Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

0
votes
0answers
9 views

Sonicwall SSLVPN Godaddy Certificate Trust Issues

Okay, I have a Sonicwall E5500 I'm trying to get SSLVPN working with my Godaddy SSL wildcard certificate. It seems to only throw errors when I try to use this certificate for the SSLVPN port. ...
3
votes
2answers
33 views

StartSSL cert doesn't work with Dovecot/OpenSMTPD

I've an issue with my StartSSL certificate. When I try to use it to activate SSL encryption on Dovecot, I get the following error in my log when a client attempt a connection to the imap server : ...
0
votes
1answer
35 views

Nginx proxying http to https with client certificate

We have an application that is not client-certificate aware and must consume a client-certificate authenticated web-service. To fix this, we're trying to use Nginx to reverse proxy a local (http) url ...
1
vote
1answer
33 views

Create a self-signed certificate to exchange SSL in W2003 SB

I'm doing a migration of some accounts in a local exchange server (W2003 server SB). Because of a limitation of O365 that seems to need SSL 993 connection to perform the IMAP migration, i need to ...
0
votes
0answers
14 views

EFS can decrypt a file but not re-encrypt after modification

I have a Windows 2008 R2 server with a shared folder containing an encrypted subfolder (EFS) for each user with important files. For security reasons 2 additional DRA's have been configured on the ...
0
votes
0answers
14 views

How to disable some ciphers in nsSSL3ciphers command?

Referring to Sun Directory Server Man Page Reference, can anybody tell whether - or + is really needed for scenario? I need to: enable only TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, and disable ...
0
votes
0answers
43 views

Tomcat two way SSL with APR loses client certificate after a few requests

I found that when accessing a web application that uses client certificate authentication run on Tomcat/APR (on Windows) with Firefox or Chrome, the client cert is "lost" after a short while. To the ...
0
votes
0answers
44 views

How to create a SSL certificate using SSL certificate text?

I have received a certificate from StartSSL for my domain in pure text which looks somewhat like: -----BEGIN CERTIFICATE----- [...]Many letters and digits[...] -----END CERTIFICATE----- I'm trying ...
0
votes
1answer
22 views

What is the Difference Between An Immediate Signing Certificate and an Intermediate Certificate?

I am doing some work with AWS, and in the process of uploading my certificate to AWS, the certificate chain I am uploading is throwing an error that says, The certificate chain must start with ...
0
votes
2answers
24 views

How to get CSR Value from KeyChain Access

So...probably a dumb question but I followed the instructions here And I'm trying to upload my CSR to digicert where the format is suppose to look like this -----BEGIN CERTIFICATE REQUEST----- ...
1
vote
1answer
43 views

Group policy removes certificate from personal store

We have a Code Signing certificate that is issued by our enterprise CA. We are using a group policy to deploy this certificate to the Trusted Publishers store on our domain computers. This works as ...
0
votes
0answers
41 views

Unable to load Cert into OpenLDAP userCertificate attribute

I having troubles to add particular cert into userCertificate attribute (DER encoded certificate) in standard scheme of openldap-servers-2.4.39-3.el7.x86_64 running on Centos7 Slapd uses: include ...
0
votes
1answer
36 views

Certification Authority CPS VS certificate template crypyography

I'm really confused,When I choose cryptography service provider for certification authority (RSA # microsoft software key storage provider), why again should I choose rsa algorithm at new ...
0
votes
1answer
21 views

Client certificate authentication with no access to private keys

We are trying to set up client certificate authentication for VPN users on Cisco ASA. User certificate store is being used to complete the authentication. The problem we are running into is that the ...
0
votes
2answers
31 views

Where can you get an ADFS token signing certificate template

The topic says it all. Had anyone generated a self signed token signing cert from a template and where can you download a template (not a tool like makecert)? This is not the generic SSL cert, but a ...
0
votes
0answers
14 views

'Generic' Certificates for RADIUS authentication/Encryption (weird?)

