|
I have a IIS web site which requires client certificate. I have turned off CRL checking. The client is unable to access the web site - he gets 403.17 (certificate expired) error.
I would like to log the certificate he is using, becaue I think he is using...
Started by matra on
, 3 posts
by 3 people.
Answer Snippets (Read the full thread at serverfault):
Fiddler in reverse proxy scenario with SSl
you can not use Microsoft SslDiag, because it does not log expired certificate
So the only viable option is to use WireShark.
|
|
How do you import an SSL certificate created by java into a project in Eclipse?
Started by MahlerFive on
, 3 posts
by 3 people.
Answer Snippets (Read the full thread at stackoverflow):
Probably you want to import a "fake" SSL cert in JRE's trustcacerts for avoidingYou should probably create the certificate and import it into the default keystore using keytool not-a-valid-certificate issues....
That certificate.
|
|
I can create by own CA and generate a self signed SSL certificate this way. But what does it take to make the browser show the certificate as being an "Extended Validation SSL certificate" ?
Can I create one myself and teach my browser to show it as EV...
Started by Niels Basjes on
, 3 posts
by 3 people.
Answer Snippets (Read the full thread at serverfault):
The trusted roots for these are fixed within the browser
The way that EV SSL certificates work is to stick an authority-specific OID in the certificate policies extension field of the cert (which is a standard X.509....
No you can't.
|
Ask your Facebook Friends
|
Is there an command line option to auto accept a SSL certificate permanently using the SVN commandline in a way that avoids the prompt?
Started by James McMahon on
, 3 posts
by 3 people.
Answer Snippets (Read the full thread at serverfault):
It depends somewhat on yourYou should be able to ... .
See the SSL Certificate Management section in the book.
Or you can download the CA certificate and then set the configuration option ssl-authority-files to trust that CA.
|
|
I'm looking around for a Java Code Signing certificate so my Java applets don't throw up such scary security warnings. However all the places I've found offering them charge (in my opinion) way too much, like over $200 per year. While doing research, ...
Started by davr on
, 4 posts
by 4 people.
Answer Snippets (Read the full thread at stackoverflow):
Code signing and web server are different....
Long answer: It's the same sort of certificate and it uses the same crypto software, but the certificate has flags indicating what it is allowed to be used for.
Short answer: No, they're different.
|
|
How do I create a self signed SSL certificate for an Apache Server to use while testing a web app?
Started by ScArcher2 on
, 4 posts
by 4 people.
Answer Snippets (Read the full thread at stackoverflow):
From http://httpd.apache.org/docs/2.0/ssl/ssl.
Faq.html#selfcert
How do I create a self-signed SSL Certificate for testing purposes?
Make sure OpenSSL in the IIS 6 resource kit , if you're on Windows.
|
|
I want a SSL certificate for my web site that will not only be accepted without warning by all popular browsers (at least accepted by Firefox and Internet Explorer ), but also give my visitors the green address bar.
Which certificate authority is selling...
Started by Zack Peterson on
, 16 posts
by 16 people.
Answer Snippets (Read the full thread at stackoverflow):
GoDaddy Premium SSL (Extended or
$780 for 2 Years ($390/year)
There....
I'd start there.
Comodo Instant SSL EV SSL
$449 per year or
$718 for 2 years ($359/year)
When I researched a year ago, GoDaddy was the cheapest by far.
Way to go.
|
|
Are there any tools for installing a SSL certificate across a farm of Windows Server 2008 machines?
Started by Shawn Miller on
, 3 posts
by 3 people.
Answer Snippets (Read the full thread at serverfault):
Do you importing a CA certificate for multiple servers/workstations to recognize or do you mean a shared certificate such as for a load-balanced web farm?
You can use Group Policy for this.
|
|
I've generated a certificate request, submitted it to the Microsoft Certificate Services program. It issues the certificate. I downloaded it to conf/ssl/server.cert
I configured it in apache to using
SSLCertificateFile conf/ssl/server.cert SSLCertificateKeyFile...
Started by ScArcher2 on
, 3 posts
by 3 people.
Answer Snippets (Read the full thread at stackoverflow):
You need to make sure that....
IIRC, you can view the certificate in a browser and look for Usage or some such language, and it should say SSL Server (possibly among other things).
Sounds like your cert isn't allowed to be used for a server .
|
|
What is difference between https protocol and SSL Certificate that we use in web browser?
Aren't both of these used to encrypt communication between client (browser) and server?
Answer Snippets (Read the full thread at stackoverflow):
SSL allows arbitrary protocols other than the client....
You need a certificate to use any protocol that uses SSL.
The SSL Certificate is the document that they will use to agree Layer).
To negotiate a secure connection.
|
