Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

1
vote
1answer
21 views

No service for subscription

I am trying to set up bursting to Azure with a Windows HPC cluster. THe cluster already works fine and I can start jobs on the machines on that are on the local network. When I try and create a node ...
0
votes
0answers
253 views

error Unable to configure verify locations for client authentication

Starting my apache2 Server on Ubuntu 12.04.5 LTS, I got the following error [error] Unable to configure verify locations for client authentication my Problem, on the server are more than one ...
1
vote
0answers
545 views

RDWeb TS connection broken for some users post RemoteApp certificate change

We recently reissued our GoDaddy wildcard cert with the SHA256 signing algorithm (FYI they still revoke the old cert in 72 hours even if you don't re-key it, so you should re-key anyway). We use this ...
0
votes
2answers
69 views

CAs in different child domains

I am trying to achieve the following; Environment is a Single Forest with a Root Domain and x2 child domains as follows; root.net child1.root.net child2.root.net There will be no logical or ...
-1
votes
2answers
60 views

Can one domain have 2 or more SSL certificates?

I have googled and found this post: http://security.stackexchange.com/questions/46988/is-it-technically-possible-to-configure-two-different-ssl-certificates-for-the-s If it actually is possible, then ...
2
votes
2answers
3k views

Server sent passive reply with unroutable address when connecting to FTP site with FileZilla

I get the error "Server sent passive reply with unroutable address. Using server address instead." when connecting to a FTP site (not SFTP). I have connected to this site many times, however ...
2
votes
2answers
224 views

Will DirectAccess clients renew workstation certificates off-site?

I setup MS DirectAccess nearly a year ago, which required configuring computer certificate auto-enrollment. The first computer certificate is going to expire in about a month, and now I'm wondering ...
2
votes
0answers
32 views

Certificate can only be used by network service account

Issues : Our service is using one certification for partner service call. It worked well in IIS site which is running as network service account. But when we run test the code as administrator ...
2
votes
1answer
139 views

How do I make a Cisco Ironport appliance send “linked certificates” for HTTPS inspection?

I have a PKI tree, and the ironport is a CA at the second level of the PKI tree, (for issuing HTTPS inspection certs) Although I deployed the root certificate to all clients, and chrome/IE work ...
0
votes
0answers
37 views

WSDL2Java Subject Alternative Missing

I have been provided with a 3rd party URL for a WSDL that is stored at a client's location. I am to generate code and use that WSDL, and the client made the the WSDL available over an https IP ...
5
votes
1answer
2k views

New server unable to fetch configuration from Puppetmaster due to some ssl error

Three machines in the production environment had some hardware issues and were decommissioned. The infrastructure team has reinstalled them and gave them the same hostnames and IP addresses. On the ...
0
votes
0answers
158 views

File transfers cause SSLv3 read error bad record mac to personal cloud

This error also occurs when using webDav and also the build in web-browser uploader. When I start the sync client with no upload limit, any file over 50 or so megabytes size produces the following ...
2
votes
1answer
79 views

How to Automatically Tust Auto Enrolled Code Signing Certificates

In my organization all developers are setup to be granted a Code signing certificate via Auto Enrollment. Additionally, PowerShell is configured by group policy to require all scripts to be signed. ...
7
votes
2answers
643 views

Enable Certificate Enrollment Policy and Request a Cert using PowerShell

Right now, I'm doing the following to request a cert from a CEP server: Open gpedit.msc Under Computer Configuration > Windows Settings > Security Settings > Public Key Policies, double click ...
12
votes
3answers
1k views

How do I keep the ssl key for our website confidential?

I want to keep our SSL key for our website confidential. It's stored on 2 USB sticks, one in a safe deposit box and one I keep secure. And then I'm the only one who applies it to the web server so ...
1
vote
0answers
36 views

VMs with same name an IP

Does Foreman support managing several VMs with same name and IPs, but with different certname? for example: NAME IP CertName VMLinux001 10.0.0.2 VMLinux001@domain.com ...
3
votes
1answer
166 views

Wildcard cert for local SSL Certificate Authority?

