Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

0
votes
1answer
411 views

What is the difference between a “Microsoft” digital ID and a “Netscape” digital ID, from Verisign?

Background: I have a website which has, for a particular subdirectory, client certificate mapping set up in IIS6 for download of certain privacy-protected files. There are two independent clients that ...
6
votes
2answers
4k views

How to create self signed wildcard (*.example.com) certificate

I'm trying to install Dynamics CRM 2011 RC and configure it for Internet Facing Deployment. One of the requirements for this is a wildcard SSL certificate. Since I'm installing development/testing ...
0
votes
1answer
1k views

A non interactive alternative to makecert

I have a need to create a self signed certificate non interactively. Unfortunately, the only tool that I know of (makecert) is interactive - it uses GUI to ask for a password. My OS is Windows (from ...
8
votes
1answer
1k views

certutil -ping fails with 30 seconds timeout - what to do?

The certificate store on my Win7 box is constantly hanging. Observe: C:\>1.cmd C:\>certutil -? | findstr /i ping -ping -- Ping Active Directory Certificate Services Request ...
1
vote
1answer
3k views

Error during SSL installation cPanel/WHM

I have a dedicated server and I am using the install wizard via WHM to install an SSL certificate. I have the following keys: Certificate key RSA private key CA certificate I paste these three ...
36
votes
2answers
102k views

How do I view the details of a digital certificate .cer file?

I am using Windows and have been given a .cer file. How can I view the details of it?
1
vote
4answers
288 views

Understanding Security Certificates (and thier pricing)

I work at a very small company so certificate costs need to be absolutely minimal. However for some applications we do Need to have our customers get that warm fuzzy not-using-a-self-signed ...
0
votes
1answer
1k views

Cisco ASA 5510 w/ AIP SSM - Can it inspect SSL traffic?

Is is possible for a AIP module within a Cisco 5510 ASA to decrypt and inspect SSL traffic? I have asked my local vendor (who placed the devices of which I speak) and they say that the AIP module is ...
2
votes
2answers
9k views

Deploying internal certificate via GPO - will this only work for IE?

I am contemplating adding AD CA role to our server and using GPO to add a self signed, trusted certificate to all internal clients (to ease testing)... Some of the related questions regarding this are:...
0
votes
1answer
176 views

SQL Server encryption/decryption

As part of disaster recovery testing I am trying to ensure that I am able to recreate my DB and still be able to decrypt previously encrypted strings. So here is what I am doing as a test... ...
1
vote
3answers
7k views

Generating self-signed, wildcard certificate for IIS 7.5 on .local domain

Is it possible to generate self signed, wild-card ssl certificate for internal domain on IIS 7.5 for testing purposes. For example I'd like common name to be *.domain.local Similar question for IIS 6 ...
0
votes
2answers
1k views

XCA Signing Problem

I am trying to make a self-signed SSL Certificate for Sun WebServer 6.1 using the XCA Certificate GUI. Here is my process: Login to Sun Webserver admin console. Use the "Generate CSR" function to ...
0
votes
2answers
131 views

Key certificate interception

What prevents someone from intercepting most/all of my communication and forge a certificate? Even if I wish to get certificates from a key server, a man-in-the-middle can intercept my request and ...
0
votes
1answer
258 views

Problem with certificates issued this month (thawte) in apache

We have issued a new certificate this month, and is giving us some problemas. According to thawte, they migrated to 2048 the root, but we can't get the point to configure those new certificates in ...
0
votes
1answer
96 views

How to get rid of DIGI passport certificate prompt

Currently, I am giving users access to DIGI passport port through HTTPS. The problem is, user will be prompted some kind of certificate prompt. How do I get rid of that problem, so that users can ...
1
vote
1answer
10k views

Install Certificate in RDP-TCP properties

I'm trying to get certificates to work on our Windows 2008 Terminal server. Currently when we log on using RDP 6.1 client we get an certificate warning saying that the rdp.geas.local certificate is ...
1
vote
1answer
412 views

Problems with certificate with private key , IIS, AppPool and user

I have Windows 2003, IIS 6.0 , ASP.NET application using Certificate with Private Key. User in domain "domainCompany\Pre_Certificado" install Certificate in Store Local Machine. domainCompany\...
0
votes
1answer
858 views

How do you get self-signed certificates working for server to server communications?

