Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

4
votes
0answers
857 views

500 OOPS: SSL: cannot load RSA private key vsftpd

I'm configuring vsfptd on debian 7.3, I'm trying to use ssl. I generate the certficates using this command: openssl req -x509 -nodes -days 1925 -newkey rsa:2048 -keyout ...
0
votes
1answer
27 views

RDP Certificate/s for Static IP+Port/s

I need to RDP into multiple machines behind an external static IP. The method I'm using is to port forward selected ports to a target IP:3389. E.g. forward 100.110.120.130:10001 to ...
-1
votes
0answers
42 views

Differences between Exchange's “default” SMTP certificate and others enabled for SMTP?

I know that: You can enable the SMTP service for multiple certificates in Exchange The last certificate enabled for SMTP becomes the "default SMTP certificate" My question: What are the ...
1
vote
3answers
111 views

Windows Server 2008 R2 - SHA2 based Cipher Suites

I am currently in the process of upgrading the SSL certificates for various websites that I manage from SHA1 to SHA2 compatible certificates. To date we have always used 'RSA' as the key exchange ...
17
votes
4answers
1k views

Where do companies typically store SSL certificates for future use?

We recently bought a wildcard SSL cert for our domain. We converted all of the certs to a Java keystore, but now we are asking ourselves where we should store these for later use. Do people use ...
1
vote
0answers
18 views

How does one create a certificate request for a managed service account in Windows?

I have a managed service account which needs a certificate in its personal store for decryption. I tried opening the Certificates snap-in and pointing to the service, but when I right-click on the ...
0
votes
1answer
22 views

Powershell to transfer certificates to a new PC - how to determine if certificate is exportable

I'm using the following powershell to get a list of certificates including any archived ones so that I can easily transfer them to a new PC $store=new-object ...
0
votes
1answer
1k views

Windows 7 Wifi Certificate Trust Anchor

When attempting to connect to our company wireless while not on the domain, I receive a message saying that our RADIUS server provided a valid certificate issued by our root CA, but that the root CA ...
1
vote
1answer
936 views

Windows CA to issue certificate to authenticate SSH to a Linux server

I have a Windows Server Root Certificate Authority, Linux SSH server, and users with Windows SSH clients. The Linux box is not part of the AD domain (and probably never will be [sigh]) OpenSSH 5.4 ...
0
votes
0answers
10 views

Non-domain log forwarding certificate types

I'm trying to set up a source initiated subscription (Log forwarding) where the event source server is not in the same domain as the event collector server. I'm following these steps. It states that ...
0
votes
1answer
14 views

Can a client certificate be revoked and reissued with the same name in OpenVpn?

Can a client certificate be revoked and reissued with the same name in OpenVpn? Please Help.
4
votes
1answer
238 views

IIS HTTPS Host Headers

In IIS I need to map www.example.com and example.com to use a specific SSL certificate. I have tried using appcmd and editing applicationHost.config but I don't see how to tie each host-header to a ...
5
votes
2answers
1k views

How to manually create Puppet CA and certificates?

I am wondering how to manually (using openssl instead of puppet ca command) create CA that would be usable by Puppet? The goal would be to script creation of such CA's to deploy them on multiple ...
1
vote
1answer
38 views

the same certificates are sold at different prices?

I've encountered so many times with this situation. For example everybody know if I buy a Positive SSL for a year from a reseller, its price is about $5.95 . If I buy the certificate from CA ...
0
votes
1answer
25 views

Work Folders / IIS - Using Wrong Certificate - Ignoring Bindings

I can't seem to get Work Folders to serve using the correct certificate. I've bound it via netsh to a wild card certificate, and when I check "netsh http show sslcert" every binding uses the correct ...
-1
votes
0answers
15 views

Mutliple SSTP Certificates for RRAS Server

Is it possible to use multiple sstp certificates at a time in Routing and remote access services server. Any references are highly appreciated. Thank You.
3
votes
0answers
38 views

OCSP stapling with nginx

I'm having trouble with OCSP stapling in nginx. So I start up the openssl ocsp daemon, and then I visit my site. Then it says Invalid request. I am using a private PKI and CA. SSL key: 8192bit DH key ...
2
votes
3answers
13k views

