Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

0
votes
1answer
212 views

HAProxy SSL connection error

Brand new to setting up SSL with HAProxy and Litespeed load balancer, just generated my certificate using the .csr and am trying to have HAProxy terminate SSL before sending it to the web worker ...
1
vote
1answer
120 views

Forgot passphrase for new SSL certificate

I've been requested by RapidSSL to reissue my SSL certificate to 2048 bits. I generated a key, CSR and got the certificate back from RapidSSL. Now, somehow, I've forgotten what Passphrase I used when ...
2
votes
3answers
101 views

Use personal SSL Certificate created on my own?

I'm new to SSL Certificates. I've seen some tutorials about creating personal certificates but I didn't go far reading. It seems that I can create a personal SSL Certificate and use it on my website, ...
1
vote
0answers
302 views

apache authentication with SSL certificate and SSLUserName

i just try to put an SSL authentification for a SVN server over https. I would like that the client certificate allow authorized person to check their repositories. <VirtualHost ...
0
votes
1answer
54 views

Can I use switch user “su” with keys / certificate?

I just locked myself out of SSH. Basically, I added three users to /etc/ssh/sshd_config using the AllowUsers directive, which is great because now they can login, but now I can't, and I'm the only ...
1
vote
2answers
1k views

Thunderbird not trusting certificate signed with self-signed authority

I have generated a self-signed certificate authority using mydomain.org as the common name. I imported the public certificate using Thunderbird's certificate manager under the "Authorities" tab. So ...
0
votes
1answer
1k views

Associate SSL certificate for SQL Server which does not use the FQDN

We would like to connect securely to SQL 2008 R2 over the internet for reporting purposes. Speed is not a huge concern for these smaller data sets, and users are going to be using simple reporting ...
0
votes
1answer
4k views

Error 0x8007274C connecting via SSTP VPN to Windows 2008r2 server

I'm setting up a VPN using a self-signed certificate. My certificate is was generated on the server and is installed on the server. It shows up in the MMC console under "Certificates (Local Computer) ...
0
votes
1answer
187 views

Configuring SSTP VPN server on Win2008r2 when server is at a dynamic dns address

I would like to install an SSTP VPN server on a Win2008r2 server that I use for personal purposes (not using Active Directory). I will have 3 or 4 of my computers and other mobile devices connecting ...
3
votes
1answer
552 views

Microsoft CRL URL's

We have a number of Exchange servers without access to the internet. When updating Exchange, the fact that all .NET assemblies are signed means the installer needs to check Microsoft's CRL during the ...
0
votes
1answer
373 views

Preventing Windows from deleteing our root CA

I am trying to create a Windows server with an IIS server that has a web site with client certificate authentication. The client certificates are signed by our own root CA. Because of that we must ...
3
votes
2answers
12k views

Renewing SBS2011 Exchange Self-Signed Certificate w/o changing home page in IE?

On a previous server when we used the built in SBS wizard to renew the certificate it worked, however it reset all of the computers on the domain's IE home page to companyweb. Is there a way to do ...
2
votes
3answers
4k views

Having issues connecting to a Windows 2012 VPN

Setting up Windows Server 2012 Datacenter as a VPN (with everything as default settings), I receive no errors upon installation, then I restart. Upon trying to connect to the VPN, here is what ...
1
vote
0answers
192 views

Always get a Security Error for Internal HTTPS Website

Full disclosure, I asked this question over at Ask Different (http://apple.stackexchange.com/questions/96776/always-get-a-security-error-for-internal-https-website) but didn't get much helpful ...
1
vote
2answers
6k views

SSL Error: self signed certificate in certificate chain

EDIT: AS the following documents describes http://www.novell.com/support/kb/doc.php?id=7002392 i've concatenated those files like this domain.crt sf_bundle.crt >> domain.pem and now the ...
0
votes
2answers
158 views

What's the difference between a certstore and a keystore?

