store store = new…
nunofamel
  • 989
  • 2
  • 7
  • 5
99
votes
4 answers

Create a OpenSSL certificate on Windows

Since I'm very new to SSL certificates, and the creation and usage of them I figured maybe StackOverflow members can help me out. I'm from Holland, the common way of online payments is by implementing iDEAL. An online payment protocol supported by…
Ben Fransen
  • 10,884
  • 18
  • 76
  • 129
98
votes
13 answers

How to display the Subject Alternative Name of a certificate?

The closest answer that I found is using "grep". > openssl x509 -text -noout -in cert.pem | grep DNS Is there better way to do this? I only prefer command line. Thanks.
user180574
  • 5,681
  • 13
  • 53
  • 94
95
votes
5 answers

Difference between self-signed CA and self-signed certificate

I'm not clear on the difference between a CA key and a certificate. Isn't a CA key simply a certificate? Let me try and clarify with an example. I have a client and a server. I'm only trying to validate my connection to my server and not trying…
Pace
  • 41,875
  • 13
  • 113
  • 156
92
votes
7 answers

Is there a java setting for disabling certificate validation?

I received this error while trying to start up an application: Sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: java.net.UnknownHostException:oscp.thawte.com The application…
Tim
  • 2,147
  • 4
  • 17
  • 20
92
votes
4 answers

How to determine SSL cert expire date from the cert file itself(.p12)

If I have the actual file(.p12) and a Bash shell in Mac, how can I extract certificate and key file and also the certificate expiration date? assuming I have the csr(.p12), key files.
user4068530
92
votes
4 answers

Programmatically Create X509 Certificate using OpenSSL

I have a C/C++ application and I need to create a X509 pem certificate containing both a public and private key. The certificate can be self signed, or unsigned, doesn't matter. I want to do this inside an app, not from command line. What OpenSSL…
Tim
91
votes
6 answers

Error: Public Key Certificate and Private Key doesn't match

I'm trying to install a GoDaddy SSL certificate on a new load balancer I'm setting up on Amazon AWS. I originally created the certificate at Godaddy using the keytool program for direct installation on a Glassfish 3.1 server (Amazon linux ami). I…
Felby
  • 4,045
  • 4
  • 26
  • 23
90
votes
6 answers

How to add Certificate Authority file in CentOS 7

I am trying to add certificate Authority (CA) file name - ca.crt to /etc/ssl/certs, for that I followed this article. I copied my ca.crt file to /etc/pki/ca-trust/source/anchors/ and run the command below; update-ca-trust extract After that I…
Yogesh Jilhawar
  • 5,605
  • 8
  • 44
  • 59
90
votes
3 answers

Are SSL certificates bound to the servers IP address?

We have two different ldap providers in two different physical office locations. When I connect my laptop to one location and I 'retrieve from port' (in Websphere 6.1) to import the SSL cert of the ldap provider, I can authenticate to the respective…
fnCzar
  • 3,153
  • 4
  • 26
  • 28
88
votes
17 answers

NLTK download SSL: Certificate verify failed

I get the following error when trying to install Punkt for nltk: nltk.download('punkt') [nltk_data] Error loading Punkt:
user3429986
  • 1,035
  • 1
  • 7
  • 8
88
votes
10 answers

How to ignore PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException?

I got the following exception when try to post a request to a http server: Here is the code I used URL url = new URL( "https://www.abc.com"); HttpURLConnection conn = (HttpURLConnection)…
DeepNightTwo
  • 4,809
  • 8
  • 46
  • 60
87
votes
10 answers

Using a self-signed certificate with .NET's HttpWebRequest/Response

I'm trying to connect to an API that uses a self-signed SSL certificate. I'm doing so using .NET's HttpWebRequest and HttpWebResponse objects. And I'm getting an exception that: The underlying connection was closed: Could not establish trust…
Dominic Scheirlinck
  • 2,627
  • 2
  • 23
  • 28
86
votes
2 answers

Difference Between SSLCACertificateFile and SSLCertificateChainFile

I provide SSL pages on my web server, and I have a question. What is the difference between SSLCACertificateFile and SSLCertificateChainFile? When I use SSLCertificateChainFile, I got warnings from Japanese cellular phone browser, but when I use PC…
nam
  • 1,061
  • 1
  • 9
  • 8
85
votes
18 answers

Installed SSL certificate in certificate store, but it's not in IIS certificate list

After installation of a wildcard SSL certificate into the certificate store, the certificate does not appear in the IIS certificate list for use with site bindings. The certificate was installed correctly, but apparently no key was included with the…
user677526