Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

19
votes
6answers
9k views

Can I be my own trusted CA via an signed intermediate certificate?

Can I get a certificate from a root CA that I can then use to sign my own web server certificates? I would, if possible, use a signed certificate as an intermediate to sign other certs. I know that I ...
0
votes
1answer
513 views

self-signed certificate issue in IIS 7.0

I am setting up IIS 7.0 on a Windows Vista box. I am using self-signed certificate (by using built-in Create Self-Signed Certificate feature of IIS 7.0) on a web site. The I can browse from the local ...
2
votes
5answers
1k views

Why can't we use DNS for distributing SSL certificates?

Most low-cost SSL certificate providers really only verify that you control a domain name. For those types of certificates, rather than pay a third party to verify that I control the DNS records for ...
6
votes
3answers
4k views

Cannot create self-signed SSL certificate with IIS 7

I'm trying to create a self-signed certificate from within the IIS 7 snap-in, with little luck. When prompted for a friendly name for the certificate, I type in the name, and click OK, but then I am ...
0
votes
1answer
830 views

SSL Certificate Issue - “Data Transfer Interrupted”

I imported a PFX file for a dedicated SSL Certificate from 1and1 for a domain on my web server. When I visit the domain, I get the message "Data Transfer Interrupted" I need help debugging this. ...
0
votes
2answers
2k views

Unable to specify alterntive credentials using 802.1x wireless connections on Windows 7

Using Windows 7 I am unable to connect to the wireless network using 802.1x settings. I have configured it exactly as in Vista using certificates and checking the use alternative credentials check box ...
2
votes
2answers
1k views

SCCM SP2 - OOB Management Certificates Problems

I have a vPro client computer with AMT 4.0. It was importeed successfully via the Import OOB Computers wizard, and after sending a "Hello- packet" it became provisioned. (The SCCM GUI displays AMT ...
1
vote
2answers
922 views

Proper syntax for generating an SSL certificate CSR to protect an Exchange 2007 server

I need help generating a CSR for a Subject Alternative Name (SAN) SSL certificate to protect a new Exchange 2007 server. My main requirements are that Outlook Anywhere and OWA must work without any ...
4
votes
1answer
5k views

Disabling strong private key encryption on a personal certificate

I am attempting to import a certificate into my current user's personal certificate store, since my server is required to sign certain requests it makes and the suggested instructions were to do this. ...
25
votes
2answers
9k views

Can I build my own Extended Validation SSL certificate?

I can create by own CA and generate a self signed SSL certificate this way. But what does it take to make the browser show the certificate as being an "Extended Validation SSL certificate" ? Can I ...
3
votes
5answers
417 views

How do you track domain/certificate registrations over time?

Every once and a while I see stories about a site being hacked, but it turns out that the domain registration just expired and someone else grabbed the domain and redirected DNS. I've also been to ...
1
vote
1answer
847 views

SSL Certificates are about to expire. What should I do?

I have two SSL Certificates setup on two domains on my IIS6 Server. One certificate is through godaddy, and the other is through my host (1and1). Do I need to renew these or do I need to buy new ones ...
0
votes
1answer
411 views

Setting up a certificate based VPN access point

We are currently using a Microsoft RAS server, using PPTP for people to VPN into the office network. Its not particularly secure as peoples usernames are predictable, and many of the users are not ...
1
vote
3answers
997 views

Getting Apache to pull certificate's “Alt subject name”

I'm trying to get apache to expose various pieces of customers' personal certificates to php including (most importantly) the "alt subject name" field. When I inspect a cert in the browser, I can see ...
0
votes
2answers
129 views

How could I digitally sign LDAP data?

