Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

0
votes
1answer
303 views

How to Add Self-Issued CA Generated by VMWare to Browser's (IE) Trusted CA?

I just installed VMware Server 2.x. The install provides a shortcut to a URL using HTTPS (e.g. https://mybox/something), and the certificate presented by VMWare's internal web server is issued to ...
6
votes
1answer
2k views

Purpose behind subordinate Certificate Authorities

At my place of employment, we are setting up a PKI infrastructure using Microsoft products. We have a totally clean slate here and want to have a good start. We're wondering why anyone would set up ...
1
vote
2answers
2k views

802.1X EAP authentication in Cisco switches with certificate

I am currently planning to implement 802.1X authentication for all the wired computers at the office where I work at currently. We have successfully implemented 802.1X authentication with ...
0
votes
1answer
125 views

web site certificate issue

I am working on IIS 7.0 on Windows Server 2008 Enterprise x64. I want to know if I apply for a certifcate from Verisign, is the certificate bind to domain name or bind to computer? Any comments to my ...
0
votes
5answers
4k views

Expired certificate - how do we avoid the expired certificate warning

We had a certificate issued by Verisign and have allowed it to expire as we no longer have need for it. Clients who have bookmarked the website with a 'https://' URL are greeted with a 'certificate ...
2
votes
3answers
469 views

Configuring a Unified Communications Certificate for many virtual hosts running in Jetty

I have a single IP with Jetty serving up X sites on port 80. Basically you can sign up for our service, then point your domain www.mycompany.com to that IP, and Jetty will serve up your custom site. ...
13
votes
5answers
6k views

Do any well-known CAs issue Elliptic Curve certificates?

Background I've seen that Comodo has an elliptic curve root ("COMODO ECC Certification Authority"), but I don't see mention of EC certificates on their web site. Does Certicom have intellectual ...
0
votes
1answer
3k views

IIS6 - install SSL certificate - pem file

Consider the need to secure a website under IIS 6 / Windows 2003. Here are the steps taken: Created a private key by OpenSSL: openssl genrsa -des3 -out filename.key 2048 A CSR was created by ...
0
votes
2answers
1k views

Can you use a public cert to do Radius for EAP?

In other wirds, rather than installing an Enterprise Root CA and having internal PKI. Can I buy a $30 cert from Thawte for example and then use it on my IAS server? Is this not a better and cheaper ...
0
votes
2answers
5k views

Certificate Authority - Network Ports?

We are optimizing our QOS router settings and it was decided that we should give priority to our PKI infrastructure. As far as I'm aware, there is network traffic when certificates are verified and ...
4
votes
2answers
967 views

ssl certificates for *.subdomain.example.com

I plan on getting a wildcard certificate for my domain like *.example.com, but I've heard varying reports about whether it will also work with second-level subdomains like *.subdomain.example.com -- ...
0
votes
2answers
15k views

keytool error: Certificate reply does not contain public key for

I've recently purchased a certificate from GoDaddy for coding signing an Adobe Air application. I generated a CSR (Code Signing Request) file and sent it to them. They have send back a .spc ...
1
vote
1answer
159 views

Can I get a CA-signed SSL cert for a host accessed by IP address?

I have a server which is accessed by IP address over a LAN. The IP address is sometimes changed, and it is never accessed with a DNS hostname. Is it possible to get a CA-signed certificate which ...
4
votes
5answers
49k views

convert .p7b key to a .pfx

I have an SSL certificate in .p7b format that I need to convert to .pfx. If I try this through the windows certificate managment the option to expert as a .pfx is disabled. Trying with openssl I ...
3
votes
2answers
2k views

Can I be an intermediate certificate authority?

My company has grown to the point where we're interested in being an intermediate CA for our customers, and would like to issue certificates to customers. Among other uses, we wish to issue SSL ...
0
votes
1answer
4k views

What is correct syntax to verify a certificate in the certificate store using certutil.exe?

I have a client certificate in certstore. I try this: certutil.exe -verify CertCommonName but in get this error when I ping certutil.exe -ping it connect to pc. DecodeFile returned The system ...
7
votes
3answers
282 views

Does a CA require a full-time administrator?

