Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

0
votes
0answers
33 views

RDP Certificate

I have 4 servers, RD Gateway,RD Connection Broker and 2 RD Host to which I will have external client connecting. I would like to have my clients to be connecting without having any warnings about ...
0
votes
2answers
555 views

Man-In-The-Middle with a VPN?

I'm doing some researches for university and, before wasting a lot of time into it, I'd like to know if what I've got in my mind can be done. I'm talking about a simple MITM attack but, in my ...
0
votes
1answer
59 views

Can I create a CA which is part of a WW trusted CA?

When I create a CA role there is an option for "Root CA" and "Subordinate CA", choosing the second one adds an option to generate a cert request. Does it mean I can buy a service e.g. from Comodo ...
1
vote
1answer
129 views

MySql SSL configuration - Client section

I'm trying to secure my work with a SSL connection between some applications and my dabtabases. In a first time, i search how to create certificates, and i do something like this : Creation of the ...
0
votes
1answer
182 views

Can't get self-signed CA cert to request corresponding client cert; Apache

I'm running Apache 2.2 on Windows, and have mod_ssl working fine for delivering a commercially signed server cert. (A wildcard cert, though I don't think it matters.) I'm trying to get the server, ...
0
votes
1answer
39 views

Permanent SSL Keystore Certificate Password

I am having a problem with my generated pkcs12 file using keytool. I ran this command to generate a pkcs12 client-certificate: keytool -importkeystore -srckeystore client.jks -srcstorepass password ...
2
votes
1answer
2k views

Import of PEM certificate chain and key to Java Keystore

There are plenty of resources out there about this topic, but none I found which covers this slightly special case. I have 4 files; privatekey.pem certificate.pem intermediate_rapidssl.pem ...
0
votes
1answer
38 views

mysql setting up encryption (ssl) without client certificats

I would like to setup SSL encryption for my MySQL servers to let users encrypt their connections without being themselves fully authenticated (like an anonymous access, but still encrypted). I would ...
0
votes
0answers
104 views

Custom certificate/key pair does not work on OpenVPN clients

I have setup very basic OpenVPN network on Windows Server 2008. My clients are IP Cameras having Unix OS and built-in feature of openVPN connectivity. Initially I used a common client certificate/key ...
0
votes
1answer
1k views

SSL connection issue with s_client

I'm trying to configure SSL on two machines (on LAN) from a local CA I created and am hitting an issue when testing with s_client, I can't seem to locate helpful info w/ my google-fu skills. I'm ...
0
votes
1answer
2k views

Importing certificates on Windows 2008 - “The integrity of this certificate cannot be guaranteed…”

I need to set up secured communications between two windows machines. I have generated a set of certificates for this purpose and saved them as .x509 files. If I set about installing those on ...
2
votes
0answers
654 views

How to manually create Puppet CA and certificates?

I am wondering how to manually (using openssl instead of puppet ca command) create CA that would be usable by Puppet? The goal would be to script creation of such CA's to deploy them on multiple ...
0
votes
3answers
272 views

Install X509 certificate into Windows 2008 R2

I'm trying to install a certificate into my windows 2008 but I'm not able to do it right. I have a .crt file and I click to install from contextual menu. It succeed to import but if I browse the ...
28
votes
1answer
4k views

How can I work around problems with certificate configuration in Remote Desktop Services?

I am setting up a Remote Desktop Services farm, and am having trouble configuring certificates for it to use. A demonstration of the problem I'm seeing can be found in Step #4. At this point I am ...
0
votes
1answer
791 views

Subject Alternative Name not added to certificate

I'm trying to issue a new certificate using the additional attribues field within the Windows CertSrv Web-Enrollment Client. I added the CSR, picked the template and entered this into the attributes ...
0
votes
1answer
133 views

Remotely configure OpenVPN custom client certificates and static Virtual IP

On our current basic OpenVPN (on Windows) setup, we are using common client certificates for all clients. In order to introduce some kind of security, what are the possible measures I can make ? ...
0
votes
0answers
68 views

MMC Cert Manager Plug-in is making LDAP connection to external site, why?