How could I digitally sign LDAP data? I want to make an LDAP request from a user machine to a proxy server that then relays the request to an LDAP server. The LDAP server would then respond with the ...
0
votes
3answers
2k views

RHEL/Apache ssl.conf configuration issue

We've got multiple subdomains, each with it's own virtualhost entry in httpd.conf and (for those supporting https) in ssl.conf as well. Our main www subdomain has a GoDaddy cert associated with it. ...
1
vote
1answer
2k views

Exchange certificate expired or not valid

We've got an Exchange 2007 server running on Windows Server 2008 in our small domain for internal use only, installed one year ago. Today the outlook clients started to show a security warning: "the ...
1
vote
4answers
405 views

SSL Cert Vendors

We have a website that has an SSL Certificate from GoDaddy. Our Japanese Office is reporting that some of their clients cannot access the secure site via their mobile phone. Apparently one of the ...
2
votes
5answers
4k views

Setting up https with a self-signed certificate on Apache

I'm trying to set up HTTPS on Apache, using a self-signed certificate. But instead of displaying the page, I get a bunch of weird errors. An a different error from each browser! From Chrome: ...
2
votes
4answers
15k views

Renew SSL certificate with Apache

I have a VeriSign certificate on one of my Linux / Apache websites that is going to expire. I plan on buying a renewal from VeriSign. What is the best way to renew the certificate with Apache? Do ...
0
votes
2answers
311 views

create certificate for IIS 7.0 issue

I am configuring https for IIS 7.0 and I need to create a test certificate for IIS 7.0 server. I am new to create certificate for IIS 7.0, and I only need server certificate, no need for client ...
0
votes
1answer
1k views

CodeCollaborator svn access

I'm trying to set up a copy of the CodeCollaborator trail software for performing code reviews but when I try and point it to our SVN repository I get the error Error: Invalid input: Version ...
6
votes
3answers
5k views

Self generate SSL Certificate for IIS6?

Hi guys is it possible to create your own SSL cert for IIS 6? If so does anyone have a link to a good guide on the web? Thank! John
2
votes
5answers
2k views

How to simulate connection to HTTPS and record the handshake?

I have a farm of IIS 6 web servers hosting a website over HTTP and HTTPS. With Safari 4 on a Mac, connecting over HTTPS, some nodes in the farm trigger the browser to raise a certificate error to the ...
2
votes
2answers
183 views

SQL Server 2000 Encryption Certificates

I am trying to import a new certificate because our old one is going to expire very soon. The certificate is ok and valid and works for IIS. Unfortunately SQL Server won't startup with Encryption ...
2
votes
2answers
2k views

OpenVPN with a Windows Certificate Services PKI

has anyone tried using OpenVPN with certificates generated by Windows Certificate Services? In theory this should work. The provided easy-rsa PKI is not very comfortable to manage for many users. I ...
2
votes
3answers
355 views

ssl / https certificate from shady resellers

what do i risk [besides obvious - cc number getting stolen] when buying ssl certificate for https use from one of many rapidssl resellers rather then directly from rapidssl ? disproportion in prices ...
1
vote
4answers
2k views

SSL Brand vs EV SSL

A few years ago I switched from using Thawte SSL's (a verisign company) to Verisign because of the better name recognition Verisign provides. To that end I've been happy with it and believe it gave ...
1
vote
2answers
163 views

SQL Server 2005 mirroring 2-1

I want to setup a single instance of sql-server as a mirror-backup for 2 production-servers, and I need to use certificate authentication because they are not part of an AD-domain. Reading the ...
5
votes
3answers
305 views

PKI keys per service or per server?

We all have a lot of internal services that need encryption and authentication to be provided by some sort of PKI. Do the security gains of using a different private/public key pair for each service ...
0
votes
2answers
1k views

Removing Cert Server from AD

My CA server crashed. It was used to deploy certs to messenger clients for live communication. I am no longer using live communication. I removed the server object from AD but my clients and servers ...
1
vote
2answers
1k views

IE7 stops sending client SSL certificate

We use client SSL certificates to secure web-based user communications with our web server (the edit site for a SharePoint site). Certificates are generated internally and sent to users to be ...
1
vote
4answers
457 views

Can I send a redirection a separate domain over HTTPS?

I have 2x SSLs on one server for two different domains. I've done so by making SSL number 2 point to another port number, in this case 444. Code for apache below: <VirtualHost XX.XX.XX.XX:443> ...
1
vote
2answers
1k views

Scripting Mac Parental Controls application whitelists - anyone have success?

