Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

3
votes
2answers
3k views

How to export chrome user certificate

In ubuntu, I recently installed a client certificate in google chrome, and now I want to export it to other browsers. I installed the libnss3-tools package, but can't find the export option for ...
1
vote
3answers
894 views

signed applet automatically running as insecure

My application is deployed as a self-signed applet to several thousand users at more than 50 schools across the country (in Norway). The user is presented with the standard Java security warning ...
1
vote
1answer
1k views

SQL 2008 Database mirroring over WAN link with certificates

I am configuring database mirroring over a WAN link between two SQL 2008 named instances who's host servers are not domain members, using certificates for authentication. After many attempts to get ...
1
vote
2answers
653 views

Multiple SSL certificates on IIS 6 cluster

I have a 2 machine IIS 6 cluster (Windows 2003 Standard Edition) running a number of sites, only one of them has an SSL certificate. I have a number of IPs available to me on each machine, but the ...
33
votes
7answers
24k views

Wildcard SSL certificate for second-level subdomain

I'd like to know if any certificates support a double wildcard like *.*.example.com? I've just been on the phone with my current SSL provider (register.com) and the girl there said they don't offer ...
4
votes
1answer
102 views

Manage Certificates on 500 Mobile Devices [closed]

Is there a tool to facilitate setting up and managing certificates for mobile devices (running Windows Mobile 5) The end goal I have is to have my WCF Services (run on IIS) only trust these ...
0
votes
1answer
291 views

How can I distribute end users certificates in an Enterprise

We us our own mechanism to create a signed certificate for each and every end user of an Enterprise. However, we'd like to use the Enterprise mechanisms (like AD) to distribute each user its ...
0
votes
1answer
157 views

Multi Domain Infopath Code Signing with In House CA

We have forms developed in infopath that work with Sharepoint 2007. In order to deploy these forms to local clients you need to sign them with a certificate. We have an in house CA that is inside a ...
1
vote
3answers
1k views

How to log invalid client SSL certificate in SSL

I have a IIS web site which requires client certificate. I have turned off CRL checking. The client is unable to access the web site - he gets 403.17 (certificate expired) error. I would like to log ...
1
vote
1answer
380 views

Unified Communications SSL Certificate (SAN)

Are Unified Communications SSL certificates (aka Subject Alternative Name / SAN) suitable for securing a CMS website in IIS, which serves lots of different secured websites for various clients each on ...
1
vote
2answers
1k views

Webkit does not work with GoDaddy SSL certificates

Web purchased an ssl certificate from GoDaddy and installed it correctly. But, on any webkit browser it says that the site is not trusted. Does anyone have any idea why webkit would not like GoDaddy ...
1
vote
1answer
343 views

Self-Signed SSL Cert in Lighttpd Causing 404s

Hey guys, I wanted to try out SSL on my server so I decided to create some self-signed SSL certificates as outlined here. After going to the document-root, firefox did indeed allow me to accept the ...
3
votes
1answer
349 views

Self-signed server certificate question

If I sign someone else's server certificate will it allow them to avoid the whole "untrusted certificate" thing that browsers give when you use a self signed cert?
1
vote
2answers
464 views

Can I migrate my SSL certificate to windows SBS 2008?

I have currently on my windows SBS 2003 box an SSL certificate for www.mydomain.com. I understand that for the 2008 SBS box I need a certificate for remote.mydomain.com. Can I simply export and import ...
3
votes
4answers
3k views

Are “unexportable” certificates a real security measure or just security theater?

Recently I was working on recovering data from dead (bricked PSU) Windows XP machine, which included some client certificates installed into IE 6. I plugged in a temporary PSU and tried to export the ...
19
votes
8answers
36k views

IIS7: can't set host name on site with SSL cert and port 443

Consider a Win 2008 SP2 machine with IIS7. The task is to apply a certificate and host name to the one and only Site on this machine. The site's host headers need to be abc.123.mysite.com The first ...
2
votes
3answers
4k views

Website security certificate warnings in IE8 Windows 7 (64bit), fine in Firefox

We received new computers for use in the office (Dell Vostro). They seem to work fine for the most part but when we use IE8 to go to some websites, such as Yahoo! Mail, it tells us: There is a ...
0
votes
1answer
304 views

How to Add Self-Issued CA Generated by VMWare to Browser's (IE) Trusted CA?

