0
votes
1answer
30 views

Solution for SSL client certificates with user self service

I'm administrating a linux-based small business network. User information is centrally stored in an OpenLDAP directory. There is an existing CA which is currently used to sign server certificates. It ...
2
votes
1answer
95 views

What is the difference between IIS and non-IIS Client Certificate Mapping Authentication

I want to enable certificate based authentication on my Windows 2012 Server. I see two different types of authentication possible: Client Certificate Mapping Authentication IIS Client Certificate ...
1
vote
1answer
292 views

iis Client Certificate Mapping Authentication

I have been googling this for hours. I cannot get my mapping to work on certain certificate fields. Fx this sample code: <iisClientCertificateMappingAuthentication enabled="true" ...
1
vote
1answer
54 views

Website authentication with a certificate from a different domain

My question: Is there a better way to enable authentication between 2 domains than what I'm doing below, and is Name Mapping the right thing to use? There are 2 domains; One is the primary ...
1
vote
0answers
199 views

apache authentication with SSL certificate and SSLUserName

i just try to put an SSL authentification for a SVN server over https. I would like that the client certificate allow authorized person to check their repositories. <VirtualHost ...
4
votes
3answers
8k views

openssl client authentication error: tlsv1 alert unknown ca: … SSL alert number 48

I've generated a certificate using openssl and place it on the client's machine, but when I try to connect to my server using that certificate, I error mentioned in the subject line back from my ...
1
vote
0answers
300 views

How to specify multiple root certificates for nginx client certificate verification?

For a project as part of the European Grid Infrastructure (EGI) we need SSL client certificate verification for a service running on nginx. As there are several root CAs allowed within EGI, we need ...
0
votes
1answer
279 views

Jersey web-service token based on hostname

I recently built a RESTful service using Jersey and is currently used by 3 other systems internal to the network (not people). How can I make sure the requests to the service are honored only based ...
0
votes
3answers
792 views

Purpose of the x509 certificate in metadata files on the IdP side (SSO structure)

In order to implement SSO, I have been working with some IdP and a Shibboleth SP install without being able to answer this question. On the IdP side I have a few metadata files that describes some ...
0
votes
2answers
301 views

SSH Authentication - Bruteforce attack prevention

I use certificate/key based ssh authentication with sshd running on non standard port. Do I still need to install denyhosts/fail2ban or log analysis based detection?. Do I get any advantage?
2
votes
1answer
153 views

SSL Handshake, Cannot Pinpoint Problem

When attemting to communicate with an Alfresco Server to perform a file upload the client receives the following error in their logs. SSLPeerUnverifiedException: Indicates that the peer's ...
6
votes
2answers
4k views

How to allow RDP access based on client certificate

How can I limit (RDP) access to a Windows Server not only by username/password but also with a client certificate? Imagine creating a certificate and copying this to all computers from which I want ...
0
votes
0answers
578 views

Publishing a web service in Forefront TMG using SSL Client Certificate Authentication

I have a 'sandbox' domain and I am experimenting with different forms of authentication. I have the following three machines in my network: Forefront TMG, IIS Web Server, ADDS. Outside of the domain ...
1
vote
0answers
673 views

Certificate issue on remote desktop

Please see this link : Certificate issue on remote desktop I have 2 PCs with Windows 7 Ultimate... (both are in NETHOME) PC 1 : computer name = alfa -> (main pc) , IP = 192.168.0.1 PC 2 : computer ...
1
vote
4answers
258 views

Understanding Security Certificates (and thier pricing)

I work at a very small company so certificate costs need to be absolutely minimal. However for some applications we do Need to have our customers get that warm fuzzy not-using-a-self-signed ...
0
votes
1answer
131 views

certificate based authentication

Are there any benefits for certificate based authentication over the other types of authenitication? When it is common to use it? If the certs are stolen everyone that have them cat authenticate to ...
6
votes
6answers
289 views

Certificate Authentication

I am currently working on deploying a website for staff to use remotely and would like to make sure it is secure. I was thinking would it be possible to set up some kind of certificate ...
7
votes
3answers
279 views

Does a CA require a full-time administrator?

At my place of employment, we have skated by over the years without having an internal Certificate Authority. This has worked for us because there was no visible impact by not having trusted entities. ...
5
votes
2answers
3k views

Using both basic and client-certificate authentication with GlassFish

I'm currently building a Java-servlet applcation (using Jersey on GlassFish to be specific). In some parts of the application I need to authenticate the user using basic authentication and in some ...
0
votes
2answers
512 views

I'm Lost: I'd like to use client-certificates to authenticate users' access to our web server

(Windows Server 2008) We have a web server that we'd like to limit access to. I thought a good way to do this would be to issue certificates to ours users. Unfortunately, This IIS & Tutorial ...