Within public key cryptography (such as that used in SSL and TLS), you have both a private key (that you keep secret), and a public key (that you share widely) In order to avoid MITM (Man In The Middle) attacks, rather than publishing just the raw public key, you normally share a Certificate. The ...
0
votes
1answer
32 views
SSL Handshake, Cannot Pinpoint Problem
When attemting to communicate with an Alfresco Server to perform a file upload the client receives the following error in their logs.
SSLPeerUnverifiedException:
Indicates that the peer's ...
2
votes
1answer
27 views
Opening certmgr.msc to display the Machine level certificates
I want to view the certificates installed at the machine level, if I open certmgr.msc.
I am aware that we can open an mmc and app a snap in for certmgr. But I dont want to go that way.
I am aware ...
3
votes
1answer
39 views
Adding a self-signed cert into trusted certificates list with powershell on Windows 7
I created a self-signed certificate on Windows 7 and deployed a web site with this certificate just to try it out.
When I configured the HTTPS endpoint and visit the site with HTTPS protocol, I get ...
2
votes
1answer
46 views
Do I need to back up the SQL Server Encryption Password and Symmetric Key?
I'm trying to setup SQL Server to use Cell-Level Encryption on some sensitive data. It seems straightforward per this example on the MSDN:
Create the Master Key with a strong password.
Create a ...
0
votes
1answer
58 views
Wildcard certificate with SAN
I am attempting to create a wildcard SSL cert with a Subject Alternative Name (SAN) for use in IIS 7.5 and I'm having some issues. Because I need to include a SAN, I am using the Custom Certificate ...
0
votes
1answer
41 views
Unable to add certificate to the Trusted Root Certification Authorities in Windows 7
I am trying to add an apple developer certificate for sending Push notifications to my Trusted Root Certification Authorities section. I get an error like so: "The import failed because the store was ...
2
votes
1answer
67 views
Is KB2641690 required on W2K3 running IE6
KB2641690 is an update to the Microsoft Untrusted Certificate Store but it not detected as required by MBSA.
It is not installed on my machine and does not appear to be superseded by anything.
Any ...
2
votes
2answers
39 views
Cannot issue Computer cert to standalone computer from my ECA
All Windows 2K8R2 SP1 environment.
I have a working Enterprise Certificate Authority in my domain. I want to issue a Computer certificate (for Server Authentication purpose) to an external, ...
1
vote
1answer
93 views
Is it okay to use the FREE SSL Certificate offered by: Instant SSL by comodo? or Is StartCom better? [closed]
Is it okay to use the FREE SSL Certificate offered by: Instant SSL by comodo.
The site says:
Our promise to you:
There is absolutely no cost or commitment for your SSL certificate.
...
0
votes
1answer
85 views
Problems with OAB and Certificates on Exchange Server 2010
thanks for reading my question.
We have an Exchange Server 2003, and installed a new Exchange server 2010 on another machine, but we have some issues:
Some users "Can" download The OAB and othes ...
1
vote
1answer
39 views
Simple CA web interface for SSL certificates tracking/request/generation
I am using the nice XCA packge on my WS to generate and track the keys and CSRs we submit to various CAs, track the certificates we get back from then and to manage the full lifecycle of other ...
2
votes
2answers
121 views
How to allow RDP access based on client certificate
How can I limit (RDP) access to a Windows Server not only by username/password but also with a client certificate?
Imagine creating a certificate and copying this to all computers from which I want ...
1
vote
1answer
70 views
Why do I get certificate error when connecting to “trusted PEAP server?”
I'm trying to connect Windows 7 machine to my wireless network secured with WPA2-Enterprise PEAP.
PEAP uses server authentication so I have created root CA named FesbCA on my Windows server 2008 R2 ...
0
votes
0answers
78 views
Heroku SSL: Pem is invalid / Key doesn't match the Pem certificate
I bought a Gandi.net SSL certificate and I'm following this tutorial.
I created the key file.
then transformed it to CSR
then added it to Gandi website and waited for the CRT.
then removed the ...
0
votes
1answer
42 views
Free OCSP server
I can't have OCSP with my current OS licensing (2008 R2 Standard) but I need this option. I'm hoping to avoid shelling out an additional $2300.
