Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

5
votes
3answers
13k views

openssl client authentication error: tlsv1 alert unknown ca: … SSL alert number 48

I've generated a certificate using openssl and place it on the client's machine, but when I try to connect to my server using that certificate, I error mentioned in the subject line back from my ...
0
votes
1answer
3k views

TLS: hostname does not match CN in peer certificate

im trying to connect LDAP over StartTLS but Im stuck with an issue. I've followed step by step this guide https://help.ubuntu.com/12.04/serverguide/openldap-server.html#openldap-tls and LDAP it's ...
0
votes
1answer
413 views

SSL certificate for Oracle Application Server 11g

I was asked to get an SSL certificate for an "Oracle Application Server 11g" which has a soon-to-expire certificate. Brushing aside the fact that 10g seems to be the newest version, I got a ...
1
vote
1answer
192 views

Client side certificates in client browsers with unix server for management

We are currently running Unix dedicated servers for everything (Web cluster, database, FTP, batch, ...) except for a Microsoft Active Directory Certificate Services. The sole purpose of this Windows ...
0
votes
1answer
408 views

SSL Certificate for local web server

Is it at all possible to create a self-signed certificate for use on multiple machines on a local network which would stop the browser complaining it is not a trusted site? We have a product which is ...
1
vote
1answer
212 views

SSL certificate for subdomain without domain

I have a webserver in my intranet which can be accessed via subdomain.domain.com and simply subdomain. The SSL certificate is created for subdomain.domain.com which results in a warning as soon as I ...
0
votes
2answers
143 views

What kind of SSL Cert do I need and where do I get it?

I want to have subdomains with SSL within my domain. The main difference is that each subdomain is hosted by a different person with a different public key/private key pair. Let me illustrate with an ...
1
vote
2answers
69 views

Certificate Security in intranet Environment?

We have this topology in our company : A new rule says that each document being sent by outlook should be encrypted. we decided using PGP. We already have a certificate ( self signed). the ...
1
vote
1answer
342 views

Certificates compartments (certmgr.msc)?

After reading a while , Im trying to understand what kind of certificates will be found at : Personal Other People Trusted Root Certicfiation Authorities will personal will contains only private ...
3
votes
3answers
2k views

How do I renew an expired Ubuntu OpenLDAP SSL Certificate

We went through the steps of revoking an SSL Certificate used by our OpenLDAP server and renewing it but we are unable to start slapd. Here are the commands we used: openssl verify ...
2
votes
2answers
520 views

Problem with Minimum Certificate Key Length and WinXP

The problem all started when Mircosoft updated the security of systems by requiring a minimum key length of 1024. Please refer to Microsoft Security Advisory (2661254). In the past, we were using the ...
2
votes
1answer
144 views

Missing subject field values in user certificate (Windows)

I am trying to enroll (on behalf of) a user certificate but certain fields appear to be missing in the subject field. Specifically, O and OU. Using ADSI, I see that the fields have the values I want ...
3
votes
2answers
86 views

certificate creation on Windows Server 2008

On Windows Server 2008 using RD Gateway Manager it is possible to create a SSL self-signed certificate. Which other ways exist to create certificates on Windows Server 2008?
1
vote
1answer
200 views

What are the steps needed to set up and use security for AWS command line tools?

I've been trying to set up the AWS command-line tools following Eric's most useful guide at http://alestic.com/2012/09/aws-command-line-tools. I can't seem to find a good how-to for how to generate ...
1
vote
1answer
90 views

What format should the .CER file have in the AIA record of a certificate?

I'm updating the .cer file referenced in my end entity's AIA record. What format should I save the file in? By default Windows allows me to save as DER encoded binary X.509 (.cer) Base-64 encoded ...
0
votes
1answer
994 views

Is it possible to do client certificate authentication without running HTTPS on a webserver?

(Please note: this question is one of many "why don't you just try it?" questions. I certainly will, but since I haven't found an obvious answer by googling, I thought I might as well make it easier ...
2
votes
1answer
1k views

Apache certificates for some urls not working

We are having a rather strange problem with a Apache-installation. Here is a short summary: Currently I'm setting up Apache with https, and server-certificates. This is fairly easy and works straight ...
0
votes
1answer
144 views

How to check whether our RSA certificates are 1024 bits and above?

