Within public key cryptography (such as that used in SSL and TLS), you have both a private key (that you keep secret), and a public key (that you share widely) In order to avoid MITM (Man In The Middle) attacks, rather than publishing just the raw public key, you normally share a Certificate. The ...
1
vote
1answer
24 views
How do I set up lighttpd for x.509 client certificate authentication
So far I've had HTTPS working for a long time, so I don't think there are any trouble with the server certificates. Now I tried to add this to lighttpd.conf:
ssl.engine = "enable"
...
0
votes
1answer
19 views
Self-signed Certificate ( Makecert.exe or CA )
I have configure PowerShell Execution policy on Server as AllSigned, so i want to create a certificate for signing a ps1 script.
Can you guide me, which Certificate Should i use?
I want to used ...
1
vote
0answers
12 views
Clearing Java certificates cache (force reload certificates)
A simple question here.
One application gave me this exception when trying to access a website with a expired certificate: java.security.cert.CertificateExpiredException
So, I renewed the ...
0
votes
0answers
12 views
Cant request computer certificate
Using MMC with the snaping of certificate I am requesting certificates from a brand new installation of a CA.
Requesting User certificates, I works perfectly.
Requesting Computer certificates it ...
1
vote
1answer
27 views
SSL Certificate install GlassFish or Apache or both?
I've got GlassFish 3.1.2 installed on Linux CentOS 6.2, but it's fronted by Apache web server version 2.2.21 using mod_jk. That is, all traffic to GlassFish passes through Apache port 80 via mod_jk.
...
0
votes
3answers
49 views
How can an OpenVPN server be setup to use multiple certificates?
The OpenVPN documentation sets up a single certificate from a single CA to be used for all clients. Is there a way to set the server to enable multiple certificates from different CAs so long as the ...
1
vote
1answer
39 views
WinHttpCertCfg not importing certificate
I need to setup a deployment script that imports an SSL certificate that my service uses. I have tried importing with WinHttpCertCfg and with CertMgr to no avail.
Here are the command-line arguments ...
0
votes
0answers
10 views
add certificate to all files in EFS-folder with script
I try to set up collective access to EFS-folder. I want to add certificates of all users to all files in folder. Is it posible do with using powershell scripts or some another way?
Thanks.
5
votes
4answers
82 views
What host name should the SSL certificate for an SMTP server contain?
I have a server foo.example.com at 192.0.2.1
It runs exim to receive e-mail for several of my domains.
My domains each have an MX record pointing to mx.example.com, which resolves to 192.0.2.1
If I ...
0
votes
0answers
21 views
Client authenticaiton with VeriSign SSL Certificate
We have an Apache HTTP web server.
A connection to a Location requires a client certificate. The client certificate is trusted by VeriSign.
Apache HTTP VHOST-Part
...
SSLCACertificatePath /sslstore
...
1
vote
1answer
84 views
Sometimes RDP shows certificate warning and kerberos single sign-on does not work
I'm using Windows 7 and the Servers are Windows 2008 R2. So far there are at least 4 Servers that show this behavior.
Sometimes I get a warning when trying to connect via RDP stating the certificate ...
1
vote
1answer
91 views
Active Directory Certificate Import Successful, but LDAP Authentication Still Fails
I'm having a difficult time getting to the root of this issue. We use LDAP for authentication purposes across several services, confluence, bamboo, sonar, gerrit, etc.. Our LDAP service provider is ...
0
votes
0answers
14 views
SBS BPA still reporting certificate expiry after running fix network wizard
Two years after installation, the automatically generated internal certificate expires. I have run the Fix my network wizard, which says it has created a new certificate. And indeed, I can browse to ...
0
votes
3answers
53 views
Purpose of the x509 certificate in metadata files on the IdP side (SSO structure)
In order to implement SSO, I have been working with some IdP and a Shibboleth SP install without being able to answer this question.
On the IdP side I have a few metadata files that describes some ...
1
vote
0answers
121 views
Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP
Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)?
...
3
votes
1answer
102 views
Certificate problems with Apache LDAPS access
I have a Subversion server running on Ubuntu 11.04 using Apache, and I'm trying to hook the authentication up with LDAPS. I got the Apache config file set up to authenticate against LDAP (sans the S) ...
0
votes
2answers
143 views
How can I make apache request a client SSL certificate without needing to verify it against a known CA?