I have software that connects two applications - one that runs on Windows Server 2008 and another that runs on Linux/CentOS. The Windows app runs within IIS and ASP.NET. The Linux/CentOS app runs ...
0
votes
2answers
1k views

IIS, CertCheckMode and metabase inheritance

One of my clients wants to avoid the test of certificate revocation list in one of his websites. As far as I know, we have tu put this value (CertCheckMode) to 1 in the IIS metabase: http://www....
0
votes
1answer
155 views

certificate based authentication

Are there any benefits for certificate based authentication over the other types of authenitication? When it is common to use it? If the certs are stolen everyone that have them cat authenticate to ...
0
votes
1answer
1k views

self-issued exchange certificate for dyndns-url

I've got an exchange server behind behind a port to address translation firewall. The server is reachable from the internet using a dyndns-url. Now I want to sync windows phones to exchange mailboxes....
1
vote
2answers
850 views

Problem Implementing SSL with WSUS

I'm working on setting up SSL on our WSUS server using a self signed certificate, but I'm running into trouble. Specifially, after running selfssl /n:CN=server.domain.local /t /v:365, and ensuring ...
2
votes
3answers
4k views

Exchange 2007 Delivery Delayed (maybe need certificate?)

Last week, I setup a new domain and Exchange Server 2007 SP1. I created new accounts and mailboxes for my 30 users and imported all mail from their old domain to this new server. It's a Hub Transport ...
0
votes
1answer
178 views

Shorten CA Certificate lifetime with Certificate Services?

I recently setup Windows 2003 Certificate Services and installed a five year certificate. I'm now working with a vendor that requires our public CA key so that they can trust all certificates ...
1
vote
2answers
13k views

Custom Certificate Template is listed as unavailable

I am trying to create a custom certificate template based off of the Smartcard User template with a Windows Server 2008 Enterprise subordinate CA. I am using the subordinate CA because the root CA is ...
1
vote
1answer
3k views

How to convert .arm certificate file to .pem format?

How to convert .arm certificate file to pem format? I think .arm format ist used in IBM WebSphere, and I get certificates/public keys in these format. How can I convert there files to .pem or ...
0
votes
1answer
1k views

SCEP Protocol on Linux

Is it possible to setup an SCEP protocol on Linux? My company is going to be adopting over-the-air enrolling for iPads and I can't find anything for this on Linux. Has anyone done this before? Is ...
4
votes
1answer
16k views

Can't get my SSTP VPN to works due to a certificate issue

I am trying to create a SSTP VPN on my Windows Server 2008 R2, I installed the Network Policies and Access Service, and the AD Certificate Autority service, I create my root certificate and ...
2
votes
1answer
1k views

How do you revoke a certificate?

In a network of more than 300 machines all running on Windows Server 2003 and clients running Windows 2000 Professional and Windows XP Professional, Microsoft Certification Server in enterprise CA ...
2
votes
3answers
2k views

Client Side certificate authentication failure

I'm trying to put the finishing bits and pieces on a client / server application I'm writing, but something seems to go foul at the last step in the SSL handshake. The client side of the program ...
0
votes
2answers
111 views

Certificates expire without warning

A while back, we set up an internal microsoft certificate server to issue certificates to our internal servers. However, when a certificate expires, we do not realize it until we start getting errors ...
1
vote
2answers
2k views

Unrevoke a certificate which was revoked with a status different from Certificate Hold

Is there a way to unrevoke a revoked certificate, which was revoked with the “Superseded” reason code? I'm using the Certification Authority provided with Windows Server 2008 SP2.
0
votes
1answer
213 views

Exchange 2007 UCC SSL

I feel like I must be doing something quite stupid but I can't figure out what. I have a UCC cert for email1.domain.com, email2.domain.com, webmail.domain.com I have two CAS servers email1.domain....
1
vote
1answer
3k views

How to manually trust an SSL certificate to a development server?

On our development server, we are using a self generated SSL certificate, so every time I browse to the dev site, IE panics and asks me if I wanted to continue. How can I manually add the dev ...
0
votes
2answers
2k views

Make wildcard certificate valid for ALL sites over the globe?

