Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

0
votes
2answers
133 views

What's the difference between a certstore and a keystore?

I'm specifically using openssl in RHEL. What's the difference between a certstore and a keystore?
1
vote
0answers
190 views

Is it possible to view a user's certificate store while signed in as a different user? Windows Server 2008 R2

I'm currently migrating a Jenkins server and I need to install a certificate on the new machine for some of my builds. The problem is I'm not sure on which store to use and no one remembers the ...
2
votes
1answer
85 views

How to securely connect to multiple different LDAPS servers (Debian)

I'm trying to connect to multiple different LDAPS servers. A lot of the documentation I've seen recommends setting TLS_REQCERT never, but that strikes me as horribly unsecure to not verify the ...
0
votes
2answers
1k views

Installing SSL certificate on JBoss

I have a server that runs JBoss. When I type bad URL to that server it gives me version like this: JBossWeb/2.0.1.GA - what version of JBoss that would be? A SSL certificate will be bought and ...
0
votes
1answer
2k views

Getting CentOS 6 to trust a certificate from AD

I'm trying to get my CentOS server to trust a certificate I've installed from an active directory server (I converted the .cer to .pem earlier.) When I try to connect, the debug information is: ...
1
vote
2answers
45 views

What kind and how many Certificates are needed?

I have 3 ASP.NET-Web.Api Applications communicating together over https: Master on Server1 Slave1 on Server1 Slave2 on Server2 (Slave2 is basicly an other instance of Slave1 installed on another ...
0
votes
1answer
34 views

Certificate problems with Exchange

Ok I have 2 Exchange 2007 servers, and a Edgesync server. I noticed they had old certificates on them, and I installed stand alone Cert. Authority on them and gave them a new certificate (I backed ...
0
votes
4answers
832 views

Can I find out what certificate revocation server an application is contacting?

I'm trying to install an application on a machine running Windows XP Pro. There are two different servers being contacted, both using the same wildcard certificate (GoDaddy). One via https, one ...
1
vote
2answers
43 views

Certificates for clusters

I have read the various threads regarding clusters (behind the load balancer) and certificates. I am trying to implement this in our company. Firstly Our compnay policy is not to allow exporting of ...
0
votes
3answers
3k views

Virsh can't connect to ovirt hypervisor

I installed Ovirt and want to add network interface for NAT. So I need to connect to hypervisor by virsh and add nic. Ovirt installed on my local server, host (ovirt-engine.kvmserver.net) is on the ...
0
votes
2answers
509 views

Can IPv6 IPSec replace https/ssl for secure website network encryption?

Take away the 'authentication' part and just talk about the encryption part please! (Authentication is a different problem.) Example: a connection to http://ipv6.google.com can be encrypted via HTTPS ...
0
votes
2answers
569 views

Generate pfx certificate from pem rsa

I have a PEM RSA private key generated with opendkim: # dkim-genkey -t -s code001 -d domain.com and for use it with exchange, i need to convert it to pfx with this command: # openssl pkcs12 ...
0
votes
1answer
271 views

ADFS 2.0: send issuer of user certificate as claim

Using ADFS 2.0, I would like to send to a relying party information about the issuer of the user certificate, if a user authenticated using an x509 certificate. Is this possible? How should I ...
0
votes
1answer
76 views

SSL certificate error in IE and chrome in apache

You attempted to reach www.domainname.domain.ac.in, but instead you actually reached a server identifying itself as *.domain.ac.in. but the site works fine with https://domainname.domain.ac.in in all ...
0
votes
0answers
185 views

Why does IIS7 on one server work with my certificate while another has problems?

In the setup I describe, we have two servers, Alpha and Bravo. Alpha is a server that has been around for years. It is a Windows 2008 server running IIS7. In order to log in to any application on ...
1
vote
1answer
96 views

Mail From Outlook/Exchange Sent to Destination Spam

I have a unique problem and I am hoping someone may have some direction to provide me. We have a Windows environment with an Exchange 2007 Server. For some reason when a user sends an email from ...
0
votes
1answer
273 views

Generate a p7b file from bin and der file

I'm using Debian and I'm trying to join on a file with a certificate. Try to file.bin + cert.der => file.p7b I tried with openssl command : openssl pkcs7 -in cert.der -in file.bin -out file.p7b ...
0
votes
2answers
609 views

Redhat - command/s run post-install to generate default localhost.crt?

