Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

1
vote
0answers
162 views

What's the Correct Way to Implement Certificates on an RDS Farm?

We currently deploying six terminal servers in a farm that will be accessed by thin clients running Windows Embedded. The idea behind the thin clients is to have a seamless single-sign on whereby as ...
0
votes
1answer
76 views

Certificate management on a MS CRM Dynamics Online instance

Having spent a week on research on this topic I have no option but to ask this: How can one add a certificate to a MS Dynamics CRM 2013 Online? I can't just go and add the certificate to the servers ...
1
vote
0answers
111 views

Exchange on WP7 - 80072F0D

Last week, the self-signed certificate on our Exchange 2010 mailserver expired, so we made a new one. Everything works fine after this, except mail on Windows Phone 7. All phones are giving an error ...
1
vote
0answers
197 views

RPC over HTTP - Outlook

I'm trying to configure an Outlook client to use RPC over HTTP so that my client can read his mail without connecting to the VPN. The mailserver is an SBS2011 server and Outlook Anywhere has never ...
3
votes
2answers
5k views

openssl: generate certificate request with non-DNS subject alternative names

To create a certificate request containing subject alternative names (SANs) for a host, with openssl, I can use a config file like this (snipped): [req] req_extensions = v3_req [ v3_req ] ...
0
votes
1answer
2k views

Sending to gmail with TLS and self signed certificate

Since many provider switched to TLS only connections, I cannot deliver to gmail anymore with a default plaintext postfix setup. My question is, can I use valid TLS / does google accept TLS with a ...
0
votes
2answers
141 views

Subject Alternative Name when internal and external hostnames differ

I have two servers in an Active Directory domain. Both servers have apps that run in Tomcat. I'm ordering PKI certificates for these two servers. The servers are members of the AD domain ...
3
votes
1answer
2k views

802.1x certificates, EAP-TLS, RADIUS and Windows machines

When using 802.1x certificate-based authentication on Windows machines, should I use different certificate for each machine? There is RADIUS server running in the network, the machines use EAP-TLS to ...
0
votes
1answer
439 views

Unable to install Certificate Enrolment Policy Web Service

I'm running on Windows 2k8 Enterprise edition, and when adding the Active Directory Certificate Services, I don't see the option to add the Certificate Enrolment Policy Web service in the dialog box. ...
6
votes
1answer
228 views

Does Apache needs to know about intermediate certificates for client authentication?

I have a following hierarchy of certificates. And I need to do a client authentication on Apache. . └── root (CA) - self signed ├── intermediate 1 (CA) | ├── client1 | ├── client2 ...
0
votes
1answer
600 views

Unable to install Network Deployment Enrollment Services (NDES)

I'm trying to install NDES on a Win2k8 R2 server, but I can't see the option. I've already added a user to IIS_IUSRS, and that user as sufficient priveleges since it is a part of the Administrator ...
4
votes
2answers
102 views

Beginning a company's digital certificate infrastructure [closed]

What type of digital certificate product do I need to begin a digital security infrastructure within my company and for use by our customers (pre-trusted by chaining)? I believe I need some kind of ...
0
votes
0answers
94 views

no local computer physical store, only registry and smartcard

I'm currently encountering an issue whereby i cannot see the "local computer" physical store, under trusted root CA, when attempting to install a cert. Instead the only stores i see are "Registry" and ...
2
votes
1answer
2k views

How to detect whether a particular cert has been installed on a Windows box?

A pre-req for a particular application deployment is that we need a particular PKI certificate installed in the Windows Trusted Publishers cert store of the PCs before installing. Is there any way to ...
0
votes
1answer
405 views

Exchange Server 2013 has dependency on old PDC

I am in the process of completely upgrading a Exchange 2007 system running on server 2008 R2 Hyper-V VMs hosted on a Exchange 2008 R2 domain controller. It had all the FSMO roles on it, and it was the ...
4
votes
2answers
6k views

SSLCertificateChainFile Deprecation Warning on Apache 2.4.8+

We have an SSL Certificate for our website from Network Solutions. After upgrading Apache/OpenSSL to version 2.4.9, I now get the following warning when starting HTTPD: AH02559: The ...
3
votes
2answers
252 views

Use DNSSEC for secure connections

From my understanding DNSSEC allows me to create a public key and sign my DNS records. There appears to be multiple ways to have a certificate record (such as DANE see ...
0
votes
2answers
3k views

openssl update 1.0.1f to 1.0.1g broke sendmail (SSL23_GET_SERVER_HELLO:tlsv1 alert decode error)

