Questions tagged [ssl-certificate]

An SSL certificate is an X.509 certificate that is used to provide authentication, privacy and integrity for a secure connection. Although the acronym refers to Secure Sockets Layer, the SSL protocol is deprecated and the certificates are more commonly used for Transport Layer Security (TLS) connections.

An SSL certificate is an X.509 certificate that is used to provide authentication, privacy and integrity for a secure connection. Although the acronym refers to Secure Sockets Layer, the SSL protocol is deprecated and the certificates are more commonly used for Transport Layer Security (TLS) connections.

10580 questions
65
votes
2 answers

curl - Is data encrypted when using the --insecure option?

I have a situation where the client makes a call through curl to a https url. The SSL certificate of the https url is self signed and therefore curl cannot do certificate validation and fails. curl provides an option -k/--insecure which disables…
randomuser
  • 1,858
  • 2
  • 17
  • 21
65
votes
8 answers

How to configure SSL certificates with Charles Web Proxy and the latest Android Emulator on Windows?

I would like to use Charles web proxy to work with the Android emulator in Windows. I've successfully set up charles and have started the emulator with the command line: emulator -http-proxy 127.0.0.1:8888 @NexusOne I can see traffic coming from…
Martyn
  • 16,432
  • 24
  • 71
  • 104
64
votes
5 answers

What does "SSLError: [SSL] PEM lib (_ssl.c:2532)" mean using the Python ssl library?

I am trying to use connect to another party using Python 3 asyncio module and get this error: 36 sslcontext = ssl.SSLContext(ssl.PROTOCOL_TLSv1) ---> 37 sslcontext.load_cert_chain(cert, keyfile=ca_cert) 38 SSLError: [SSL] PEM lib…
sargas
  • 5,820
  • 7
  • 50
  • 69
62
votes
1 answer

Single SSL cert on multiple servers

For a project I'm working on I will have multiple servers and lots of subdomains (eg- *.mydomain.example). I'm thinking of getting this SSL cert from godaddy- Unlimited Subdomains (Wildcard) $199.99/yr Will I be able to use the cert on all the…
razor
62
votes
4 answers

curl: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate

C:\Users\casta>curl https://c5.ppy.sh curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - The revocation function was unable to check revocation for the certificate. I've made my own CA, and I made a certificate…
LPOPYui
  • 799
  • 1
  • 9
  • 17
62
votes
14 answers

Visual Studio 2017 gives 'Adding the Certificate to The Trusted Root Certificates store failed with the following Errror'

I am trying to run ASP MVC application with SSL mode set to true and whenever i run the application, i get prompt to trust the IIS Express SSL certificate. Upon clicking Yes, it gives the error message 'Adding the Certificate to The Trusted Root…
sanjeev
  • 765
  • 1
  • 7
  • 15
61
votes
12 answers

SSL cert "err_cert_authority_invalid" on mobile chrome only

Domain: https://www.amz2btc.com Analysis from SSL Labs: https://www.ssllabs.com/ssltest/analyze.html?d=amz2btc.com All my desktop browsers open this fine. Mobile Firefox opens this fine. Only when I tried with mobile Chrome did I get the error: …
S. J.
  • 1,106
  • 1
  • 10
  • 23
59
votes
1 answer

Generate CRT & KEY ssl files from Let's Encrypt from scratch

I'd like to generate a CRT/KEY couple SSL files with Let's Encrypt (with manual challenge). I'm trying something like this : certbot certonly --manual -d mydomain.com But I only get these files in my /etc/letsencrypt/live/mydomain.com folder…
Sylvain
  • 2,742
  • 5
  • 21
  • 34
58
votes
2 answers

How does an SSL certificate chain bundle work?

I've created a chain hierarchy like this. root-ca ==> signing-ca ==> subordinate-ca ==> server It is mentioned to create chain bundle, the lowest should go first. $ cat server.crt subordinate-ca.crt signing-ca.crt > server.pem But verification…
user180574
  • 5,681
  • 13
  • 53
  • 94
57
votes
9 answers

How to assign a SSL Certificate to IIS7 Site from Command Prompt

Can you advise me whether it is possible or not to assign a SSL Certificate to a website in IIS7 using the APPCMD application? I am familiar with the command to set the HTTPS Binding appcmd set site /site.name:"A Site"…
David Christiansen
  • 5,869
  • 2
  • 36
  • 42
57
votes
6 answers

Is a HTTPS connection secure without a valid SSL certificate?

I use a HTTPS connection without a valid SSL certificate. Is the connection safe? Is the information encrypted?
user466981
  • 573
  • 1
  • 4
  • 4
57
votes
5 answers

Java keytool easy way to add server cert from url/port

I have a server with a self-signed certificate, but also requires client side cert authentication. I am having a rough time trying to get the raw CA server cert so I can import it into a keystore. Anyone have some suggestions on how to easily do…
wuntee
  • 12,170
  • 26
  • 77
  • 106
56
votes
3 answers

How to add subject alternative name to ssl certs?

I'm using openssl to create self-signed certs. I'm getting this error with the certs I generated: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names present Does anyone know how to…
Sapphire
  • 1,107
  • 8
  • 20
  • 35
56
votes
4 answers

https on S3 WITHOUT cloudfront possible?

We currently want to start hosting all our assets through AWS S3 and we also want to server everything over https. I understand I can use the Amazon Certificate Manager (ACM) with Cloudfront to server assets over https. The problem is that we are in…
kramer65
  • 50,427
  • 120
  • 308
  • 488
55
votes
4 answers

Rails 3: OpenSSL::SSL::SSLError: hostname was not match with the server certificate

When trying to deliver an email via console I receive this error: OpenSSL::SSL::SSLError: hostname was not match with the server certificate The thing is I really don't know much about certificates and such, or really how to get started…
JP Silvashy
  • 46,977
  • 48
  • 149
  • 227