Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

11
votes
2answers
2k views

Cost of getting in-house certificate authority trusted

My company has an in-house certificate authority that is currently self-signed. Since we want to start using it for external SSL and secure email to our customers, we need to get it trusted. Does ...
4
votes
1answer
3k views

IIS 7.0: Why does Require Client Certificates cause error 500 and “page cannot be displayed”

I have two Windows 2008 x86 servers running IIS 7.0, one site on each server; both sites are SSL-enabled, using DoD-issued certificates. Both sites are accessible via https over port 443, but fail ...
0
votes
1answer
33 views

ssl, co issue (issuer) instead of Self Signed?

Instead of self signing each website i make which is accessible online but is not meant for the public i would like to create an issuer which i'll import into my trusted issuer and sign multiple ...
1
vote
2answers
472 views

Impact Disabling “Update Root Certificates” Has On SQL Server

I was told that Disabling the Update Root Certificates option from the Windows Components section of Add/Remove Programs will cause SQL Server to stop working properly. It this correct, or is my ...
1
vote
2answers
736 views

Is OpenVPN revoke (CLR blacklist) computation effective? How much keys can I safely revoke?

We are building a system where we will have to black-list OpenVPN keys quite a lot. Hence the question: is OpenVPN algorithm for blacklisting keys computation effective? How much keys can I safely ...
1
vote
3answers
185 views

SSL certifcates

I need to implement a certificate on a web server (apache). The requirement is that it must work with ssl, so I need to purchase a certificate. I would like to avoid having to buy a certificate at ...
0
votes
4answers
8k views

Wildcard SSL Certificates with Exchange 2010?

Is anyone using a Wildcard Cert with Exchange 2010 please? We currently have a bunch of individual whatever.domain.com SSL certificates and as several are expiring soon it would be an ideal ...
3
votes
2answers
7k views

How to set up an SSL Cert with Subject Alternative Name

To test a specific embedded client, I need to set up a web server serving a couple of SSL (HTTPS) sites, say "main.mysite.com" and "alternate.mysite.com". These should be handled by the same ...
4
votes
2answers
3k views

Creating Client Certificate - Windows

I am trying to create client certifications against a Microsoft CA using the built in website. (Microsoft Active Directory Certificate Services) From what I can tell, you have to login as the user to ...
4
votes
1answer
995 views

Is there any way to configure Windows 7 RDP to require a client certificate to login

Is there any way to configure a Windows 7 RDP to require a client certificate to login. So user need to use the certificate and password (just like SSH or client-side certificates in HTTP) If there ...
1
vote
1answer
125 views

Avoid access to www subdomain on secure server

I have an SSL certificate that is valid for mysite.co.uk but not www.mysite.co.uk it seems. If I use mod_rewrite or .htaccess to redirect from one to the other will this prevent browsers from ...
0
votes
1answer
108 views

How to pause clients certificate activity for OpenVPN?

I use OpenVPN and also I want to pause activity of some client certificates, and after some time to start it again (without new certificate generation). So how to do this?
4
votes
1answer
2k views

Configuring OS X L2TP VPN to use Certificate for IPSEC layer instead of Pre Shared Key

I'm trying to setup a L2TP VPN on an OS X Snow Leopard Server setup, and have had success using a pre-shared key, however I would rather not rely on a simple string, and use a certificate instead. ...
0
votes
1answer
1k views

How to handle certificates on a Apache reverse-proxy

Ok, so I was able to assemble an Apache for reverse proxy a bunch of internal sites. However, those sites use SSL. For the moment, and for testing purposes, I'm using self-signed certificates from ...
2
votes
3answers
923 views

In-house Trusted Certificate

Hi there I'm a developer looking at introducing ClickOnce deployment for an internal .NET Winforms application that will be distributed via the corporate network. Now I would like to deploy this ...
0
votes
2answers
456 views

Valid certificate issued by certificate authority

Using the below configuration: internal Domain: company.corp Server 2008 DC and CA I've setup Radius/NPS for WPA2-Enterprise authentication, but the mobile clients are getting certificate warnings ...
5
votes
3answers
6k views

SSL setup: UCC or wildcard certificates?

