In cryptography, a certificate authority, or certification authority, (CA) is an entity that issues digital certificates.

learn more… | top users | synonyms (1)

3
votes
1answer
191 views

Fedora 21: Cannot Ping or Curl, but can Access Internet

We have an automatic proxy server configuration setup, and I can use a web browser but ping/curl are failing; it looks like a DNS resolution problem. When I do: URLGRABBER_DEBUG=1 yum check-update ...
6
votes
0answers
2k views

The OCSP server has no status for the certificate. (Error code: sec_error_ocsp_unknown_cert)

Just set up a website (Apache/Centos) with SSL where the free cert came from startssl. I've used startssl before, and never had any problems. I have no problems accessing the site from IE and ...
3
votes
0answers
256 views

LDAP over TLS fails to connect, Schannel Alert 48

I am trying to use PHP to edit users in active directory through LDAP. My test machine is using a simple WAMP setup and is NOT connected to the windows domain. This machine can connect to LDAP on the ...
3
votes
0answers
305 views

How to properly replace CA certificate when clients get it bundled in PKCS#12 containers?

I'm about to regenerate a certificate of my CA (maintained by OpenSSL) used mostly to provide OpenVPN access to the intranet for my clients. My question is related to this one — "Certification ...
2
votes
0answers
51 views

Cannot create a user in IPA server for remote login

I had created a new IPA IdM server in Centos 7 using script install-ipa-server. The installation was successful. After installation, I was not able to create a user using IPA user-add user, it asks ...
2
votes
0answers
147 views

Windows Server 2012 Certificate Stores not updating

According to Microsoft, Windows Server 2012 and Windows 8.1 automatically update Digital Certificates. Microsoft Security Advisory 3050995 https://technet.microsoft.com/library/security/3050995 says ...
2
votes
0answers
1k views

How to replace Zentyal CA certificates and key with an already existing CA

The context: we're using a CA which is deployed on all our client machines, and a lot of hosts and web servers. It seems that Zentyal CA module only allows to issue a new CA using the GUI, but not to ...
2
votes
0answers
209 views

Windows - Replace subject from CSR when issuing certificate

I've received a CSR from a client with a CN, but not with all the subject fields we require. According to this answer from Scott*, it should be possible to specify the final subject values when the ...
1
vote
0answers
19 views

network device enrollment service greyed out

I've recently installed AD Certification Authority on one of our DCs. It acts as a subordinate enterprise CA, the Root CA is a standalone offline root CA and there is no connection between those two ...
1
vote
0answers
57 views

How to configure Apache direct trust for CA signed certificates

I'm working on a corporate network which unfortunately is flat and has led to an interesting security requirement which I'm sure is possible (I just can't figure out how) The corperation has its own ...
1
vote
0answers
70 views

Java keystore: How to import the ca certificates correctly?

We have renewed the certificate of one of our server (apache httpd). For a webservice interface (for mobile clients) we need the certificate also on tomcat, means: stored in a java keystore. We have ...
1
vote
0answers
78 views

pki linux auto enrollment

I have a Windows Offline Root CA. I'm looking for a tool which I can install on my secondary CA to import there a certificate from my ROOT CA and to enable certificates auto-enrollment for non Windows ...
1
vote
0answers
76 views

sign keytool generated cert/key pairs using easy-rsa openvpn intermediate CA

I am creating root and intermediate CA with easy-rsa using ./build-ca & ./build-inter commands consecutively. Now, I want my root ca as offline and I want my certs/keys signed by intermediate CA. ...
1
vote
0answers
13 views

IIS not using correct intermediate certificate in chain sent to client

I have exactly the same problem as described here: IIS sends incorrect intermediate SSL certificate Unfortunely, the answer provided by CryptoGuy does not worked for me. I checked: I do not have ...
1
vote
0answers
466 views

makecert.exe incorrectly reports duplicate certificates when using -is flag

I created a self-signed certificate that I then loaded into the Trusted Root Certification Authorities folder. This certificate acts as a trusted root for websites on my workstation. I am using ...
1
vote
0answers
199 views

How do I change the expiration of CRLs with OpenSSL?

I am currently experimenting with my self signed CA. But in order for my devices to work I need a valid CRL. I set the CDP to one of the CDN hosting providers. As I have only 5 certificates issued I ...
1
vote
0answers
371 views

haproxy client certificate authentication signed by 'common' CA

I am setting up haproxy as an SSL terminator/load balancer in front of an API that we need to expose over the internet to a customer. The plan was to use mutual (2-way) SSL/HTTPS to verify that both ...
1
vote
0answers
310 views

How to setup digital signatures on Microsoft CA (AD-CS)?