Two days ago I updated openssl 1.0.1f to 1.0.1g. Everything seamed to be fine. But after a while an error popped up in sendmail log: Apr 10 10:13:45 mail sendmail[17568]: STARTTLS=client, error: ...
2
votes
0answers
190 views

OpenSSL always shows “unsupported” for all subjectAltName “otherName” UTF8 values

It seems like OpenSSL is broken when trying to read back subjectAltName/otherName/UTF8 values that were written by itself: The relevant openssl.cnf configuration (using an official but random OID): ...
0
votes
1answer
65 views

How to re-check SSL certificate even with exeption in browsers

My SSL certificate has expired. I created a new one for my domain but after a few days. Certificate is now online and working but there is a problem at users side. When the certificate expired, users ...
1
vote
1answer
214 views

Load Balancer and using multiple SSL certificates

Here is our current production configuration at a 3rd party data center: •2 LINUX/CentOS tomcat web servers behind a shared load balancer •DNS entries point to the load balancer •Web apps are ...
0
votes
1answer
42 views

Is it possible to run pptpd with certificates and is it recommend?

To secure my internet experience, I want to set up a vpn on a on-demand way using amazon AWS EC2. My primary client is running with windows 7 professional. (Maybe further clients will be my android ...
1
vote
1answer
589 views

Puppet 3.3.1 Certificate verify failed

I`ve trouble to setup a master/node scenario with puppet 3.3.1 (puppet opensource) on both master and slaves. The slaves are on a windows and SLES machine. The Master is also on a SLES machine. The ...
1
vote
2answers
2k views

Remote Desktop Connection Issue

I have 2 HP Proliant servers with Windows Server 2008 R2 installed on them. They are headless servers, and I do not have a way of visually seeing the user interface of the servers. I do however know ...
1
vote
1answer
1k views

How to convert certificate from CA to .pfx file?

I have been struggling since last night to create a .pfx file using OpenSSL. I have been following this document and have been following the instructions under the Get a certificate using OpenSSL ...
-2
votes
2answers
158 views

Why does domain hosted with no-ip.org get rejected by browser's phishing filter/malware detection [closed]

I'm trying to host a tiny website on my home server (Windows 2012) and I am using a domain hosted with no-ip.org. That domain is forwarded to my server here at home, which is only hooked up to a ...
2
votes
1answer
928 views

Is it possible to authenticate Outlook users with certificates on RPC over HTTPS?

I would like to understand the possibility to limit access from Internet to Exchange (RPC over HTTPS in Outlook) by requiring the machine or user to present a client certificate (before the login ...
2
votes
0answers
88 views

How to include all dns records and IP address of a server in automatic certificate enrollment of Microsoft AD CS?

In my company there are a lot of servers which users remotely login to them to do their duties. We have enabled computer certificate auto enrollment for them to assure secure connection. But because ...
3
votes
1answer
648 views

Server 2012 R2: Remote Desktop Services, certificates, and internal .local domain

Without a unique, publicly-resolvable Active Directory domain (i.e. using foo.local vs. corp.foo.com), is it possible to achieve RDP certificate/SSO Nirvana? i.e. end-to-end, zero nag, RDP sessions ...
1
vote
1answer
2k views

version 0.9.7a of openssl reports “certificate signature failed”, but version 0.9.8e is happy

I am trying to construct an openssl certificate chain that will work with a standard CentOS 4 install as client. (I know it's very old, but it's what our client is using so we need to support it). ...
4
votes
1answer
1k views

500 OOPS: SSL: cannot load RSA private key vsftpd

I'm configuring vsfptd on debian 7.3, I'm trying to use ssl. I generate the certficates using this command: openssl req -x509 -nodes -days 1925 -newkey rsa:2048 -keyout ...
1
vote
2answers
362 views

How to add certificate to Windows Credential Manager?

How do you add a certificate from the personal store as a certificate based credential in Windows Credential Manager? When I click on Open the Certificate Manager it just takes me to the Certificate ...
3
votes
2answers
3k views

Is it ok to use self-signed certificates for smtp transport?

