Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

1
vote
0answers
14 views

Certificate status still pending even after completion

I have exchange 2013 on Azure VM which is also a DC. for using services like autodiscover etc I need to get a valid 3rd Party certificate which I got from STARTSSL, I generated the request and got the ...
0
votes
0answers
4 views

Dual Certificate Configuration with Certificate Transparency Failure

I have an Apache 2.4.18 with OpenSSL 1.0.2f configuration here with dual (RSA 4096 + ECC 384) certificate configuration. I also provide certificate transparency through TLS extension. However, when ...
1
vote
0answers
19 views

Cisco vWLC sha2 certificates not supported bug?

I currently have an app running with a Cisco virtual Wireless Lan Controller, all works fine except we get some error messages regarding SHA1 certificates, when I'm looking for SHA2 support the cisco ...
30
votes
3answers
2k views

Why are many admins using 'Turn off Automatic Root Certificates Update' Policy?

My company distributes a Windows Installer for a Server based product. As per best practices it is signed using a certificate. In line with Microsoft's advice we use a GlobalSign code signing ...
0
votes
0answers
16 views

How to use keystores and trust stores in linux & nginx

I am a newbie to implementing some of these concepts.I have a few questions to ask. I have read about keystores and trust stores using various links. The one that makes sense is this ...
0
votes
1answer
13 views

How do I determine if strong key protection is enabled for a certificate private key in Server 2008 R2?

I'm trying to get a Windows Server 2008 R2 domain controller to use SSL with LDAP. I have a certificate installed, but I'm unable to connect on port 636 via ldp.exe (port 389 works just fine). I ...
0
votes
0answers
5 views

Is there anyway to parse an OBJECT type from a certificate with opeanssl asn1parse?

let's see this sample code: $ openssl asn1parse -in mysterious_file.pem ... 78:d=5 hl=2 l= 3 prim: OBJECT :organizationalUnitName 83:d=5 hl=2 l= 8 prim: PRINTABLESTRING ...
0
votes
1answer
17 views

Add additional information to auto-enrolled certificates (Windows Active Directory CA)

I successfully enabled auto-enrollment for client computer certificates within our Active Directory domain. However, I want to include additional details in the auto-enrolled certificate such as the ...
2
votes
1answer
24 views

HP ilo Bulk Certificate update

I have a mixture of iLo 1-4 to update the self signed certs to use our CA. I have found some tools for the version 3/4 through PS and the new HP cmdlets. So two questions. Anyone know a way to bulk ...
4
votes
1answer
32 views

how to configure sendmail with multiple ssl certificates for multiple domains

I need to configure a server to host multiple email domains on a single IP, and thus install multiple ssl certificates. Miraculously, I have been able to get apache and dovecot to work with multiple ...
2
votes
1answer
49 views

Can I use a Comodo Wildcard-Subdomain Cert for RDP on Win10?

I followed Using CA certificate for Remote Desktop Connection Configure custom SSL certificate for RDP on Windows Server 2012 in Remote Administration mode? to secure RDP with a proper cert ...
0
votes
0answers
42 views

determine assosicate service installed certficate on windows server 2003 or which service is using that certficate

I have been facing issue to determine the purpose of installed certificate on windows server. Further, Is there any way to determine which service is using any particular certificate. So that before ...
0
votes
1answer
16 views

Subject not considered in a certificate with SAN

I have here a certificate with the subject "server01.department.company.com" and two subject alternative names "app1" and "app2". When I connect with app1 or app2 to the server all is fine. But when I ...
0
votes
1answer
19 views

Puppet revokes OpenSSL certificates

I'm experiencing some certification revokations in the puppet master and this behavior seems to be random. I just checked one of the CA certificates and I found this: # openssl crl -text -in ...
5
votes
2answers
253 views

How to allow login to a SMTP server better than with password?

I'm planning on creating a mail server, but I don't want to use passwords at all. They seem a wrong security choice to me. I'd love to use a certificate to login. This seems easy to do in HTTP, but I ...
5
votes
2answers
44 views

Outlook 2010 Warning About Old Cert that No-longer Exists on Exchange 2007 server

We've recently made a change to the Internal URLs of many of our Exchange Virtual Directories. Following that change, we're seeing end-users report errors from Outlook stating that the certificate ...
1
vote
1answer
22 views

Office365 Cert renewal

Do you need to purchase and renew a certificate for a hybrid setup of Exchange and Office365. We have multiple exchange servers setup on site for authentication but none of them have any specific cert ...
0
votes
2answers
44 views

Authenticating Client Certificates from Different Issuer

Ok, here's the scenario. A company called "Corp" issues SSL certificates to all their employees for accessing Corp's web resources. Corp also provides a certificate for their Certificate Authority so ...
3
votes
0answers
7 views

How well does haproxy scale for handling client certificate authentication?