I'm using apache2 (2.2.3) to serve a site where I'd like to have clients authenticate with certificates. Since I only need to verify that a user presenting a particular certificate is the same user ...
1
vote
4answers
94 views
Do I really need client certificates to be signed by a trusted CA?
Suppose I have a site that I want users to be able to log into with client certificates. As I understand it, the client is presenting the site with the public half of a keypair and proving that they ...
0
votes
2answers
52 views
How do you change the cert template that IIS 7.5 uses automatically when you choose to “Create Domain Certificate”
In IIS, there is an option to "Create Domain Certificate." This works great except for one problem. The template that this process uses is the "Web Server" template in the CA which has a key with ...
2
votes
1answer
80 views
SSH host key changed - except it actually hasn't
I've just tried to SSH in to a server that I've been doing so without problems for a while, and received a warning that the server's host key has changed.
But it hasn't!
On the server, I've checked ...
1
vote
1answer
23 views
Does a VPN certificate request need to be encrypted
We have a Cisco 3000 VPN concentrator and use the Cisco VPN client to generate certificate requests, which we then create/authenticate on our certificate server.
When the help desk generates the ...
2
votes
0answers
41 views
Certificate enrollment request chain not trusted
I am working on a MSFT lab for Direct Access, and need to create a Web certificate. The instructions ask be to do the following:
On EDGE1, click Start, type mmc, and then press ENTER. Click ...
1
vote
2answers
134 views
SSL Certificate by GeoTrust not working
I have signed for an SSL Certificate (Quick SSL Premium) from Geotrust by my VPS provider (1&1). I, did exactly what it is indicated here, I added all of the directives at my subdomain's Virtual ...
1
vote
2answers
49 views
Would an invalid certificate cause an 0x8004010F sync error?
We just migrated from Exchange 2003 to 2007 which was a combo primary AD/DNS server and it has not gone smoothly. We are now down to getting a new certificate (a bureaucratic process thats out of my ...
0
votes
0answers
79 views
EC2 Windows: Certificate for local system with Thumbprint … is about to expire or already expired
I regularly see this error in the Windows Error Log on one of my EC2 instances:
Certificate for local system with Thumbprint aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa is about to ...
4
votes
1answer
92 views
Safely install MDM Certificate in MDM Server
I am new to server technology.I know how to obtain an Apple iOS MDM Certificate and
to use Apple iOS MDM features, we must:
1. Join Apple’s iOS Developer Enterprise Program.
2. Enroll
3. Register ...
0
votes
2answers
108 views
How to Enable multiple SSL vhosts and certificates on a single IP with Apache
I want to enable support in Apache for multiple SSL vhosts and certificates on a single IP address.
My configuration file is as follows. Please help me:
NameVirtualHost 196.196.1.117:443
...
3
votes
4answers
91 views
How do certificates improve security?
I am trying to get my head round server certificates. Am I right in saying:
A certificate binds to the requester (ie client), to prove their identity. The certificate at the time of creation is for a ...
2
votes
1answer
128 views
My Windows CA (certificate authority) main cert is expiring next week, what do I do?
I went ahead and renewed the Certificate Authority itself (right click the CA, all tasks, renew), using the same public/private keys.
Do I need to do anything else to make sure things don't start to ...
2
votes
2answers
98 views
How to trust a certificate for all users on a citrix server
We have a problem with a specific website which our staff need to access via Internet Explorer on our Citrix server (running Win2K3).
When connecting via SSL (a requirement), the site is ...
1
vote
1answer
42 views
Issuing client certificates to customers
What's the best approach for issuing client certificates to customers? Should we run our own certificate services (we're on Win 2008 R2), and issue them that way? Is there a CA that will issue them ...
3
votes
1answer
72 views
Automatically create Subject Alternate Name (SAN) Certificates
We are running an enterprise CA on Windows 2008R2. I just did an update to windows 7 on my workstation. Now every time I connect to a remote server using rdp I get a warning stating that the ...
2
votes
1answer
57 views
What is “certs” in openssl.conf for?
In the openssl.conf can I e.g. see
[ CA_default ]
dir = $ENV::KEY_DIR # Where everything is kept
certs = $dir # Where the issued certs are kept
crl_dir ...
0
votes
2answers
207 views
Kloxo/CentOS 5.7 install .p12 certificate
I have just got a free StartSSL certificate, I received a .p12 file, and only a .key file. I'm not really sure how to install this on my server and replace the current one. It's running Kloxo latest ...
