Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

6
votes
1answer
803 views

HTTPS and Certification for dummies

I had never used https on a site and now want to try it. I did some research, but not sure that I understood everything. Answers and corrections are greatly appreciated. Here we go: To use https I ...
0
votes
2answers
691 views

Is a SSL key file binary?

I'm trying to install a SSL with my nginx setup. I configured nginx with those two files, but it doesn't work. Nginx complained the following error message. SSL: error:0906D06C:PEM ...
0
votes
1answer
575 views

Private key is not valid, when trying to access as-create-launch-config

I installed my ec2 tools in my command line. I can use it for creating a new instance and other similar operations. Now I wish to play with the auto_scaling tool. I installed it and edited my .bashrc ...
1
vote
2answers
440 views

Cannot start httpd service with SSL

Have an issue where I have installed new certificates on Centos 5 and modified the conf file for the following lines: SSLCertificateFile /etc/pki/tls.certs/name.crt SSLCertificateKeyFile ...
1
vote
0answers
27 views

Is it possible to configure windows server 2008 to do windows form authentication BEFORE client certificate authentication?

I have setup a lab on vmware with both of them. It works but it doesn't suit my business case. I would like to have windows form authentication first. If sucessfull I want to check client certificate. ...
0
votes
1answer
733 views

Windows 7 Wifi Certificate Trust Anchor

When attempting to connect to our company wireless while not on the domain, I receive a message saying that our RADIUS server provided a valid certificate issued by our root CA, but that the root CA ...
0
votes
1answer
1k views

Getting ASN1 bad tag error when trying to complete certificate request in IIS7

I have a multi-domain certificate I'm trying to install on IIS 7.0. When I use the IIS manager to complete certificate request, I get the error: There was an error while performing this operation. ...
3
votes
1answer
4k views

Setup IIS to require client certificate and to use anonymous authentication

Setup IIS to require client certificate and to use anonymous authentication I have a WCF web service for our customers to use. I want to protect this using client certificates. I will also use the ...
-4
votes
1answer
684 views

prompt for client certificate on IIS doesn't work with Firefox

I have a client certificate from startssl. I can login to their control panel with that certificate and Firefox. But with my asp.net website I am NOT prompted for the certificate only when using IE ...
4
votes
1answer
2k views

What causes automatic install of trusted root certificate authorities into local machine's certificate store?

I spend whole day by diagnosing issue with my test services using mutual HTTPS. Services are hosted in IIS 7 on a test server running Windows Server 2008 Enterprise edition. Suddenly few weeks ago ...
3
votes
3answers
712 views

Check if root ca certificate is installed

We are having a custom CA for our local-domains. The Root CA certificate is installed on all the corporate machines by default, but sometimes it happens that we have someone here who doesn't have it ...
1
vote
1answer
668 views

Windows CA to issue certificate to authenticate SSH to a Linux server

I have a Windows Server Root Certificate Authority, Linux SSH server, and users with Windows SSH clients. The Linux box is not part of the AD domain (and probably never will be [sigh]) OpenSSH 5.4 ...
0
votes
2answers
1k views

Prevent copying (exporting) private key from one machine to another?

We are considering using digital certs to verify that the machine connecting to our VPN service is in fact a company-owned machine. So one of my co-workers here mentioned that for a knowledgable user ...
0
votes
0answers
48 views

One HTTPS website per IP? [duplicate]

Possible Duplicate: Multiple SSL domains on the same IP address and same port? I don't understand this notion that only one https website can be run on one IP address (talking v4, if that ...
1
vote
2answers
190 views

Https for embedded devices, local addresses

I am trying to add https to the embedded devices I am working on. These devices are generally assigned local ip addresses and so cannot get their own ssl certificates. So essentially my question is ...
0
votes
1answer
150 views

IIS7 SSL Only Works on Local Machine

I have a website in IIS 7 with a self signed certificate. I can navigate to the website on my PC that is hosting it. If I navigate to the specific URL in the self signed certificate, I don't get any ...
2
votes
1answer
120 views

Create private key with CSR

I have a CSR file (as a text file) and the corresponding P7B certificate. My problem is that I have to create a P12 file on a machine where I do not have created the CSR. I have created the CSR in ...
2
votes
2answers
3k views

Can you generate a self signed certificate on Windows Server using CLI tools like certreq and certutil?

