Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

1
vote
1answer
1k views

How to convert certificate from CA to .pfx file?

I have been struggling since last night to create a .pfx file using OpenSSL. I have been following this document and have been following the instructions under the Get a certificate using OpenSSL ...
-2
votes
2answers
134 views

Why does domain hosted with no-ip.org get rejected by browser's phishing filter/malware detection [closed]

I'm trying to host a tiny website on my home server (Windows 2012) and I am using a domain hosted with no-ip.org. That domain is forwarded to my server here at home, which is only hooked up to a ...
2
votes
1answer
636 views

Is it possible to authenticate Outlook users with certificates on RPC over HTTPS?

I would like to understand the possibility to limit access from Internet to Exchange (RPC over HTTPS in Outlook) by requiring the machine or user to present a client certificate (before the login ...
1
vote
0answers
77 views

How to include all dns records and IP address of a server in automatic certificate enrollment of Microsoft AD CS?

In my company there are a lot of servers which users remotely login to them to do their duties. We have enabled computer certificate auto enrollment for them to assure secure connection. But because ...
3
votes
1answer
547 views

Server 2012 R2: Remote Desktop Services, certificates, and internal .local domain

Without a unique, publicly-resolvable Active Directory domain (i.e. using foo.local vs. corp.foo.com), is it possible to achieve RDP certificate/SSO Nirvana? i.e. end-to-end, zero nag, RDP sessions ...
1
vote
1answer
2k views

version 0.9.7a of openssl reports “certificate signature failed”, but version 0.9.8e is happy

I am trying to construct an openssl certificate chain that will work with a standard CentOS 4 install as client. (I know it's very old, but it's what our client is using so we need to support it). ...
4
votes
0answers
812 views

500 OOPS: SSL: cannot load RSA private key vsftpd

Im configuring vsfptd on debian 7.3, Im trying to use ssl. I generate de certficates using this command: openssl req -x509 -nodes -days 1925 -newkey rsa:2048 -keyout /etc/vsftpd/private/vsftpd2.key ...
1
vote
2answers
291 views

How to add certificate to Windows Credential Manager?

How do you add a certificate from the personal store as a certificate based credential in Windows Credential Manager? When I click on Open the Certificate Manager it just takes me to the Certificate ...
3
votes
2answers
2k views

Is it ok to use self-signed certificates for smtp transport?

By "by ok to use" I mean: are MTA agents receiving emails from my server going to reject my email if not, are they going to make other kind of bad treatment for my emails (marking as spam, unsafe ...
1
vote
0answers
5k views

openssl s_client -connect: 20 error with server signed certificate for client

What I want I want to connect to a server using a given signed certificate (by the company running the server) What I have Ubuntu 12.04 LTS My key and CSR files A signed certificate. It was signed ...
1
vote
1answer
563 views

Installing StartSSL certificate in ProFTPD

I am currently experiencing some trouble installing a StartSSL certificate in ProFTPD. These are the files I have: cert.pem - certificate file cert.key - ...
1
vote
1answer
3k views

Java Deployment Ruleset.xml Not Working

An recent upgrade of our time card system forced us to upgrade all our workstations to Java 7u51 (we were on 6u45). We have another Java-based application which is critical to our business that is now ...
1
vote
1answer
1k views

Certificate 'not verified' when doing 802.x1 authentication on Apple ios

I've setup a new wifi network including a Freeradius server. Everything works fine except that Apple iOS gives a 'certificate not verified' warning when connecting. When the user accept the ...
1
vote
2answers
35 views

I made a mistake in renewing my cert, can you help me figure out what I did wrong? MS IIS 7 ISA

Sorry if this is a duplicate question, but I didn't see anything like my problem. This is also my first time renewing a cert. So, a bit of backstory. We have a sharepoint site, with a ISA firewall ...
5
votes
1answer
251 views

Direct Access Certificates

I want to know if I can use a single certificate for all the direct access functionality. I am working at actually setting up DirectAccess on a relatively small network. Since this is a small ...
6
votes
1answer
223 views

What does this intention with lots of numbers mean in a SSL certificate?

