Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

1
vote
2answers
43 views

Certificates for clusters

I have read the various threads regarding clusters (behind the load balancer) and certificates. I am trying to implement this in our company. Firstly Our compnay policy is not to allow exporting of ...
0
votes
3answers
3k views

Virsh can't connect to ovirt hypervisor

I installed Ovirt and want to add network interface for NAT. So I need to connect to hypervisor by virsh and add nic. Ovirt installed on my local server, host (ovirt-engine.kvmserver.net) is on the ...
0
votes
2answers
460 views

Can IPv6 IPSec replace https/ssl for secure website network encryption?

Take away the 'authentication' part and just talk about the encryption part please! (Authentication is a different problem.) Example: a connection to http://ipv6.google.com can be encrypted via HTTPS ...
0
votes
2answers
492 views

Generate pfx certificate from pem rsa

I have a PEM RSA private key generated with opendkim: # dkim-genkey -t -s code001 -d domain.com and for use it with exchange, i need to convert it to pfx with this command: # openssl pkcs12 ...
0
votes
1answer
257 views

ADFS 2.0: send issuer of user certificate as claim

Using ADFS 2.0, I would like to send to a relying party information about the issuer of the user certificate, if a user authenticated using an x509 certificate. Is this possible? How should I ...
0
votes
1answer
76 views

SSL certificate error in IE and chrome in apache

You attempted to reach www.domainname.domain.ac.in, but instead you actually reached a server identifying itself as *.domain.ac.in. but the site works fine with https://domainname.domain.ac.in in all ...
0
votes
0answers
163 views

Why does IIS7 on one server work with my certificate while another has problems?

In the setup I describe, we have two servers, Alpha and Bravo. Alpha is a server that has been around for years. It is a Windows 2008 server running IIS7. In order to log in to any application on ...
1
vote
1answer
95 views

Mail From Outlook/Exchange Sent to Destination Spam

I have a unique problem and I am hoping someone may have some direction to provide me. We have a Windows environment with an Exchange 2007 Server. For some reason when a user sends an email from ...
0
votes
1answer
264 views

Generate a p7b file from bin and der file

I'm using Debian and I'm trying to join on a file with a certificate. Try to file.bin + cert.der => file.p7b I tried with openssl command : openssl pkcs7 -in cert.der -in file.bin -out file.p7b ...
0
votes
2answers
568 views

Redhat - command/s run post-install to generate default localhost.crt?

I cloned a VM and the ssl certificate has the old hostname. I need to generate a new ssl certificate. My question is what method was used by the server to create the initial certificate? Was this ...
0
votes
1answer
269 views

Is it possible to allow only some client certificates in Apache to login?

In my virtual host I have something like that: SSLEngine on SSLCertificateKeyFile /etc/apache2/ssl/svn.XXXXX.me.key SSLCertificateFile /etc/apache2/ssl/svn.XXXXX.me.crt SSLProtocol ...
0
votes
2answers
82 views

Using an SSL certificate in multiple locations

I have some issues with respect to using SSL Certificates. I have a website hosted in UK and I also have an organisation in South Africa hosting my company application online for web access. The ...
0
votes
0answers
182 views

Allow IIS 7.5 access to certificates private key at Windows 2008 R2 x64

all I'm trying to allow my IIS application get access to private key in personal storage of local computer. For this I open MMC, go to certificate, make right click on it and select 'All tasks' -> ...
0
votes
1answer
688 views

Expired Certificates and Active Directory Authentication [closed]

Around the end of February, the password was about to expire on my Active Directory account. So, I changed the password. Since then, I can get locked out 3 to 10 times a day without me doing much of ...
0
votes
0answers
40 views

RDP Certificate

I have 4 servers, RD Gateway,RD Connection Broker and 2 RD Host to which I will have external client connecting. I would like to have my clients to be connecting without having any warnings about ...
0
votes
2answers
1k views

Man-In-The-Middle with a VPN?

I'm doing some researches for university and, before wasting a lot of time into it, I'd like to know if what I've got in my mind can be done. I'm talking about a simple MITM attack but, in my ...
0
votes
1answer
69 views

Can I create a CA which is part of a WW trusted CA?