I cloned a VM and the ssl certificate has the old hostname. I need to generate a new ssl certificate. My question is what method was used by the server to create the initial certificate? Was this ...
0
votes
1answer
307 views

Is it possible to allow only some client certificates in Apache to login?

In my virtual host I have something like that: SSLEngine on SSLCertificateKeyFile /etc/apache2/ssl/svn.XXXXX.me.key SSLCertificateFile /etc/apache2/ssl/svn.XXXXX.me.crt SSLProtocol ...
0
votes
2answers
82 views

Using an SSL certificate in multiple locations

I have some issues with respect to using SSL Certificates. I have a website hosted in UK and I also have an organisation in South Africa hosting my company application online for web access. The ...
0
votes
0answers
205 views

Allow IIS 7.5 access to certificates private key at Windows 2008 R2 x64

all I'm trying to allow my IIS application get access to private key in personal storage of local computer. For this I open MMC, go to certificate, make right click on it and select 'All tasks' -> ...
0
votes
1answer
751 views

Expired Certificates and Active Directory Authentication [closed]

Around the end of February, the password was about to expire on my Active Directory account. So, I changed the password. Since then, I can get locked out 3 to 10 times a day without me doing much of ...
0
votes
0answers
41 views

RDP Certificate

I have 4 servers, RD Gateway,RD Connection Broker and 2 RD Host to which I will have external client connecting. I would like to have my clients to be connecting without having any warnings about ...
0
votes
2answers
1k views

Man-In-The-Middle with a VPN?

I'm doing some researches for university and, before wasting a lot of time into it, I'd like to know if what I've got in my mind can be done. I'm talking about a simple MITM attack but, in my ...
0
votes
1answer
71 views

Can I create a CA which is part of a WW trusted CA?

When I create a CA role there is an option for "Root CA" and "Subordinate CA", choosing the second one adds an option to generate a cert request. Does it mean I can buy a service e.g. from Comodo ...
1
vote
1answer
159 views

MySql SSL configuration - Client section

I'm trying to secure my work with a SSL connection between some applications and my dabtabases. In a first time, i search how to create certificates, and i do something like this : Creation of the ...
0
votes
1answer
269 views

Can't get self-signed CA cert to request corresponding client cert; Apache

I'm running Apache 2.2 on Windows, and have mod_ssl working fine for delivering a commercially signed server cert. (A wildcard cert, though I don't think it matters.) I'm trying to get the server, ...
0
votes
1answer
46 views

Permanent SSL Keystore Certificate Password

I am having a problem with my generated pkcs12 file using keytool. I ran this command to generate a pkcs12 client-certificate: keytool -importkeystore -srckeystore client.jks -srcstorepass password ...
4
votes
1answer
14k views

Import of PEM certificate chain and key to Java Keystore

There are plenty of resources out there about this topic, but none I found which covers this slightly special case. I have 4 files; privatekey.pem certificate.pem intermediate_rapidssl.pem ...
0
votes
1answer
42 views

mysql setting up encryption (ssl) without client certificats

I would like to setup SSL encryption for my MySQL servers to let users encrypt their connections without being themselves fully authenticated (like an anonymous access, but still encrypted). I would ...
0
votes
0answers
137 views

Custom certificate/key pair does not work on OpenVPN clients

I have setup very basic OpenVPN network on Windows Server 2008. My clients are IP Cameras having Unix OS and built-in feature of openVPN connectivity. Initially I used a common client certificate/key ...
1
vote
1answer
3k views

SSL connection issue with s_client

I'm trying to configure SSL on two machines (on LAN) from a local CA I created and am hitting an issue when testing with s_client, I can't seem to locate helpful info w/ my google-fu skills. I'm ...
0
votes
1answer
6k views

Importing certificates on Windows 2008 - “The integrity of this certificate cannot be guaranteed…”

I need to set up secured communications between two windows machines. I have generated a set of certificates for this purpose and saved them as .x509 files. If I set about installing those on ...
4
votes
1answer
1k views

How to manually create Puppet CA and certificates?

