Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

-2
votes
0answers
11 views

SSL certificate with SAN for different domain

Are there any certificate authorities who will issue me a certificate with a SAN for a different (unrelated) domain? e.g.: SN: mail.example.com SAN: mail2.example.net I'd prefer domain validated ...
1
vote
1answer
22 views

Is capolicy.inf processed in full (or part) during server install, renewal, and issuing new certs

When installing a Windows CA, capol.inf confuses me. It seems that capol.inf does set defaults for the CA that can otherwise be done using certutil's registry functions (or regedit). It also ...
0
votes
1answer
21 views

Can I use the same client certificate in multiple OpenVPN tunnels to the same server?

I have a simple setup like this: SERVER ---- INTERNET ---- CLIENT On SERVER I already have OpenVPN set up with a sertificate for CLIENT. On CLIENT I already have OpenVPN set up to contact the server ...
-3
votes
1answer
18 views

Buying a certificate for APIs [closed]

Our requirements are simply to secure end-to-end communication over https://. We need it from a CA that will be available on most android / iphones. The variety of certificates out there are simply ...
0
votes
0answers
53 views

How to stop Cyrus from serving root certificate?

Since changing the certificate for my cyrus instance I get the following warning whenever I sign with cyradm: cyradm --user cyrus --authz cyrus localhost verify error:num=19:self signed certificate ...
0
votes
1answer
21 views

Client side certificates in IIS for accessing a web app only from an specific PC

We have an ASP.NET web app running in IIS, with about 200 users, some are inside our LAN and other ones are outside our LAN. Every user has a userid account and a password to login. Besides those ...
0
votes
1answer
11 views

Certificate not found error trying to set up PEAP-MS-Chap v2 authentication

I am trying to set up PEAP-MS-Chap v2 authentication for my VPN on a Windows 2003 SP2 server using a self-signed certificate. I have meticulously followed the PEAP certificate requirements when ...
0
votes
0answers
10 views

Random HTTPS failures, rebooting helped

I'm a web developer working on a product that has a web component and an Android application component. The Android part connects to the same web backend that provides the website. On Friday a lot of ...
3
votes
2answers
149 views

Do I need to purchase a trusted cert for offline environment?

I have a webserver used self-sign cert which is not connected to internet and those connect to my webserver also have no connection to internet, in such environment, do I need to purchase a trusted ...
0
votes
1answer
31 views

RDP Certificate/s for Static IP+Port/s

I need to RDP into multiple machines behind an external static IP. The method I'm using is to port forward selected ports to a target IP:3389. E.g. forward 100.110.120.130:10001 to ...
-1
votes
0answers
67 views

Differences between Exchange's “default” SMTP certificate and others enabled for SMTP?

I know that: You can enable the SMTP service for multiple certificates in Exchange The last certificate enabled for SMTP becomes the "default SMTP certificate" My question: What are the ...
1
vote
0answers
20 views

How does one create a certificate request for a managed service account in Windows?

I have a managed service account which needs a certificate in its personal store for decryption. I tried opening the Certificates snap-in and pointing to the service, but when I right-click on the ...
1
vote
3answers
269 views

Windows Server 2008 R2 - SHA2 based Cipher Suites

I am currently in the process of upgrading the SSL certificates for various websites that I manage from SHA1 to SHA2 compatible certificates. To date we have always used 'RSA' as the key exchange ...
0
votes
1answer
24 views

Powershell to transfer certificates to a new PC - how to determine if certificate is exportable

I'm using the following powershell to get a list of certificates including any archived ones so that I can easily transfer them to a new PC $store=new-object ...
0
votes
0answers
13 views

Non-domain log forwarding certificate types

I'm trying to set up a source initiated subscription (Log forwarding) where the event source server is not in the same domain as the event collector server. I'm following these steps. It states that ...
0
votes
1answer
16 views

Can a client certificate be revoked and reissued with the same name in OpenVpn?

Can a client certificate be revoked and reissued with the same name in OpenVpn? Please Help.
1
vote
1answer
43 views

the same certificates are sold at different prices?