I've scoured the web for a clear and concise answer to my SSL question, but to no avail. So here goes: I have a web-service requiring SSL support for authentication pages. The root-level domain ...
4
votes
2answers
7k views

How to make iPhone Cisco VPN client work with ASA with certificate authentication

I have an ASA that's providing IPsec VPN services using certificate authentication (no xauth, just the certs). It works perfectly with the Cisco IPsec VPN Client. Now I'm trying to let iPhones ...
3
votes
2answers
163 views

Can I have a SSL certificate for direct IP access?

Is it possible to have a SSL certificate for access directly to an IP, and not through a hostname? Eg, can I purchase an SSL certificate to make https://1.2.3.4/ work without giving a security ...
3
votes
2answers
2k views

ssl certificate for www.example.com and example.com

I used make-dummmy-cert that comes with apache 2.2 and ssl_mod to make a self-signed certificate. I tried making it for www.example.com, example.com, or *.example.com, but none of them would work for ...
2
votes
1answer
408 views

HTTPS Proxy - Is it possible to proxy a HTTPS request without having certificates setup?

HTTPS Proxy - Is it possible to proxy a HTTPS request without having certificates setup? In my case I'm still trying to workout how to do this with .NET HttpListener & HttpWebRequest. I've got ...
18
votes
2answers
25k views

How to inspect remote SMTP server's TLS certificate?

We have an Exchange 2007 server running on Windows Server 2008. Our client uses another vendor's mail server. Their security policies require us to use enforced TLS. This was working fine until ...
14
votes
2answers
22k views

How to Grant IIS 7.5 access to a certificate in certificate store?

In Windows 2003 it was simple to do and one could use the winhttpcertcfg.exe (download) to give "NETWORK SERVICE" account access to a certificate. I'm now using Windows Server 2008 R2 with IIS 7.5 ...
5
votes
1answer
5k views

Certificate Authority issuing Basic EFS certificates without Autoenroll

We have observed some puzzling behavior from the CAs we have set up in both the past and present. For some reason unknown to us, it seems that our CAs are randomly issuing "Basic EFS" certificates to ...
9
votes
2answers
5k views

Free OCSP server for testing purposes?

Can anyone recommend a free and simple OCSP server for Windows or Linux?
6
votes
6answers
305 views

Certificate Authentication

I am currently working on deploying a website for staff to use remotely and would like to make sure it is secure. I was thinking would it be possible to set up some kind of certificate ...
21
votes
9answers
15k views

Multiple domains with SSL on same IP

I know that a dedicated IP is needed for setting up SSL. What happens if we add SSL for domains sharing an IP ? (Namevirtualhost)
1
vote
1answer
7k views

Outlook is unable to connect to the proxy server. (Error code 10)

Whenever we login to outlook 07 we are getting the following error. There is a problem with the proxy server's security certificate. The name on the security certificate is invalid or does not match ...
2
votes
1answer
681 views

Is it possible to change a domain controller's GUID?

I have a large number of separate Active Directory domains (~150) consisting of 2 server clusters that I need to setup for smart card login. To do this I will have to request ~300 domain controller ...
1
vote
1answer
7k views

SqlServer 2008 How to correctly install/configure SSL certificate to require encrypted connections

SqlServer 2008 instance is installed on Windows Server 2008 and is running under this identity: NT AUTHORITY\NETWORK SERVICE SSL cert from third-party CA has been installed in Local Computer\Personal ...
2
votes
2answers
248 views

Certificates are platform-independent, right?

I'm about to order a certificate and the order form asks me which server platform (e.g. Apache + mod_ssl) I'm using. It doesn't really matter what I choose, does it?
5
votes
1answer
12k views

How can I generate a certificate request on Windows Server 2008 for SqlServer 2008 w/o IIS installed

I'm trying to generate a CSR for an SSL certificate to encrypt connections to my SqlServer 2008 instance located on a Windows Server 2008 server. Most of the documentation I've read mentions using the ...
9
votes
3answers
12k views

How can I use the same key for SSH and SSL (https)

I'm trying to install the development tools for a small team, and I can't get the authentication right. Since we are a distributed team, the server is on the internet. And I'd like to have SSO+zero ...
9
votes
1answer
10k views

Apache SSL VirtualHosts on a single IP using UCC/SAN certificate

I need to host several Apache virtual hosts with SSL from a single IP. Now - I understand that because SSL wraps around the HTTP request, there's no way to know which host is being requested until a ...
0
votes
2answers
1k views

Can I use OCS 2007 without Certificates?