Peer's Certificate has been revoked

I just upgraded our web server with a renewed cert as our current cert expires later this week. When I browse to our site via FF it is throwing this error: Secure Connection Failed An error ...
0
votes
1answer
1k views

Unable to renew certificate in certmgr.msc in windows 2003

I am trying to renew a certificate using CertManager on Windows 2003 Server. (I have also used the certificate plug-in in MMC but its the same thing.) I am logged in with the Administrator account. ...
0
votes
0answers
40 views

Exchange 2010 can't display certificate

We have a problem with our exchange 2010 certificate for the hybrid mode with Office365. Server: "Windows server 2008 R2 Sp1" Exchange: "Exchange Server 2010 SP3 14.03.0123.004" When we : Try to ...
0
votes
0answers
18 views

Is it possible to use RADIUS with client certificate for Checkpoint VPN?

I have Checkpoint Gaia R77 acting as VPN gateway, and Microsoft NPS acting as RADIUS. Is it possible to use client certificates for VPN authentication against RADIUS server? I know for sure that ...
1
vote
1answer
31 views

Freeradius TLS cetificate(win 7 and previous)

I'm configuring FreeRADIUS 2.2.6. I use TLS because TTLS is not supported by windows 7. With Windows 8.1 the WiFi connection works very well without installing certificate With Windows 7 and ...
0
votes
1answer
42 views

Allow in-house application administrative rights within corporate AD domain

We have a couple of in-house developed application in the company and those application need to be able to use "C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe" in order to register ...
1
vote
0answers
69 views

How to set up MS Azure VPN with the password authentication?

I'm trying to connect to the MS Azure VPN. I installed the Client certificate and got access to the VPN network. But now I need, the system request the password when somebody is trying to connect to ...
0
votes
2answers
987 views

Kloxo/CentOS 5.7 install .p12 certificate [closed]

I have just got a free StartSSL certificate, I received a .p12 file, and only a .key file. I'm not really sure how to install this on my server and replace the current one. It's running Kloxo latest ...
0
votes
1answer
1k views

Recipients Auto Rejecting Emails Sent With Exchange 2010 - Certificate Error

A strange problem recently developed with one of my Exchange 2010 servers. I have an exchange server setup as part of a Windows Small Business Server 2011 installation. The email for the domain was ...
15
votes
1answer
16k views

How to inspect remote SMTP server's TLS certificate?

We have an Exchange 2007 server running on Windows Server 2008. Our client uses another vendor's mail server. Their security policies require us to use enforced TLS. This was working fine until ...
5
votes
1answer
1k views

certutil -ping fails with 30 seconds timeout - what to do?

The certificate store on my Win7 box is constantly hanging. Observe: C:\>1.cmd C:\>certutil -? | findstr /i ping -ping -- Ping Active Directory Certificate Services Request ...
1
vote
1answer
1k views

Certificate 'not verified' when doing 802.x1 authentication on Apple ios

I've setup a new wifi network including a Freeradius server. Everything works fine except that Apple iOS gives a 'certificate not verified' warning when connecting. When the user accept the ...
0
votes
2answers
1k views

Installing SSL certificate on JBoss

I have a server that runs JBoss. When I type bad URL to that server it gives me version like this: JBossWeb/2.0.1.GA - what version of JBoss that would be? A SSL certificate will be bought and ...
8
votes
5answers
11k views

How to create a multi-domain self-signed certificate for Apache2?

I've got a little private webserver where I have several virtualhosts. I know that it's impossible to assign a certificate to each individual virtualhost, because the server finds out which ...
0
votes
0answers
20 views

Extra certs issue with Nginx SSL config

It seems that I've set up my SSL wrong. SSL labs gives me the following: https://www.ssllabs.com/ssltest/analyze.html?d=pitot.io&hideResults=on The issue in question is "extra certs". This ...
22
votes
3answers
5k views

How do I create the identity certificate required to setup Mobile Device Management on an iOS device?

I'm trying to provision an iOS device to be managed using the Apple MDM capabilities. Using the iPhone Configuration Utility, I'm trying to create a configuration profile. Under the Mobile Device ...
2
votes
1answer
28 views

Can I use a self-signed certificate in Tomcat for private APIs and a commercial certificate for public pages?