Situation: I have a test environment with Server 2008 that's a DC and has NPS for RADIUS authentication/encryption for wireless, and AD CS installed for the self signed cert. As it stands now, my ...
0
votes
0answers
19 views

Trouble setting up MACBook to Cisco RV042 VPN

I am trying to create a VPN connection from a MacBook Pro running OS X 10.9.5 to a Cisco RV 042 Firewall/Router. Using the MacBook Pro built in VPN client software. I have exported the client ...
1
vote
1answer
11 views

Extract Certificate Information automatically

In my current setting I have 16 production servers and another 16 to 20 on Dev and QA servers. I also have a lot of certificates in them. We are trying to inventory everything so that we dont miss out ...
0
votes
0answers
11 views

understanding how wcf handles certificate requests

If an IIS-hosted wcf service is acting as a client that consumes another web-service across the internet and needs to download an intermediate CA certificate, what store does it put it in? In this ...
1
vote
1answer
51 views

Cross Forest Certificate Authority

Looking for help on material for setting up a multi tiered/cross-forest PKI Infrastructure. The only articles I can come across are just setting up the basic two tier systems on one domain. Basically ...
2
votes
3answers
33 views

Issuing own certificates for signing software

We have a windows based infrastructure. Recently I was asked by our software developer if we can issue our own certificates to sign some small programs we're sending to out partners. But I don't fully ...
0
votes
0answers
9 views

Windows ADCS Schannel event ID 36682 on computers

I have a 2 tier PKI hierarchy which contains an offline ROOT Certificate Server ( un-joined to the domain) and Enterprise Sub CA servers. We are using EAP-TLS method for authentication to corp ...
3
votes
1answer
29 views

Can I use different certifcates for www and Exchange?

I have a website www.domainname.com and a published Exchange address of webmail.domainname.com The website is hosted offsite and the Exchange server is on-premises. I need extended validation for the ...
1
vote
1answer
22 views

SSL configuration for Intranet/VPN site

We've got a web site in development, that is to be used internally within our intranet, but also used externally by one client that will be accessing it via VPN. As far as Certificates go, what's the ...
0
votes
1answer
23 views

SSL certificate, manage domain and subdomain with SAN

We've got a question on the certificate and the SAN part. Can i put as common name my domain name (eg: example.tld) and use the SAN part to protect my subdomaine (eg: www.example.tld) ? Actually ...
2
votes
3answers
107 views

Multiple wildcard certificates for same common name on different servers

We've recently ventured into the cloud for hosting a number of websites. On our on-premise hosting we're using a wildcard certificate for a number of websites, and we want to do the same for our ...
0
votes
1answer
36 views

How to tell outlook 2013 where to pick up certificates for exchange 2013?

We got new exchange 2013 server in place and using OWA for long time. now we are trying to push outlook 2013 application to all users. Some of users can run outlook 2013 app without any issue. Some of ...
1
vote
1answer
111 views

Delete certificate from user local store using script

I manage to delete a certificate using a script with command : certutil -delstore -v -enterprise CA "Certificate CN" But unfortunately, it only works if this certificate was first added using the ...
1
vote
1answer
45 views

windows 7 certificate store - certificate disapear/get lost

We are running Windows 7 pro 64bit and using certificates for authentication. The certifactes are stored in the "My" certification store. The problem is that about 5% if our user base lose their ...
0
votes
0answers
41 views

RDS 2012R2 Certificate Issue

I've Googled around everywhere but cannot find an answer to this.. So we have 3 servers, RDS01..02..03, this is NOT accessible externally, so no RDGW. They are as follows: RDS01 - RDCB/RDWeb RDS02 - ...
1
vote
1answer
22 views

Can BizTalk Use X509 V1 Public Key?

We have a trading partner that has supplied a public key ".cer" file for use with AS2 EDI transactions. I've successfully imported the certificate into the certificate store under Local Computer\Other ...
4
votes
0answers
85 views

Windows server 2012 R2 - delay before certificates start working

I have this weird unexplained delay before the certificates i put in my servers start actually working it goes something like this: I add the certificates snap-in to mmc to manage the computer ...
1
vote
0answers
69 views

Windows Firewall Connection Security with Certificate (2)

I have a similar problem as the question with the same title from last October. On a Windows Server 2008 machine, using Windows Firewall's Connection Security rules, I need to establish an IPsec ...
2
votes
1answer
65 views

Is capolicy.inf processed in full (or part) during server install, renewal, and issuing new certs

When installing a Windows CA, capol.inf confuses me. It seems that capol.inf does set defaults for the CA that can otherwise be done using certutil's registry functions (or regedit). It also ...
0
votes
1answer
205 views

Can I use the same client certificate in multiple OpenVPN tunnels to the same server?

