Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

0
votes
1answer
457 views

Exchange certificate questions

I got the following message The STARTTLS certificate will expire soon. Now I tried to create new certificates, but currently the old ones are still used. Questions: Can I backup the old certificate ...
1
vote
1answer
1k views

Generate .key and .crt from PKCS12 file?

How exactly would I generate a .key file and a .crt file from a .p12 file? Thanks.
0
votes
1answer
4k views

How can I get SBS2011 to issue certificates?

I want to use certificates to authenticate both client and server for a new internal service. Since all our servers already have the SBS (2011 Standard) server's Cert installed as a Trusted Root, ...
0
votes
2answers
2k views

Removing sites from IIS wildcard certificate error

When trying to remove a site from IIS this message comes up. “The certificate associated with the HTTPS binding of this site is also assigned to another site’s binding. Deleting this site will cause ...
1
vote
0answers
300 views

How to specify multiple root certificates for nginx client certificate verification?

For a project as part of the European Grid Infrastructure (EGI) we need SSL client certificate verification for a service running on nginx. As there are several root CAs allowed within EGI, we need ...
8
votes
3answers
8k views

How to avoid lftp Certificate verification error?

I'm trying to get my Pelican blog working. It uses lftp to transfer the actual blog to ones server, but I always get an error: mirror: Fatal error: Certificate verification: subjectAltName does not ...
2
votes
2answers
944 views

Allowing users in from an IP address without certificate client authentication

I need to allow access to my site without SSL certificates from my office network and with SSL certificates outside. Here is my configuration: <Directory /srv/www> AllowOverride All ...
1
vote
0answers
160 views

Server 2008R2 RemoteApp authentication asked twice

My Problem is when the client logs in RDweb, he is asked to enter his credentials again once he's tries to open an application. My applications are signed with a standard GoDaddy cert. Everything ...
0
votes
1answer
1k views

WPA2 enterprise: username/password-prompt-less setup on a mixed network: XP/SP3, Mac OS X, Linux, iOS

I asked a question recently about setting up WPA2 enterprise, and I have a couple of ancillary questions. First, regarding the use of the OpenSSL cnf files for the certificate generation. I have a ...
3
votes
1answer
502 views

How many user/supplicant certificates are needed for WPA2 enterprise on a small network?

I am running WPA2 enterprise for wireless access and I followed the instructions in /etc/raddb/certs/README and the freeRadius site howto. I also read the instructions in the privacywonk site. The ...
3
votes
1answer
769 views

How do I go about Improving wireless security at the office (Radius? Certs?)

EDIT 1: Our environment is mixed, majority OSX with a few Windows and Linux boxes. More importantly, Android and Apple cellphones will also need wireless access on a regular basis. We have a redhat ...
4
votes
2answers
7k views

802.1x automatically validate certificate in windows clients

We're deploying a wireless networking using Windows Server 2008 NAC as a RADIUS server. When Windows XP or 7 clients connect they initally fail to connect. In order to enable the client to connect we ...
1
vote
2answers
243 views

First SSL pageload slow on NGINX

I have recently purchased a QuickSSL certificate from GeoTrust, and I am using it on NGINX. Everything is fine, but there is a nasty second before the page actually loads. If I look at other SSL ...
0
votes
1answer
279 views

Jersey web-service token based on hostname

I recently built a RESTful service using Jersey and is currently used by 3 other systems internal to the network (not people). How can I make sure the requests to the service are honored only based ...
1
vote
1answer
613 views

Error in openssl s_client: “data length is too long”

I have an Ubuntu 12.04 server, and I'm trying to set up Apache to authenticate using LDAPS. I ran into some problems--see my previous question, where I concluded that the certificate on the LDAP ...
0
votes
2answers
841 views

Run SVN commands with self signed SSL cert

I am running the following command: svn info --non-interactive --trust-server-cert --no-auth-cache --xml "https://ommited/svn/YAMS" Unfortunately, I am getting the following error: ?xml ...
0
votes
2answers
593 views

The SSL certificate doesn't established

situation following: Windows Server 2008 R2 platform. Certificate installation in the IIS Manager occurs successfully with *.cer file but if I refresh the manager (F5), the certificate vanishes from ...
0
votes
1answer
930 views