By "by ok to use" I mean: are MTA agents receiving emails from my server going to reject my email if not, are they going to make other kind of bad treatment for my emails (marking as spam, unsafe ...
1
vote
0answers
5k views

openssl s_client -connect: 20 error with server signed certificate for client

What I want I want to connect to a server using a given signed certificate (by the company running the server) What I have Ubuntu 12.04 LTS My key and CSR files A signed certificate. It was signed ...
1
vote
1answer
680 views

Installing StartSSL certificate in ProFTPD

I am currently experiencing some trouble installing a StartSSL certificate in ProFTPD. These are the files I have: cert.pem - certificate file cert.key - ...
1
vote
1answer
4k views

Java Deployment Ruleset.xml Not Working

An recent upgrade of our time card system forced us to upgrade all our workstations to Java 7u51 (we were on 6u45). We have another Java-based application which is critical to our business that is now ...
1
vote
1answer
2k views

Certificate 'not verified' when doing 802.x1 authentication on Apple ios

I've setup a new wifi network including a Freeradius server. Everything works fine except that Apple iOS gives a 'certificate not verified' warning when connecting. When the user accept the ...
1
vote
2answers
36 views

I made a mistake in renewing my cert, can you help me figure out what I did wrong? MS IIS 7 ISA

Sorry if this is a duplicate question, but I didn't see anything like my problem. This is also my first time renewing a cert. So, a bit of backstory. We have a sharepoint site, with a ISA firewall ...
5
votes
1answer
306 views

Direct Access Certificates

I want to know if I can use a single certificate for all the direct access functionality. I am working at actually setting up DirectAccess on a relatively small network. Since this is a small ...
6
votes
1answer
238 views

What does this intention with lots of numbers mean in a SSL certificate?

I was looking at this site, and out of interest, I was having a look at the certificate in Chrome 32, on Windows 8.1, and I had a look at the certificate. I saw this really strange intention, Apart ...
1
vote
1answer
208 views

Apache with self signed certificate, www subdomain hanging when requesting from browser

I created a staging site with a self signed certificate using: mkdir /etc/ssl/wildcard.yourdomain.com cd /etc/ssl/wildcard.yourdomain.com/ openssl genrsa 2048 > host.key openssl req -new -x509 ...
1
vote
0answers
28 views

Need help configuring Exchange 2010 server certificate

I've set an a multi-role Exchange server (SVR1) for my office, and now I am setting up a second multi-role server (SVR2) in a different site. Outlook Anywhere is not activated, and I don't have an ...
0
votes
1answer
3k views

LDAP-based Apache auth (mod_ldap + mod_authnz_ldap) using own CA for SSL/TLS

SOLVED: Turned out problem was caused by forgotten legacy LDAPTrustedGlobalCert directives in various config files, using old certificate for the same FQDN tl;dr: We uses a self-signed CA and we ...
0
votes
1answer
441 views

CACert.org certificate giving sec_error_unknown_issuer

I have used cacert.org to issue class 1 certificates for my website. I made sure that the subdomain name is correct and that the e-mail address is there, but yet I keep getting the certificate problem ...
2
votes
2answers
467 views

How does Windows Event forwarding work with non domain computers? (certificates)

In reasearching this question I've looked at the following documents and none of them describe the options or flexibility of the event collector service. Microsoft's Event Collector Service on ...
1
vote
1answer
397 views

How do I generate a certificate for multiple mail addresses?

At my company, we have short mail addresses for convenience, but they collide now that the company gets bigger. For new employees, we only make new longer mail addresses to avoid this. However, to ...
1
vote
0answers
599 views

ADCS WebEnrollment : The context was acquired as silent

I have setup Active Directory Certificate Services with Web Enrollment and I have the following error when enrolling certificate on other computers that are in the same domain : Certificate ...
0
votes
1answer
411 views

Is it safe to delete Exchange/IIs server certificate that is not tied to any service?

Exchange [EMC] View of certs Name: Blank Self Signed: False Status: The cert is valid for exchange server usage Services: None Subject: CN=Servername.domain.local Issuer: CN=Domain-servername-CA ...
2
votes
1answer
213 views

What is the difference between IIS and non-IIS Client Certificate Mapping Authentication

I want to enable certificate based authentication on my Windows 2012 Server. I see two different types of authentication possible: Client Certificate Mapping Authentication IIS Client Certificate ...
0
votes
2answers
753 views

How to disable HTTPS on IIS 7.5

I have a IIS 7.5 on Windows2008, hosting a couple of dozen of sites. Two sites use HTTPS, we call them www.site1.com and www.site2.com Now the problem is that if I (for any reason) browse to ...