Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

0
votes
1answer
101 views

Install certification to acknowledge another server

I need to install a .cer to my apache server in order to comunicate to another server. Basically I have my server, x.x.x.100, this server has an script that uses SOAP to communicate to another ...
0
votes
1answer
86 views

openssl generate .key from CSR

A customer sent me a CSR and the .CER of a certificate for a linux server that I host. The customer does not have access to this machine. Is this enough data to generate a valid certificate? Is it ...
0
votes
1answer
211 views

RD Session Host Configuration doesn't list my SSL certificate

I'm trying to change SSL certificate from auto-generated to another one, e.g. custom self-signed made by makecert. But RD Session Host Configuration snap-in -> Connections -> RDP-Tcp -> ...
1
vote
1answer
384 views

Powershell: Fancy new cmdlet to install CRLs too?

So Win8.1 and 2012 R2 includes a neat new cmdlet to install certs: Import-Certificate [-FilePath] <String> [-CertStoreLocation <String> ] [-Confirm] [-WhatIf] [ <CommonParameters>] ...
1
vote
1answer
182 views

LDAPS Only Works on Domain Certificate Authority and Not on Other Domain Controllers - Active Directory Certificate Services - Windows Server 2008 R2

I have 3 Domain Controllers with Active Directory role installed on them. I installed Certificate Services on one of the Domain Controllers. I am able to LDAPS to it, but not the others even though ...
2
votes
1answer
412 views

Find expiration date of a certificate file which I do not have installed

I'm looking for a way to find the expiration of a certificate file (either .pfx or .cer) without installing it. I have access to read the file but can not install it.
1
vote
0answers
32 views

Transfer cacerts file to another das

I was wondering if its possible to transfer the cacerts.jks file to another glassfish DAS machine? The idea is to synchronize both das machines without having to import every certificate manually. ...
2
votes
0answers
1k views

SChannel “cannot find certificate in either LocalMachine or CurrentUser store”

We have an in-house application that requires the use of client SSL certificates to authenticate with a remote server (not under our control). This has worked without problems before but on deploying ...
1
vote
1answer
1k views

Can Windows 7 access an RD farm that uses SHA512/4096-bit certificates?

I have a Server 2012 RD farm that works fine if configured with the self-signed certs generated by Server Manager, but not with certs from our internal CA. With the self-signed certs, our remote ...
0
votes
1answer
481 views

install CA root trust certificate in Cent OS

i install SSL certificate in my web site and now i have some questions about it. my web site is working correctly in google chrome web browser but it's not working in firefox browser. one of my friend ...
5
votes
2answers
4k views

Fingerprint of PEM ssh key

I have a PEM file which I add to a running ssh-agent: $ file query.pem query.pem: PEM RSA private key $ ssh-add ./query.pem Identity added: ./query.pem (./query.pem) $ ssh-add -l | grep query 2048 ...
4
votes
4answers
17k views

Java Deployment Rule Set via AD Enterprise CA

My goal is to get a Java Deployment Rule Set in place in my organization, but I do not want to pay third-party certificate authority for a code signing cert when we have a working CA running through ...
0
votes
3answers
1k views

Certificate address mismatch warning GPO cannot be Disabled

I found the "Turn on certificate address mismatch warning" and I need to set it to Disabled. Seems like the Console is not accepting that option (I Can set it to enabled and it will work) and I'd like ...
3
votes
2answers
224 views

Using our own certificate authority for business email encryption

I've read the available similar questions on serverfault but I haven't quite found a definite answer to the security aspect of it - hence here's my question: I'm administrator of an office working ...
0
votes
1answer
124 views

Renewing a self-signed certificate

Is there a way to reset the expiry of a self signed X.509 certificate but keep both the public and the private key as they were? Technically this should be nothing more than a different date for the ...
2
votes
1answer
28 views

Installing SSL on Apache 2.x - self-signed errror

So I bought an SSL cert from GoDaddy and followed their instructions on how to get it signed, and downloaded and installed it. It's not working. It says the SSL certificate was self-signed and the ...
0
votes
2answers
1k views

Checking the issued and expiry dates for the certificates involved a certificate chain

Is it possible to check the issued and expiry dates for the certificates involved in a certificate chain by just passing a domain? I tired various openssl s_client attributes, but I am not able to ...
1
vote
1answer
599 views

iis Client Certificate Mapping Authentication

I have been googling this for hours. I cannot get my mapping to work on certain certificate fields. Fx this sample code: <iisClientCertificateMappingAuthentication enabled="true" ...
3
votes
1answer
51 views

Why can't I see all of the client certificates available when I visit my web site locally on Windows 7 IIS 7?