When I create a CA role there is an option for "Root CA" and "Subordinate CA", choosing the second one adds an option to generate a cert request. Does it mean I can buy a service e.g. from Comodo ...
1
vote
1answer
155 views

MySql SSL configuration - Client section

I'm trying to secure my work with a SSL connection between some applications and my dabtabases. In a first time, i search how to create certificates, and i do something like this : Creation of the ...
0
votes
1answer
257 views

Can't get self-signed CA cert to request corresponding client cert; Apache

I'm running Apache 2.2 on Windows, and have mod_ssl working fine for delivering a commercially signed server cert. (A wildcard cert, though I don't think it matters.) I'm trying to get the server, ...
0
votes
1answer
46 views

Permanent SSL Keystore Certificate Password

I am having a problem with my generated pkcs12 file using keytool. I ran this command to generate a pkcs12 client-certificate: keytool -importkeystore -srckeystore client.jks -srcstorepass password ...
4
votes
1answer
12k views

Import of PEM certificate chain and key to Java Keystore

There are plenty of resources out there about this topic, but none I found which covers this slightly special case. I have 4 files; privatekey.pem certificate.pem intermediate_rapidssl.pem ...
0
votes
1answer
41 views

mysql setting up encryption (ssl) without client certificats

I would like to setup SSL encryption for my MySQL servers to let users encrypt their connections without being themselves fully authenticated (like an anonymous access, but still encrypted). I would ...
0
votes
0answers
134 views

Custom certificate/key pair does not work on OpenVPN clients

I have setup very basic OpenVPN network on Windows Server 2008. My clients are IP Cameras having Unix OS and built-in feature of openVPN connectivity. Initially I used a common client certificate/key ...
1
vote
1answer
3k views

SSL connection issue with s_client

I'm trying to configure SSL on two machines (on LAN) from a local CA I created and am hitting an issue when testing with s_client, I can't seem to locate helpful info w/ my google-fu skills. I'm ...
0
votes
1answer
5k views

Importing certificates on Windows 2008 - “The integrity of this certificate cannot be guaranteed…”

I need to set up secured communications between two windows machines. I have generated a set of certificates for this purpose and saved them as .x509 files. If I set about installing those on ...
4
votes
1answer
1k views

How to manually create Puppet CA and certificates?

I am wondering how to manually (using openssl instead of puppet ca command) create CA that would be usable by Puppet? The goal would be to script creation of such CA's to deploy them on multiple ...
0
votes
3answers
588 views

Install X509 certificate into Windows 2008 R2

I'm trying to install a certificate into my windows 2008 but I'm not able to do it right. I have a .crt file and I click to install from contextual menu. It succeed to import but if I browse the ...
30
votes
1answer
9k views

How can I work around problems with certificate configuration in Remote Desktop Services?

I am setting up a Remote Desktop Services farm, and am having trouble configuring certificates for it to use. A demonstration of the problem I'm seeing can be found in Step #4. At this point I am ...
0
votes
1answer
2k views

Subject Alternative Name not added to certificate

I'm trying to issue a new certificate using the additional attribues field within the Windows CertSrv Web-Enrollment Client. I added the CSR, picked the template and entered this into the attributes ...
0
votes
1answer
176 views

Remotely configure OpenVPN custom client certificates and static Virtual IP

On our current basic OpenVPN (on Windows) setup, we are using common client certificates for all clients. In order to introduce some kind of security, what are the possible measures I can make ? ...
0
votes
0answers
76 views

MMC Cert Manager Plug-in is making LDAP connection to external site, why?

I'm trying to figure out what is causing 5 of my servers to attempt to connect to an external LDAP server. I inherited these servers when another employee left the company. As far as I know these ...
0
votes
1answer
3k views

OpenVPN certificate removal and connecting with no certificate file on server

I've run into a problem, that I removed certificate files from the server. But client that has these files still can connect. I've found out, that I should revoke the certificate and that this can ...
3
votes
1answer
41 views

Certificate issue causing code to fail

We have some code that connects to a website to call a web service. When I run the code on our server under my account (local admin) the code runs fine. When I run the code under a different user the ...
3
votes
1answer
258 views

HTTPS and trailing dot in domain

Is it possible to solve the scenario where a web server is served behind HTTPS, and must be accessible both with www.domain.com and www.domain.com.? And notice the trailing dot. An example for all: ...
1
vote
0answers
664 views

Why my certificates doesn't match?