At my place of employment, we have skated by over the years without having an internal Certificate Authority. This has worked for us because there was no visible impact by not having trusted entities. ...
0
votes
1answer
301 views

windows server 2008 certificate authority - issued cert valid from field [closed]

When does new certificate's valid from field always date a few minutes in past?
1
vote
2answers
222 views

Modifying SSL / TLS certificates for local use

I am currently developing some applications on my local 'serverfarm'. I have set up ZendServer with Apache2 and PHP, which works very fine, and nothing unwanted happened until now: Now I wanted to ...
4
votes
3answers
7k views

Import .cer certificate from Windows command line

Tired of wading throug MMC jungles, I need a way to import a given .cer file (which contains just a public key) into machine-wide certificate store (don't know how is it called in English since I'm ...
7
votes
5answers
12k views

How to create a multi-domain self-signed certificate for Apache2?

I've got a little private webserver where I have several virtualhosts. I know that it's impossible to assign a certificate to each individual virtualhost, because the server finds out which ...
0
votes
3answers
4k views

OpenSSL: certificate signature failure error

I'm trying to wget La Banque Postale's website. $ wget https://www.labanquepostale.fr/ --2009-10-08 17:25:03-- https://www.labanquepostale.fr/ Resolving www.labanquepostale.fr... 81.252.54.6 ...
2
votes
1answer
1k views

Disable integrated client certificate validation in IIS7?

We have an IIS 7 hosted site that requires client certificates (two-way ssl). Unfortunately, I don't have access to the trusted certificate store on the host machines, and so I was forced to write a ...
0
votes
2answers
256 views

SSL certificate and self-hosting

I have a domain registered at GoDaddy.com. I have been hosting my website on my own Windows 2003 server with forwarding. It is working great. Now I would like to implement the next step: To secure the ...
2
votes
2answers
2k views

Importing SSL certificates on Win2k3 / IIS 6.0

As part of a large site migration, I need to copy over numerous (about 50) SSL certificates for different sites. I have tried to export them on the current server and then import them on the new ...
1
vote
1answer
701 views

BES 5.0 SSL Certificate

I have recently installed BES 5.0 on a Hyper-V (i know it's not officially supported) 64-bit Server 2008 box with a remote SQL 2005 database. I successfully installed and was able to access the ...
2
votes
3answers
13k views

Peer's Certificate has been revoked

I just upgraded our web server with a renewed cert as our current cert expires later this week. When I browse to our site via FF it is throwing this error: Secure Connection Failed An error ...
1
vote
1answer
3k views

renew a SSL cert on IIS6?

Originally asked at http://stackoverflow.com/questions/1462009/renew-a-ssl-cert-on-iis6 My manager ordered a new wild card cert for our website as our current is expiring in a few days. Now, I am ...
13
votes
3answers
16k views

IIS 7.0 - SSL certificate - renew or new?

One of my SSL certificates (simple domain verification only) is about to expire on windows 2003 IIS 7.0 server. I got better offer from another vendor, and the guys who originally issued my ...
0
votes
3answers
1k views

Migrating security certificate from IIS 6.0 to IIS 7.0

We have a security certificate configured in IIS 6.0 on our old server. We are migrating to a new server. How do I migrate the security certificate of our website from IIS 6.0 to IIS 7.0?
0
votes
2answers
694 views

How do I enable mutual SSL in IIS7 with a self-signed certificate?

I've created a self-signed certificate in IIS7. Then I exported this certificate to a .pfx and then installed it on the client machine's IE browser. Then I set "Require Client Certificate" on the ...
0
votes
2answers
222 views

SSL Ajax type of certificate for the static domain (image + js)

I have a page that is SSL and has a valid certificate extended. (mainpage.com) But this page request some static content to another domain(page-static.com), basicly images and js. Actually i have ...
0
votes
1answer
445 views

IIS Certificate Request Wizard - installing a cert when not a domain admin

We have a windows 2003 domain certificate authority internally that we use for SSL certificates. Domain admins are able to just use the IIS Certificate Request Wizard to install a certificate ...
1
vote
3answers
123 views

How to get started with Windows Server?