I was looking at this site, and out of interest, I was having a look at the certificate in Chrome 32, on Windows 8.1, and I had a look at the certificate. I saw this really strange intention, Apart ...
1
vote
1answer
182 views

Apache with self signed certificate, www subdomain hanging when requesting from browser

I created a staging site with a self signed certificate using: mkdir /etc/ssl/wildcard.yourdomain.com cd /etc/ssl/wildcard.yourdomain.com/ openssl genrsa 2048 > host.key openssl req -new -x509 ...
1
vote
0answers
28 views

Need help configuring Exchange 2010 server certificate

I've set an a multi-role Exchange server (SVR1) for my office, and now I am setting up a second multi-role server (SVR2) in a different site. Outlook Anywhere is not activated, and I don't have an ...
0
votes
1answer
2k views

LDAP-based Apache auth (mod_ldap + mod_authnz_ldap) using own CA for SSL/TLS

SOLVED: Turned out problem was caused by forgotten legacy LDAPTrustedGlobalCert directives in various config files, using old certificate for the same FQDN tl;dr: We uses a self-signed CA and we ...
0
votes
1answer
402 views

CACert.org certificate giving sec_error_unknown_issuer

I have used cacert.org to issue class 1 certificates for my website. I made sure that the subdomain name is correct and that the e-mail address is there, but yet I keep getting the certificate problem ...
2
votes
2answers
368 views

How does Windows Event forwarding work with non domain computers? (certificates)

In reasearching this question I've looked at the following documents and none of them describe the options or flexibility of the event collector service. Microsoft's Event Collector Service on ...
1
vote
1answer
308 views

How do I generate a certificate for multiple mail addresses?

At my company, we have short mail addresses for convenience, but they collide now that the company gets bigger. For new employees, we only make new longer mail addresses to avoid this. However, to ...
1
vote
0answers
517 views

ADCS WebEnrollment : The context was acquired as silent

I have setup Active Directory Certificate Services with Web Enrollment and I have the following error when enrolling certificate on other computers that are in the same domain : Certificate ...
0
votes
1answer
346 views

Is it safe to delete Exchange/IIs server certificate that is not tied to any service?

Exchange [EMC] View of certs Name: Blank Self Signed: False Status: The cert is valid for exchange server usage Services: None Subject: CN=Servername.domain.local Issuer: CN=Domain-servername-CA ...
2
votes
1answer
187 views

What is the difference between IIS and non-IIS Client Certificate Mapping Authentication

I want to enable certificate based authentication on my Windows 2012 Server. I see two different types of authentication possible: Client Certificate Mapping Authentication IIS Client Certificate ...
0
votes
2answers
605 views

How to disable HTTPS on IIS 7.5

I have a IIS 7.5 on Windows2008, hosting a couple of dozen of sites. Two sites use HTTPS, we call them www.site1.com and www.site2.com Now the problem is that if I (for any reason) browse to ...
1
vote
2answers
1k views

Installing intermediate certificates in ELB

I had a certificate expire today and needed to get one reissued from GoDaddy. In the past, I've had no trouble using the pem encodings they generate with the ELB SSL interface. However, when I try ...
-1
votes
1answer
165 views

How can I create a free certificate for HTTPS with Apache / Ubuntu?

I have been presently muddling with StartSSL and have found it something of a challenge. Most recently I had, I thought, created and downloaded a private key, and a certificate... but they don't ...
2
votes
1answer
78 views

What organizational method or system do you use to manage SSL certificates? [closed]

One of the duties I've been recently assigned is to keep track of the SSL certificates used by the application servers I support. These are managed by external group mainly but internal to our ...
2
votes
1answer
36 views

Certificate generation : root ca needed each time?

I want to create a different (unique), self signed, certificate to distribute to some clients. That way I think that if one is doomed, I just have to delete his certificate without bothering the ...
0
votes
2answers
77 views

Send a server certificate to a customer in pkcs?

