Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

6
votes
1answer
213 views

What does this intention with lots of numbers mean in a SSL certificate?

I was looking at this site, and out of interest, I was having a look at the certificate in Chrome 32, on Windows 8.1, and I had a look at the certificate. I saw this really strange intention, Apart ...
1
vote
1answer
173 views

Apache with self signed certificate, www subdomain hanging when requesting from browser

I created a staging site with a self signed certificate using: mkdir /etc/ssl/wildcard.yourdomain.com cd /etc/ssl/wildcard.yourdomain.com/ openssl genrsa 2048 > host.key openssl req -new -x509 ...
1
vote
0answers
28 views

Need help configuring Exchange 2010 server certificate

I've set an a multi-role Exchange server (SVR1) for my office, and now I am setting up a second multi-role server (SVR2) in a different site. Outlook Anywhere is not activated, and I don't have an ...
0
votes
1answer
2k views

LDAP-based Apache auth (mod_ldap + mod_authnz_ldap) using own CA for SSL/TLS

SOLVED: Turned out problem was caused by forgotten legacy LDAPTrustedGlobalCert directives in various config files, using old certificate for the same FQDN tl;dr: We uses a self-signed CA and we ...
0
votes
1answer
372 views

CACert.org certificate giving sec_error_unknown_issuer

I have used cacert.org to issue class 1 certificates for my website. I made sure that the subdomain name is correct and that the e-mail address is there, but yet I keep getting the certificate problem ...
2
votes
2answers
321 views

How does Windows Event forwarding work with non domain computers? (certificates)

In reasearching this question I've looked at the following documents and none of them describe the options or flexibility of the event collector service. Microsoft's Event Collector Service on ...
1
vote
1answer
270 views

How do I generate a certificate for multiple mail addresses?

At my company, we have short mail addresses for convenience, but they collide now that the company gets bigger. For new employees, we only make new longer mail addresses to avoid this. However, to ...
1
vote
0answers
473 views

ADCS WebEnrollment : The context was acquired as silent

I have setup Active Directory Certificate Services with Web Enrollment and I have the following error when enrolling certificate on other computers that are in the same domain : Certificate ...
0
votes
1answer
292 views

Is it safe to delete Exchange/IIs server certificate that is not tied to any service?

Exchange [EMC] View of certs Name: Blank Self Signed: False Status: The cert is valid for exchange server usage Services: None Subject: CN=Servername.domain.local Issuer: CN=Domain-servername-CA ...
2
votes
1answer
181 views

What is the difference between IIS and non-IIS Client Certificate Mapping Authentication

I want to enable certificate based authentication on my Windows 2012 Server. I see two different types of authentication possible: Client Certificate Mapping Authentication IIS Client Certificate ...
0
votes
2answers
544 views

How to disable HTTPS on IIS 7.5

I have a IIS 7.5 on Windows2008, hosting a couple of dozen of sites. Two sites use HTTPS, we call them www.site1.com and www.site2.com Now the problem is that if I (for any reason) browse to ...
1
vote
2answers
1k views

Installing intermediate certificates in ELB

I had a certificate expire today and needed to get one reissued from GoDaddy. In the past, I've had no trouble using the pem encodings they generate with the ELB SSL interface. However, when I try ...
-1
votes
1answer
160 views

How can I create a free certificate for HTTPS with Apache / Ubuntu?

I have been presently muddling with StartSSL and have found it something of a challenge. Most recently I had, I thought, created and downloaded a private key, and a certificate... but they don't ...
2
votes
1answer
75 views

What organizational method or system do you use to manage SSL certificates? [closed]

One of the duties I've been recently assigned is to keep track of the SSL certificates used by the application servers I support. These are managed by external group mainly but internal to our ...
2
votes
1answer
35 views

Certificate generation : root ca needed each time?

I want to create a different (unique), self signed, certificate to distribute to some clients. That way I think that if one is doomed, I just have to delete his certificate without bothering the ...
0
votes
2answers
69 views

Send a server certificate to a customer in pkcs?

