Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

0
votes
1answer
18 views

Exchange 2010/Outlook certificate errors

We are running Exchange 2010 on SBS 2011. About a year ago, I renewed the certificate for the mail server, however, ever since that time, we receive certificate errors on OWA, and internally, we ...
0
votes
0answers
17 views

C# Web API is called by CICS cobol over https and it returns 403.16 error

A C# Web API is called by CICS cobol over https and it returns 403.16 error. The mainframe is the HTTP Client. This works with http but not https. A 403 forbidden access error occurs on the Web ...
1
vote
1answer
46 views

PKI EJBCA : extract CA from EJBCA instance and just keep sub-CA

I'm looking for a solution to extract the CA from EJBCA instance, put it on an external drive, which is secured in a safe-deposit for instance. So I only keep the sub-ca for signing the end user ...
0
votes
0answers
16 views

Self signed Cisco VPN Certificate

So I just rented some servers protected with a Cisco Firewall from a data center provider. I plan on accessing these servers through VPN. The instructions from the data center provider was to ...
0
votes
0answers
15 views

Windows: Verifying intermediate CA on dark network with keystore (.kdb)

Background: We have Windows Server 2012's (Server A and B) whose Internet Explorer (IE) connects to RHEL's Apache server (IBM HTTP Server). PKI: Apache serves a certificate whose intermediate CA was ...
2
votes
1answer
41 views

HTTPS not working with two intermediate certificates

Iʼm trying to create my own certificate authority using the XCA software. I have successfully created the root CA (Fisir Technologies CA) and intermediate CA (Fisir Technologies Intermediate CA X1). ...
1
vote
2answers
40 views

Better way to view windows certs than MMC?

I'm trying to view the windows certs on my box but the UI for certmgr and MMC is terrible. Specifically, I'd like a quick way to view and compare thumbprints and friendly names. Does anyone know a ...
0
votes
0answers
49 views

Mac Code Signing Certificate - Can't Renew

Got an alert on server that the certificate is going to expire. I click the "renew" button and it says Unknown Error. So I dig deeper and run the following on the command line sudo ...
0
votes
0answers
11 views

Installing Certificate Enrollment Web Service and Certificate Enrollment Policy Web Service on same computer

I am referencing this MS Technet document: Setting Up Certificate Enrollment Web Services The environment is Windows Server 2008 R2. I am planning for a Certificate Enrollment Web Service and the ...
0
votes
1answer
66 views

Exchange 2013 ECP ,Redirect loop with wildcard cert

Recently we were unable to log into ECP, after successful login we a re redirected to de login prompt, on our two Exchange servers and no configuration change were made, we are using a wildcart cert ...
1
vote
1answer
25 views

java keystore with multiple aliases on apache

A JKS file (Java key store), May contains many aliases, this means it may hold many private+public keys combinations, some aliases may be trusted, some not. When I define jetty to use SSL, as this ...
0
votes
1answer
13 views

Import Certificate to Machine\personal script/automation?

Is there a automated way to perform this task: I need to import a PFX certificate to computer / personal path on multiple IIS 7.5 servers (Windows Server 2008 R2). I already tried with GPO but there ...
0
votes
1answer
52 views

Authenticated Origin Pulls with CloudFlare and IIS

I'm running Windows Server 2012 R2 with CloudFlare in front and trying to setup authenticated origin pulls as specified here - https://support.cloudflare.com/hc/en-us/articles/204899617 The problem ...
2
votes
1answer
40 views

How to add nameRelativeToCRLIssuer To CRL using OpenSSL

I'm trying to create a certificate using OpenSSL with a nameRelativeToCRLIssuer attribute for the DistributionPoint URL, rather than a fullName attribute. I've been using the following extfile.cnf to ...
0
votes
0answers
11 views

PEAPv0 Used in Windows Server 2012?