I've stablished a VPN using OpenVPN and it is all working.. almost.. My machines can see each other but on Handshake it all fails. The error at first referred to a blocked port but ports are good. ...
1
vote
1answer
2k views

VPN Certificate Validation Failed (OpenVPN)? CentOS & Ubuntu

Ok, I'll explain what I did... and at the end is the queston. THank you! To set up my VPN I installed OpenVPN in server and client machines. On server I configured the cert Authority in the file ...
1
vote
2answers
391 views

New Key for expired certificate?

I need to create a new certificate for an internal server. It is self signed. Is there an easy way to just extend the expiration date of the current certificate? If not, can I reuse the current ...
0
votes
1answer
114 views

certificate SSH login does not work on 22 but other port

On my Red Hat server, the sshd will not accept my correct certificate login. However, If i start another sshd on another port, it works! (I assume the second sshd loads the same configruation files.) ...
2
votes
1answer
3k views

Keytool import certificate fails “Public keys in reply and keystore don't match”

I'm importing a SSL certificate to use in Tomcat in my keystore using keytool and it fails with "Public keys in reply and keystore don't match" Problem might be declared by the fact that I created a ...
3
votes
1answer
95 views

Good way to store domain CSR and KEY files

For my company I'm starting to manage more and more domains; and with that more and more certificates for those domains. What is a good way to store the basic KEY and CSR files generated? I was ...
10
votes
1answer
193 views

How do SAN Certs degrade performance?

I have heard that when lots of names get added to a single SAN Cert (Subject Alternative Name) performance starts to degrade. Can someone explain how SAN certs are processed so I understand what ...
5
votes
3answers
11k views

openssl client authentication error: tlsv1 alert unknown ca: … SSL alert number 48

I've generated a certificate using openssl and place it on the client's machine, but when I try to connect to my server using that certificate, I error mentioned in the subject line back from my ...
0
votes
1answer
3k views

TLS: hostname does not match CN in peer certificate

im trying to connect LDAP over StartTLS but Im stuck with an issue. I've followed step by step this guide https://help.ubuntu.com/12.04/serverguide/openldap-server.html#openldap-tls and LDAP it's ...
0
votes
1answer
389 views

SSL certificate for Oracle Application Server 11g

I was asked to get an SSL certificate for an "Oracle Application Server 11g" which has a soon-to-expire certificate. Brushing aside the fact that 10g seems to be the newest version, I got a ...
1
vote
1answer
191 views

Client side certificates in client browsers with unix server for management

We are currently running Unix dedicated servers for everything (Web cluster, database, FTP, batch, ...) except for a Microsoft Active Directory Certificate Services. The sole purpose of this Windows ...
0
votes
1answer
345 views

SSL Certificate for local web server

Is it at all possible to create a self-signed certificate for use on multiple machines on a local network which would stop the browser complaining it is not a trusted site? We have a product which is ...
1
vote
1answer
209 views

SSL certificate for subdomain without domain

I have a webserver in my intranet which can be accessed via subdomain.domain.com and simply subdomain. The SSL certificate is created for subdomain.domain.com which results in a warning as soon as I ...
0
votes
2answers
141 views

What kind of SSL Cert do I need and where do I get it?

I want to have subdomains with SSL within my domain. The main difference is that each subdomain is hosted by a different person with a different public key/private key pair. Let me illustrate with an ...
1
vote
2answers
69 views

Certificate Security in intranet Environment?

We have this topology in our company : A new rule says that each document being sent by outlook should be encrypted. we decided using PGP. We already have a certificate ( self signed). the ...
1
vote
1answer
330 views

Certificates compartments (certmgr.msc)?

After reading a while , Im trying to understand what kind of certificates will be found at : Personal Other People Trusted Root Certicfiation Authorities will personal will contains only private ...