I'm trying to figure out what is causing 5 of my servers to attempt to connect to an external LDAP server. I inherited these servers when another employee left the company. As far as I know these ...
0
votes
1answer
1k views

OpenVPN certificate removal and connecting with no certificate file on server

I've run into a problem, that I removed certificate files from the server. But client that has these files still can connect. I've found out, that I should revoke the certificate and that this can ...
3
votes
1answer
39 views

Certificate issue causing code to fail

We have some code that connects to a website to call a web service. When I run the code on our server under my account (local admin) the code runs fine. When I run the code under a different user the ...
2
votes
1answer
171 views

HTTPS and trailing dot in domain

Is it possible to solve the scenario where a web server is served behind HTTPS, and must be accessible both with www.domain.com and www.domain.com.? And notice the trailing dot. An example for all: ...
1
vote
0answers
501 views

Why my certificates doesn't match?

I've stablished a VPN using OpenVPN and it is all working.. almost.. My machines can see each other but on Handshake it all fails. The error at first referred to a blocked port but ports are good. ...
1
vote
1answer
784 views

VPN Certificate Validation Failed (OpenVPN)? CentOS & Ubuntu

Ok, I'll explain what I did... and at the end is the queston. THank you! To set up my VPN I installed OpenVPN in server and client machines. On server I configured the cert Authority in the file ...
1
vote
2answers
227 views

New Key for expired certificate?

I need to create a new certificate for an internal server. It is self signed. Is there an easy way to just extend the expiration date of the current certificate? If not, can I reuse the current ...
0
votes
1answer
81 views

certificate SSH login does not work on 22 but other port

On my Red Hat server, the sshd will not accept my correct certificate login. However, If i start another sshd on another port, it works! (I assume the second sshd loads the same configruation files.) ...
2
votes
1answer
2k views

Keytool import certificate fails “Public keys in reply and keystore don't match”

I'm importing a SSL certificate to use in Tomcat in my keystore using keytool and it fails with "Public keys in reply and keystore don't match" Problem might be declared by the fact that I created a ...
3
votes
1answer
74 views

Good way to store domain CSR and KEY files

For my company I'm starting to manage more and more domains; and with that more and more certificates for those domains. What is a good way to store the basic KEY and CSR files generated? I was ...
8
votes
1answer
158 views

How do SAN Certs degrade performance?

I have heard that when lots of names get added to a single SAN Cert (Subject Alternative Name) performance starts to degrade. Can someone explain how SAN certs are processed so I understand what ...
3
votes
3answers
5k views

openssl client authentication error: tlsv1 alert unknown ca: … SSL alert number 48

I've generated a certificate using openssl and place it on the client's machine, but when I try to connect to my server using that certificate, I error mentioned in the subject line back from my ...
0
votes
1answer
1k views

TLS: hostname does not match CN in peer certificate

im trying to connect LDAP over StartTLS but Im stuck with an issue. I've followed step by step this guide https://help.ubuntu.com/12.04/serverguide/openldap-server.html#openldap-tls and LDAP it's ...
0
votes
1answer
232 views

SSL certificate for Oracle Application Server 11g

I was asked to get an SSL certificate for an "Oracle Application Server 11g" which has a soon-to-expire certificate. Brushing aside the fact that 10g seems to be the newest version, I got a ...
1
vote
1answer
186 views

Client side certificates in client browsers with unix server for management

We are currently running Unix dedicated servers for everything (Web cluster, database, FTP, batch, ...) except for a Microsoft Active Directory Certificate Services. The sole purpose of this Windows ...
0
votes
0answers
131 views

OpenVPN connects using password but not certificate

I've installed OpenVPN and followed the steps to create a CA.crt in addition to other certificates. I've recreated the certificates numerous times in hopes of connecting but have been unsuccessful. I ...
0
votes
0answers
124 views

Error renewing Certificate in Certificate Authority - 2003 Professional Edition

Trying to Reissue a Certificate to an expired certificate authority. I've logged into my Domain Controller, gone to the Certificate Authority and then right-clicked and went to "Renew CA ...
0
votes
1answer
131 views

SSL Certificate for local web server

Is it at all possible to create a self-signed certificate for use on multiple machines on a local network which would stop the browser complaining it is not a trusted site? We have a product which is ...
1
vote
1answer
190 views

SSL certificate for subdomain without domain

I have a webserver in my intranet which can be accessed via subdomain.domain.com and simply subdomain. The SSL certificate is created for subdomain.domain.com which results in a warning as soon as I ...
0
votes
2answers
132 views

What kind of SSL Cert do I need and where do I get it?