Recently Microsoft pushed that certificate keys should be 1024 bits or above. Microsoft minimum key length How can I verify whether a key is 1024 bits or not?
1
vote
0answers
135 views

Using Same X.509 serviceCertificate on Multiple WCF Services?

I have an application which exposes multiple WCF services (each a distinct facade for different client applications). Right now I'm managing a distinct certificate (created from our internal ...
1
vote
1answer
177 views

How to dump certificate file from installer via command-line?

I'm building a script that will download and install a bunch of programs. One of those programs depends on a virtual driver, which needs its certificate to be imported in order to function. Normally, ...
0
votes
1answer
344 views

TMG - Reverse proxy certificate mismatch

I have the web site rule set up but I am getting a certificate mismatch error. I have setup the rule using this walkthrough: [1] ...
1
vote
1answer
164 views

Can Subject Alternative Name accommodate multiple virtual mail domains?

I am currently running a postfix server with self signed certificates serving one mail domain, mycompany.com, the mail server is mail.mycompany.com and so is the CN of the certificate. Now, I need to ...
5
votes
1answer
842 views

Microsoft CA certificate templates expires sooner than expected

The certificates my Microsoft CA is generating do not match the time period indicated in the template used. How can I resolve this? I recently created a new certificate template for use on my Linux ...
6
votes
1answer
965 views

HTTPS and Certification for dummies

I had never used https on a site and now want to try it. I did some research, but not sure that I understood everything. Answers and corrections are greatly appreciated. Here we go: To use https I ...
0
votes
2answers
732 views

Is a SSL key file binary?

I'm trying to install a SSL with my nginx setup. I configured nginx with those two files, but it doesn't work. Nginx complained the following error message. SSL: error:0906D06C:PEM ...
0
votes
1answer
603 views

Private key is not valid, when trying to access as-create-launch-config

I installed my ec2 tools in my command line. I can use it for creating a new instance and other similar operations. Now I wish to play with the auto_scaling tool. I installed it and edited my .bashrc ...
1
vote
2answers
559 views

Cannot start httpd service with SSL

Have an issue where I have installed new certificates on Centos 5 and modified the conf file for the following lines: SSLCertificateFile /etc/pki/tls.certs/name.crt SSLCertificateKeyFile ...
1
vote
0answers
29 views

Is it possible to configure windows server 2008 to do windows form authentication BEFORE client certificate authentication?

I have setup a lab on vmware with both of them. It works but it doesn't suit my business case. I would like to have windows form authentication first. If sucessfull I want to check client certificate. ...
0
votes
1answer
904 views

Windows 7 Wifi Certificate Trust Anchor

When attempting to connect to our company wireless while not on the domain, I receive a message saying that our RADIUS server provided a valid certificate issued by our root CA, but that the root CA ...
0
votes
1answer
1k views

Getting ASN1 bad tag error when trying to complete certificate request in IIS7

I have a multi-domain certificate I'm trying to install on IIS 7.0. When I use the IIS manager to complete certificate request, I get the error: There was an error while performing this operation. ...
3
votes
1answer
5k views

Setup IIS to require client certificate and to use anonymous authentication

Setup IIS to require client certificate and to use anonymous authentication I have a WCF web service for our customers to use. I want to protect this using client certificates. I will also use the ...
-4
votes
1answer
779 views

prompt for client certificate on IIS doesn't work with Firefox

I have a client certificate from startssl. I can login to their control panel with that certificate and Firefox. But with my asp.net website I am NOT prompted for the certificate only when using IE ...
4
votes
1answer
2k views

What causes automatic install of trusted root certificate authorities into local machine's certificate store?