I need to quickly generate a self signed certificate on a Windows Server. I'd like to use the standard CLI tools that ship with it. I know I can use openssl.
0
votes
1answer
491 views

Exchange certificate questions

I got the following message The STARTTLS certificate will expire soon. Now I tried to create new certificates, but currently the old ones are still used. Questions: Can I backup the old certificate ...
1
vote
1answer
2k views

Generate .key and .crt from PKCS12 file?

How exactly would I generate a .key file and a .crt file from a .p12 file? Thanks.
0
votes
1answer
4k views

How can I get SBS2011 to issue certificates?

I want to use certificates to authenticate both client and server for a new internal service. Since all our servers already have the SBS (2011 Standard) server's Cert installed as a Trusted Root, ...
0
votes
2answers
2k views

Removing sites from IIS wildcard certificate error

When trying to remove a site from IIS this message comes up. “The certificate associated with the HTTPS binding of this site is also assigned to another site’s binding. Deleting this site will cause ...
1
vote
0answers
339 views

How to specify multiple root certificates for nginx client certificate verification?

For a project as part of the European Grid Infrastructure (EGI) we need SSL client certificate verification for a service running on nginx. As there are several root CAs allowed within EGI, we need ...
8
votes
3answers
9k views

How to avoid lftp Certificate verification error?

I'm trying to get my Pelican blog working. It uses lftp to transfer the actual blog to ones server, but I always get an error: mirror: Fatal error: Certificate verification: subjectAltName does not ...
2
votes
2answers
1k views

Allowing users in from an IP address without certificate client authentication

I need to allow access to my site without SSL certificates from my office network and with SSL certificates outside. Here is my configuration: <Directory /srv/www> AllowOverride All ...
1
vote
0answers
161 views

Server 2008R2 RemoteApp authentication asked twice

My Problem is when the client logs in RDweb, he is asked to enter his credentials again once he's tries to open an application. My applications are signed with a standard GoDaddy cert. Everything ...
0
votes
1answer
2k views

WPA2 enterprise: username/password-prompt-less setup on a mixed network: XP/SP3, Mac OS X, Linux, iOS

I asked a question recently about setting up WPA2 enterprise, and I have a couple of ancillary questions. First, regarding the use of the OpenSSL cnf files for the certificate generation. I have a ...
3
votes
1answer
536 views

How many user/supplicant certificates are needed for WPA2 enterprise on a small network?

I am running WPA2 enterprise for wireless access and I followed the instructions in /etc/raddb/certs/README and the freeRadius site howto. I also read the instructions in the privacywonk site. The ...
3
votes
1answer
800 views

How do I go about Improving wireless security at the office (Radius? Certs?)

EDIT 1: Our environment is mixed, majority OSX with a few Windows and Linux boxes. More importantly, Android and Apple cellphones will also need wireless access on a regular basis. We have a redhat ...
4
votes
2answers
8k views

802.1x automatically validate certificate in windows clients

We're deploying a wireless networking using Windows Server 2008 NAC as a RADIUS server. When Windows XP or 7 clients connect they initally fail to connect. In order to enable the client to connect we ...
1
vote
2answers
257 views

First SSL pageload slow on NGINX

I have recently purchased a QuickSSL certificate from GeoTrust, and I am using it on NGINX. Everything is fine, but there is a nasty second before the page actually loads. If I look at other SSL ...
0
votes
1answer
289 views

Jersey web-service token based on hostname

I recently built a RESTful service using Jersey and is currently used by 3 other systems internal to the network (not people). How can I make sure the requests to the service are honored only based ...
1
vote
1answer
662 views

Error in openssl s_client: “data length is too long”

I have an Ubuntu 12.04 server, and I'm trying to set up Apache to authenticate using LDAPS. I ran into some problems--see my previous question, where I concluded that the certificate on the LDAP ...
0
votes
2answers
978 views