I just installed VMware Server 2.x. The install provides a shortcut to a URL using HTTPS (e.g. https://mybox/something), and the certificate presented by VMWare's internal web server is issued to ...
6
votes
1answer
3k views

Purpose behind subordinate Certificate Authorities

At my place of employment, we are setting up a PKI infrastructure using Microsoft products. We have a totally clean slate here and want to have a good start. We're wondering why anyone would set up ...
1
vote
2answers
2k views

802.1X EAP authentication in Cisco switches with certificate

I am currently planning to implement 802.1X authentication for all the wired computers at the office where I work at currently. We have successfully implemented 802.1X authentication with ...
0
votes
1answer
125 views

web site certificate issue

I am working on IIS 7.0 on Windows Server 2008 Enterprise x64. I want to know if I apply for a certifcate from Verisign, is the certificate bind to domain name or bind to computer? Any comments to my ...
0
votes
5answers
4k views

Expired certificate - how do we avoid the expired certificate warning

We had a certificate issued by Verisign and have allowed it to expire as we no longer have need for it. Clients who have bookmarked the website with a 'https://' URL are greeted with a 'certificate ...
2
votes
3answers
470 views

Configuring a Unified Communications Certificate for many virtual hosts running in Jetty

I have a single IP with Jetty serving up X sites on port 80. Basically you can sign up for our service, then point your domain www.mycompany.com to that IP, and Jetty will serve up your custom site. ...
13
votes
5answers
7k views

Do any well-known CAs issue Elliptic Curve certificates?

Background I've seen that Comodo has an elliptic curve root ("COMODO ECC Certification Authority"), but I don't see mention of EC certificates on their web site. Does Certicom have intellectual ...
0
votes
1answer
4k views

IIS6 - install SSL certificate - pem file

Consider the need to secure a website under IIS 6 / Windows 2003. Here are the steps taken: Created a private key by OpenSSL: openssl genrsa -des3 -out filename.key 2048 A CSR was created by ...
0
votes
2answers
1k views

Can you use a public cert to do Radius for EAP?

In other wirds, rather than installing an Enterprise Root CA and having internal PKI. Can I buy a $30 cert from Thawte for example and then use it on my IAS server? Is this not a better and cheaper ...
0
votes
2answers
5k views

Certificate Authority - Network Ports?

We are optimizing our QOS router settings and it was decided that we should give priority to our PKI infrastructure. As far as I'm aware, there is network traffic when certificates are verified and ...
4
votes
2answers
973 views

ssl certificates for *.subdomain.example.com

I plan on getting a wildcard certificate for my domain like *.example.com, but I've heard varying reports about whether it will also work with second-level subdomains like *.subdomain.example.com -- ...
0
votes
2answers
16k views

keytool error: Certificate reply does not contain public key for

I've recently purchased a certificate from GoDaddy for coding signing an Adobe Air application. I generated a CSR (Code Signing Request) file and sent it to them. They have send back a .spc ...
1
vote
1answer
160 views

Can I get a CA-signed SSL cert for a host accessed by IP address?

I have a server which is accessed by IP address over a LAN. The IP address is sometimes changed, and it is never accessed with a DNS hostname. Is it possible to get a CA-signed certificate which ...
4
votes
5answers
52k views

convert .p7b key to a .pfx

I have an SSL certificate in .p7b format that I need to convert to .pfx. If I try this through the windows certificate managment the option to expert as a .pfx is disabled. Trying with openssl I ...
3
votes
2answers
2k views

Can I be an intermediate certificate authority?

My company has grown to the point where we're interested in being an intermediate CA for our customers, and would like to issue certificates to customers. Among other uses, we wish to issue SSL ...
0
votes
1answer
5k views

What is correct syntax to verify a certificate in the certificate store using certutil.exe?

I have a client certificate in certstore. I try this: certutil.exe -verify CertCommonName but in get this error when I ping certutil.exe -ping it connect to pc. DecodeFile returned The system ...
7
votes
3answers
282 views

Does a CA require a full-time administrator?