I was asked by a customer / partner company to send them the certificate for one our webservers and the corresponding root ca certificate in .pkcs or .pem format to install it in his Riverbed proxy ...
-1
votes
1answer
296 views

how to get rid of “Untrusted Connection” error, with my own certificate

I have developed a web application and used my certificate for SSL. I didn't buy the CA certificates. So the client will get the Untrusted Connection error every time. do you have any idea how we can ...
3
votes
1answer
3k views

Trying to install SSL: Private key does not match certificate

I am trying to reinstall SSL on a domain where the previous certificate expired. I have removed the old certificate and I am attempting to install the new certificate I purchased from NameCheap in Web ...
4
votes
3answers
2k views

Create self-signed terminal services certificate and install it

The server RDP certificate expires every 6 months and is automatically recreated, meaning I need to re-install the new certificate on the client machines to allow users to save password. Is there a ...
3
votes
2answers
759 views

Certificate Mismatch RDS Session Host

I've been banging my head against this for the last few days. I have a server 2012 remote desktop setup as follows: 1 Gateway Server 1 RD Web Access Serve 1 Session Broker, which is also a session ...
5
votes
1answer
7k views

Install a root certificate in CentOS 6

I know it has been already asked, but despite many hours of research I couldn't find a working solution. I am trying to install my root certificate in my server, so internal service can bind to each ...
0
votes
1answer
96 views

Install certification to acknowledge another server

I need to install a .cer to my apache server in order to comunicate to another server. Basically I have my server, x.x.x.100, this server has an script that uses SOAP to communicate to another ...
0
votes
1answer
81 views

openssl generate .key from CSR

A customer sent me a CSR and the .CER of a certificate for a linux server that I host. The customer does not have access to this machine. Is this enough data to generate a valid certificate? Is it ...
0
votes
1answer
201 views

RD Session Host Configuration doesn't list my SSL certificate

I'm trying to change SSL certificate from auto-generated to another one, e.g. custom self-signed made by makecert. But RD Session Host Configuration snap-in -> Connections -> RDP-Tcp -> ...
1
vote
1answer
333 views

Powershell: Fancy new cmdlet to install CRLs too?

So Win8.1 and 2012 R2 includes a neat new cmdlet to install certs: Import-Certificate [-FilePath] <String> [-CertStoreLocation <String> ] [-Confirm] [-WhatIf] [ <CommonParameters>] ...
1
vote
1answer
170 views

LDAPS Only Works on Domain Certificate Authority and Not on Other Domain Controllers - Active Directory Certificate Services - Windows Server 2008 R2

I have 3 Domain Controllers with Active Directory role installed on them. I installed Certificate Services on one of the Domain Controllers. I am able to LDAPS to it, but not the others even though ...
2
votes
1answer
393 views

Find expiration date of a certificate file which I do not have installed

I'm looking for a way to find the expiration of a certificate file (either .pfx or .cer) without installing it. I have access to read the file but can not install it.
1
vote
0answers
31 views

Transfer cacerts file to another das

I was wondering if its possible to transfer the cacerts.jks file to another glassfish DAS machine? The idea is to synchronize both das machines without having to import every certificate manually. ...
2
votes
0answers
972 views

SChannel “cannot find certificate in either LocalMachine or CurrentUser store”

We have an in-house application that requires the use of client SSL certificates to authenticate with a remote server (not under our control). This has worked without problems before but on deploying ...
1
vote
1answer
1k views

Can Windows 7 access an RD farm that uses SHA512/4096-bit certificates?

I have a Server 2012 RD farm that works fine if configured with the self-signed certs generated by Server Manager, but not with certs from our internal CA. With the self-signed certs, our remote ...
0
votes
1answer
446 views

install CA root trust certificate in Cent OS

i install SSL certificate in my web site and now i have some questions about it. my web site is working correctly in google chrome web browser but it's not working in firefox browser. one of my friend ...
4
votes
2answers
3k views

Fingerprint of PEM ssh key

I have a PEM file which I add to a running ssh-agent: $ file query.pem query.pem: PEM RSA private key $ ssh-add ./query.pem Identity added: ./query.pem (./query.pem) $ ssh-add -l | grep query 2048 ...
4
votes
4answers
16k views

Java Deployment Rule Set via AD Enterprise CA

My goal is to get a Java Deployment Rule Set in place in my organization, but I do not want to pay third-party certificate authority for a code signing cert when we have a working CA running through ...
0
votes
3answers
1k views

Certificate address mismatch warning GPO cannot be Disabled

I found the "Turn on certificate address mismatch warning" and I need to set it to Disabled. Seems like the Console is not accepting that option (I Can set it to enabled and it will work) and I'd like ...
3
votes
2answers
204 views

Using our own certificate authority for business email encryption

I've read the available similar questions on serverfault but I haven't quite found a definite answer to the security aspect of it - hence here's my question: I'm administrator of an office working ...