Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

8
votes
5answers
11k views

How to create a multi-domain self-signed certificate for Apache2?

I've got a little private webserver where I have several virtualhosts. I know that it's impossible to assign a certificate to each individual virtualhost, because the server finds out which ...
0
votes
3answers
3k views

OpenSSL: certificate signature failure error

I'm trying to wget La Banque Postale's website. $ wget https://www.labanquepostale.fr/ --2009-10-08 17:25:03-- https://www.labanquepostale.fr/ Resolving www.labanquepostale.fr... 81.252.54.6 ...
2
votes
1answer
1k views

Disable integrated client certificate validation in IIS7?

We have an IIS 7 hosted site that requires client certificates (two-way ssl). Unfortunately, I don't have access to the trusted certificate store on the host machines, and so I was forced to write a ...
0
votes
2answers
256 views

SSL certificate and self-hosting

I have a domain registered at GoDaddy.com. I have been hosting my website on my own Windows 2003 server with forwarding. It is working great. Now I would like to implement the next step: To secure the ...
2
votes
2answers
2k views

Importing SSL certificates on Win2k3 / IIS 6.0

As part of a large site migration, I need to copy over numerous (about 50) SSL certificates for different sites. I have tried to export them on the current server and then import them on the new ...
1
vote
1answer
682 views

BES 5.0 SSL Certificate

I have recently installed BES 5.0 on a Hyper-V (i know it's not officially supported) 64-bit Server 2008 box with a remote SQL 2005 database. I successfully installed and was able to access the ...
2
votes
3answers
12k views

Peer's Certificate has been revoked

I just upgraded our web server with a renewed cert as our current cert expires later this week. When I browse to our site via FF it is throwing this error: Secure Connection Failed An error ...
1
vote
1answer
3k views

renew a SSL cert on IIS6?

Originally asked at http://stackoverflow.com/questions/1462009/renew-a-ssl-cert-on-iis6 My manager ordered a new wild card cert for our website as our current is expiring in a few days. Now, I am ...
13
votes
3answers
16k views

IIS 7.0 - SSL certificate - renew or new?

One of my SSL certificates (simple domain verification only) is about to expire on windows 2003 IIS 7.0 server. I got better offer from another vendor, and the guys who originally issued my ...
0
votes
3answers
1k views

Migrating security certificate from IIS 6.0 to IIS 7.0

We have a security certificate configured in IIS 6.0 on our old server. We are migrating to a new server. How do I migrate the security certificate of our website from IIS 6.0 to IIS 7.0?
0
votes
2answers
692 views

How do I enable mutual SSL in IIS7 with a self-signed certificate?

I've created a self-signed certificate in IIS7. Then I exported this certificate to a .pfx and then installed it on the client machine's IE browser. Then I set "Require Client Certificate" on the ...
0
votes
2answers
215 views

SSL Ajax type of certificate for the static domain (image + js)

I have a page that is SSL and has a valid certificate extended. (mainpage.com) But this page request some static content to another domain(page-static.com), basicly images and js. Actually i have ...
0
votes
1answer
445 views

IIS Certificate Request Wizard - installing a cert when not a domain admin

We have a windows 2003 domain certificate authority internally that we use for SSL certificates. Domain admins are able to just use the IIS Certificate Request Wizard to install a certificate ...
1
vote
3answers
122 views

How to get started with Windows Server?

I've been a *nix (from VMS to Linux to FreeBSD to Solaris etc) admin for the past five years and I have just recently had it dumped on my plate that i am going to be running some Windows Servers. I'm ...
5
votes
2answers
4k views

Using both basic and client-certificate authentication with GlassFish

I'm currently building a Java-servlet applcation (using Jersey on GlassFish to be specific). In some parts of the application I need to authenticate the user using basic authentication and in some ...
0
votes
2answers
605 views

https certificate issue

I need to use some certificate on IIS 7.0 web server to test my https code at client side (console application). I have created self-signed certificate and it is fine. Now I want to test with formal ...
0
votes
2answers
597 views

I'm Lost: I'd like to use client-certificates to authenticate users' access to our web server

(Windows Server 2008) We have a web server that we'd like to limit access to. I thought a good way to do this would be to issue certificates to ours users. Unfortunately, This IIS & Tutorial ...
1
vote
1answer
2k views

Windows 2003 Domain - Certificate Authority - New Automatic Certificate Request

I have an issue with a certificate authority in a windows 2003 domain. We need one configured to allow ssl/tls encrypted traffic over LDAP so that our Application Gateway server is able to allow users ...
19
votes
6answers
9k views

Can I be my own trusted CA via an signed intermediate certificate?

