Tagged Questions

Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

1
vote
1answer
115 views

LDAPS Only Works on Domain Certificate Authority and Not on Other Domain Controllers - Active Directory Certificate Services - Windows Server 2008 R2

I have 3 Domain Controllers with Active Directory role installed on them. I installed Certificate Services on one of the Domain Controllers. I am able to LDAPS to it, but not the others even though ...
2
votes
1answer
251 views

Find expiration date of a certificate file which I do not have installed

I'm looking for a way to find the expiration of a certificate file (either .pfx or .cer) without installing it. I have access to read the file but can not install it.
1
vote
0answers
28 views

Transfer cacerts file to another das

I was wondering if its possible to transfer the cacerts.jks file to another glassfish DAS machine? The idea is to synchronize both das machines without having to import every certificate manually. ...
2
votes
0answers
640 views

SChannel “cannot find certificate in either LocalMachine or CurrentUser store”

We have an in-house application that requires the use of client SSL certificates to authenticate with a remote server (not under our control). This has worked without problems before but on deploying ...
1
vote
1answer
799 views

Can Windows 7 access an RD farm that uses SHA512/4096-bit certificates?

I have a Server 2012 RD farm that works fine if configured with the self-signed certs generated by Server Manager, but not with certs from our internal CA. With the self-signed certs, our remote ...
0
votes
1answer
341 views

install CA root trust certificate in Cent OS

i install SSL certificate in my web site and now i have some questions about it. my web site is working correctly in google chrome web browser but it's not working in firefox browser. one of my friend ...
0
votes
2answers
1k views

Fingerprint of PEM ssh key

I have a PEM file which I add to a running ssh-agent: $ file query.pem query.pem: PEM RSA private key $ ssh-add ./query.pem Identity added: ./query.pem (./query.pem) $ ssh-add -l | grep query 2048 ...
3
votes
4answers
10k views

Java Deployment Rule Set via AD Enterprise CA

My goal is to get a Java Deployment Rule Set in place in my organization, but I do not want to pay third-party certificate authority for a code signing cert when we have a working CA running through ...
0
votes
3answers
625 views

Certificate address mismatch warning GPO cannot be Disabled

I found the "Turn on certificate address mismatch warning" and I need to set it to Disabled. Seems like the Console is not accepting that option (I Can set it to enabled and it will work) and I'd like ...
3
votes
2answers
156 views

Using our own certificate authority for business email encryption

I've read the available similar questions on serverfault but I haven't quite found a definite answer to the security aspect of it - hence here's my question: I'm administrator of an office working ...
2
votes
1answer
28 views

Installing SSL on Apache 2.x - self-signed errror

So I bought an SSL cert from GoDaddy and followed their instructions on how to get it signed, and downloaded and installed it. It's not working. It says the SSL certificate was self-signed and the ...
1
vote
1answer
386 views

iis Client Certificate Mapping Authentication

I have been googling this for hours. I cannot get my mapping to work on certain certificate fields. Fx this sample code: <iisClientCertificateMappingAuthentication enabled="true" ...
3
votes
1answer
45 views

Why can't I see all of the client certificates available when I visit my web site locally on Windows 7 IIS 7?

My team has recently moved to Windows 7 for our developer machines. We are attempting to configure IIS for application testing. Our application requires SSL and client certificates in order to ...
1
vote
1answer
446 views

How to Submit Certificate Request from Red Hat to Windows CA?

My Following Setup: Windows Server 2008 AD with CA Redhat Workstation Joined to AD I have used Openssl to generate a certificate request to be sent to the CA openssl req -nodes -newkey rsa:2048 ...
0
votes
1answer
464 views

Puppet agent not requesting cert

Trying to setup Puppet agent/master on a single machine (planning to install more agents once this is working). I'm mired down in the cert signing process right now, which feels like it should be ...
1
vote
1answer
64 views

Website authentication with a certificate from a different domain

My question: Is there a better way to enable authentication between 2 domains than what I'm doing below, and is Name Mapping the right thing to use? There are 2 domains; One is the primary ...
0
votes
1answer
144 views

HAProxy SSL connection error

Brand new to setting up SSL with HAProxy and Litespeed load balancer, just generated my certificate using the .csr and am trying to have HAProxy terminate SSL before sending it to the web worker ...
1
vote
1answer
93 views

Forgot passphrase for new SSL certificate

I've been requested by RapidSSL to reissue my SSL certificate to 2048 bits. I generated a key, CSR and got the certificate back from RapidSSL. Now, somehow, I've forgotten what Passphrase I used when ...
2
votes
3answers
97 views

Use personal SSL Certificate created on my own?