I want to have subdomains with SSL within my domain. The main difference is that each subdomain is hosted by a different person with a different public key/private key pair. Let me illustrate with an ...
1
vote
2answers
67 views

Certificate Security in intranet Environment?

We have this topology in our company : A new rule says that each document being sent by outlook should be encrypted. we decided using PGP. We already have a certificate ( self signed). the ...
1
vote
1answer
236 views

Certificates compartments (certmgr.msc)?

After reading a while , Im trying to understand what kind of certificates will be found at : Personal Other People Trusted Root Certicfiation Authorities will personal will contains only private ...
2
votes
3answers
1k views

How do I renew an expired Ubuntu OpenLDAP SSL Certificate

We went through the steps of revoking an SSL Certificate used by our OpenLDAP server and renewing it but we are unable to start slapd. Here are the commands we used: openssl verify ...
2
votes
2answers
410 views

Problem with Minimum Certificate Key Length and WinXP

The problem all started when Mircosoft updated the security of systems by requiring a minimum key length of 1024. Please refer to Microsoft Security Advisory (2661254). In the past, we were using the ...
2
votes
1answer
97 views

Missing subject field values in user certificate (Windows)

I am trying to enroll (on behalf of) a user certificate but certain fields appear to be missing in the subject field. Specifically, O and OU. Using ADSI, I see that the fields have the values I want ...
3
votes
2answers
78 views

certificate creation on Windows Server 2008

On Windows Server 2008 using RD Gateway Manager it is possible to create a SSL self-signed certificate. Which other ways exist to create certificates on Windows Server 2008?
1
vote
1answer
153 views

What are the steps needed to set up and use security for AWS command line tools?

I've been trying to set up the AWS command-line tools following Eric's most useful guide at http://alestic.com/2012/09/aws-command-line-tools. I can't seem to find a good how-to for how to generate ...
1
vote
1answer
55 views

What format should the .CER file have in the AIA record of a certificate?

I'm updating the .cer file referenced in my end entity's AIA record. What format should I save the file in? By default Windows allows me to save as DER encoded binary X.509 (.cer) Base-64 encoded ...
0
votes
1answer
575 views

Is it possible to do client certificate authentication without running HTTPS on a webserver?

(Please note: this question is one of many "why don't you just try it?" questions. I certainly will, but since I haven't found an obvious answer by googling, I thought I might as well make it easier ...
2
votes
1answer
582 views

Apache certificates for some urls not working

We are having a rather strange problem with a Apache-installation. Here is a short summary: Currently I'm setting up Apache with https, and server-certificates. This is fairly easy and works straight ...
0
votes
1answer
119 views

How to check whether our RSA certificates are 1024 bits and above?

Recently Microsoft pushed that certificate keys should be 1024 bits or above. Microsoft minimum key length How can I verify whether a key is 1024 bits or not?
1
vote
0answers
101 views

Using Same X.509 serviceCertificate on Multiple WCF Services?

I have an application which exposes multiple WCF services (each a distinct facade for different client applications). Right now I'm managing a distinct certificate (created from our internal ...
1
vote
1answer
151 views

How to dump certificate file from installer via command-line?

I'm building a script that will download and install a bunch of programs. One of those programs depends on a virtual driver, which needs its certificate to be imported in order to function. Normally, ...
0
votes
1answer
270 views

TMG - Reverse proxy certificate mismatch

I have the web site rule set up but I am getting a certificate mismatch error. I have setup the rule using this walkthrough: [1] ...