I've read the Wikipedia article on PEAP and have searched Microsoft.com. By all indications, Windows (in my case, Server 2012), uses PEAPv0 (as opposed to PEAPv1 or PEAPv2) to wrap MSCHAPv2. Is ...
0
votes
2answers
50 views

LDAPS on Windows Server 2012 R2 without CA

I am building Splunk in a production environment. The long and short is, in order to get relevant AD things that I need from my Domain Controllers, which are running Windows Server 2012 R2, I need to ...
1
vote
1answer
42 views

Mutual SSL authentication - client certificate vs server certificate

I am setting up a web application which will connect to a remote web service and is required to use a client certificate. My web app uses HTTPS to connect and I have it configured with my existing ...
0
votes
1answer
36 views

nginx client certificate location block

How can I use client certificate authentication with nginx for a folder? The ssl_client_certificate directive isn't allowed in location blocks. Example: I want my website me.tld to be reachable by all ...
0
votes
1answer
55 views

Client certificate causes http 500.0.64 error in IIS

I have installed a client certificate on my client server. When making an HTTPS request from the client to target server with the client cert the IIS logs report a 500.0.64 error occurred (this is the ...
1
vote
1answer
133 views

List all available templates from CA certutil or certreq

I need to request a certificate via command line I have investigated that certreq is the tool that can request the certificate. I am used to the gui to request the certificate by selecting one of the ...
2
votes
1answer
56 views

What is a safe way to allow any windows user to encrypt a file but only a specific application decrypt it

I've developed a service that reads text files from a location. Some of the text files may contain sensitive information. We would like to allow any user to run a standalone tool to encrypt the ...
0
votes
0answers
77 views

Get the latest CTL or list of trusted root certificates

I need to implement a service that does not start because the certificate cannot be validated. This certificate have a root ca that was recently created, so my windows 7 machines does not trust in ...
1
vote
2answers
38 views

TinyCA generated cert refused by Exchange 2013

I've created a CA using TinyCA2, and have created a certificate for my Exchange 2013 server. Although the certificate installed fine on exchange, Exchange always says "Revocation Check Failed". ...
0
votes
2answers
54 views

ADFS and relying party web form

We are in the process of configuring our ADFS server to allow SMAL authentication from a third party web application. We are slightly confused as listed below: We received metadata file and ...
0
votes
0answers
33 views

How to disable Microsoft CA version extension in a Standalone Root CA?

I was looking for a way to exclude CA version from the ca extensions, but found nothing. We use Windows Server 2012 and it is needed for a Standalone root ca. Is there any way?
0
votes
1answer
84 views

Microsoft Active Directory Certificate Services Response from certsrv

I am trying to use certificates and private keys on embedded systems that were generated from Microsoft Active Directory Certificate Services . NDES and SCEP are currently out of scope so it will need ...
0
votes
0answers
19 views

dogtag CRL profile

I am attempting to add a CRL Distribution Point to a Dogtag CA Certificate Profile. Using the caServerCert profile as a template, I copied it to a profile named serverCertTest and added the following ...
0
votes
1answer
27 views

RDS Session Host RDP SSL Certificate Expiring

We have RDS Deployed with: RD Connection Broker RD Session Host RD Licensing RD Gateway RD Web Access .. For your information our Gateway server name is rdp.sparkorg.org To renew the RDS ...
0
votes
2answers
81 views

Have both Hostname and FQDN in SSL Certificate on IIS

I've been searching here, technet and google but haven't been able to find an answer to my question yet. I have a website running on IIS 7, Server 2012 R2. The IIS serves as an access to our Citrix ...
1
vote
1answer
32 views

ActiveDirectory LDAPS third-party certificate and internal names

I have an AD RODC running on Server 2012 R2 Core in my perimeter network. I am using this for external/hosted applications that can do LDAPS based auth. My problem is that the FQDN of the server is ...
0
votes
1answer
60 views

No Certificates Found on Chrome Android with Comodo Positive SSL and IIS

For software testing reason, I have registered a domain name, set its A record to point to 192.168.1.30 (local PC on my network). I have installed Comodo Positive SSL for this domain on IIS on Windows ...
1
vote
1answer
27 views

Certificate status still pending even after completion

I have exchange 2013 on Azure VM which is also a DC. for using services like autodiscover etc I need to get a valid 3rd Party certificate which I got from STARTSSL, I generated the request and got the ...
1
vote
0answers
31 views

Cisco vWLC sha2 certificates not supported bug?

I currently have an app running with a Cisco virtual Wireless Lan Controller, all works fine except we get some error messages regarding SHA1 certificates, when I'm looking for SHA2 support the cisco ...
32
votes
3answers
2k views

Why are many admins using 'Turn off Automatic Root Certificates Update' Policy?