I've been a *nix (from VMS to Linux to FreeBSD to Solaris etc) admin for the past five years and I have just recently had it dumped on my plate that i am going to be running some Windows Servers. I'm ...
5
votes
2answers
4k views

Using both basic and client-certificate authentication with GlassFish

I'm currently building a Java-servlet applcation (using Jersey on GlassFish to be specific). In some parts of the application I need to authenticate the user using basic authentication and in some ...
0
votes
2answers
613 views

https certificate issue

I need to use some certificate on IIS 7.0 web server to test my https code at client side (console application). I have created self-signed certificate and it is fine. Now I want to test with formal ...
0
votes
2answers
628 views

I'm Lost: I'd like to use client-certificates to authenticate users' access to our web server

(Windows Server 2008) We have a web server that we'd like to limit access to. I thought a good way to do this would be to issue certificates to ours users. Unfortunately, This IIS & Tutorial ...
1
vote
1answer
2k views

Windows 2003 Domain - Certificate Authority - New Automatic Certificate Request

I have an issue with a certificate authority in a windows 2003 domain. We need one configured to allow ssl/tls encrypted traffic over LDAP so that our Application Gateway server is able to allow users ...
19
votes
6answers
10k views

Can I be my own trusted CA via an signed intermediate certificate?

Can I get a certificate from a root CA that I can then use to sign my own web server certificates? I would, if possible, use a signed certificate as an intermediate to sign other certs. I know that I ...
0
votes
1answer
516 views

self-signed certificate issue in IIS 7.0

I am setting up IIS 7.0 on a Windows Vista box. I am using self-signed certificate (by using built-in Create Self-Signed Certificate feature of IIS 7.0) on a web site. The I can browse from the local ...
2
votes
5answers
1k views

Why can't we use DNS for distributing SSL certificates?

Most low-cost SSL certificate providers really only verify that you control a domain name. For those types of certificates, rather than pay a third party to verify that I control the DNS records for ...
7
votes
3answers
4k views

Cannot create self-signed SSL certificate with IIS 7

I'm trying to create a self-signed certificate from within the IIS 7 snap-in, with little luck. When prompted for a friendly name for the certificate, I type in the name, and click OK, but then I am ...
0
votes
1answer
839 views

SSL Certificate Issue - “Data Transfer Interrupted”

I imported a PFX file for a dedicated SSL Certificate from 1and1 for a domain on my web server. When I visit the domain, I get the message "Data Transfer Interrupted" I need help debugging this. ...
0
votes
2answers
2k views

Unable to specify alterntive credentials using 802.1x wireless connections on Windows 7

Using Windows 7 I am unable to connect to the wireless network using 802.1x settings. I have configured it exactly as in Vista using certificates and checking the use alternative credentials check box ...
2
votes
2answers
1k views

SCCM SP2 - OOB Management Certificates Problems

I have a vPro client computer with AMT 4.0. It was importeed successfully via the Import OOB Computers wizard, and after sending a "Hello- packet" it became provisioned. (The SCCM GUI displays AMT ...
1
vote
2answers
949 views

Proper syntax for generating an SSL certificate CSR to protect an Exchange 2007 server

I need help generating a CSR for a Subject Alternative Name (SAN) SSL certificate to protect a new Exchange 2007 server. My main requirements are that Outlook Anywhere and OWA must work without any ...
5
votes
1answer
6k views

Disabling strong private key encryption on a personal certificate

I am attempting to import a certificate into my current user's personal certificate store, since my server is required to sign certain requests it makes and the suggested instructions were to do this. ...
26
votes
2answers
10k views

Can I build my own Extended Validation SSL certificate?

I can create by own CA and generate a self signed SSL certificate this way. But what does it take to make the browser show the certificate as being an "Extended Validation SSL certificate" ? Can I ...
3
votes
5answers
422 views

How do you track domain/certificate registrations over time?

Every once and a while I see stories about a site being hacked, but it turns out that the domain registration just expired and someone else grabbed the domain and redirected DNS. I've also been to ...
1
vote
1answer
865 views

SSL Certificates are about to expire. What should I do?

I have two SSL Certificates setup on two domains on my IIS6 Server. One certificate is through godaddy, and the other is through my host (1and1). Do I need to renew these or do I need to buy new ones ...