I've been trying to research across the web on how to setup a Microsoft CA (AD-CS on Windows Server 2008 R2) in order to create a certificate for digital signatures, allowing you to digitally sign ...
1
vote
0answers
120 views

Remote Desktop Certificate Template Application Policy Extension

We are setting up remote desktop authentication with the use of certificates and ran into an issue in one of the environments. I am editing the RemoteDesktopComputer2008 certificate template, in ...
1
vote
0answers
941 views

Unable to convert JKS keystore to Oracle Wallet using orapki

I have generated jks keystore using keytool and using the jks keystore I have csr. The same csr I have sent to Signing authority. The Signing authority have given the trusted ...
1
vote
0answers
148 views

Exchange on WP7 - 80072F0D

Last week, the self-signed certificate on our Exchange 2010 mailserver expired, so we made a new one. Everything works fine after this, except mail on Windows Phone 7. All phones are giving an error ...
1
vote
0answers
50 views

EFS file access problems

in my organization, i have a deadline to deploy EFS using AD CS, and i am working with a single windows server 2003 box, which is the Root CA, and is the same server responsible to certificate ...
1
vote
0answers
2k views

How do I set up an 802.1X infrastructure for use with OS X and iPads?

At my workplace I have been tasked with setting up machine certificate based 802.1X wireless authentication for our Apple devices. It seems like on the client side this will be handled by Profiles ...
1
vote
0answers
858 views

The revocation function was unable to check revocation for the certificate

I need to pass IIS certificate authentication on Windows Server 2012. The root cert haven't got any revocation lists but I'm getting exception: The revocation function was unable to check ...
1
vote
0answers
1k views

Sendmail Server Authentication: Certificate based: Error

I have configured my setup for a server certificate based authentication. Both Server and Client are sendmail systems and both have the same set of certificates. However when client communicated ...
1
vote
0answers
3k views

Certificate enrollment for Local system failed to enroll Event ID:13

I've just finished installing a second domain controller to gain redundancy in the network. (and to solve some issues) After installation and configuring all errors are gone but one that is: Event ...
1
vote
0answers
1k views

OpenVPN without Root-CA

Simple OpenVPN Setup with SSL Authentication. SSL-Setup: Root-CA > Intermediate-CA > Issuing-CA All certificates (vpn-server and -clients) are issued by the "Issuing-CA". I tried to use the ...
1
vote
0answers
618 views

Change name of Win Server 2008 computer after CA install

I am importing an old certificate database into the new CA on a new server I'm installing. I am warned by Windows that I can't change the computer name, domain settings, etc., after installing the CA. ...
0
votes
0answers
16 views

Windows: Verifying intermediate CA on dark network with keystore (.kdb)

Background: We have Windows Server 2012's (Server A and B) whose Internet Explorer (IE) connects to RHEL's Apache server (IBM HTTP Server). PKI: Apache serves a certificate whose intermediate CA was ...
0
votes
0answers
55 views

Certification Authority Error ID 44 Error Code 0x80040112

I had a windows server SP2 with the CA role activated, so the domain users could ask for a personal certificate. Suddenly, the Certification authority role has stoped, and when I try to bring it up it ...
0
votes
0answers
18 views

OpenSSL certificate shows “Issued to: Administrator” as Common Name

I'm trying to issue a certificate which was generated by openssl. $ openssl req -out vpn_certrequest.csr -key vpn_key.key -new -sha256 You are about to be asked to enter information that will be ...
0
votes
0answers
36 views

How to disable Microsoft CA version extension in a Standalone Root CA?

I was looking for a way to exclude CA version from the ca extensions, but found nothing. We use Windows Server 2012 and it is needed for a Standalone root ca. Is there any way?
0
votes
0answers
14 views

Special considerations for a new Certificate Authority with multiple UPN suffices?