How to set up certificate authentication for VPN access to TMG 2010

I found this article (link) on how to set up VPN access to TMG 2010. It's clearly written and easy to follow, however, there are some pre-requisites for this. As I am fairly new to Windows server ...
3
votes
3answers
68 views

using main domain as a mail server

I have a mail server set up as mail.mydomain.com like most people do. Now I find out that if I want to secure both mail.mydomain.com and mydomain.com with ssl I need two SSl certificates (or one more ...
0
votes
1answer
813 views

Recipients Auto Rejecting Emails Sent With Exchange 2010 - Certificate Error

A strange problem recently developed with one of my Exchange 2010 servers. I have an exchange server setup as part of a Windows Small Business Server 2011 installation. The email for the domain was ...
11
votes
2answers
2k views

Does reissuing an SSL certificate invalidate the previously-issued certificate?

I used the "reissue certificate" functionality at a SSL certificate vendor (RapidSSL, FWIW) to get a new certificate - in doing so, I created and used a new private key and pass phrase. Will the ...
3
votes
1answer
72 views

SSL Certificate creation - Which ID type to choose?

I'm trying to find-out how important the "ID type" for a SSL certificate is. I'm trying to generate a cert from my firewall to upload to a CA, but having trouble deciding if I should choose an IP, a ...
0
votes
1answer
640 views

Solaris 11 ldap client configuration

Im am trying to migrate some web services (like wordpress / dokuwiki), which are connected to our ldap for user authentication, from solaris 10 to solaris 11. In solaris 10, you had the possibility to ...
4
votes
3answers
951 views

Can Windows log CryptoAPI CRL timouts?

I suspect that the process of building the CRL cache may cause latency in some applications. We have several .NET applications that occasionally "act slow" with no CPU or disk access. I suspect that ...
3
votes
1answer
2k views

How do I set up lighttpd for x.509 client certificate authentication

So far I've had HTTPS working for a long time, so I don't think there are any trouble with the server certificates. Now I tried to add this to lighttpd.conf: ssl.engine = "enable" ...
1
vote
1answer
448 views

Self-signed Certificate ( Makecert.exe or CA )

I have configure PowerShell Execution policy on Server as AllSigned, so i want to create a certificate for signing a ps1 script. Can you guide me, which Certificate Should i use? I want to used ...
2
votes
1answer
2k views

Clearing Java certificates cache (force reload certificates)

A simple question here. One application gave me this exception when trying to access a website with a expired certificate: java.security.cert.CertificateExpiredException So, I renewed the ...
2
votes
1answer
290 views

Can't request computer certificate

I am using MMC with the snaping of certificates. I am requesting certificates from a brand new installation of a CA. Requesting User certificates works perfectly. Requesting Computer certificates ...
1
vote
1answer
506 views

SSL Certificate install GlassFish or Apache or both?

I've got GlassFish 3.1.2 installed on Linux CentOS 6.2, but it's fronted by Apache web server version 2.2.21 using mod_jk. That is, all traffic to GlassFish passes through Apache port 80 via mod_jk. ...
1
vote
3answers
1k views

How can an OpenVPN server be setup to use multiple certificates?

The OpenVPN documentation sets up a single certificate from a single CA to be used for all clients. Is there a way to set the server to enable multiple certificates from different CAs so long as the ...
1
vote
2answers
2k views

WinHttpCertCfg not importing certificate

I need to setup a deployment script that imports an SSL certificate that my service uses. I have tried importing with WinHttpCertCfg and with CertMgr to no avail. Here are the command-line arguments ...
2
votes
0answers
127 views

add certificate to all files in EFS-folder with script

I try to set up collective access to EFS-folder. I want to add certificates of all users to all files in folder. Is it posible do with using powershell scripts or some another way? Thanks.
7
votes
4answers
3k views

What host name should the SSL certificate for an SMTP server contain?