I've encountered so many times with this situation. For example everybody know if I buy a Positive SSL for a year from a reseller, its price is about $5.95 . If I buy the certificate from CA ...
3
votes
0answers
53 views

OCSP stapling with nginx

I'm having trouble with OCSP stapling in nginx. So I start up the openssl ocsp daemon, and then I visit my site. Then it says Invalid request. I am using a private PKI and CA. SSL key: 8192bit DH key ...
0
votes
0answers
43 views

Exchange 2010 can't display certificate

We have a problem with our exchange 2010 certificate for the hybrid mode with Office365. Server: "Windows server 2008 R2 Sp1" Exchange: "Exchange Server 2010 SP3 14.03.0123.004" When we : Try to ...
0
votes
0answers
27 views

Is it possible to use RADIUS with client certificate for Checkpoint VPN?

I have Checkpoint Gaia R77 acting as VPN gateway, and Microsoft NPS acting as RADIUS. Is it possible to use client certificates for VPN authentication against RADIUS server? I know for sure that ...
0
votes
1answer
43 views

Allow in-house application administrative rights within corporate AD domain

We have a couple of in-house developed application in the company and those application need to be able to use "C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe" in order to register ...
1
vote
1answer
41 views

Freeradius TLS cetificate(win 7 and previous)

I'm configuring FreeRADIUS 2.2.6. I use TLS because TTLS is not supported by windows 7. With Windows 8.1 the WiFi connection works very well without installing certificate With Windows 7 and ...
1
vote
0answers
99 views

How to set up MS Azure VPN with the password authentication?

I'm trying to connect to the MS Azure VPN. I installed the Client certificate and got access to the VPN network. But now I need, the system request the password when somebody is trying to connect to ...
0
votes
0answers
20 views

Extra certs issue with Nginx SSL config

It seems that I've set up my SSL wrong. SSL labs gives me the following: https://www.ssllabs.com/ssltest/analyze.html?d=pitot.io&hideResults=on The issue in question is "extra certs". This ...
2
votes
1answer
40 views

Can I use a self-signed certificate in Tomcat for private APIs and a commercial certificate for public pages?

I distribute a Java desktop application that needs to communicate with some RESTful APIs served by embedded Tomcat within a Spring Boot webapp. I was planning on using a self-signed certificate for ...
0
votes
1answer
32 views

Work Folders / IIS - Using Wrong Certificate - Ignoring Bindings

I can't seem to get Work Folders to serve using the correct certificate. I've bound it via netsh to a wild card certificate, and when I check "netsh http show sslcert" every binding uses the correct ...
1
vote
0answers
29 views

Do I need my certificate server?

Good afternoon. I'm getting ready to replace one of my DC's and noticed it is using the Certification Services role on it. I looked and we have about 8 outstanding certificates that have yet to ...
0
votes
1answer
43 views

Which L1K entrust certificates should be kept private?

One of our client has made an update to his SSL certificate and he did send us a procedure to update the certificate on our side. They also provided the L1Kchain.txt (that should be converted to a ...
8
votes
2answers
814 views

Is this SSL certificate chain broken and how to fix it?

For the SSL cert on the domain example.com, some tests tell me that the chain is incomplete and since Firefox keeps its own certificate store, it might fail on Mozilla (1, 2, 3). Others tell me it is ...
-1
votes
1answer
48 views

How to create certificates for local network

I have a local network (a intranet of about 50 to 70 computers) where is a Windows Server 2008 with a ASP.NET MVC application. To encrypt the connection with HTTPS i need a server certificate (not ...
0
votes
0answers
107 views

Puppet Master doesn't get certificate request from agent

I have a puppetmaster server and four puppet agent clients. Here I'm attaching my puppet.conf files and hosts in all node. When I call 'puppet cert list' it returns nothing. But, when called with ...
1
vote
0answers
73 views

Which browsers and OSes supports ECC based SSL certificates?

We are evaluating whether to buy a RSA based certificate or a ECC based certificate. RSA is older and is supported by all browsers. ECC is newer, they state it is faster due requiring smaller key ...
0
votes
1answer
81 views

How to give a user access to the Certificate Store on Windows Server 2012?