Our AD domain is foo.com, NetBIOS FOO_D1. A previous employee added a second UPN suffix, bar.com. Our corporate identity now revolves around bar.com, such that it is used in everyone's email address. ...
0
votes
0answers
244 views

Win 2008 - certificate renewing - “The certificate request was submitted to the online authority but was not issued. The request was denied”

Heres my previous problem, which was solved: Win 2008 - certificate renewing - I can't choose proper CA But then, after I managed to see and choose proper server on the CA's list, after I click ...
0
votes
0answers
78 views

Win 2008 - certificate renewing - I can't choose proper CA

I've got a problem with renewing server certificate: when I get to the IIS Manager => Server Certificates and when I try to renew right certificate, I can't find proper CA on the list - theres only ...
0
votes
0answers
27 views

“Manual User Signing & Encryption Certificates Enrollment” profile in Dogtag CA doesn't work with fresh installation

After Dogtag 10 installation (step by step by video tutorial) when I try to submit request "Manual User Signing & Encryption Certificates Enrollment"(3rd option) to CA by CA end-entity(end user ...
0
votes
0answers
54 views

How to secure a service with Mutual SSL Authentication and Intermediary CA?

Given: A working SSL mutual authentication setup (a WCF service hosted in IIS) No Intermediary CA In the current setup any client in the world having a certificate signed be one of the well known ...
0
votes
0answers
98 views

OpenSSL conversion from Windows CA for Asterik / Switchvox X.509 PEM Format

I'm trying to sign our switchvox PBX web certificate with our windows AD CA. SV Keeps telling me the certificate is invalid and must be in PEM format. Can anyone see what i am doing wrong? I Think ...
0
votes
0answers
223 views

Unable to load Cert into OpenLDAP userCertificate attribute

I having troubles to add particular cert into userCertificate attribute (DER encoded certificate) in standard scheme of openldap-servers-2.4.39-3.el7.x86_64 running on Centos7 Slapd uses: include ...
0
votes
0answers
120 views

Azure hosted website certificate chain (comodo) intermittently doesn't send full chain

We host a website in azure. The service we host has 6 instances. On that service we have added a certificate that covers the site, and has an authentication chain that looks like: our certificate ...
0
votes
0answers
82 views

Squid proxy unable to use LDAP/S on CentOS 6

I've configured Squid proxy to authenticate against Active Directory. With plain LDAP, everything works as expected. However, when I try to use LDAP/S, I get these error messages: p11-kit: couldn't ...
0
votes
0answers
313 views

How to add a certificate authority (CA) to redhat 5.6

I have Imported a Trusted Root Certification Authority(CA.cer) into Windows,It's working fine on window.Same certificate how to import the redhat 5.6?
0
votes
0answers
349 views

setup SSL with CA for multiple local sites in Apache and authenticate in a specific location (Error code: ssl_error_handshake_failure_alert) Ubuntu

i'm trying to implement SSL (HTTPs) on my local web-server to protect specified directories on Apache's websites where a user log's-in, combining SSL and HTTP Authentication Basic. I have follow ...
0
votes
0answers
1k views

How can I resolve element not found in AD CA?

I had to move our AD CA from server 2008 32bit to server 2008r2 64bit, both domain controllers too! I now know this was BAD. Is there any way to resolve the "Element not found" in AD CA? Or do I ...
0
votes
0answers
76 views

SSL warning appears only to some devices

I have godaddy ssl certificate for domain.There wasn't any problems with my SSL certificate and visiting my domain(Haven't receiveed any errors), but couple times(two weeks ago) when I visited site ...
0
votes
0answers
149 views

no local computer physical store, only registry and smartcard

I'm currently encountering an issue whereby i cannot see the "local computer" physical store, under trusted root CA, when attempting to install a cert. Instead the only stores i see are "Registry" and ...
0
votes
0answers
1k views

Can't seem to get Apache SSL client certificate authentication working with an intermediate CA

I'm restructuring my personal CA system and trying to add an intermediate CA into the mix. I have a self-signed root CA whose certificate is imported into all appropriate browsers/OSes. I seem to be ...
0
votes
0answers
205 views

Update Root CA Certificate values (Country/location(locality)/etc)

Our Offline Root CA server was setup prior to my joining the company and has com as the country code which is invalid for several things that I'm needing to do...primarily to get clients to stop ...
0
votes
0answers
73 views

Windows Server 2008 Certificate Authority setup

Help!!! Our Root CA expired on 2/28/2014 and the original server has been reloaded with an OS. I am in dire need as many of our external sites are now not working - no surprise! I have not ...
0
votes
0answers
26 views

Local CA for remote web server

I have two domains and the one I am in has a certificate authority server. The domain I am not in doesn't have a CA server. I want to certify https on that server so that I can get there without the ...