My team has recently moved to Windows 7 for our developer machines. We are attempting to configure IIS for application testing. Our application requires SSL and client certificates in order to ...
1
vote
1answer
1k views

How to Submit Certificate Request from Red Hat to Windows CA?

My Following Setup: Windows Server 2008 AD with CA Redhat Workstation Joined to AD I have used Openssl to generate a certificate request to be sent to the CA openssl req -nodes -newkey rsa:2048 ...
0
votes
1answer
959 views

Puppet agent not requesting cert

Trying to setup Puppet agent/master on a single machine (planning to install more agents once this is working). I'm mired down in the cert signing process right now, which feels like it should be ...
1
vote
1answer
80 views

Website authentication with a certificate from a different domain

My question: Is there a better way to enable authentication between 2 domains than what I'm doing below, and is Name Mapping the right thing to use? There are 2 domains; One is the primary ...
0
votes
1answer
247 views

HAProxy SSL connection error

Brand new to setting up SSL with HAProxy and Litespeed load balancer, just generated my certificate using the .csr and am trying to have HAProxy terminate SSL before sending it to the web worker ...
1
vote
1answer
136 views

Forgot passphrase for new SSL certificate

I've been requested by RapidSSL to reissue my SSL certificate to 2048 bits. I generated a key, CSR and got the certificate back from RapidSSL. Now, somehow, I've forgotten what Passphrase I used when ...
2
votes
3answers
104 views

Use personal SSL Certificate created on my own?

I'm new to SSL Certificates. I've seen some tutorials about creating personal certificates but I didn't go far reading. It seems that I can create a personal SSL Certificate and use it on my website, ...
1
vote
0answers
322 views

apache authentication with SSL certificate and SSLUserName

i just try to put an SSL authentification for a SVN server over https. I would like that the client certificate allow authorized person to check their repositories. <VirtualHost ...
0
votes
1answer
55 views

Can I use switch user “su” with keys / certificate?

I just locked myself out of SSH. Basically, I added three users to /etc/ssh/sshd_config using the AllowUsers directive, which is great because now they can login, but now I can't, and I'm the only ...
1
vote
2answers
1k views

Thunderbird not trusting certificate signed with self-signed authority

I have generated a self-signed certificate authority using mydomain.org as the common name. I imported the public certificate using Thunderbird's certificate manager under the "Authorities" tab. So ...
0
votes
1answer
2k views

Associate SSL certificate for SQL Server which does not use the FQDN

We would like to connect securely to SQL 2008 R2 over the internet for reporting purposes. Speed is not a huge concern for these smaller data sets, and users are going to be using simple reporting ...
0
votes
1answer
5k views

Error 0x8007274C connecting via SSTP VPN to Windows 2008r2 server

I'm setting up a VPN using a self-signed certificate. My certificate is was generated on the server and is installed on the server. It shows up in the MMC console under "Certificates (Local Computer) ...
0
votes
1answer
198 views

Configuring SSTP VPN server on Win2008r2 when server is at a dynamic dns address

I would like to install an SSTP VPN server on a Win2008r2 server that I use for personal purposes (not using Active Directory). I will have 3 or 4 of my computers and other mobile devices connecting ...
3
votes
1answer
632 views

Microsoft CRL URL's

We have a number of Exchange servers without access to the internet. When updating Exchange, the fact that all .NET assemblies are signed means the installer needs to check Microsoft's CRL during the ...
0
votes
1answer
428 views

Preventing Windows from deleteing our root CA

I am trying to create a Windows server with an IIS server that has a web site with client certificate authentication. The client certificates are signed by our own root CA. Because of that we must ...
3
votes
2answers
15k views

Renewing SBS2011 Exchange Self-Signed Certificate w/o changing home page in IE?