This seems like it should work, but PKI is complicated and I'd like to ask people who can give an authoritative answer. BACKGROUND: I am the network engineer for a company; for sake of argument ...
1
vote
0answers
114 views

Add trusted remote certificate to Ubuntu server

I'm running an app on an AWS server running Ubuntu 12.04.4 LTS. I'm writing a script to connect to an SFTP server from the command line, but am unable to connect. I believe this is because my Ubuntu ...
1
vote
1answer
40 views

EAP-TLS: is it possible eavesdropping when sharing client certificate?

I want to know how to share a network of WPA2 enterprise with EAP-TLS, authenticating users with a common certificate. They share the same certificate. I'm afraid they can monitor each other. Is ...
0
votes
1answer
34 views

How should a wildcard certificate be used?

I have a wildcard certificate (pfx file) and I have doubts on how to use that. Should I install that on all of my application servers or alternatively create a new certificate and sign it with the ...
3
votes
2answers
314 views

Exchange 2010 SP1 Certificate renewal, the new rule not allowing local intranet domains and will this change mail flow?

I'm in a pickle with the infamous "The Security certificate has Expired or is not yet valid" message and I know it is due to our (multi domain name certificate; or I think that is called a SAN cert? ...
17
votes
4answers
1k views

Where do companies typically store SSL certificates for future use?

We recently bought a wildcard SSL cert for our domain. We converted all of the certs to a Java keystore, but now we are asking ourselves where we should store these for later use. Do people use ...
2
votes
1answer
192 views

How to add an existing key to the certutil key database

I have created an SSL keypair with OpenSSL. I uploaded the Certificate Signing Request to my SSL Certificate provider and got my certificate files. I added my certificate and the required CA ...
0
votes
2answers
552 views

RapidSSL: domain name does not match the certificate common name or SAN

I'm installing SSL certifcate (RapidSSL) on Amazon AWS (Load balancer). Installation was already completed, but when I test it I get: Wrong certificate installed. The domain name does not match the ...
-2
votes
1answer
31 views

Can a certificate signing request generated from a certificate using openssl have extensions? [closed]

I am generating a self signed certificate at first. But someone wants to get it signed by another CA, I want to generate a certificate signing request from this existing certificate. Now what I want ...
4
votes
1answer
339 views

How do I work out my certificate chain order manually?

Lets say I start with a certificate. Using openssl I can print it out like this: openssl x509 -in cert.pem -text -noout And I'll get some output such as Validity, Issuer and Subject along with ...
1
vote
0answers
92 views

How to setup digital signatures on Microsoft CA (AD-CS)?

I've been trying to research across the web on how to setup a Microsoft CA (AD-CS on Windows Server 2008 R2) in order to create a certificate for digital signatures, allowing you to digitally sign ...
1
vote
1answer
577 views

OPENSSL Save x509 certificate of a website

I can see the certificate with this command openssl s_client -host {HOST} -port 443 -prexit -showcerts How can I save the x509 cert of the website in a PEM - File?
1
vote
2answers
1k views

Can't get Network Solutions Certificate chain working with EC2 Elastic Load Balancer

I have a certificate file provided to me which is a wildcard domain name. It comes as both a key and a crt file. No other files were provided. I'm having trouble getting it to work correctly with ...
0
votes
1answer
24 views

Effects of changing from basic auth to cert based auth?

I have been doing a bit of research on how to solve some frustrations our users have with mobile email and it looks like changing the Exchange settings to allow cert-based auth will help. I have been ...
2
votes
2answers
508 views

How are Windows MachineKey Container File Name's Derived?

In the C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys directory there's an enumeration of Key Containers. The naming convention is <uniqueGUID>_<staticGUID> and I presume the ...
0
votes
0answers
24 views

How Can I Test If Another Server Certificate is Trusted?