How I do to create a wildcard certificate for ALL domains? Here is my error: CACERTIFICATE.crt is imported as trusted in my browser. SERVERCERTICIATE.crt and SERVERPRIVATEKEY.key is used in a ...
0
votes
2answers
324 views

SendMail TLS Certificate - Can it be shared for different hosts?

CentOS 5 | SendMail Can TLS certificates be shared between multiple sendmail MTAs? I'm using a CA-signed cert and would prefer to not purchase new certs for each additional sendmail host.
2
votes
1answer
698 views

What actually happens when I use IIS to generate an SSL certificate, especially during the import operation? Is this the only way?

I get the basic idea of public/private key pairs, but what I don't know is what is the inner workings of what IIS does when generating an SSL key. One thing that makes me think there is more under ...
2
votes
2answers
17k views

Deploy root/trusted publisher certificate file to windows machines

I have a self-signed .cer certificate that I need to deploy to roughly a 1000 machines, running a variety of Windows versions from Windows XP and Server 2003 up to Windows 7 and Server 2008 R2. SCCM ...
0
votes
1answer
924 views

How can website access certificate store on my client machine?

What web technology allows a website to access a certificate store on my client machine? Do web browsers allows websites to access certificate stores? Can you configure a browser such as IE to ...
2
votes
4answers
2k views

Man-in-the-middle attack in the SSL scenario

I'm trying to understand how would a man-in-the-middle attack affect my web server. I have a self-signed certificate. This certificate can be faked through the man-in-the-middle attack, which means ...
0
votes
1answer
1k views

Wildcard SSL, one subdomain requires client certificate

This configuration works ok, but it asks for certificate on all subdomains. <VirtualHost IP:443> ServerName *.domain.tld ServerAlias www.*.domain.tld VirtualDocumentRoot /home/domaintld/...
1
vote
2answers
177 views

Whats the worst than can happen if your EV certificate chain is incorrect?

After having had EV SSL certificate installed a couple months we got an email from GoDaddy telling us the certificate chain was incorrect. They requested we disable 'GoDaddy Class 2 root certificate' ...
4
votes
4answers
4k views

How to set up HTTPS without paying anything anywhere? (But with no warnings from Firefox)

Usual HTTPS setup requires certificate that is signed by some rich authority and requires [monthly] fees and periodic maintenance (to prevent expiring). This way Firefox displays happy green badge ...
6
votes
2answers
5k views

WebSVN accept untrusted HTTPS certificate

I am using websvn with a remote repository. This repository uses https protocol. After having configured websvn I get on the websvn webpage: svn --non-interactive --config-dir /tmp list --xml --...
11
votes
2answers
2k views

Cost of getting in-house certificate authority trusted

My company has an in-house certificate authority that is currently self-signed. Since we want to start using it for external SSL and secure email to our customers, we need to get it trusted. Does ...
4
votes
1answer
3k views

IIS 7.0: Why does Require Client Certificates cause error 500 and “page cannot be displayed”

I have two Windows 2008 x86 servers running IIS 7.0, one site on each server; both sites are SSL-enabled, using DoD-issued certificates. Both sites are accessible via https over port 443, but fail ...
0
votes
1answer
33 views

ssl, co issue (issuer) instead of Self Signed?

Instead of self signing each website i make which is accessible online but is not meant for the public i would like to create an issuer which i'll import into my trusted issuer and sign multiple sites....
1
vote
2answers
480 views

Impact Disabling “Update Root Certificates” Has On SQL Server

I was told that Disabling the Update Root Certificates option from the Windows Components section of Add/Remove Programs will cause SQL Server to stop working properly. It this correct, or is my ...
1
vote
2answers
752 views

Is OpenVPN revoke (CLR blacklist) computation effective? How much keys can I safely revoke?

We are building a system where we will have to black-list OpenVPN keys quite a lot. Hence the question: is OpenVPN algorithm for blacklisting keys computation effective? How much keys can I safely ...
1
vote
3answers
186 views

SSL certifcates

I need to implement a certificate on a web server (apache). The requirement is that it must work with ssl, so I need to purchase a certificate. I would like to avoid having to buy a certificate at ...