Run SVN commands with self signed SSL cert

I am running the following command: svn info --non-interactive --trust-server-cert --no-auth-cache --xml "https://ommited/svn/YAMS" Unfortunately, I am getting the following error: ?xml ...
0
votes
2answers
636 views

The SSL certificate doesn't established

situation following: Windows Server 2008 R2 platform. Certificate installation in the IIS Manager occurs successfully with *.cer file but if I refresh the manager (F5), the certificate vanishes from ...
0
votes
1answer
966 views

How to set up certificate authentication for VPN access to TMG 2010

I found this article (link) on how to set up VPN access to TMG 2010. It's clearly written and easy to follow, however, there are some pre-requisites for this. As I am fairly new to Windows server ...
3
votes
3answers
72 views

using main domain as a mail server

I have a mail server set up as mail.mydomain.com like most people do. Now I find out that if I want to secure both mail.mydomain.com and mydomain.com with ssl I need two SSl certificates (or one more ...
0
votes
1answer
967 views

Recipients Auto Rejecting Emails Sent With Exchange 2010 - Certificate Error

A strange problem recently developed with one of my Exchange 2010 servers. I have an exchange server setup as part of a Windows Small Business Server 2011 installation. The email for the domain was ...
11
votes
2answers
2k views

Does reissuing an SSL certificate invalidate the previously-issued certificate?

I used the "reissue certificate" functionality at a SSL certificate vendor (RapidSSL, FWIW) to get a new certificate - in doing so, I created and used a new private key and pass phrase. Will the ...
3
votes
1answer
77 views

SSL Certificate creation - Which ID type to choose?

I'm trying to find-out how important the "ID type" for a SSL certificate is. I'm trying to generate a cert from my firewall to upload to a CA, but having trouble deciding if I should choose an IP, a ...
0
votes
1answer
684 views

Solaris 11 ldap client configuration

Im am trying to migrate some web services (like wordpress / dokuwiki), which are connected to our ldap for user authentication, from solaris 10 to solaris 11. In solaris 10, you had the possibility to ...
5
votes
3answers
1k views

Can Windows log CryptoAPI CRL timouts?

I suspect that the process of building the CRL cache may cause latency in some applications. We have several .NET applications that occasionally "act slow" with no CPU or disk access. I suspect that ...
3
votes
1answer
2k views

How do I set up lighttpd for x.509 client certificate authentication

So far I've had HTTPS working for a long time, so I don't think there are any trouble with the server certificates. Now I tried to add this to lighttpd.conf: ssl.engine = "enable" ...
1
vote
1answer
463 views

Self-signed Certificate ( Makecert.exe or CA )

I have configure PowerShell Execution policy on Server as AllSigned, so i want to create a certificate for signing a ps1 script. Can you guide me, which Certificate Should i use? I want to used ...
2
votes
1answer
2k views

Clearing Java certificates cache (force reload certificates)

A simple question here. One application gave me this exception when trying to access a website with a expired certificate: java.security.cert.CertificateExpiredException So, I renewed the ...
2
votes
1answer
339 views

Can't request computer certificate

I am using MMC with the snaping of certificates. I am requesting certificates from a brand new installation of a CA. Requesting User certificates works perfectly. Requesting Computer certificates ...
1
vote
1answer
530 views

SSL Certificate install GlassFish or Apache or both?

I've got GlassFish 3.1.2 installed on Linux CentOS 6.2, but it's fronted by Apache web server version 2.2.21 using mod_jk. That is, all traffic to GlassFish passes through Apache port 80 via mod_jk. ...
1
vote
3answers
2k views

How can an OpenVPN server be setup to use multiple certificates?

The OpenVPN documentation sets up a single certificate from a single CA to be used for all clients. Is there a way to set the server to enable multiple certificates from different CAs so long as the ...
1
vote
2answers
3k views

WinHttpCertCfg not importing certificate

I need to setup a deployment script that imports an SSL certificate that my service uses. I have tried importing with WinHttpCertCfg and with CertMgr to no avail. Here are the command-line arguments ...
2
votes
0answers
135 views

add certificate to all files in EFS-folder with script

I try to set up collective access to EFS-folder. I want to add certificates of all users to all files in folder. Is it posible do with using powershell scripts or some another way? Thanks.