I distribute a Java desktop application that needs to communicate with some RESTful APIs served by embedded Tomcat within a Spring Boot webapp. I was planning on using a self-signed certificate for ...
1
vote
3answers
457 views

ADFS and relying party token-signing certificates

I haven't quite gotten the grasp of relying party token-signing certificate's functionality with ADFS 2.0 / 3.0. Once the automatic self-signed certificate roll-over occurs (by default), there are ...
1
vote
0answers
27 views

Do I need my certificate server?

Good afternoon. I'm getting ready to replace one of my DC's and noticed it is using the Certification Services role on it. I looked and we have about 8 outstanding certificates that have yet to ...
6
votes
1answer
2k views

Unable to generate certificate with Subject Alternate Name using Java 1.7 keytool utility

I'm having an issue generating a keypair with subject alternate name using the Java keytool utility from Java 1.7. I'm attempting to follow the instructions found here. An example of the command I'm ...
2
votes
0answers
128 views

How do I make a Cisco Ironport appliance send “linked certificates” for HTTPS inspection?

I have a PKI tree, and the ironport is a CA at the second level of the PKI tree, (for issuing HTTPS inspection certs) Although I deployed the root certificate to all clients, and chrome/IE work ...
0
votes
1answer
38 views

Which L1K entrust certificates should be kept private?

One of our client has made an update to his SSL certificate and he did send us a procedure to update the certificate on our side. They also provided the L1Kchain.txt (that should be converted to a ...
3
votes
2answers
273 views

Exchange 2010 SP1 Certificate renewal, the new rule not allowing local intranet domains and will this change mail flow?

I'm in a pickle with the infamous "The Security certificate has Expired or is not yet valid" message and I know it is due to our (multi domain name certificate; or I think that is called a SAN cert? ...
8
votes
2answers
676 views

Is this SSL certificate chain broken and how to fix it?

For the SSL cert on the domain example.com, some tests tell me that the chain is incomplete and since Firefox keeps its own certificate store, it might fail on Mozilla (1, 2, 3). Others tell me it is ...
1
vote
1answer
155 views

Require smart cards for connections to Windows 2012 remote access server

We have a Windows 2012 server accepting VPN connections over SSTP and authenticating them using the Network Policy Server feature on the same server. For client authentication we've set it up to ...
5
votes
1answer
2k views

New server unable to fetch configuration from Puppetmaster due to some ssl error

Three machines in the production environment had some hardware issues and were decommissioned. The infrastructure team has reinstalled them and gave them the same hostnames and IP addresses. On the ...
0
votes
0answers
89 views

Puppet Master doesn't get certificate request from agent

I have a puppetmaster server and four puppet agent clients. Here I'm attaching my puppet.conf files and hosts in all node. When I call 'puppet cert list' it returns nothing. But, when called with ...
0
votes
1answer
68 views

How to give a user access to the Certificate Store on Windows Server 2012?

I've battling an issue for the last couple of days that I cannot seem to resolve. I'm not an administrator although I have some knowledge about some administrative tasks. I have a PowerShell script ...
2
votes
1answer
4k views

Generate .key and .crt from PKCS12 file?

How exactly would I generate a .key file and a .crt file from a .p12 file? Thanks.
-1
votes
1answer
42 views

How to create certificates for local network

I have a local network (a intranet of about 50 to 70 computers) where is a Windows Server 2008 with a ASP.NET MVC application. To encrypt the connection with HTTPS i need a server certificate (not ...
2
votes
2answers
2k views

OS X Not Trusting Thawte Primary Root CA - G3

We recently renewed our Nginx webserver's Thawte SSL certificate. Previously we'd been using SHA1 as the signing algorithm, but this time used SHA256 which leads to a new root certificate known as ...
11
votes
4answers
14k views

How to avoid lftp Certificate verification error?

I'm trying to get my Pelican blog working. It uses lftp to transfer the actual blog to ones server, but I always get an error: mirror: Fatal error: Certificate verification: subjectAltName does not ...
0
votes
0answers
56 views

Which browsers and OSes supports ECC based SSL certificates?

We are evaluating whether to buy a RSA based certificate or a ECC based certificate. RSA is older and is supported by all browsers. ECC is newer, they state it is faster due requiring smaller key ...