I spend whole day by diagnosing issue with my test services using mutual HTTPS. Services are hosted in IIS 7 on a test server running Windows Server 2008 Enterprise edition. Suddenly few weeks ago ...
3
votes
3answers
817 views

Check if root ca certificate is installed

We are having a custom CA for our local-domains. The Root CA certificate is installed on all the corporate machines by default, but sometimes it happens that we have someone here who doesn't have it ...
1
vote
1answer
764 views

Windows CA to issue certificate to authenticate SSH to a Linux server

I have a Windows Server Root Certificate Authority, Linux SSH server, and users with Windows SSH clients. The Linux box is not part of the AD domain (and probably never will be [sigh]) OpenSSH 5.4 ...
0
votes
2answers
1k views

Prevent copying (exporting) private key from one machine to another?

We are considering using digital certs to verify that the machine connecting to our VPN service is in fact a company-owned machine. So one of my co-workers here mentioned that for a knowledgable user ...
0
votes
0answers
48 views

One HTTPS website per IP? [duplicate]

Possible Duplicate: Multiple SSL domains on the same IP address and same port? I don't understand this notion that only one https website can be run on one IP address (talking v4, if that ...
1
vote
2answers
252 views

Https for embedded devices, local addresses

I am trying to add https to the embedded devices I am working on. These devices are generally assigned local ip addresses and so cannot get their own ssl certificates. So essentially my question is ...
0
votes
1answer
163 views

IIS7 SSL Only Works on Local Machine

I have a website in IIS 7 with a self signed certificate. I can navigate to the website on my PC that is hosting it. If I navigate to the specific URL in the self signed certificate, I don't get any ...
2
votes
1answer
122 views

Create private key with CSR

I have a CSR file (as a text file) and the corresponding P7B certificate. My problem is that I have to create a P12 file on a machine where I do not have created the CSR. I have created the CSR in ...
3
votes
2answers
3k views

Can you generate a self signed certificate on Windows Server using CLI tools like certreq and certutil?

I need to quickly generate a self signed certificate on a Windows Server. I'd like to use the standard CLI tools that ship with it. I know I can use openssl.
1
vote
2answers
575 views

Exchange certificate questions

I got the following message The STARTTLS certificate will expire soon. Now I tried to create new certificates, but currently the old ones are still used. Questions: Can I backup the old certificate ...
1
vote
1answer
2k views

Generate .key and .crt from PKCS12 file?

How exactly would I generate a .key file and a .crt file from a .p12 file? Thanks.
0
votes
1answer
5k views

How can I get SBS2011 to issue certificates?

I want to use certificates to authenticate both client and server for a new internal service. Since all our servers already have the SBS (2011 Standard) server's Cert installed as a Trusted Root, ...
0
votes
2answers
2k views

Removing sites from IIS wildcard certificate error

When trying to remove a site from IIS this message comes up. “The certificate associated with the HTTPS binding of this site is also assigned to another site’s binding. Deleting this site will cause ...
1
vote
1answer
425 views

How to specify multiple root certificates for nginx client certificate verification?

For a project as part of the European Grid Infrastructure (EGI) we need SSL client certificate verification for a service running on nginx. As there are several root CAs allowed within EGI, we need ...
9
votes
3answers
11k views

How to avoid lftp Certificate verification error?

I'm trying to get my Pelican blog working. It uses lftp to transfer the actual blog to ones server, but I always get an error: mirror: Fatal error: Certificate verification: subjectAltName does not ...
2
votes
2answers
1k views

Allowing users in from an IP address without certificate client authentication

I need to allow access to my site without SSL certificates from my office network and with SSL certificates outside. Here is my configuration: <Directory /srv/www> AllowOverride All ...
1
vote
0answers
162 views

Server 2008R2 RemoteApp authentication asked twice

My Problem is when the client logs in RDweb, he is asked to enter his credentials again once he's tries to open an application. My applications are signed with a standard GoDaddy cert. Everything ...
0
votes
1answer
2k views

WPA2 enterprise: username/password-prompt-less setup on a mixed network: XP/SP3, Mac OS X, Linux, iOS

I asked a question recently about setting up WPA2 enterprise, and I have a couple of ancillary questions. First, regarding the use of the OpenSSL cnf files for the certificate generation. I have a ...