Collaborate Disseminate
I am running testssl scan on an http port, after running the scan I got some errors highlighted in red.
The main one that I noticed is that certificate does not have SAN.
testlssl output:
subjectAltName (SAN) missing (NOT ok) — Br… Continue reading Is missing SAN in certificate a security issue?
The Brocade SANnav management application is affected by multiple vulnerabilities, including a publicly available root password.
The post Vulnerabilities Expose Brocade SAN Appliances, Switches to Hacking appeared first on SecurityWeek.
Continue reading Vulnerabilities Expose Brocade SAN Appliances, Switches to Hacking
I’ve searched all over to get the correct format to add the otherName SAN – with no luck. I’m trying to generate a client certificate to use with FreeRADIUS.
The following work as it relates to DNS and IP:
DNS.1
DNS.2
DNS.3
.
.
.
IP.1
IP…. Continue reading What is the correct configuration for otherName in SAN section of openSSL CNF?
I have a server (server01) running IIS with a Web certificate installed. The certificate has the following SANs –
server01.companyname.com
server02.companyname.com
The binding on Default Web Site for HTTPS for 443 has no HostName specifi… Continue reading IIS with alternate name in SAN Cert prompts for Credentials [migrated]
I was exploring SAN certs and was able to connect to the machine with domains specified in the SAN fields during CSR creation. But I was unable to connect to the machine with the common name specified in the CSR.
Below error is what I get … Continue reading Connection problems with common name as domain
I want to use a multi-domain SAN certificate for 5 of my public-facing domains. All of these domains point to the same ingress server (SSL is terminated at the load balancer), but the backend processing for each may be different.
Is SAN is… Continue reading Multi Domain SAN or single SSL certificate
For quite a while, it has been common that the CN of a web server certificate also needs to be present in the SAN list, and new versions of browsers enforce this. So, if my CN is www.example.com, and the SAN has only example.com, browsers … Continue reading What is the security advantage of requiring the CN to be in the SAN list?
Are we inviting any problems if we add localhost and 127.0.0.1 to the subject alternative name field of an x509 certificate?
We are still trusting the appropriate root CA, but relaxing the rules of the name just a bit.
I’m not really sure exactly how to ask this, but I’ll try my best.
I have two SSL certs, and I’m tyring to figure out if I accidentally invalidated one of them.
Cert 1 was just renewed, and issued to www.mydomain.com in the CNAME. This cer… Continue reading SSL Cert SAN field
I am getting this error in my device:
javax.net.ssl.SSLException: hostname in certificate didn’t match: <ec2-5-43-58-857.us-east-2.compute.amazonaws.com> != <na>
So I did some research and found I could set alternative IP addr… Continue reading OpenSSL GENERAL_NAME:bad ip address set in [alt_names]