At my place of employment, we have skated by over the years without having an internal Certificate Authority. This has worked for us because there was no visible impact by not having trusted entities. ...
0
votes
1answer
304 views

windows server 2008 certificate authority - issued cert valid from field [closed]

When does new certificate's valid from field always date a few minutes in past?
1
vote
2answers
226 views

Modifying SSL / TLS certificates for local use

I am currently developing some applications on my local 'serverfarm'. I have set up ZendServer with Apache2 and PHP, which works very fine, and nothing unwanted happened until now: Now I wanted to ...
4
votes
3answers
7k views

Import .cer certificate from Windows command line

Tired of wading throug MMC jungles, I need a way to import a given .cer file (which contains just a public key) into machine-wide certificate store (don't know how is it called in English since I'm ...
8
votes
5answers
13k views

How to create a multi-domain self-signed certificate for Apache2?

I've got a little private webserver where I have several virtualhosts. I know that it's impossible to assign a certificate to each individual virtualhost, because the server finds out which ...
0
votes
3answers
4k views

OpenSSL: certificate signature failure error

I'm trying to wget La Banque Postale's website. $ wget https://www.labanquepostale.fr/ --2009-10-08 17:25:03-- https://www.labanquepostale.fr/ Resolving www.labanquepostale.fr... 81.252.54.6 ...
2
votes
1answer
1k views

Disable integrated client certificate validation in IIS7?

We have an IIS 7 hosted site that requires client certificates (two-way ssl). Unfortunately, I don't have access to the trusted certificate store on the host machines, and so I was forced to write a ...
0
votes
2answers
256 views

SSL certificate and self-hosting

I have a domain registered at GoDaddy.com. I have been hosting my website on my own Windows 2003 server with forwarding. It is working great. Now I would like to implement the next step: To secure the ...
2
votes
2answers
2k views

Importing SSL certificates on Win2k3 / IIS 6.0

As part of a large site migration, I need to copy over numerous (about 50) SSL certificates for different sites. I have tried to export them on the current server and then import them on the new ...
1
vote
1answer
711 views

BES 5.0 SSL Certificate

I have recently installed BES 5.0 on a Hyper-V (i know it's not officially supported) 64-bit Server 2008 box with a remote SQL 2005 database. I successfully installed and was able to access the ...
2
votes
4answers
13k views

Peer's Certificate has been revoked

I just upgraded our web server with a renewed cert as our current cert expires later this week. When I browse to our site via FF it is throwing this error: Secure Connection Failed An error ...
1
vote
1answer
3k views

renew a SSL cert on IIS6?

Originally asked at http://stackoverflow.com/questions/1462009/renew-a-ssl-cert-on-iis6 My manager ordered a new wild card cert for our website as our current is expiring in a few days. Now, I am ...
13
votes
3answers
17k views

IIS 7.0 - SSL certificate - renew or new?

One of my SSL certificates (simple domain verification only) is about to expire on windows 2003 IIS 7.0 server. I got better offer from another vendor, and the guys who originally issued my ...
0
votes
3answers
1k views

Migrating security certificate from IIS 6.0 to IIS 7.0

We have a security certificate configured in IIS 6.0 on our old server. We are migrating to a new server. How do I migrate the security certificate of our website from IIS 6.0 to IIS 7.0?
0
votes
2answers
702 views

How do I enable mutual SSL in IIS7 with a self-signed certificate?

I've created a self-signed certificate in IIS7. Then I exported this certificate to a .pfx and then installed it on the client machine's IE browser. Then I set "Require Client Certificate" on the ...
0
votes
2answers
226 views

SSL Ajax type of certificate for the static domain (image + js)

I have a page that is SSL and has a valid certificate extended. (mainpage.com) But this page request some static content to another domain(page-static.com), basicly images and js. Actually i have ...
0
votes
1answer
446 views

IIS Certificate Request Wizard - installing a cert when not a domain admin

We have a windows 2003 domain certificate authority internally that we use for SSL certificates. Domain admins are able to just use the IIS Certificate Request Wizard to install a certificate ...