Quick question Everyone using OCS2007 will be internal. We have no need for certificates. Is there a setting I can use to disable Certificates? Everything was working fine in Communicator right up ...
4
votes
6answers
5k views

OpenSSL x509 Purpose flag “Any Purpose” What is this?

Looking at the details of a certificate using the following: openssl x509 -noout -text -purpose -in mycert.pem I find a bunch of purpose flags (which I've discovered are set by the various ...
9
votes
3answers
26k views

How to create certificate .cer file?

I would like to work with certificates and the third part authority send me values: -----BEGIN CERTIFICATE----- [...]Many letters and digits[...] -----END CERTIFICATE----- -----BEGIN RSA PRIVATE ...
4
votes
3answers
22k views

'Certificate types are not available' When creating computer certificate?

Environment Windows Server 2008 sp1 Xeon CPU E5430 @ 2.66 GHz 16.0 GB Ram 64-bit Operating System 1TB Disk Space Server Role: SQL Server Other Information: Joint to domain, Logged in user domain ...
0
votes
2answers
282 views

sendmail: how can I restrict access to clients that only have a valid certificate?

I want to reject all connections that don't present a valid SSL/TLS certificate. First of all is the access db file the correct one to be changing? I have already tried using the basic rule given in ...
5
votes
2answers
2k views

How to protect an SSL certificate (Apache/CentOS)

I currently use a server SSL certificate without a pass-phrase in order to allow Apache to start up unattended. There are signs from customers to require us to protect the SSL certificate more ...
5
votes
2answers
5k views

Import a bunch of certificates into the correct certificate store using a script

I have a collection of certificates in a p7b file, and I would like to automatically import each certificate into the correct store depending on the certificate template. What is the best way to do ...
3
votes
2answers
3k views

How to export chrome user certificate

In ubuntu, I recently installed a client certificate in google chrome, and now I want to export it to other browsers. I installed the libnss3-tools package, but can't find the export option for ...
1
vote
3answers
910 views

signed applet automatically running as insecure

My application is deployed as a self-signed applet to several thousand users at more than 50 schools across the country (in Norway). The user is presented with the standard Java security warning ...
1
vote
1answer
1k views

SQL 2008 Database mirroring over WAN link with certificates

I am configuring database mirroring over a WAN link between two SQL 2008 named instances who's host servers are not domain members, using certificates for authentication. After many attempts to get ...
1
vote
2answers
663 views

Multiple SSL certificates on IIS 6 cluster

I have a 2 machine IIS 6 cluster (Windows 2003 Standard Edition) running a number of sites, only one of them has an SSL certificate. I have a number of IPs available to me on each machine, but the ...
41
votes
7answers
31k views

Wildcard SSL certificate for second-level subdomain

I'd like to know if any certificates support a double wildcard like *.*.example.com? I've just been on the phone with my current SSL provider (register.com) and the girl there said they don't offer ...
4
votes
1answer
105 views

Manage Certificates on 500 Mobile Devices [closed]

Is there a tool to facilitate setting up and managing certificates for mobile devices (running Windows Mobile 5) The end goal I have is to have my WCF Services (run on IIS) only trust these ...
0
votes
1answer
299 views

How can I distribute end users certificates in an Enterprise

We us our own mechanism to create a signed certificate for each and every end user of an Enterprise. However, we'd like to use the Enterprise mechanisms (like AD) to distribute each user its ...
0
votes
1answer
160 views

Multi Domain Infopath Code Signing with In House CA

We have forms developed in infopath that work with Sharepoint 2007. In order to deploy these forms to local clients you need to sign them with a certificate. We have an in house CA that is inside a ...
1
vote
3answers
1k views

How to log invalid client SSL certificate in SSL

I have a IIS web site which requires client certificate. I have turned off CRL checking. The client is unable to access the web site - he gets 403.17 (certificate expired) error. I would like to log ...