I'm specifically using openssl in RHEL. What's the difference between a certstore and a keystore?
1
vote
0answers
228 views

Is it possible to view a user's certificate store while signed in as a different user? Windows Server 2008 R2

I'm currently migrating a Jenkins server and I need to install a certificate on the new machine for some of my builds. The problem is I'm not sure on which store to use and no one remembers the ...
2
votes
1answer
94 views

How to securely connect to multiple different LDAPS servers (Debian)

I'm trying to connect to multiple different LDAPS servers. A lot of the documentation I've seen recommends setting TLS_REQCERT never, but that strikes me as horribly unsecure to not verify the ...
0
votes
2answers
1k views

Installing SSL certificate on JBoss

I have a server that runs JBoss. When I type bad URL to that server it gives me version like this: JBossWeb/2.0.1.GA - what version of JBoss that would be? A SSL certificate will be bought and ...
0
votes
1answer
2k views

Getting CentOS 6 to trust a certificate from AD

I'm trying to get my CentOS server to trust a certificate I've installed from an active directory server (I converted the .cer to .pem earlier.) When I try to connect, the debug information is: ...
1
vote
2answers
45 views

What kind and how many Certificates are needed?

I have 3 ASP.NET-Web.Api Applications communicating together over https: Master on Server1 Slave1 on Server1 Slave2 on Server2 (Slave2 is basicly an other instance of Slave1 installed on another ...
0
votes
1answer
34 views

Certificate problems with Exchange

Ok I have 2 Exchange 2007 servers, and a Edgesync server. I noticed they had old certificates on them, and I installed stand alone Cert. Authority on them and gave them a new certificate (I backed ...
1
vote
2answers
84 views

Remote code integrity checking prior to execution

I'm contemplating putting a site online that could be an attractive target for hackers or employees of the host, who could alter the site's code to their benefit. Not wishing to self-host, I was ...
0
votes
4answers
933 views

Can I find out what certificate revocation server an application is contacting?

I'm trying to install an application on a machine running Windows XP Pro. There are two different servers being contacted, both using the same wildcard certificate (GoDaddy). One via https, one ...
1
vote
2answers
43 views

Certificates for clusters

I have read the various threads regarding clusters (behind the load balancer) and certificates. I am trying to implement this in our company. Firstly Our compnay policy is not to allow exporting of ...
1
vote
3answers
4k views

Virsh can't connect to ovirt hypervisor

I installed Ovirt and want to add network interface for NAT. So I need to connect to hypervisor by virsh and add nic. Ovirt installed on my local server, host (ovirt-engine.kvmserver.net) is on the ...
0
votes
2answers
590 views

Can IPv6 IPSec replace https/ssl for secure website network encryption?

Take away the 'authentication' part and just talk about the encryption part please! (Authentication is a different problem.) Example: a connection to http://ipv6.google.com can be encrypted via HTTPS ...
0
votes
2answers
710 views

Generate pfx certificate from pem rsa

I have a PEM RSA private key generated with opendkim: # dkim-genkey -t -s code001 -d domain.com and for use it with exchange, i need to convert it to pfx with this command: # openssl pkcs12 ...
1
vote
1answer
126 views

When do SSL certs require a dedicated IP, and when don't they? [duplicate]

My host has informed me that I need to purchase a dedicated IP from them in order to use a SSL cert I want to buy. I don't believe them. Is there a way to leave them out of the loop and get this done ...
0
votes
1answer
299 views

ADFS 2.0: send issuer of user certificate as claim

Using ADFS 2.0, I would like to send to a relying party information about the issuer of the user certificate, if a user authenticated using an x509 certificate. Is this possible? How should I ...
0
votes
1answer
77 views

SSL certificate error in IE and chrome in apache

You attempted to reach www.domainname.domain.ac.in, but instead you actually reached a server identifying itself as *.domain.ac.in. but the site works fine with https://domainname.domain.ac.in in all ...
0
votes
0answers
215 views

Why does IIS7 on one server work with my certificate while another has problems?

In the setup I describe, we have two servers, Alpha and Bravo. Alpha is a server that has been around for years. It is a Windows 2008 server running IIS7. In order to log in to any application on ...
1
vote
1answer
98 views

Mail From Outlook/Exchange Sent to Destination Spam

I have a unique problem and I am hoping someone may have some direction to provide me. We have a Windows environment with an Exchange 2007 Server. For some reason when a user sends an email from ...
0
votes
1answer
288 views

Generate a p7b file from bin and der file

I'm using Debian and I'm trying to join on a file with a certificate. Try to file.bin + cert.der => file.p7b I tried with openssl command : openssl pkcs7 -in cert.der -in file.bin -out file.p7b ...
0
votes
2answers
695 views

Redhat - command/s run post-install to generate default localhost.crt?