I'm new to SSL Certificates. I've seen some tutorials about creating personal certificates but I didn't go far reading. It seems that I can create a personal SSL Certificate and use it on my website, ...
1
vote
0answers
234 views

apache authentication with SSL certificate and SSLUserName

i just try to put an SSL authentification for a SVN server over https. I would like that the client certificate allow authorized person to check their repositories. <VirtualHost ...
0
votes
1answer
51 views

Can I use switch user “su” with keys / certificate?

I just locked myself out of SSH. Basically, I added three users to /etc/ssh/sshd_config using the AllowUsers directive, which is great because now they can login, but now I can't, and I'm the only ...
0
votes
1answer
3k views

Error 0x8007274C connecting via SSTP VPN to Windows 2008r2 server

I'm setting up a VPN using a self-signed certificate. My certificate is was generated on the server and is installed on the server. It shows up in the MMC console under "Certificates (Local Computer) ...
0
votes
1answer
149 views

Configuring SSTP VPN server on Win2008r2 when server is at a dynamic dns address

I would like to install an SSTP VPN server on a Win2008r2 server that I use for personal purposes (not using Active Directory). I will have 3 or 4 of my computers and other mobile devices connecting ...
3
votes
1answer
350 views

Microsoft CRL URL's

We have a number of Exchange servers without access to the internet. When updating Exchange, the fact that all .NET assemblies are signed means the installer needs to check Microsoft's CRL during the ...
0
votes
1answer
233 views

Preventing Windows from deleteing our root CA

I am trying to create a Windows server with an IIS server that has a web site with client certificate authentication. The client certificates are signed by our own root CA. Because of that we must ...
2
votes
3answers
3k views

Having issues connecting to a Windows 2012 VPN

Setting up Windows Server 2012 Datacenter as a VPN (with everything as default settings), I receive no errors upon installation, then I restart. Upon trying to connect to the VPN, here is what ...
1
vote
0answers
155 views

Always get a Security Error for Internal HTTPS Website

Full disclosure, I asked this question over at Ask Different (http://apple.stackexchange.com/questions/96776/always-get-a-security-error-for-internal-https-website) but didn't get much helpful ...
1
vote
2answers
5k views

SSL Error: self signed certificate in certificate chain

EDIT: AS the following documents describes http://www.novell.com/support/kb/doc.php?id=7002392 i've concatenated those files like this domain.crt sf_bundle.crt >> domain.pem and now the ...
0
votes
2answers
115 views

What's the difference between a certstore and a keystore?

I'm specifically using openssl in RHEL. What's the difference between a certstore and a keystore?
1
vote
0answers
139 views

Is it possible to view a user's certificate store while signed in as a different user? Windows Server 2008 R2

I'm currently migrating a Jenkins server and I need to install a certificate on the new machine for some of my builds. The problem is I'm not sure on which store to use and no one remembers the ...
2
votes
1answer
80 views

How to securely connect to multiple different LDAPS servers (Debian)

I'm trying to connect to multiple different LDAPS servers. A lot of the documentation I've seen recommends setting TLS_REQCERT never, but that strikes me as horribly unsecure to not verify the ...
0
votes
2answers
791 views

Installing SSL certificate on JBoss

I have a server that runs JBoss. When I type bad URL to that server it gives me version like this: JBossWeb/2.0.1.GA - what version of JBoss that would be? A SSL certificate will be bought and ...
0
votes
1answer
2k views

Getting CentOS 6 to trust a certificate from AD

I'm trying to get my CentOS server to trust a certificate I've installed from an active directory server (I converted the .cer to .pem earlier.) When I try to connect, the debug information is: ...
1
vote
2answers
45 views

What kind and how many Certificates are needed?