I have a simple setup like this: SERVER ---- INTERNET ---- CLIENT On SERVER I already have OpenVPN set up with a sertificate for CLIENT. On CLIENT I already have OpenVPN set up to contact the server ...
-3
votes
1answer
21 views

Buying a certificate for APIs [closed]

Our requirements are simply to secure end-to-end communication over https://. We need it from a CA that will be available on most android / iphones. The variety of certificates out there are simply ...
0
votes
0answers
85 views

How to stop Cyrus from serving root certificate?

Since changing the certificate for my cyrus instance I get the following warning whenever I sign with cyradm: cyradm --user cyrus --authz cyrus localhost verify error:num=19:self signed certificate ...
0
votes
1answer
70 views

Client side certificates in IIS for accessing a web app only from an specific PC

We have an ASP.NET web app running in IIS, with about 200 users, some are inside our LAN and other ones are outside our LAN. Every user has a userid account and a password to login. Besides those ...
0
votes
1answer
46 views

Certificate not found error trying to set up PEAP-MS-Chap v2 authentication

I am trying to set up PEAP-MS-Chap v2 authentication for my VPN on a Windows 2003 SP2 server using a self-signed certificate. I have meticulously followed the PEAP certificate requirements when ...
0
votes
0answers
18 views

Random HTTPS failures, rebooting helped

I'm a web developer working on a product that has a web component and an Android application component. The Android part connects to the same web backend that provides the website. On Friday a lot of ...
3
votes
2answers
177 views

Do I need to purchase a trusted cert for offline environment?

I have a webserver used self-sign cert which is not connected to internet and those connect to my webserver also have no connection to internet, in such environment, do I need to purchase a trusted ...
0
votes
1answer
44 views

RDP Certificate/s for Static IP+Port/s

I need to RDP into multiple machines behind an external static IP. The method I'm using is to port forward selected ports to a target IP:3389. E.g. forward 100.110.120.130:10001 to ...
1
vote
0answers
37 views

How does one create a certificate request for a managed service account in Windows?

I have a managed service account which needs a certificate in its personal store for decryption. I tried opening the Certificates snap-in and pointing to the service, but when I right-click on the ...
2
votes
3answers
1k views

Windows Server 2008 R2 - SHA2 based Cipher Suites

I am currently in the process of upgrading the SSL certificates for various websites that I manage from SHA1 to SHA2 compatible certificates. To date we have always used 'RSA' as the key exchange ...
0
votes
1answer
47 views

Powershell to transfer certificates to a new PC - how to determine if certificate is exportable

I'm using the following powershell to get a list of certificates including any archived ones so that I can easily transfer them to a new PC $store=new-object ...
0
votes
0answers
21 views

Non-domain log forwarding certificate types

I'm trying to set up a source initiated subscription (Log forwarding) where the event source server is not in the same domain as the event collector server. I'm following these steps. It states that ...
0
votes
1answer
31 views

Can a client certificate be revoked and reissued with the same name in OpenVpn?

Can a client certificate be revoked and reissued with the same name in OpenVpn? Please Help.
1
vote
1answer
52 views

the same certificates are sold at different prices?

I've encountered so many times with this situation. For example everybody know if I buy a Positive SSL for a year from a reseller, its price is about $5.95 . If I buy the certificate from CA ...
6
votes
1answer
138 views

OCSP stapling with nginx

I'm having trouble with OCSP stapling in nginx. So I start up the openssl ocsp daemon, and then I visit my site. Then it says Invalid request. I am using a private PKI and CA. SSL key: 8192bit DH key ...
0
votes
0answers
122 views

Exchange 2010 can't display certificate

We have a problem with our exchange 2010 certificate for the hybrid mode with Office365. Server: "Windows server 2008 R2 Sp1" Exchange: "Exchange Server 2010 SP3 14.03.0123.004" When we : Try to ...