I've battling an issue for the last couple of days that I cannot seem to resolve. I'm not an administrator although I have some knowledge about some administrative tasks. I have a PowerShell script ...
0
votes
0answers
66 views

Tomcat client certificate authentication, client certificate not sent

I've add client certificate based authentication on our Tomcat servers. Both client and server are tomcat servers with internal CA issued certificates. Each tomcat has its own keystore (PKCS12) ...
2
votes
2answers
214 views

How do I request a certificate from CEP / CES on a Microsoft CA on OSX or Linux?

This article describes how to request a certificate from AD CS (Active Directory Certificate Services) from a non-domain joined windows computer. I would think the same principals apply to non ...
0
votes
0answers
31 views

External clients get a certificate mismatch - but internal clients do not

I have a scenario where external clients are receiving a certificate that is different than the one that is bound to the IIS site. This is Win2008R2 / IIS, in the following configuration: ...
1
vote
0answers
115 views

OpenSSL verification failing with CA signed cert but not with self signed one?

First of all, I know there are plenty of related questions but it seems like most of them are due to the lack of issuer certificates on the server. I have been following this guide to enable client ...
6
votes
1answer
380 views

Is it possible to restrict the use of a root certificate to a domain

My customer uses a self signed certificate for an application to work. To be able to work, I have to install the root certificate they used to sign the certificate. Is it possible to configure a root ...
0
votes
1answer
33 views

How to exclude some path/page from client certification in Apache 2

I am trying to set up an Apache server with client certification enabled. So that the customers could access the content with a valid client certificate. Let's say, I have the server running as ...
2
votes
1answer
38 views

Windows Server 2012 RDP Certificate changing involuntarily

I have a Windows Server 2012 server that is administered via RDP. Every so often, (lets say, once every quarter ?!?) I get asked to accept a new certificate. It is not in a Domain and not rolling as ...
1
vote
3answers
657 views

ADFS and relying party token-signing certificates

I haven't quite gotten the grasp of relying party token-signing certificate's functionality with ADFS 2.0 / 3.0. Once the automatic self-signed certificate roll-over occurs (by default), there are ...
-1
votes
1answer
92 views

PEM File “CERTIFICATE” vs “PUBLIC KEY”

I have a PEM file that looks like: -----BEGIN CERTIFICATE----- ... -----END CERTIFICATE----- which I can convert to another PEM file using: openssl x509 -in key.crt -pubkey -noout. The new PEM file ...
0
votes
1answer
71 views

Changed Exchange URLs, still a reference to the old one somewhere

So at one of my clients their SSL certificate was up for renewal, and when I renewed it, I did not include their primary External/Internal URL in it (remote.domain.com) instead opting to change ...
1
vote
0answers
68 views

Can I use both RSA and ECC certificates in apache?

If I simply use "SSLCertificateFile" and "SSLCertificateKeyFile" twice, the certificate chain is broken for the first one. Can I use both RSA and ECC certificate which is issued from different ...
0
votes
0answers
45 views

Certificate stops working after computer reboot

Got a strange issue that I just can't find any clues. We have a program (Qlikview) which talks to a remote admin service via SSL (Qlikview Server) but it uses the certificate to validate the client. ...
0
votes
1answer
84 views

How to self-sign Windows 7 x64 drivers?

I have a problem and I haven't been able to get a good answer for this. I want to install drivers on many computers at the same time remotely. The command works but it fails du to timeout. When I do ...
1
vote
1answer
58 views

How to maintain revokation list for client certificates

I have a website running in Windows Server 2012, IIS. User's are authenticated using client certificates. I used to issue client certificates using Certificate Authority MMC snap-in. Since the ...
4
votes
2answers
499 views

Install - Import PFX Certificate to separate local account's Personal store - Automated

I've been wrapping my head around automating a way to perform this task: We deploy Windows Server 2008 R2 images for our customers. We use PowerShell (version 2) to deploy our proprietary software ...
1
vote
1answer
128 views

SSL VirtualHost not using DocumentRoot

I'm trying to set up a self-signed SSL certificate between my own VPS and Cloudflare (next to Full SSL). I'm using the following VirtualHosts for this: <VirtualHost *:80> ServerName ...
1
vote
1answer
127 views

Can't get Nginx to serve correct certificate chain

I'm trying to set up Nginx (1.4.6-1ubuntu3.1) with a StartSSL certificate. I've been following the documentation to get it working, but Nginx only serves the server certificate, not the intermediate. ...