Are there any open source products that could act as ...
1
vote
1answer
60 views
RDP Certificate Distribution Points
I am receiving the message "Your computer can't connect to the remote computer because the Remote Desktop Gateway's server's certificate has expired or has been revoked" when trying to access a TS ...
7
votes
3answers
449 views
Can Https work without a certificate?
Recently our infrastructure team told our development team that you do not need a certificate for https. They mentioned that the only benefit of buying a certificate was to give the consumer peace of ...
2
votes
1answer
64 views
How do I create a certificate for WLAN users?
I would like to create a certificate system to add security to a small business wireless network. I understand that certificates can be used as authentication on a WLAN. Does anyone know how to do ...
1
vote
4answers
103 views
How to bind website and its SSL version using the same port
I have hosted my site on TCP port 91.
Is there a way to bind their SSL certificate on that same port 91?
0
votes
0answers
58 views
SSTP SERVER without certificate check
Is it possible to make a SSTP server where clients don't need certificates? If I want to use linux or microtik routeros as a client, do I have to do something extra in the SSTP server (Windows Server ...
0
votes
1answer
34 views
Single certificate for a single domain & multiple domains - Apache
I am hosting multiple websites on a server with a single IP address. I have a single certificate for one of the domain names. Is there a way to configure Apache so that the certificate applies only to ...
0
votes
0answers
41 views
Failed to extract Root CA list.. certificate invalid
I'm getting the following error on my 2008 R2 CA (event 4107)
Failed extract of third-party root list from auto update cab at:
...
0
votes
1answer
22 views
Security Certificate Exception
I am dealing with a small issue of certificate. In our wifi hotspot, every user is given a different username and password. In order to access any website, after connecting to wifi, login credentials ...
1
vote
1answer
43 views
Certificate issed to DC on every restart
I have installed 2 CA onto 2 Windows 2008R2 VM, one being an offline root CA and the other is intended to be the issuing CA. However I found that a DC (a 2008R2 VM) is requesting 2 certificates, ...
1
vote
0answers
33 views
Corrupted RDP Certificate
One of our machines crashed earlier, so I connected to it to find out what the issue was. It has been spitting out the following error in the logs for the past couple of days apparently...
The RDP ...
2
votes
1answer
48 views
Migrating from a standalone to enterprise CA
I want a peaceful transition from an old standalone CA into an enterprise CA. I am intending to offline the server on completion of this process.
My thought process is to publish a CRL with a long ...
2
votes
1answer
90 views
SSH from Windows to Linux with AD certificates
I have a Windows client machine connected to Active Directory and a Linux server also connected to Active Directory (through PAM w/ LDAP), and I want to be able to do password-less SSH from Windows to ...
0
votes
1answer
44 views
Offline root CA - LDAP distribution point
What benefit is there in using the LDAP distribution point for an offline CA versus using only HTTP? It sounds like the process would be much simpler to use the HTTP distribution point only. I've ...
1
vote
2answers
78 views
Are code signing certificates automatically trusted across the domain if the root CA is trusted?
We have a Microsoft enterprise certificate authority, and I would like to start issuing a few code signing certificates.
But what I'm unsure of is this: since all our domain/forest machines trust the ...
0
votes
1answer
61 views
Unable to renew certificate in certmgr.msc in windows 2003
I am trying to renew a certificate using CertManager on Windows 2003 Server. (I have also used the certificate plug-in in MMC but its the same thing.) I am logged in with the Administrator account.
...
1
vote
1answer
19 views
novell certificate file missing after restart
Every time I restart my Novell Groupwise on Suse Open Enterprise server the root certificate goes missing. Thats why ldap is not starting and so the other services are not working. After repairing the ...
1
vote
3answers
260 views
puppet cert mismatch in ec2
I'm setting up a puppetmaster (2.7.6) in ec2 via gems (on rhel6) and I'm running into problems with the cert names and getting the master able to talk to itself.
my puppet.conf looks like this:
...
0
votes
1answer
84 views
There is no certificate chain in portal certificate file
I am trying to install Mcafee EMM in a lab environment. I have created an enterprise CA and created a certificate. But while installing the EMM, its showing the error of
there is no certificate ...