My company distributes a Windows Installer for a Server based product. As per best practices it is signed using a certificate. In line with Microsoft's advice we use a GlobalSign code signing ...
0
votes
0answers
43 views

How to use keystores and trust stores in linux & nginx

I am a newbie to implementing some of these concepts.I have a few questions to ask. I have read about keystores and trust stores using various links. The one that makes sense is this ...
0
votes
1answer
22 views

How do I determine if strong key protection is enabled for a certificate private key in Server 2008 R2?

I'm trying to get a Windows Server 2008 R2 domain controller to use SSL with LDAP. I have a certificate installed, but I'm unable to connect on port 636 via ldp.exe (port 389 works just fine). I ...
0
votes
0answers
6 views

Is there anyway to parse an OBJECT type from a certificate with opeanssl asn1parse?

let's see this sample code: $ openssl asn1parse -in mysterious_file.pem ... 78:d=5 hl=2 l= 3 prim: OBJECT :organizationalUnitName 83:d=5 hl=2 l= 8 prim: PRINTABLESTRING ...
0
votes
1answer
24 views

Add additional information to auto-enrolled certificates (Windows Active Directory CA)

I successfully enabled auto-enrollment for client computer certificates within our Active Directory domain. However, I want to include additional details in the auto-enrolled certificate such as the ...
2
votes
1answer
28 views

HP ilo Bulk Certificate update

I have a mixture of iLo 1-4 to update the self signed certs to use our CA. I have found some tools for the version 3/4 through PS and the new HP cmdlets. So two questions. Anyone know a way to bulk ...
4
votes
1answer
58 views

how to configure sendmail with multiple ssl certificates for multiple domains

I need to configure a server to host multiple email domains on a single IP, and thus install multiple ssl certificates. Miraculously, I have been able to get apache and dovecot to work with multiple ...
2
votes
1answer
72 views

Can I use a Comodo Wildcard-Subdomain Cert for RDP on Win10?

I followed Using CA certificate for Remote Desktop Connection Configure custom SSL certificate for RDP on Windows Server 2012 in Remote Administration mode? to secure RDP with a proper cert ...
0
votes
1answer
56 views

determine assosicate service installed certficate on windows server 2003 or which service is using that certficate

I have been facing issue to determine the purpose of installed certificate on windows server. Further, Is there any way to determine which service is using any particular certificate. So that before ...
0
votes
1answer
16 views

Subject not considered in a certificate with SAN

I have here a certificate with the subject "server01.department.company.com" and two subject alternative names "app1" and "app2". When I connect with app1 or app2 to the server all is fine. But when I ...
0
votes
1answer
32 views

Puppet revokes OpenSSL certificates

I'm experiencing some certification revokations in the puppet master and this behavior seems to be random. I just checked one of the CA certificates and I found this: # openssl crl -text -in ...
5
votes
2answers
255 views

How to allow login to a SMTP server better than with password?

I'm planning on creating a mail server, but I don't want to use passwords at all. They seem a wrong security choice to me. I'd love to use a certificate to login. This seems easy to do in HTTP, but I ...
5
votes
2answers
51 views

Outlook 2010 Warning About Old Cert that No-longer Exists on Exchange 2007 server

We've recently made a change to the Internal URLs of many of our Exchange Virtual Directories. Following that change, we're seeing end-users report errors from Outlook stating that the certificate ...
1
vote
1answer
23 views

Office365 Cert renewal

Do you need to purchase and renew a certificate for a hybrid setup of Exchange and Office365. We have multiple exchange servers setup on site for authentication but none of them have any specific cert ...
0
votes
2answers
58 views

Authenticating Client Certificates from Different Issuer

Ok, here's the scenario. A company called "Corp" issues SSL certificates to all their employees for accessing Corp's web resources. Corp also provides a certificate for their Certificate Authority so ...
3
votes
1answer
24 views

How well does haproxy scale for handling client certificate authentication?

My IoT company would like to use client certificate authentication to secure communications between each "thing" and a central server. We deploy about 30K things per year, and they have about a 5-year ...
3
votes
2answers
35 views

Are Windows internal CA-issued certificates compatible with Mac clients?

I am looking into deploying an internal CA to replace the GlobalSign certificates we use for our internal email encryption: Internal CA would be set up using ADCS in a two-tier hierarchy, no other ...