I was asked by a customer / partner company to send them the certificate for one our webservers and the corresponding root ca certificate in .pkcs or .pem format to install it in his Riverbed proxy ...
-1
votes
1answer
279 views

how to get rid of “Untrusted Connection” error, with my own certificate

I have developed a web application and used my certificate for SSL. I didn't buy the CA certificates. So the client will get the Untrusted Connection error every time. do you have any idea how we can ...
3
votes
1answer
3k views

Trying to install SSL: Private key does not match certificate

I am trying to reinstall SSL on a domain where the previous certificate expired. I have removed the old certificate and I am attempting to install the new certificate I purchased from NameCheap in Web ...
4
votes
3answers
2k views

Create self-signed terminal services certificate and install it

The server RDP certificate expires every 6 months and is automatically recreated, meaning I need to re-install the new certificate on the client machines to allow users to save password. Is there a ...
3
votes
2answers
682 views

Certificate Mismatch RDS Session Host

I've been banging my head against this for the last few days. I have a server 2012 remote desktop setup as follows: 1 Gateway Server 1 RD Web Access Serve 1 Session Broker, which is also a session ...
5
votes
1answer
6k views

Install a root certificate in CentOS 6

I know it has been already asked, but despite many hours of research I couldn't find a working solution. I am trying to install my root certificate in my server, so internal service can bind to each ...
0
votes
1answer
87 views

Install certification to acknowledge another server

I need to install a .cer to my apache server in order to comunicate to another server. Basically I have my server, x.x.x.100, this server has an script that uses SOAP to communicate to another ...
0
votes
1answer
73 views

openssl generate .key from CSR

A customer sent me a CSR and the .CER of a certificate for a linux server that I host. The customer does not have access to this machine. Is this enough data to generate a valid certificate? Is it ...
0
votes
1answer
182 views

RD Session Host Configuration doesn't list my SSL certificate

I'm trying to change SSL certificate from auto-generated to another one, e.g. custom self-signed made by makecert. But RD Session Host Configuration snap-in -> Connections -> RDP-Tcp -> ...
1
vote
1answer
261 views

Powershell: Fancy new cmdlet to install CRLs too?

So Win8.1 and 2012 R2 includes a neat new cmdlet to install certs: Import-Certificate [-FilePath] <String> [-CertStoreLocation <String> ] [-Confirm] [-WhatIf] [ <CommonParameters>] ...
1
vote
1answer
164 views

LDAPS Only Works on Domain Certificate Authority and Not on Other Domain Controllers - Active Directory Certificate Services - Windows Server 2008 R2

I have 3 Domain Controllers with Active Directory role installed on them. I installed Certificate Services on one of the Domain Controllers. I am able to LDAPS to it, but not the others even though ...
2
votes
1answer
366 views

Find expiration date of a certificate file which I do not have installed

I'm looking for a way to find the expiration of a certificate file (either .pfx or .cer) without installing it. I have access to read the file but can not install it.
1
vote
0answers
31 views

Transfer cacerts file to another das

I was wondering if its possible to transfer the cacerts.jks file to another glassfish DAS machine? The idea is to synchronize both das machines without having to import every certificate manually. ...
2
votes
0answers
873 views

SChannel “cannot find certificate in either LocalMachine or CurrentUser store”

We have an in-house application that requires the use of client SSL certificates to authenticate with a remote server (not under our control). This has worked without problems before but on deploying ...
1
vote
1answer
1k views

Can Windows 7 access an RD farm that uses SHA512/4096-bit certificates?

I have a Server 2012 RD farm that works fine if configured with the self-signed certs generated by Server Manager, but not with certs from our internal CA. With the self-signed certs, our remote ...
0
votes
1answer
419 views

install CA root trust certificate in Cent OS

i install SSL certificate in my web site and now i have some questions about it. my web site is working correctly in google chrome web browser but it's not working in firefox browser. one of my friend ...
2
votes
2answers
3k views

Fingerprint of PEM ssh key

I have a PEM file which I add to a running ssh-agent: $ file query.pem query.pem: PEM RSA private key $ ssh-add ./query.pem Identity added: ./query.pem (./query.pem) $ ssh-add -l | grep query 2048 ...
4
votes
4answers
14k views

Java Deployment Rule Set via AD Enterprise CA

My goal is to get a Java Deployment Rule Set in place in my organization, but I do not want to pay third-party certificate authority for a code signing cert when we have a working CA running through ...
0
votes
3answers
971 views

