The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
1answer
28 views

How to Automatically Tust Auto Enrolled Code Signing Certificates

In my organization all developers are setup to be granted a Code signing certificate via Auto Enrollment. Additionally, PowerShell is configured by group policy to require all scripts to be signed. ...
3
votes
1answer
46 views

Wildcard cert for local SSL Certificate Authority?

This seems like it should work, but PKI is complicated and I'd like to ask people who can give an authoritative answer. BACKGROUND: I am the network engineer for a company; for sake of argument ...
4
votes
1answer
73 views

How do I work out my certificate chain order manually?

Lets say I start with a certificate. Using openssl I can print it out like this: openssl x509 -in cert.pem -text -noout And I'll get some output such as Validity, Issuer and Subject along with ...
0
votes
1answer
109 views

Can't get Network Solutions Certificate chain working with EC2 Elastic Load Balancer

I have a certificate file provided to me which is a wildcard domain name. It comes as both a key and a crt file. No other files were provided. I'm having trouble getting it to work correctly with ...
0
votes
0answers
34 views

Install certificate chain on Konica Minolta C280

I am trying to install a certificate issued by our company CA on our Konica Minolta C280 printer. We have a company root ca installed on our desktops, which has issued an intermediate certificate, ...
1
vote
1answer
227 views

SSL chain verification problems - Barracuda load balancer

I've installed a new SSL certificate using SHA1 hashing. Im user a security certificate by GeoTrust SSL CA - G2 but With WebServices communications I'm getting a PKIX error. The follow page: ...
4
votes
2answers
85 views

Beginning a company's digital certificate infrastructure [closed]

What type of digital certificate product do I need to begin a digital security infrastructure within my company and for use by our customers (pre-trusted by chaining)? I believe I need some kind of ...
0
votes
0answers
62 views

no local computer physical store, only registry and smartcard

I'm currently encountering an issue whereby i cannot see the "local computer" physical store, under trusted root CA, when attempting to install a cert. Instead the only stores i see are "Registry" and ...
1
vote
2answers
3k views

SSLCertificateChainFile Deprecation Warning on Apache 2.4.8+

We have an SSL Certificate for our website from Network Solutions. After upgrading Apache/OpenSSL to version 2.4.9, I now get the following warning when starting HTTPD: AH02559: The ...
1
vote
1answer
1k views

version 0.9.7a of openssl reports “certificate signature failed”, but version 0.9.8e is happy

I am trying to construct an openssl certificate chain that will work with a standard CentOS 4 install as client. (I know it's very old, but it's what our client is using so we need to support it). ...
1
vote
1answer
370 views

Installing StartSSL certificate in ProFTPD

I am currently experiencing some trouble installing a StartSSL certificate in ProFTPD. These are the files I have: cert.pem - certificate file cert.key - ...
0
votes
2answers
1k views

Installing intermediate certificates in ELB

I had a certificate expire today and needed to get one reissued from GoDaddy. In the past, I've had no trouble using the pem encodings they generate with the ELB SSL interface. However, when I try ...
0
votes
2answers
778 views

Checking the issued and expiry dates for the certificates involved a certificate chain

Is it possible to check the issued and expiry dates for the certificates involved in a certificate chain by just passing a domain? I tired various openssl s_client attributes, but I am not able to ...
2
votes
4answers
3k views

Nginx and client certificates from hierarchical OpenSSL-based certification authorities

I'm trying to set up root certification authority, subordinate certification authority and to generate the client certificates signed by any of this CA that nginx 0.7.67 on Debian Squeeze will accept. ...
0
votes
0answers
156 views

PKI and Direct Access UAG

I have a two tier PKI infrastructure with an offline root CA and two Enterprise Intermediate Certification Authorities setup to auto enroll certificates. I have setup auto enrollment in default ...
3
votes
1answer
799 views

openssl s_client reports certificate OK, but other clients report problems

I have set up a server with a SSL certificate, added the necessary chain, and done the apache set up. I have tested using: openssl s_client -CAPath /etc/ssl/certs -connect www.example.org:443 and ...
1
vote
3answers
144 views

Can I create a chained SSL certificate that is recognized by browsers?

Let's say I have a certificate that is valid for example.com (and backed by a known SSL vendor). I want to be able to have a test version of the domain, test.example.com, that is also secured with an ...
2
votes
2answers
3k views

How to trust a certificate for all users on a citrix server

We have a problem with a specific website which our staff need to access via Internet Explorer on our Citrix server (running Win2K3). When connecting via SSL (a requirement), the site is ...
2
votes
1answer
649 views

What actually happens when I use IIS to generate an SSL certificate, especially during the import operation? Is this the only way?

I get the basic idea of public/private key pairs, but what I don't know is what is the inner workings of what IIS does when generating an SSL key. One thing that makes me think there is more under ...
1
vote
2answers
167 views

Whats the worst than can happen if your EV certificate chain is incorrect?

After having had EV SSL certificate installed a couple months we got an email from GoDaddy telling us the certificate chain was incorrect. They requested we disable 'GoDaddy Class 2 root certificate' ...