I have a server foo.example.com at 192.0.2.1 It runs exim to receive e-mail for several of my domains. My domains each have an MX record pointing to mx.example.com, which resolves to 192.0.2.1 If I ...
1
vote
2answers
488 views

Sometimes RDP shows certificate warning and kerberos single sign-on does not work

I'm using Windows 7 and the Servers are Windows 2008 R2. So far there are at least 4 Servers that show this behavior. Sometimes I get a warning when trying to connect via RDP stating the certificate ...
1
vote
1answer
795 views

Active Directory Certificate Import Successful, but LDAP Authentication Still Fails

I'm having a difficult time getting to the root of this issue. We use LDAP for authentication purposes across several services, confluence, bamboo, sonar, gerrit, etc.. Our LDAP service provider is ...
0
votes
3answers
786 views

Purpose of the x509 certificate in metadata files on the IdP side (SSO structure)

In order to implement SSO, I have been working with some IdP and a Shibboleth SP install without being able to answer this question. On the IdP side I have a few metadata files that describes some ...
1
vote
0answers
585 views

Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP

Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)? ...
3
votes
1answer
1k views

Certificate problems with Apache LDAPS access

I have a Subversion server running on Ubuntu 11.04 using Apache, and I'm trying to hook the authentication up with LDAPS. I got the Apache config file set up to authenticate against LDAP (sans the S) ...
2
votes
2answers
4k views

How can I make apache request a client SSL certificate without needing to verify it against a known CA?

I'm using apache2 (2.2.3) to serve a site where I'd like to have clients authenticate with certificates. Since I only need to verify that a user presenting a particular certificate is the same user ...
2
votes
4answers
619 views

Do I really need client certificates to be signed by a trusted CA?

Suppose I have a site that I want users to be able to log into with client certificates. As I understand it, the client is presenting the site with the public half of a keypair and proving that they ...
1
vote
2answers
960 views

How do you change the cert template that IIS 7.5 uses automatically when you choose to “Create Domain Certificate”

In IIS, there is an option to "Create Domain Certificate." This works great except for one problem. The template that this process uses is the "Web Server" template in the CA which has a key with ...
2
votes
1answer
159 views

SSH host key changed - except it actually hasn't

I've just tried to SSH in to a server that I've been doing so without problems for a while, and received a warning that the server's host key has changed. But it hasn't! On the server, I've checked ...
1
vote
1answer
45 views

Does a VPN certificate request need to be encrypted

We have a Cisco 3000 VPN concentrator and use the Cisco VPN client to generate certificate requests, which we then create/authenticate on our certificate server. When the help desk generates the ...
2
votes
0answers
118 views

Certificate enrollment request chain not trusted

I am working on a MSFT lab for Direct Access, and need to create a Web certificate. The instructions ask be to do the following: On EDGE1, click Start, type mmc, and then press ENTER. Click ...
1
vote
2answers
1k views

SSL Certificate by GeoTrust not working

I have signed for an SSL Certificate (Quick SSL Premium) from Geotrust by my VPS provider (1&1). I, did exactly what it is indicated here, I added all of the directives at my subdomain's Virtual ...
1
vote
2answers
210 views

Would an invalid certificate cause an 0x8004010F sync error?

We just migrated from Exchange 2003 to 2007 which was a combo primary AD/DNS server and it has not gone smoothly. We are now down to getting a new certificate (a bureaucratic process thats out of my ...
1
vote
0answers
758 views

EC2 Windows: Certificate for local system with Thumbprint … is about to expire or already expired

I regularly see this error in the Windows Error Log on one of my EC2 instances: Certificate for local system with Thumbprint aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa is about to ...
5
votes
2answers
249 views

Safely install MDM Certificate in MDM Server

I am new to server technology.I know how to obtain an Apple iOS MDM Certificate and to use Apple iOS MDM features, we must: 1. Join Apple’s iOS Developer Enterprise Program. 2. Enroll 3. Register ...
0
votes
3answers
613 views

How to Enable multiple SSL vhosts and certificates on a single IP with Apache

I want to enable support in Apache for multiple SSL vhosts and certificates on a single IP address. My configuration file is as follows. Please help me: NameVirtualHost 196.196.1.117:443 ...
3
votes
4answers
142 views

How do certificates improve security?

I am trying to get my head round server certificates. Am I right in saying: A certificate binds to the requester (ie client), to prove their identity. The certificate at the time of creation is for a ...