Certificate address mismatch warning GPO cannot be Disabled

I found the "Turn on certificate address mismatch warning" and I need to set it to Disabled. Seems like the Console is not accepting that option (I Can set it to enabled and it will work) and I'd like ...
3
votes
2answers
186 views

Using our own certificate authority for business email encryption

I've read the available similar questions on serverfault but I haven't quite found a definite answer to the security aspect of it - hence here's my question: I'm administrator of an office working ...
0
votes
1answer
102 views

Renewing a self-signed certificate

Is there a way to reset the expiry of a self signed X.509 certificate but keep both the public and the private key as they were? Technically this should be nothing more than a different date for the ...
2
votes
1answer
28 views

Installing SSL on Apache 2.x - self-signed errror

So I bought an SSL cert from GoDaddy and followed their instructions on how to get it signed, and downloaded and installed it. It's not working. It says the SSL certificate was self-signed and the ...
0
votes
2answers
915 views

Checking the issued and expiry dates for the certificates involved a certificate chain

Is it possible to check the issued and expiry dates for the certificates involved in a certificate chain by just passing a domain? I tired various openssl s_client attributes, but I am not able to ...
1
vote
1answer
518 views

iis Client Certificate Mapping Authentication

I have been googling this for hours. I cannot get my mapping to work on certain certificate fields. Fx this sample code: <iisClientCertificateMappingAuthentication enabled="true" ...
3
votes
1answer
48 views

Why can't I see all of the client certificates available when I visit my web site locally on Windows 7 IIS 7?

My team has recently moved to Windows 7 for our developer machines. We are attempting to configure IIS for application testing. Our application requires SSL and client certificates in order to ...
1
vote
1answer
786 views

How to Submit Certificate Request from Red Hat to Windows CA?

My Following Setup: Windows Server 2008 AD with CA Redhat Workstation Joined to AD I have used Openssl to generate a certificate request to be sent to the CA openssl req -nodes -newkey rsa:2048 ...
0
votes
1answer
782 views

Puppet agent not requesting cert

Trying to setup Puppet agent/master on a single machine (planning to install more agents once this is working). I'm mired down in the cert signing process right now, which feels like it should be ...
1
vote
1answer
77 views

Website authentication with a certificate from a different domain

My question: Is there a better way to enable authentication between 2 domains than what I'm doing below, and is Name Mapping the right thing to use? There are 2 domains; One is the primary ...
0
votes
1answer
199 views

HAProxy SSL connection error

Brand new to setting up SSL with HAProxy and Litespeed load balancer, just generated my certificate using the .csr and am trying to have HAProxy terminate SSL before sending it to the web worker ...
1
vote
1answer
117 views

Forgot passphrase for new SSL certificate

I've been requested by RapidSSL to reissue my SSL certificate to 2048 bits. I generated a key, CSR and got the certificate back from RapidSSL. Now, somehow, I've forgotten what Passphrase I used when ...
2
votes
3answers
99 views

Use personal SSL Certificate created on my own?

I'm new to SSL Certificates. I've seen some tutorials about creating personal certificates but I didn't go far reading. It seems that I can create a personal SSL Certificate and use it on my website, ...
1
vote
0answers
292 views

apache authentication with SSL certificate and SSLUserName

i just try to put an SSL authentification for a SVN server over https. I would like that the client certificate allow authorized person to check their repositories. <VirtualHost ...
0
votes
1answer
52 views

Can I use switch user “su” with keys / certificate?

I just locked myself out of SSH. Basically, I added three users to /etc/ssh/sshd_config using the AllowUsers directive, which is great because now they can login, but now I can't, and I'm the only ...
1
vote
2answers
993 views

Thunderbird not trusting certificate signed with self-signed authority

I have generated a self-signed certificate authority using mydomain.org as the common name. I imported the public certificate using Thunderbird's certificate manager under the "Authorities" tab. So ...
0
votes
1answer
1k views

Associate SSL certificate for SQL Server which does not use the FQDN

We would like to connect securely to SQL 2008 R2 over the internet for reporting purposes. Speed is not a huge concern for these smaller data sets, and users are going to be using simple reporting ...