I am wondering how to manually (using openssl instead of puppet ca command) create CA that would be usable by Puppet? The goal would be to script creation of such CA's to deploy them on multiple ...
0
votes
3answers
659 views

Install X509 certificate into Windows 2008 R2

I'm trying to install a certificate into my windows 2008 but I'm not able to do it right. I have a .crt file and I click to install from contextual menu. It succeed to import but if I browse the ...
30
votes
1answer
10k views

How can I work around problems with certificate configuration in Remote Desktop Services?

I am setting up a Remote Desktop Services farm, and am having trouble configuring certificates for it to use. A demonstration of the problem I'm seeing can be found in Step #4. At this point I am ...
0
votes
1answer
3k views

Subject Alternative Name not added to certificate

I'm trying to issue a new certificate using the additional attribues field within the Windows CertSrv Web-Enrollment Client. I added the CSR, picked the template and entered this into the attributes ...
0
votes
1answer
187 views

Remotely configure OpenVPN custom client certificates and static Virtual IP

On our current basic OpenVPN (on Windows) setup, we are using common client certificates for all clients. In order to introduce some kind of security, what are the possible measures I can make ? ...
0
votes
0answers
76 views

MMC Cert Manager Plug-in is making LDAP connection to external site, why?

I'm trying to figure out what is causing 5 of my servers to attempt to connect to an external LDAP server. I inherited these servers when another employee left the company. As far as I know these ...
0
votes
1answer
4k views

OpenVPN certificate removal and connecting with no certificate file on server

I've run into a problem, that I removed certificate files from the server. But client that has these files still can connect. I've found out, that I should revoke the certificate and that this can ...
3
votes
1answer
42 views

Certificate issue causing code to fail

We have some code that connects to a website to call a web service. When I run the code on our server under my account (local admin) the code runs fine. When I run the code under a different user the ...
3
votes
1answer
270 views

HTTPS and trailing dot in domain

Is it possible to solve the scenario where a web server is served behind HTTPS, and must be accessible both with www.domain.com and www.domain.com.? And notice the trailing dot. An example for all: ...
1
vote
0answers
686 views

Why my certificates doesn't match?

I've stablished a VPN using OpenVPN and it is all working.. almost.. My machines can see each other but on Handshake it all fails. The error at first referred to a blocked port but ports are good. ...
1
vote
1answer
2k views

VPN Certificate Validation Failed (OpenVPN)? CentOS & Ubuntu

Ok, I'll explain what I did... and at the end is the queston. THank you! To set up my VPN I installed OpenVPN in server and client machines. On server I configured the cert Authority in the file ...
1
vote
2answers
425 views

New Key for expired certificate?

I need to create a new certificate for an internal server. It is self signed. Is there an easy way to just extend the expiration date of the current certificate? If not, can I reuse the current ...
0
votes
1answer
118 views

certificate SSH login does not work on 22 but other port

On my Red Hat server, the sshd will not accept my correct certificate login. However, If i start another sshd on another port, it works! (I assume the second sshd loads the same configruation files.) ...
2
votes
1answer
4k views

Keytool import certificate fails “Public keys in reply and keystore don't match”

I'm importing a SSL certificate to use in Tomcat in my keystore using keytool and it fails with "Public keys in reply and keystore don't match" Problem might be declared by the fact that I created a ...
3
votes
1answer
98 views

Good way to store domain CSR and KEY files

For my company I'm starting to manage more and more domains; and with that more and more certificates for those domains. What is a good way to store the basic KEY and CSR files generated? I was ...
10
votes
1answer
194 views

How do SAN Certs degrade performance?

I have heard that when lots of names get added to a single SAN Cert (Subject Alternative Name) performance starts to degrade. Can someone explain how SAN certs are processed so I understand what ...
5
votes
3answers
13k views

openssl client authentication error: tlsv1 alert unknown ca: … SSL alert number 48

I've generated a certificate using openssl and place it on the client's machine, but when I try to connect to my server using that certificate, I error mentioned in the subject line back from my ...