0
votes
2answers
101 views
SSH Authentication - Bruteforce attack prevention
I use certificate/key based ssh authentication with sshd running on non standard port.
Do I still need to install denyhosts/fail2ban or log analysis based detection?. Do I get any advantage?
1
vote
1answer
75 views
SSL Handshake, Cannot Pinpoint Problem
When attemting to communicate with an Alfresco Server to perform a file upload the client receives the following error in their logs.
SSLPeerUnverifiedException:
Indicates that the peer's ...
2
votes
1answer
123 views
Opening certmgr.msc to display the Machine level certificates
I want to view the certificates installed at the machine level, if I open certmgr.msc.
I am aware that we can open an mmc and app a snap in for certmgr. But I dont want to go that way.
I am aware ...
3
votes
1answer
128 views
Adding a self-signed cert into trusted certificates list with powershell on Windows 7
I created a self-signed certificate on Windows 7 and deployed a web site with this certificate just to try it out.
When I configured the HTTPS endpoint and visit the site with HTTPS protocol, I get ...
2
votes
2answers
82 views
Do I need to back up the SQL Server Encryption Password and Symmetric Key?
I'm trying to setup SQL Server to use Cell-Level Encryption on some sensitive data. It seems straightforward per this example on the MSDN:
Create the Master Key with a strong password.
Create a ...
0
votes
1answer
115 views
Wildcard certificate with SAN
I am attempting to create a wildcard SSL cert with a Subject Alternative Name (SAN) for use in IIS 7.5 and I'm having some issues. Because I need to include a SAN, I am using the Custom Certificate ...
0
votes
1answer
195 views
Unable to add certificate to the Trusted Root Certification Authorities in Windows 7
I am trying to add an apple developer certificate for sending Push notifications to my Trusted Root Certification Authorities section. I get an error like so: "The import failed because the store was ...
2
votes
1answer
118 views
Is KB2641690 required on W2K3 running IE6
KB2641690 is an update to the Microsoft Untrusted Certificate Store but it not detected as required by MBSA.
It is not installed on my machine and does not appear to be superseded by anything.
Any ...
3
votes
2answers
115 views
Cannot issue Computer cert to standalone computer from my ECA
All Windows 2K8R2 SP1 environment.
I have a working Enterprise Certificate Authority in my domain. I want to issue a Computer certificate (for Server Authentication purpose) to an external, ...
1
vote
1answer
176 views
Is it okay to use the FREE SSL Certificate offered by: Instant SSL by comodo? or Is StartCom better? [closed]
Is it okay to use the FREE SSL Certificate offered by: Instant SSL by comodo.
The site says:
Our promise to you:
There is absolutely no cost or commitment for your SSL certificate.
...
0
votes
0answers
140 views
Problems with OAB and Certificates on Exchange Server 2010
We have an Exchange Server 2003, and installed a new Exchange server 2010 on another machine, but we have some issues:
Some users "Can" download The OAB and othes don´t
When Outlook is opened it ...
1
vote
1answer
99 views
Simple CA web interface for SSL certificates tracking/request/generation
I am using the nice XCA packge on my WS to generate and track the keys and CSRs we submit to various CAs, track the certificates we get back from then and to manage the full lifecycle of other ...
3
votes
2answers
259 views
How to allow RDP access based on client certificate
How can I limit (RDP) access to a Windows Server not only by username/password but also with a client certificate?
Imagine creating a certificate and copying this to all computers from which I want ...
1
vote
1answer
141 views
Why do I get certificate error when connecting to “trusted PEAP server?”
I'm trying to connect Windows 7 machine to my wireless network secured with WPA2-Enterprise PEAP.
PEAP uses server authentication so I have created root CA named FesbCA on my Windows server 2008 R2 ...
0
votes
2answers
218 views
Heroku SSL: Pem is invalid / Key doesn't match the Pem certificate
I bought a Gandi.net SSL certificate and I'm following this tutorial.
I created the key file.
then transformed it to CSR
then added it to Gandi website and waited for the CRT.
then removed the ...
0
votes
1answer
89 views
Free OCSP server
I can't have OCSP with my current OS licensing (2008 R2 Standard) but I need this option. I'm hoping to avoid shelling out an additional $2300.
Are there any open source products that could act as ...