0
votes
0answers
134 views
Publishing a web service in Forefront TMG using SSL Client Certificate Authentication
I have a 'sandbox' domain and I am experimenting with different forms of authentication. I have the following three machines in my network: Forefront TMG, IIS Web Server, ADDS. Outside of the domain ...
0
votes
1answer
73 views
Certificate does not contain a private key when importing certificate
I'm following the following tutorial Configuring SharePoint 2010 and ADFS v2 End to End
Because i want to use a single sign on between my sharepoint and crm 2011.
I have a sharepoint server, a crm ...
1
vote
1answer
36 views
Setup wifi router to allow connection only when a certificate is installed
I'm not sure if this is in scope of SF, but I'd like to setup a router so that it will only allow connections when a certain certificate is available on the client machine. The question is - is it ...
0
votes
0answers
131 views
Cannot get Mumble to work in Windows 7 because of StartSSL Time Stamp certificate
Mumble Client is signed and timestamped by StartSSL. It works fine when I try it on my home machine, but when I try to run it at the office machine, it keeps whining that it cannot verify the time ...
1
vote
3answers
220 views
How to add multiple dns names to my puppetmaster?
my puppet.conf on the master
[master]
certname = myname.mydomain.com
ca_server = myname.mydomain.com
certdnsnames = puppet;puppet.local;myname.dyndns.org;hivemind.local;
for my understanding with ...
0
votes
0answers
42 views
RDP TS Gateway Certification
I'm trying to connect to a third party clients Dataroom, they've supplied us with two certificates to import and a Terminal Services Gateway address to use on RDP.
This all works fine on XP or 7 as ...
0
votes
0answers
21 views
Updating certificate on apache for windows 2.0
Alright, so we are using apache 2.0 running on a windows 2003 server. We had a wildcard ssl certificate before, and now it is expired and we renewed up with a new UC Certificate. I downloaded the ...
4
votes
1answer
339 views
How can I verify/read an IIS7 SSL renewal CSR with OpenSSL
I have the privilege of handling ~5 SSL CSRs per week, checking their validity before passing them off to our CA for action. I use OpenSSL on an Ubuntu machine to check that they are valid, testing ...
1
vote
0answers
80 views
Certreq -retrieve can't find the specified CA
I'm currently writing a Powershell script and have run into a bit of a roadblock. Basically, the script requests, approves, and retrieves new certificates from our CA using certreq.exe and ...
2
votes
2answers
73 views
Wildcard certificate problem
My client bought wildcard certificate for domain example.com. We have setup ssl on website which is used under something.more.example.com and the wildcard certificate is reporting problems. Is there a ...
1
vote
0answers
65 views
Import CER file into NTAuth Store on Windows Server 2003
I have to import a third party CER file into the NTAuth Store on a Windows server 2003 machine. I followed the as described in the Microsoft documentation at http://support.microsoft.com/kb/295663, ...
0
votes
0answers
17 views
Grant access to SQL Server to a certificate
Ok.. I've a cert installed on the local machine of a server. (Trusted People)
SQL Server is running as Network Service. When it attempts to access the store it gets a 'Access is denied' error message.
...
0
votes
2answers
95 views
How to use a shared key and certificate for all users with OpenVPN?
I have an OpenVPN server which authenticates to an Active Directory and asks therefore each user for a username and passphrase.
On top of that it also requires each user to have a client certificate ...
1
vote
1answer
31 views
Searching a smartcard that's crossplatform
I'm searching a smart card for storing (PKI) certificates. The certificates on the smart card need to be retrieved on Windows (supporting Active Directory login), Linux, and Mac OS X.
I found some ...
1
vote
0answers
64 views
WCF custom certificate validator not invoked in BIG-IP environment
My WCF service with a custom client certificate validator works fine in my non load balanced environment.
When first deployed to BIG-IP environment there was a problem with it stripping SSL ...
2
votes
2answers
57 views
Sensibility of using generic client keys with openvpn in this scenario
I have configured a working openvpn server (ubuntu 10.04) and client, no problems.
I generated certificates and key files and such like for a client machine.
We deploy a number of these generic ...
0
votes
1answer
27 views
Login to website with multiple client certificates
I have users that need to access a website with a different client certificate depending on what function they are trying to perform.
The problem is that once the user logs in with one of the client ...
