Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

2
votes
3answers
2k views

How do I renew an expired Ubuntu OpenLDAP SSL Certificate

We went through the steps of revoking an SSL Certificate used by our OpenLDAP server and renewing it but we are unable to start slapd. Here are the commands we used: openssl verify ...
2
votes
2answers
515 views

Problem with Minimum Certificate Key Length and WinXP

The problem all started when Mircosoft updated the security of systems by requiring a minimum key length of 1024. Please refer to Microsoft Security Advisory (2661254). In the past, we were using the ...
2
votes
1answer
141 views

Missing subject field values in user certificate (Windows)

I am trying to enroll (on behalf of) a user certificate but certain fields appear to be missing in the subject field. Specifically, O and OU. Using ADSI, I see that the fields have the values I want ...
3
votes
2answers
85 views

certificate creation on Windows Server 2008

On Windows Server 2008 using RD Gateway Manager it is possible to create a SSL self-signed certificate. Which other ways exist to create certificates on Windows Server 2008?
1
vote
1answer
197 views

What are the steps needed to set up and use security for AWS command line tools?

I've been trying to set up the AWS command-line tools following Eric's most useful guide at http://alestic.com/2012/09/aws-command-line-tools. I can't seem to find a good how-to for how to generate ...
1
vote
1answer
89 views

What format should the .CER file have in the AIA record of a certificate?

I'm updating the .cer file referenced in my end entity's AIA record. What format should I save the file in? By default Windows allows me to save as DER encoded binary X.509 (.cer) Base-64 encoded ...
0
votes
1answer
956 views

Is it possible to do client certificate authentication without running HTTPS on a webserver?

(Please note: this question is one of many "why don't you just try it?" questions. I certainly will, but since I haven't found an obvious answer by googling, I thought I might as well make it easier ...
2
votes
1answer
994 views

Apache certificates for some urls not working

We are having a rather strange problem with a Apache-installation. Here is a short summary: Currently I'm setting up Apache with https, and server-certificates. This is fairly easy and works straight ...
0
votes
1answer
140 views

How to check whether our RSA certificates are 1024 bits and above?

Recently Microsoft pushed that certificate keys should be 1024 bits or above. Microsoft minimum key length How can I verify whether a key is 1024 bits or not?
1
vote
0answers
129 views

Using Same X.509 serviceCertificate on Multiple WCF Services?

I have an application which exposes multiple WCF services (each a distinct facade for different client applications). Right now I'm managing a distinct certificate (created from our internal ...
1
vote
1answer
174 views

How to dump certificate file from installer via command-line?

I'm building a script that will download and install a bunch of programs. One of those programs depends on a virtual driver, which needs its certificate to be imported in order to function. Normally, ...
0
votes
1answer
330 views

TMG - Reverse proxy certificate mismatch

I have the web site rule set up but I am getting a certificate mismatch error. I have setup the rule using this walkthrough: [1] ...
1
vote
1answer
158 views

Can Subject Alternative Name accommodate multiple virtual mail domains?

I am currently running a postfix server with self signed certificates serving one mail domain, mycompany.com, the mail server is mail.mycompany.com and so is the CN of the certificate. Now, I need to ...
5
votes
1answer
793 views

Microsoft CA certificate templates expires sooner than expected

The certificates my Microsoft CA is generating do not match the time period indicated in the template used. How can I resolve this? I recently created a new certificate template for use on my Linux ...
6
votes
1answer
915 views

HTTPS and Certification for dummies

I had never used https on a site and now want to try it. I did some research, but not sure that I understood everything. Answers and corrections are greatly appreciated. Here we go: To use https I ...
0
votes
2answers
724 views

Is a SSL key file binary?

I'm trying to install a SSL with my nginx setup. I configured nginx with those two files, but it doesn't work. Nginx complained the following error message. SSL: error:0906D06C:PEM ...
0
votes
1answer
598 views

Private key is not valid, when trying to access as-create-launch-config

I installed my ec2 tools in my command line. I can use it for creating a new instance and other similar operations. Now I wish to play with the auto_scaling tool. I installed it and edited my .bashrc ...
1
vote
2answers
531 views

Cannot start httpd service with SSL

Have an issue where I have installed new certificates on Centos 5 and modified the conf file for the following lines: SSLCertificateFile /etc/pki/tls.certs/name.crt SSLCertificateKeyFile ...
1
vote
0answers
27 views

Is it possible to configure windows server 2008 to do windows form authentication BEFORE client certificate authentication?

