November 2024
M T W T F S S
 123
45678910
11121314151617
18192021222324
252627282930  

Categories

November 2024
M T W T F S S
 123
45678910
11121314151617
18192021222324
252627282930  

wild card ssl certifcate

Generating and Installing Wildcard and Multi-Domain SSL Certificates

Generate a CSR (Cert Signing Request) For a Wildcard Domain

Normally, to generate a certificate for a wildcard domain such as *.example.com, all you have to do (when generating the CSR) is specify in the “Common Name” field: *.example.com

The problem is that that:

This will only […]

convert a PFX to a seperate .key/.crt file

So after you installed OpenSSL you can start it from it’s Bin folder. I’d like to put OpenSSL\Bin in my path so I can start it from any folder. Fire up a command prompt and cd to the folder that contains your .pfx file. First type the first command to extract the private key:

openssl […]

OpenSSL command reference

OpenSSL command reference General OpenSSL commands commands to generate CSRs, Certificates, Private Keys and other tasks.

Generate a new private key and matching certificate signing request (Unix)

openssl req -out CSR.csr -pubkey -new -keyout privateKey.key Generate a new private key and matching certificate signing request (Windows)

openssl req -out CSR.csr -pubkey -new -keyout privateKey.key […]

SSL0208E IKEYMAN VeriSign error

SSL0208E IKEYMAN VeriSign error // // // // // //

SSL0208E IKEYMAN VeriSign error

 

SSL0208E IKEYMAN VeriSign error | v.yeung// // // // // // // //

Upon installing the certificates received back from VeriSign, the following error may be shown in the error_log when trying to access the site via https:

[…]

How to install an SSL certificate on IHS (IBM HTTP Server)

// =b&&(window.jstiming.srt=e-b)}if(a){var d=window.jstiming.load;0=b&&(d.tick(“_wtsrt”,void 0,b),d.tick(“wtsrt_”, “_wtsrt”,e),d.tick(“tbsd_”,”wtsrt_”))}try{a=null,window.chrome&&window.chrome.csi&&(a=Math.floor(window.chrome.csi().pageT),d&&0 How to install an SSL certificate on IHS (IBM HTTP Server)// //

How to install an SSL certificate on IHS (IBM HTTP Server) I’m going to explain how to install an SSL certificate on IHS (IBM HTTP Server).

I have received this request yesterday and today I have struggled […]

Import private key and certificate into java keystore

From time to time you have to update your SSL keys and certificates. In some cases you may have a mixed infrastructure e.g. “normal” http servers and tomcat or other java based servers. In the latter case you’ll have to import your shiny new certificate and key into your java keystore.

There are several methods […]

Convert from CRT to PFX with openssl

In Windows cases you need to merge these files into a PFX file.

Now before I tell you the secret I wish to explain what the difference is between the different files so you know how the certificate works.

•A .csr file is a certificate signing request which initiates your certificate request with a certificate […]

Apache OpenSSL

Apache v1.X

Download the appropriate intermediate certificate(s). Save it in a text editor such as Notepad as “intermediate.pem” Copy your SSL certificate from the order fulfillment email or log into your GlobalSign Certificate Center account and download it. Paste it into a text editor. Save as “mydomain.pem.” Copy “mydomain.crt” and “intermediate.pem” to the directory in […]

OpenSSL vulnerabilities

What is SSL?

SSL is a popular encryption technology to protect user privacy information transmitted via the Internet. When a user visits a secure Web site, such as Gmail.com, you will see a “lock” in the next URL address, show that you communicate information on the site is encrypted.

??This “lock” indicates that a third […]

certificate is signed using a weak signature algorithm!

certificate is signed using a weak signature algorithm!

Turns out that this results in SSL certificates that use the weaker MD5 signature hash algorithm which is the cause of the complaint. This is easily fixed by adding ‘-sha1’ to the openssl command line when generating the certificate. Like so:

$ openssl req -new -x509 -sha1 […]