I cloned a VM and the ssl certificate has the old hostname. I need to generate a new ssl certificate. My question is what method was used by the server to create the initial certificate? Was this ...
0
votes
1answer
365 views

Is it possible to allow only some client certificates in Apache to login?

In my virtual host I have something like that: SSLEngine on SSLCertificateKeyFile /etc/apache2/ssl/svn.XXXXX.me.key SSLCertificateFile /etc/apache2/ssl/svn.XXXXX.me.crt SSLProtocol ...
0
votes
2answers
83 views

Using an SSL certificate in multiple locations

I have some issues with respect to using SSL Certificates. I have a website hosted in UK and I also have an organisation in South Africa hosting my company application online for web access. The ...
0
votes
0answers
229 views

Allow IIS 7.5 access to certificates private key at Windows 2008 R2 x64

all I'm trying to allow my IIS application get access to private key in personal storage of local computer. For this I open MMC, go to certificate, make right click on it and select 'All tasks' -> ...
0
votes
1answer
812 views

Expired Certificates and Active Directory Authentication [closed]

Around the end of February, the password was about to expire on my Active Directory account. So, I changed the password. Since then, I can get locked out 3 to 10 times a day without me doing much of ...
0
votes
0answers
41 views

RDP Certificate

I have 4 servers, RD Gateway,RD Connection Broker and 2 RD Host to which I will have external client connecting. I would like to have my clients to be connecting without having any warnings about ...
1
vote
0answers
412 views

Client Certificates not working with IIS7

I have been trying to get a webservice we are creating to require client certificates for connections for several weeks and haven't been having much luck. I thought that I would attempt to make a ...
0
votes
2answers
1k views

Man-In-The-Middle with a VPN?

I'm doing some researches for university and, before wasting a lot of time into it, I'd like to know if what I've got in my mind can be done. I'm talking about a simple MITM attack but, in my ...
0
votes
1answer
75 views

Can I create a CA which is part of a WW trusted CA?

When I create a CA role there is an option for "Root CA" and "Subordinate CA", choosing the second one adds an option to generate a cert request. Does it mean I can buy a service e.g. from Comodo ...
1
vote
2answers
829 views

When to use self-signed certificate with RDWeb?

I want to make sure the users connection is as secure as possible. Our RDWeb server has a .local name (for this question it will be called rdweb.contoso.local) and a public name: rdweb.contoso.com ...
1
vote
1answer
165 views

MySql SSL configuration - Client section

I'm trying to secure my work with a SSL connection between some applications and my dabtabases. In a first time, i search how to create certificates, and i do something like this : Creation of the ...
0
votes
1answer
45 views

See who changed a certificate on Windows server 2008

I usually log into my server using RDC. Recently the certificate changed (got a popup while loggin in) and I don't know who changed it. We have a self issued certificate but none of the admins ...
0
votes
1answer
278 views

Can't get self-signed CA cert to request corresponding client cert; Apache

I'm running Apache 2.2 on Windows, and have mod_ssl working fine for delivering a commercially signed server cert. (A wildcard cert, though I don't think it matters.) I'm trying to get the server, ...
0
votes
1answer
48 views

Permanent SSL Keystore Certificate Password

I am having a problem with my generated pkcs12 file using keytool. I ran this command to generate a pkcs12 client-certificate: keytool -importkeystore -srckeystore client.jks -srcstorepass password ...
2
votes
2answers
952 views

Does an SSL certificate with the common name example.com work for example.com/app1/payment?

I am new to SSL certificates and their setup. I have not found any details regarding this so I am asking what may be simple question. I am going to order an SSL certificate so I want to know if an ...
5
votes
1answer
17k views

Import of PEM certificate chain and key to Java Keystore

There are plenty of resources out there about this topic, but none I found which covers this slightly special case. I have 4 files; privatekey.pem certificate.pem intermediate_rapidssl.pem ...