On a previous server when we used the built in SBS wizard to renew the certificate it worked, however it reset all of the computers on the domain's IE home page to companyweb. Is there a way to do ...
2
votes
3answers
5k views

Having issues connecting to a Windows 2012 VPN

Setting up Windows Server 2012 Datacenter as a VPN (with everything as default settings), I receive no errors upon installation, then I restart. Upon trying to connect to the VPN, here is what ...
1
vote
0answers
202 views

Always get a Security Error for Internal HTTPS Website

Full disclosure, I asked this question over at Ask Different (http://apple.stackexchange.com/questions/96776/always-get-a-security-error-for-internal-https-website) but didn't get much helpful ...
1
vote
2answers
7k views

SSL Error: self signed certificate in certificate chain

EDIT: AS the following documents describes http://www.novell.com/support/kb/doc.php?id=7002392 i've concatenated those files like this domain.crt sf_bundle.crt >> domain.pem and now the ...
0
votes
2answers
189 views

What's the difference between a certstore and a keystore?

I'm specifically using openssl in RHEL. What's the difference between a certstore and a keystore?
1
vote
0answers
253 views

Is it possible to view a user's certificate store while signed in as a different user? Windows Server 2008 R2

I'm currently migrating a Jenkins server and I need to install a certificate on the new machine for some of my builds. The problem is I'm not sure on which store to use and no one remembers the ...
2
votes
1answer
110 views

How to securely connect to multiple different LDAPS servers (Debian)

I'm trying to connect to multiple different LDAPS servers. A lot of the documentation I've seen recommends setting TLS_REQCERT never, but that strikes me as horribly unsecure to not verify the ...
0
votes
2answers
1k views

Installing SSL certificate on JBoss

I have a server that runs JBoss. When I type bad URL to that server it gives me version like this: JBossWeb/2.0.1.GA - what version of JBoss that would be? A SSL certificate will be bought and ...
0
votes
1answer
3k views

Getting CentOS 6 to trust a certificate from AD

I'm trying to get my CentOS server to trust a certificate I've installed from an active directory server (I converted the .cer to .pem earlier.) When I try to connect, the debug information is: ...
1
vote
2answers
45 views

What kind and how many Certificates are needed?

I have 3 ASP.NET-Web.Api Applications communicating together over https: Master on Server1 Slave1 on Server1 Slave2 on Server2 (Slave2 is basicly an other instance of Slave1 installed on another ...
0
votes
1answer
37 views

Certificate problems with Exchange

Ok I have 2 Exchange 2007 servers, and a Edgesync server. I noticed they had old certificates on them, and I installed stand alone Cert. Authority on them and gave them a new certificate (I backed ...
1
vote
2answers
87 views

Remote code integrity checking prior to execution

I'm contemplating putting a site online that could be an attractive target for hackers or employees of the host, who could alter the site's code to their benefit. Not wishing to self-host, I was ...
0
votes
4answers
1k views

Can I find out what certificate revocation server an application is contacting?

I'm trying to install an application on a machine running Windows XP Pro. There are two different servers being contacted, both using the same wildcard certificate (GoDaddy). One via https, one ...
1
vote
2answers
43 views

Certificates for clusters

I have read the various threads regarding clusters (behind the load balancer) and certificates. I am trying to implement this in our company. Firstly Our compnay policy is not to allow exporting of ...
1
vote
3answers
4k views

Virsh can't connect to ovirt hypervisor

I installed Ovirt and want to add network interface for NAT. So I need to connect to hypervisor by virsh and add nic. Ovirt installed on my local server, host (ovirt-engine.kvmserver.net) is on the ...
0
votes
2answers
666 views

Can IPv6 IPSec replace https/ssl for secure website network encryption?

Take away the 'authentication' part and just talk about the encryption part please! (Authentication is a different problem.) Example: a connection to http://ipv6.google.com can be encrypted via HTTPS ...
0
votes
2answers
920 views

Generate pfx certificate from pem rsa

I have a PEM RSA private key generated with opendkim: # dkim-genkey -t -s code001 -d domain.com and for use it with exchange, i need to convert it to pfx with this command: # openssl pkcs12 ...