My IoT company would like to use client certificate authentication to secure communications between each "thing" and a central server. We deploy about 30K things per year, and they have about a 5-year ...
3
votes
2answers
27 views

Are Windows internal CA-issued certificates compatible with Mac clients?

I am looking into deploying an internal CA to replace the GlobalSign certificates we use for our internal email encryption: Internal CA would be set up using ADCS in a two-tier hierarchy, no other ...
0
votes
0answers
9 views

cPanel - Cant send mail [closed]

I am in the process of setting up a VPS for the first time. I am currently trying to setup mail accounts on the server, but I have stumbled into some problems. When accessing the mail account through ...
0
votes
0answers
40 views

Is it possible to use certificate from public CA for IKEv2 without importing intermediate cert?

I have configured ikev2 vpn on a strongswan server and a Windows 10 client, and it works fine. The authorization method is leftauth=pubkey and rightauth=eap-mschapv2. Because the leftcert to ...
1
vote
1answer
51 views

Find certificate file expiration with powershell

I know how to do this normally, but the problem is all of the certs in question are not installed on my local machine. I have a source control directory where they all sit, and I need to iterate over ...
0
votes
0answers
158 views

ASA Certifiate does not match the server name

I am trying to install a certificate on my Cisco ASA 5515, It has my local windows 2012 CA as a trusted CA. The domain has also had this CA applied to their trusted root. When ever i try and connect ...
1
vote
0answers
51 views

apache mod_proxy call back to content server with client certificate

Setup ServerA Apache running a HTTPS site, which requires a client certificate to connect. see infos below regarding /etc/apache2/sites-available/secure.site.conf and ...
1
vote
1answer
19 views

Are default parameters to 'openssl genpkey' sufficiently secure? [closed]

I know very little about openssl so I'm wondering whether the default parameters to openssl genpkey are sufficiently secure. If I run openssl genpkey -algorithm rsa I get a private key. But is it fine ...
0
votes
1answer
32 views

Associate a specific certificate to a specific local user with OpenVPN

Set up: OpenVPN 2.3 on centos server. Multiple clients (windows, osx, linux). Encyrption using certificates PER device (easy-rsa), and added authentication using the openvpn-plugin-auth-pam.so ...
2
votes
1answer
25 views

Puppet Agent - cert clean vs. fqdn duplicate

I couldn't find any answer to what happened in my puppet environment, that's why I hope somebody will explain it to me here. ENV: Foreman (Puppet CA), Puppet Master, Puppet Agent I have an oracle vm ...
1
vote
1answer
108 views

Verifying S/MIME signed message with OpenSSL without checking the certificate's purpose

The problem: When I sign a message with a certificate which is used for a HTTPS webserver, OpenSSL does not want to verify it back. Signing a message: echo "TestMessage" | openssl smime \ ...
2
votes
2answers
145 views

Access Denied Importing Certificate on Remote Machine

I'm trying to come up with a way to push out a certificate for install on multiple machines. The method I came up with is: Invoke-Command ServerName {Import-Certificate -FilePath "path" ` ...
2
votes
1answer
69 views

AD Certificate template - Enroll on behalf of

I'm trying to setup S/MIME for a few users, which requires certificates. I'm not using smartcards, and not using autoenrollment for these certificates. Server is running 2012R2. I created a ...
0
votes
1answer
53 views

OCSP ERROR in ssllabs output

I just renewed my certificate on https://wemarsh.com/ . After I thought I had everything working I did some online SSL tests, just as a routine check that everything is configured properly. Some of ...
1
vote
1answer
19 views

Offical signed certificate is not accepted from curl via repository commit

I have a signed certificate installed on my server. It is working fine, with the webserver. But if I am trying to commit something to a repository, I get the following error message: Warning: ...
0
votes
1answer
61 views

WSO2 Governance Registry: Cannot add Active Directory user store with certificates