My certificate expired on my server (Server A) and I needed to generate a new one. I've verified the new certificate is updated on Server A, but now my CAS server is timing out when Server A attempts ...
2
votes
1answer
197 views

Prompt for Certificate Password When Accessing EFS Shares

My boss wants to set up encrypted file shares using EFS on Windows Server 2012 R2 Boxes accessed by Windows 8.1 clients. I've been able to set the default DRA, issue certificates in test cases and so ...
1
vote
0answers
59 views

Owncloud - Proxy changes certificate

I'm running an owncloud server 7.0.2 with apache(Ubuntu host) and configured it to use a self-signed ssl certificate. Everything works fine on my home-PC On an other machine I would like to use the ...
0
votes
0answers
78 views

Install certificate chain on Konica Minolta C280

I am trying to install a certificate issued by our company CA on our Konica Minolta C280 printer. We have a company root ca installed on our desktops, which has issued an intermediate certificate, ...
1
vote
1answer
350 views

New root CA will not list schema version 2 & 3 certificate templates

I'm trying to decommission a Server 2008 machine that hosts DC, NPS, and CA. I've deployed two new servers to take over as root CA and RADIUS server (both new servers are 2012R2). The new root CA is ...
0
votes
0answers
58 views

Apache Webserver: Map ClientCertificate to Active Directory

Using Apache Webserver 2.4 and mod_ssl and mod_authzn_ldap I'm trying to Authenticate the user by a ClientCertificate (PKI smartcard) Authorize the user by membership of certain Active Directory ...
1
vote
1answer
929 views

Trusted root certificate being automatically removed from store

I have a trusted third party's root certificate. I install this to the 'Trusted Root Certification Authorities' certificate store in Windows Server 2008, but it disappears from the certificate store ...
1
vote
0answers
184 views

wdsutil claims Windows Server 2012 R2 drivers are unsigned, but they have a valid certificate

I'm trying to import some Windows Server 2012 R2 drivers to a driver group in WDS. My WDS server is running Windows Server 2012 (not R2). When I run the following command: WDSUTIL /Add-DriverPackage ...
1
vote
0answers
80 views

Remote Desktop Certificate Template Application Policy Extension

We are setting up remote desktop authentication with the use of certificates and ran into an issue in one of the environments. I am editing the RemoteDesktopComputer2008 certificate template, in ...
0
votes
2answers
77 views

What SSL certificate to use with web app with API on Azure?

I am creating a web service / app and hosting it on Azure. Users signing up for the service will get their own subdomain, e.g. user1.example.com. I have an API which is accessible through www. I want ...
0
votes
1answer
62 views

One Certificate to Rule them all [closed]

I'm looking to roll out Exchange 2013. We also have various web facing properties. We have an internal domain name of ourdomain.local and an external domain name of ourdomain.com. To keep things as ...
2
votes
1answer
229 views

Submit a certificate request file from a non domain computer. How to figure out policy server parameters

I'm trying to submit a certificate request. I'm trying to do it from command line so I can run it from code. Previously I have done it by using the Microsoft Active Directory Certificate Services for ...
1
vote
1answer
538 views

Configuring client certificates on IIS8 - Error 403.16

I am trying to implement client certificate authentication on IIS 8. I have deployed my configuration on a development machine and verified it working as expected there. However after setting up on ...
3
votes
0answers
63 views

How to get OpenSSH to use OCSP for revocation

As the title says, is there any (free) library, patch, etc. that allows OpenSSH to be configured to check x.509 certificate revocation via OCSP (online certificate status protocol)? If so, can you ...
1
vote
1answer
620 views

How can I install a client certificate for all users of a computer?

I have a PFX file (.p12) that is needed to allow access a remote web page. Double-clicking on this file and following a few prompts easily adds the certificate to a personal store, but this only works ...
0
votes
1answer
351 views

HAProxy - ssl client ca chain cannot be verified

Situation: I want this to work: requests come from clients and goes to haproxy through 443 port (ssl) and then it must go to backend on 80 port. I have server certificate given by intermediate ca ...
2
votes
2answers
3k views

OS X Not Trusting Thawte Primary Root CA - G3

We recently renewed our Nginx webserver's Thawte SSL certificate. Previously we'd been using SHA1 as the signing algorithm, but this time used SHA256 which leads to a new root certificate known as ...
0
votes
1answer
109 views

Intermediate certificate not sent to clients? [duplicate]

I have installed intermediate certificate on server according to all tutorials for IIS, that is: "Certificates MMC snap-in, you choose computer store, you'll have the option to place the intermediate ...
0
votes
1answer
86 views

Can Subject Alternative Name(SAN) Certificate install on different Web Server or OS? [closed]

Let say: application.house.com apache tomcat : physical server email.house.com apache tomcat : virtual finance.house.com Oracle Wallet Manager : physical server ...