Can I get a certificate from a root CA that I can then use to sign my own web server certificates? I would, if possible, use a signed certificate as an intermediate to sign other certs. I know that I ...
0
votes
1answer
514 views

self-signed certificate issue in IIS 7.0

I am setting up IIS 7.0 on a Windows Vista box. I am using self-signed certificate (by using built-in Create Self-Signed Certificate feature of IIS 7.0) on a web site. The I can browse from the local ...
2
votes
5answers
1k views

Why can't we use DNS for distributing SSL certificates?

Most low-cost SSL certificate providers really only verify that you control a domain name. For those types of certificates, rather than pay a third party to verify that I control the DNS records for ...
6
votes
3answers
4k views

Cannot create self-signed SSL certificate with IIS 7

I'm trying to create a self-signed certificate from within the IIS 7 snap-in, with little luck. When prompted for a friendly name for the certificate, I type in the name, and click OK, but then I am ...
0
votes
1answer
833 views

SSL Certificate Issue - “Data Transfer Interrupted”

I imported a PFX file for a dedicated SSL Certificate from 1and1 for a domain on my web server. When I visit the domain, I get the message "Data Transfer Interrupted" I need help debugging this. ...
0
votes
2answers
2k views

Unable to specify alterntive credentials using 802.1x wireless connections on Windows 7

Using Windows 7 I am unable to connect to the wireless network using 802.1x settings. I have configured it exactly as in Vista using certificates and checking the use alternative credentials check box ...
2
votes
2answers
1k views

SCCM SP2 - OOB Management Certificates Problems

I have a vPro client computer with AMT 4.0. It was importeed successfully via the Import OOB Computers wizard, and after sending a "Hello- packet" it became provisioned. (The SCCM GUI displays AMT ...
1
vote
2answers
939 views

Proper syntax for generating an SSL certificate CSR to protect an Exchange 2007 server

I need help generating a CSR for a Subject Alternative Name (SAN) SSL certificate to protect a new Exchange 2007 server. My main requirements are that Outlook Anywhere and OWA must work without any ...
4
votes
1answer
5k views

Disabling strong private key encryption on a personal certificate

I am attempting to import a certificate into my current user's personal certificate store, since my server is required to sign certain requests it makes and the suggested instructions were to do this. ...
25
votes
2answers
9k views

Can I build my own Extended Validation SSL certificate?

I can create by own CA and generate a self signed SSL certificate this way. But what does it take to make the browser show the certificate as being an "Extended Validation SSL certificate" ? Can I ...
3
votes
5answers
419 views

How do you track domain/certificate registrations over time?

Every once and a while I see stories about a site being hacked, but it turns out that the domain registration just expired and someone else grabbed the domain and redirected DNS. I've also been to ...
1
vote
1answer
856 views

SSL Certificates are about to expire. What should I do?

I have two SSL Certificates setup on two domains on my IIS6 Server. One certificate is through godaddy, and the other is through my host (1and1). Do I need to renew these or do I need to buy new ones ...
0
votes
1answer
411 views

Setting up a certificate based VPN access point

We are currently using a Microsoft RAS server, using PPTP for people to VPN into the office network. Its not particularly secure as peoples usernames are predictable, and many of the users are not ...
2
votes
3answers
1k views

Getting Apache to pull certificate's “Alt subject name”

I'm trying to get apache to expose various pieces of customers' personal certificates to php including (most importantly) the "alt subject name" field. When I inspect a cert in the browser, I can see ...
0
votes
2answers
129 views

How could I digitally sign LDAP data?