I have setup a lab on vmware with both of them. It works but it doesn't suit my business case. I would like to have windows form authentication first. If sucessfull I want to check client certificate. ...
0
votes
1answer
826 views

Windows 7 Wifi Certificate Trust Anchor

When attempting to connect to our company wireless while not on the domain, I receive a message saying that our RADIUS server provided a valid certificate issued by our root CA, but that the root CA ...
0
votes
1answer
1k views

Getting ASN1 bad tag error when trying to complete certificate request in IIS7

I have a multi-domain certificate I'm trying to install on IIS 7.0. When I use the IIS manager to complete certificate request, I get the error: There was an error while performing this operation. ...
3
votes
1answer
5k views

Setup IIS to require client certificate and to use anonymous authentication

Setup IIS to require client certificate and to use anonymous authentication I have a WCF web service for our customers to use. I want to protect this using client certificates. I will also use the ...
-4
votes
1answer
749 views

prompt for client certificate on IIS doesn't work with Firefox

I have a client certificate from startssl. I can login to their control panel with that certificate and Firefox. But with my asp.net website I am NOT prompted for the certificate only when using IE ...
4
votes
1answer
2k views

What causes automatic install of trusted root certificate authorities into local machine's certificate store?

I spend whole day by diagnosing issue with my test services using mutual HTTPS. Services are hosted in IIS 7 on a test server running Windows Server 2008 Enterprise edition. Suddenly few weeks ago ...
3
votes
3answers
789 views

Check if root ca certificate is installed

We are having a custom CA for our local-domains. The Root CA certificate is installed on all the corporate machines by default, but sometimes it happens that we have someone here who doesn't have it ...
1
vote
1answer
725 views

Windows CA to issue certificate to authenticate SSH to a Linux server

I have a Windows Server Root Certificate Authority, Linux SSH server, and users with Windows SSH clients. The Linux box is not part of the AD domain (and probably never will be [sigh]) OpenSSH 5.4 ...
0
votes
2answers
1k views

Prevent copying (exporting) private key from one machine to another?

We are considering using digital certs to verify that the machine connecting to our VPN service is in fact a company-owned machine. So one of my co-workers here mentioned that for a knowledgable user ...
0
votes
0answers
48 views

One HTTPS website per IP? [duplicate]

Possible Duplicate: Multiple SSL domains on the same IP address and same port? I don't understand this notion that only one https website can be run on one IP address (talking v4, if that ...
1
vote
2answers
230 views

Https for embedded devices, local addresses

I am trying to add https to the embedded devices I am working on. These devices are generally assigned local ip addresses and so cannot get their own ssl certificates. So essentially my question is ...
0
votes
1answer
160 views

IIS7 SSL Only Works on Local Machine

I have a website in IIS 7 with a self signed certificate. I can navigate to the website on my PC that is hosting it. If I navigate to the specific URL in the self signed certificate, I don't get any ...
2
votes
1answer
121 views

Create private key with CSR

I have a CSR file (as a text file) and the corresponding P7B certificate. My problem is that I have to create a P12 file on a machine where I do not have created the CSR. I have created the CSR in ...
3
votes
2answers
3k views

Can you generate a self signed certificate on Windows Server using CLI tools like certreq and certutil?

I need to quickly generate a self signed certificate on a Windows Server. I'd like to use the standard CLI tools that ship with it. I know I can use openssl.
0
votes
1answer
532 views

Exchange certificate questions

I got the following message The STARTTLS certificate will expire soon. Now I tried to create new certificates, but currently the old ones are still used. Questions: Can I backup the old certificate ...
1
vote
1answer
2k views

Generate .key and .crt from PKCS12 file?