I'am using wso2 governance registry 5.0.1 and have a problem to add an active directory user store. I succesfully added my certifactes (.crt files) to the JVM's truststore but have this error: [Root ...
1
vote
1answer
173 views

Chrome: Repeated “Your connection is not private” messages (self signed certificate)

We have a set of internal (dev/test/QA/ORT/preprod LAMP servers that we use self signed certificates for. Normally this isn't a problem - we just click the exception ("Proceed to w.x.y.z.(unsafe)") ...
1
vote
0answers
22 views

Impossible to send events from more than one non-domain windows server (2008, 2003) to WinRM collector (windows 2012)

We have problem with non-domain servers using certificates. We created certificates (through CA), installed one on collector (with good CN), second on first source server, third on second source ...
2
votes
1answer
123 views

Unable to sign certificates as CA using pkitool and easy-rsa script for OpenVPN .csr file

OpenVPN server on Ubuntu 14.04. Easy-rsa on the certificate authority server on Ubuntu 14.04. Done this way because I want the ca.key file to be separate from the machine that acts as the openvpn ...
0
votes
1answer
33 views

Is RRAS SSTP VPN using publicly signed certificate a bad idea?

Most guides for deploying SSTP on RRAS recommend setting up a private CA using AD CS, with all the necessary steps that come with that to issue a server authentication certificate and have it trusted ...
-1
votes
1answer
23 views

Validate the original certificate template [closed]

I need to verify from what template was copied a certificate template y have searched in all the tabs for info but i have found anything about what was the original certificate template. **the ...
2
votes
2answers
30 views

IIS 8.5 with Exchange 2013 creates and sends old intermideate certificate to client

I have a problem with strange behavior of IIS 8.5. The server hosts Exchange with configured SSL of course. The problem started when I replaced an intermediate certificate of StartCom from SHA1 to ...
0
votes
1answer
164 views

What are Best Practices for setting a https node server via a reverse-proxy without using Apache or Nginx

I am trying to get a Node https server accessed through a node proxy. I bought certificates and got a standalone https server working fine. Initially there were some hiccups because of multiple certs ...
2
votes
1answer
48 views

How does SSL client authentication work with changing IP address?

From what I understand about SSL authentication, the FQDN of the party I trust has to match the common name or one of the subject alternate names. Does this apply for client certificates as well? So ...
0
votes
0answers
25 views

Distribute a certificate within an organisation

I want to distribute a certificate (.cer file) to users within an OU. It is used to encrypt .pdf files so that only company machines with said certificate installed can view the file. I created the ...
0
votes
2answers
50 views

auto-accept SSL certificates in Windows

we use some software that will ssh to a bunch of machines and do something. The problem is in our test lab, the vm's are re-new (destroy and re-created) very often, so the software will treat the vm ...
0
votes
1answer
88 views

Why is a user getting a “proxy server isn't responding” message and causing HTTP 408 errors to be logged?

I have a user who can't get to my web site hosted on AWS EC2. This user is behind a corporate proxy server, and when they enter my URL, they get a "The proxy server isn't responding" message in IE and ...
0
votes
1answer
295 views

How to make Apache trust a client certificate using an unknown CA, without validating the CA

I am in the following situation. I need to set up a 2-way integration with an external system. The admin of the external system required me to send two CSRs, one to be used to generate a client ...
1
vote
1answer
153 views

How to make Apache trust a client certificate using an unknown CA, without validating the CA

I am in the following situation. I need to set up a 2-way integration with an external system. The admin of the external system required me to send two CSRs, one to be used to generate a client ...
0
votes
1answer
100 views

For 802.1x PEAP RADIUS Authentication, do you use a different certificate per server?

Consider an environment that uses 802.1x PEAP authentication via RADIUS. Typically, this is to authenticate wireless clients. In this environment there are multiple RADIUS servers and clients will be ...
0
votes
2answers
3k views

'openssl verify' outputs 'unable to get local issuer certificate'

In /etc/ssl, when I do sudo openssl verify mywebsite.pem I get a message stating mywebsite.pem: OU = GT46830179, OU = See www.rapidssl.com/resources/cps (c)15, OU = Domain Control Validated - ...
-1
votes
1answer
23 views

Windows certificate export vs Cert download in browser

We have a https ssl cert on our IIS server. Is there any difference between certificates that one exports (without private key) from certmgr vs the cert that one sees in the browser address bar? I ...