IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [wildcard]

32 questions
1
vote
0 answers

Creating a PFX File for Wildcard SSL Certificate

I am trying to install a Wildcard SSL Certificate in IIS on Windows Server. It only accepts the .pfx file format for importing & installing an SSL certificate for hosted applications. I got the .csr file from CA as it was a wildcard cert. I…
Rajas
  • 41
  • 2
  • 5
1
vote
2 answers

Why does Access-Control-Allow-Headers: * have no effect?

Although the OPTIONS returns * for Allow-Headers I'm getting the following CORS response. Access to XMLHttpRequest at 'https://example1.com' from origin 'https://example2.net' has been blocked by CORS policy: Request header field x-requested-with is…
Roee Gavirel
  • 113
  • 4
1
vote
1 answer

Workaround for no www.subdomain.domain coverage on wildcard cert

Edit: Would deleting the www.hungry.example.org DNS record be a good solution if there are no links to it? I have a domain (example.org) and a subdomain (hungry.example.org). Until recently they had separate SSL Certificates and everything was nice…
user1114
  • 145
  • 5
1
vote
1 answer

Bash wildcards - Manipulate globbing to delete arbitrary files

I am currently auditing a plugin and have the following situation (simplified for example purposes):
Simon Scannell
  • 11
  • 1
1
vote
1 answer

new wildcard certificate if I already own another certificate for a subdomain

I already own a certificate for a subdomain sub1.domain.com but I would like to secure all subdomains of domain.com buying a wildcard certificate. Can I still use the specific certificate for sub1.domain.com (so it works like an override of the…
hdcnik
  • 13
  • 3
1
vote
1 answer

How to ensure wildcard certificate private key security?

The time has come for us to renew and update our wildcard certificate. I've been tasked with researching the ways we can protect the private key without compromising the security of the certificate. (With the key and cert together, anyone could…
bsant
  • 11
  • 4
1
vote
0 answers

How did I get a signed cert back with a wildcard common name when I submitted a csr with a specific common name?

Apologies if this is obvious but I'm hoping for some clarification here. I generated a CSR on an appliance of mine. This CSR had a specific common name (let's call it foo.domain.com). I then sent the CSR off to my cert group. They provided a…
Mike B
  • 3,336
  • 4
  • 29
  • 39
1
vote
3 answers

Same wildcard cert from two different 3rd party CA's

We have a wildcard cert that's due to expire in three months. The CA won't let us renew it until one month prior to its expiration. We're thinking about using a different CA since we've since purchased other certs through another CA and it'd be…
Jeremy
  • 11
  • 1
  • 2
0
votes
1 answer

Combining wildcard and subdomain-specific SSL certificates

Not quite sure which Google terms to use to find the answer, so I thought I'd ask it here, presented as a scenario: Say you have a corporate entity (Example Co) with a wildcard SSL cert issued for *.example.com. They contract with a SaaS provider…
ssl-curious
  • 3
  • 1
0
votes
1 answer

Save to setup localhost.example.com to test wildcard SSL?

I have a domain with a wildcard SSL certificate (i.e. "*.example.com"). I also develop using WAMP setups, which I would like to be able to test HTTPS on. There are several tutorials on how to setup a self-signed certificate on a WAMP, but since I…
Martijn
  • 205
  • 1
  • 7
0
votes
1 answer

Self-signed CA and combining wildcard and SAN certificates

I have created my own Certificate Authority and installed the certificate on a few computers. Now I have generated a server certificate with common name *.mydomain.com and Subject Alternative Name (SAN) DNS mydomain.com to match all first level…
Toxiro
  • 113
  • 1
  • 3
0
votes
1 answer

Which URL is revealed when using wildcard SSL?

Assume there are two servers; server1.com has a standard SSL certificate installed and server2.com has a wildcard SSL certificate (*.server2.com) installed. Next, assume you make from server 1 via SSL connection an API call to api2.server2.com... If…
user1402897
  • 103
  • 2
0
votes
0 answers

Should a wildcard cert. e.g. *.example.com, be accepted to authenticate the root domain not listed as SAN?

(This has been marked a duplicate of SSL Cert for sub.domain.com and www.sub.domain.com, but while it's correct that the answer to this question is present in the answers there, that question is distinctly different and people looking for the answer…
Scott
  • 163
  • 1
  • 8
0
votes
1 answer

Are all web servers for a domain wildcard certificate supposed to have the same private key?

If I have three web servers that all have the same CSR based on a domain, *.domain.com, does that mean all the servers have the same private key? I know it's a short question, but I am not sure of the SO answers I have read. Use the same IIS RSA…
johnny
  • 641
  • 1
  • 7
  • 13
0
votes
1 answer

Securing DNS by blocking querys AND responses [Dnscrypt questions]

Visiting facebook.com you will query s.update.fbsbx.com. s.update.fbsbx.com is a CNAME to s.agentanalytics.com. Currently, the only way to block s.agentanalytics.com is to block s.update.fbsbx.com via hosts. Windows DNS client, and even wildcard…
Tyler
  • 417
  • 5
  • 12
1
2
3