How exactly would I generate a .key file and a .crt file from a .p12 file? Thanks.
0
votes
1answer
4k views

How can I get SBS2011 to issue certificates?

I want to use certificates to authenticate both client and server for a new internal service. Since all our servers already have the SBS (2011 Standard) server's Cert installed as a Trusted Root, ...
0
votes
2answers
2k views

Removing sites from IIS wildcard certificate error

When trying to remove a site from IIS this message comes up. “The certificate associated with the HTTPS binding of this site is also assigned to another site’s binding. Deleting this site will cause ...
1
vote
1answer
404 views

How to specify multiple root certificates for nginx client certificate verification?

For a project as part of the European Grid Infrastructure (EGI) we need SSL client certificate verification for a service running on nginx. As there are several root CAs allowed within EGI, we need ...
8
votes
3answers
11k views

How to avoid lftp Certificate verification error?

I'm trying to get my Pelican blog working. It uses lftp to transfer the actual blog to ones server, but I always get an error: mirror: Fatal error: Certificate verification: subjectAltName does not ...
2
votes
2answers
1k views

Allowing users in from an IP address without certificate client authentication

I need to allow access to my site without SSL certificates from my office network and with SSL certificates outside. Here is my configuration: <Directory /srv/www> AllowOverride All ...
1
vote
0answers
162 views

Server 2008R2 RemoteApp authentication asked twice

My Problem is when the client logs in RDweb, he is asked to enter his credentials again once he's tries to open an application. My applications are signed with a standard GoDaddy cert. Everything ...
0
votes
1answer
2k views

WPA2 enterprise: username/password-prompt-less setup on a mixed network: XP/SP3, Mac OS X, Linux, iOS

I asked a question recently about setting up WPA2 enterprise, and I have a couple of ancillary questions. First, regarding the use of the OpenSSL cnf files for the certificate generation. I have a ...
3
votes
1answer
557 views

How many user/supplicant certificates are needed for WPA2 enterprise on a small network?

I am running WPA2 enterprise for wireless access and I followed the instructions in /etc/raddb/certs/README and the freeRadius site howto. I also read the instructions in the privacywonk site. The ...
3
votes
1answer
870 views

How do I go about Improving wireless security at the office (Radius? Certs?)

EDIT 1: Our environment is mixed, majority OSX with a few Windows and Linux boxes. More importantly, Android and Apple cellphones will also need wireless access on a regular basis. We have a redhat ...
4
votes
2answers
9k views

802.1x automatically validate certificate in windows clients

We're deploying a wireless networking using Windows Server 2008 NAC as a RADIUS server. When Windows XP or 7 clients connect they initally fail to connect. In order to enable the client to connect we ...
1
vote
2answers
267 views

First SSL pageload slow on NGINX

I have recently purchased a QuickSSL certificate from GeoTrust, and I am using it on NGINX. Everything is fine, but there is a nasty second before the page actually loads. If I look at other SSL ...
0
votes
1answer
306 views

Jersey web-service token based on hostname

I recently built a RESTful service using Jersey and is currently used by 3 other systems internal to the network (not people). How can I make sure the requests to the service are honored only based ...
1
vote
1answer
723 views

Error in openssl s_client: “data length is too long”

I have an Ubuntu 12.04 server, and I'm trying to set up Apache to authenticate using LDAPS. I ran into some problems--see my previous question, where I concluded that the certificate on the LDAP ...
0
votes
2answers
1k views

Run SVN commands with self signed SSL cert

I am running the following command: svn info --non-interactive --trust-server-cert --no-auth-cache --xml "https://ommited/svn/YAMS" Unfortunately, I am getting the following error: ?xml ...
0
votes
2answers
692 views

The SSL certificate doesn't established

situation following: Windows Server 2008 R2 platform. Certificate installation in the IIS Manager occurs successfully with *.cer file but if I refresh the manager (F5), the certificate vanishes from ...
0
votes
1answer
1k views

How to set up certificate authentication for VPN access to TMG 2010

I found this article (link) on how to set up VPN access to TMG 2010. It's clearly written and easy to follow, however, there are some pre-requisites for this. As I am fairly new to Windows server ...