While most of our accounts are managed through workgroup manager, we often set up local accounts to be used for end-of-term governmental exams at the K-12 institition where I work. It would be nice ...
10
votes
4answers
4k views

How to manage a web servers SSL private key protection (password vs. no password)?

We have a discussion in my company's security group about what's the worse of the following options to manage SSL private key. The web server needs access to the private key for the encryption ...
1
vote
2answers
1k views

How do I know that “Network Services” account is looking in LOCAL_MACHINE store for certificates?

I have an ASP.NET webservice that communicates with another webservice using a client-side certificate. The certificate is located in the LOCAL_MACHINE store. I have granted "Network Services" access ...
7
votes
4answers
801 views

Have I messed up buying the wrong SSL certificate for my domain?

I have just purchased an SSL certificate from Go Daddy. I setup the certificate to be: www.mydomainname.com (I changed the domain as you can tell.) I setup Apache and it is working. So when I ...
1
vote
2answers
384 views

Cleaning Up Certificate Services Infrastructure

I have inherited an Active Directory domain where certificate services were installed and not put to good use, and not documented. I would like to revamp the infrastructure and actually use the ...
12
votes
4answers
14k views

Add a custom certificate authority to Ubuntu

I have created a custom root certificate authority for an internal network, example.com. Ideally, I would like to be able to deploy the CA certificate associated with this certificate authority to my ...
10
votes
5answers
1k views

Can I use the same wildcard certification for *.domain.com and domain.com

You can make an SSL certificate by using *.domain.com as the name. But unfortunately, this doesn't cover https://domain.com Is there any fix for this?
8
votes
3answers
6k views

Generate self signed SSL certificate for apache

I want to create self signed certificate for the website. The old certificate expired few days ago. There are more than one NameVirtualHosts hosted on systems. The commands I am using to create ...
11
votes
4answers
936 views

differences of SSL certificates?

What are differences of SSL certificates for web server, such like extended validation, Smart Seal, wildcards, single root? What certificates are appropriate for what needs?
9
votes
2answers
10k views

How do I deploy an internal certificate authority?

IE7 aggressively warns about certificate failure; we have some internal sites that run over HTTPS and thus need a valid cert. We appear to have an certificate authority on the intranet that can sign ...
350
votes
3answers
326k views

What is a Pem file and how does it differ from other OpenSSL Generated Key File Formats?

I am responsible for maintaining two Debian servers. Every time I have to do anything with security certificates, I Google for tutorials and beat away until it finally works. However, in my searches ...
1
vote
1answer
1k views

Auto Enroll all servers for RDP certificate

I am running Windows 2008, and have an Enterprise CA installed. How can I make all servers auto-enlist to get a certificate for RDP? I don't want to have to do this manually on each machine.
0
votes
2answers
7k views

SSL Error: ssl_error_bad_mac_read

I am having a very weird problem when browsing a HTTPS site we host with Firefox. I have no problem with most of the pages (we are using PHP/FreeBSD), but a few of them, when accessed with latest ...
2
votes
2answers
10k views

change the expiration date on self-signed certificates?

I have a client that is using self-signed certificates (to sign InfoPath forms). The certificates are created using the certificate service built into Windows 2008. They said the certicates always ...
4
votes
4answers
6k views

VMware Infrastructure Web Access certificate problem

Every time I launch the shortcut to the VMWare Infrustructure Web Access page I get a message in IE7 asking me to choose a digital certificate. I don't have any digital certificates, so I click "OK" ...
7
votes
3answers
511 views

Can I use a trusted CA certificate on multiple sites?

Are there any technical/legal/contractual limitations to using a CA certificate on multiple sites that are running on a single machine? multiple machines? Or are the certificates to be used on ...
6
votes
7answers
2k views

What are the benefits of a self signed certificate on a live site?

Are there any benefits of a self signed certificate on a live site? I know in IIS 7 you have the ability to self sign a certificate and I was wondering if using that as a precurser to buying one from ...