How could I digitally sign LDAP data? I want to make an LDAP request from a user machine to a proxy server that then relays the request to an LDAP server. The LDAP server would then respond with the ...
0
votes
3answers
2k views

RHEL/Apache ssl.conf configuration issue

We've got multiple subdomains, each with it's own virtualhost entry in httpd.conf and (for those supporting https) in ssl.conf as well. Our main www subdomain has a GoDaddy cert associated with it. ...
1
vote
1answer
2k views

Exchange certificate expired or not valid

We've got an Exchange 2007 server running on Windows Server 2008 in our small domain for internal use only, installed one year ago. Today the outlook clients started to show a security warning: "the ...
1
vote
4answers
406 views

SSL Cert Vendors

We have a website that has an SSL Certificate from GoDaddy. Our Japanese Office is reporting that some of their clients cannot access the secure site via their mobile phone. Apparently one of the ...
2
votes
5answers
4k views

Setting up https with a self-signed certificate on Apache

I'm trying to set up HTTPS on Apache, using a self-signed certificate. But instead of displaying the page, I get a bunch of weird errors. An a different error from each browser! From Chrome: ...
2
votes
4answers
15k views

Renew SSL certificate with Apache

I have a VeriSign certificate on one of my Linux / Apache websites that is going to expire. I plan on buying a renewal from VeriSign. What is the best way to renew the certificate with Apache? Do ...
0
votes
2answers
312 views

create certificate for IIS 7.0 issue

I am configuring https for IIS 7.0 and I need to create a test certificate for IIS 7.0 server. I am new to create certificate for IIS 7.0, and I only need server certificate, no need for client ...
0
votes
1answer
1k views

CodeCollaborator svn access

I'm trying to set up a copy of the CodeCollaborator trail software for performing code reviews but when I try and point it to our SVN repository I get the error Error: Invalid input: Version ...
6
votes
3answers
5k views

Self generate SSL Certificate for IIS6?

Hi guys is it possible to create your own SSL cert for IIS 6? If so does anyone have a link to a good guide on the web? Thank! John
2
votes
5answers
2k views

How to simulate connection to HTTPS and record the handshake?

I have a farm of IIS 6 web servers hosting a website over HTTP and HTTPS. With Safari 4 on a Mac, connecting over HTTPS, some nodes in the farm trigger the browser to raise a certificate error to the ...
2
votes
2answers
183 views

SQL Server 2000 Encryption Certificates

I am trying to import a new certificate because our old one is going to expire very soon. The certificate is ok and valid and works for IIS. Unfortunately SQL Server won't startup with Encryption ...
2
votes
2answers
2k views

OpenVPN with a Windows Certificate Services PKI

has anyone tried using OpenVPN with certificates generated by Windows Certificate Services? In theory this should work. The provided easy-rsa PKI is not very comfortable to manage for many users. I ...
2
votes
3answers
355 views

ssl / https certificate from shady resellers

what do i risk [besides obvious - cc number getting stolen] when buying ssl certificate for https use from one of many rapidssl resellers rather then directly from rapidssl ? disproportion in prices ...
1
vote
4answers
2k views

SSL Brand vs EV SSL

A few years ago I switched from using Thawte SSL's (a verisign company) to Verisign because of the better name recognition Verisign provides. To that end I've been happy with it and believe it gave ...
1
vote
2answers
164 views

SQL Server 2005 mirroring 2-1

I want to setup a single instance of sql-server as a mirror-backup for 2 production-servers, and I need to use certificate authentication because they are not part of an AD-domain. Reading the ...
5
votes
3answers
307 views

PKI keys per service or per server?

We all have a lot of internal services that need encryption and authentication to be provided by some sort of PKI. Do the security gains of using a different private/public key pair for each service ...
0
votes
2answers
1k views

Removing Cert Server from AD

My CA server crashed. It was used to deploy certs to messenger clients for live communication. I am no longer using live communication. I removed the server object from AD but my clients and servers ...
1
vote
2answers
1k views

IE7 stops sending client SSL certificate

We use client SSL certificates to secure web-based user communications with our web server (the edit site for a SharePoint site). Certificates are generated internally and sent to users to be ...