I have 3 ASP.NET-Web.Api Applications communicating together over https: Master on Server1 Slave1 on Server1 Slave2 on Server2 (Slave2 is basicly an other instance of Slave1 installed on another ...
0
votes
1answer
32 views

Certificate problems with Exchange

Ok I have 2 Exchange 2007 servers, and a Edgesync server. I noticed they had old certificates on them, and I installed stand alone Cert. Authority on them and gave them a new certificate (I backed ...
0
votes
4answers
687 views

Can I find out what certificate revocation server an application is contacting?

I'm trying to install an application on a machine running Windows XP Pro. There are two different servers being contacted, both using the same wildcard certificate (GoDaddy). One via https, one ...
1
vote
2answers
41 views

Certificates for clusters

I have read the various threads regarding clusters (behind the load balancer) and certificates. I am trying to implement this in our company. Firstly Our compnay policy is not to allow exporting of ...
0
votes
3answers
2k views

Virsh can't connect to ovirt hypervisor

I installed Ovirt and want to add network interface for NAT. So I need to connect to hypervisor by virsh and add nic. Ovirt installed on my local server, host (ovirt-engine.kvmserver.net) is on the ...
0
votes
2answers
367 views

Can IPv6 IPSec replace https/ssl for secure website network encryption?

Take away the 'authentication' part and just talk about the encryption part please! (Authentication is a different problem.) Example: a connection to http://ipv6.google.com can be encrypted via HTTPS ...
0
votes
2answers
376 views

Generate pfx certificate from pem rsa

I have a PEM RSA private key generated with opendkim: # dkim-genkey -t -s code001 -d domain.com and for use it with exchange, i need to convert it to pfx with this command: # openssl pkcs12 ...
0
votes
1answer
231 views

ADFS 2.0: send issuer of user certificate as claim

Using ADFS 2.0, I would like to send to a relying party information about the issuer of the user certificate, if a user authenticated using an x509 certificate. Is this possible? How should I ...
0
votes
1answer
76 views

SSL certificate error in IE and chrome in apache

You attempted to reach www.domainname.domain.ac.in, but instead you actually reached a server identifying itself as *.domain.ac.in. but the site works fine with https://domainname.domain.ac.in in all ...
0
votes
0answers
142 views

Why does IIS7 on one server work with my certificate while another has problems?

In the setup I describe, we have two servers, Alpha and Bravo. Alpha is a server that has been around for years. It is a Windows 2008 server running IIS7. In order to log in to any application on ...
1
vote
1answer
91 views

Mail From Outlook/Exchange Sent to Destination Spam

I have a unique problem and I am hoping someone may have some direction to provide me. We have a Windows environment with an Exchange 2007 Server. For some reason when a user sends an email from ...
0
votes
1answer
247 views

Generate a p7b file from bin and der file

I'm using Debian and I'm trying to join on a file with a certificate. Try to file.bin + cert.der => file.p7b I tried with openssl command : openssl pkcs7 -in cert.der -in file.bin -out file.p7b ...
0
votes
2answers
478 views

Redhat - command/s run post-install to generate default localhost.crt?

I cloned a VM and the ssl certificate has the old hostname. I need to generate a new ssl certificate. My question is what method was used by the server to create the initial certificate? Was this ...
0
votes
1answer
220 views

Is it possible to allow only some client certificates in Apache to login?

In my virtual host I have something like that: SSLEngine on SSLCertificateKeyFile /etc/apache2/ssl/svn.XXXXX.me.key SSLCertificateFile /etc/apache2/ssl/svn.XXXXX.me.crt SSLProtocol ...
0
votes
2answers
82 views

Using an SSL certificate in multiple locations

I have some issues with respect to using SSL Certificates. I have a website hosted in UK and I also have an organisation in South Africa hosting my company application online for web access. The ...
0
votes
0answers
146 views

Allow IIS 7.5 access to certificates private key at Windows 2008 R2 x64

all I'm trying to allow my IIS application get access to private key in personal storage of local computer. For this I open MMC, go to certificate, make right click on it and select 'All tasks' -> ...
0
votes
1answer
621 views

Expired Certificates and Active Directory Authentication [closed]

Around the end of February, the password was about to expire on my Active Directory account. So, I changed the password. Since then, I can get locked out 3 to 10 times a day without me doing much of ...