Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

0
votes
3answers
2k views

Removing sites from IIS wildcard certificate error

When trying to remove a site from IIS this message comes up. “The certificate associated with the HTTPS binding of this site is also assigned to another site’s binding. Deleting this site will cause ...
1
vote
1answer
967 views

Windows CA to issue certificate to authenticate SSH to a Linux server

I have a Windows Server Root Certificate Authority, Linux SSH server, and users with Windows SSH clients. The Linux box is not part of the AD domain (and probably never will be [sigh]) OpenSSH 5.4 ...
5
votes
2answers
1k views

How to manually create Puppet CA and certificates?

I am wondering how to manually (using openssl instead of puppet ca command) create CA that would be usable by Puppet? The goal would be to script creation of such CA's to deploy them on multiple ...
-3
votes
0answers
14 views

SSL certificate with SAN for different domain

Are there any certificate authorities who will issue me a certificate with a SAN for a different (unrelated) domain? e.g.: SN: mail.example.com SAN: mail2.example.net I'd prefer domain validated ...
1
vote
1answer
22 views

Is capolicy.inf processed in full (or part) during server install, renewal, and issuing new certs

When installing a Windows CA, capol.inf confuses me. It seems that capol.inf does set defaults for the CA that can otherwise be done using certutil's registry functions (or regedit). It also ...
2
votes
1answer
139 views

How do I make a Cisco Ironport appliance send “linked certificates” for HTTPS inspection?

I have a PKI tree, and the ironport is a CA at the second level of the PKI tree, (for issuing HTTPS inspection certs) Although I deployed the root certificate to all clients, and chrome/IE work ...
16
votes
1answer
57k views

How do I view the details of a digital certificate .cer file?

I am using Windows and have been given a .cer file. How can I view the details of it?
0
votes
1answer
23 views

Can I use the same client certificate in multiple OpenVPN tunnels to the same server?

I have a simple setup like this: SERVER ---- INTERNET ---- CLIENT On SERVER I already have OpenVPN set up with a sertificate for CLIENT. On CLIENT I already have OpenVPN set up to contact the server ...
0
votes
0answers
53 views

How to stop Cyrus from serving root certificate?

Since changing the certificate for my cyrus instance I get the following warning whenever I sign with cyradm: cyradm --user cyrus --authz cyrus localhost verify error:num=19:self signed certificate ...
-3
votes
1answer
18 views

Buying a certificate for APIs [closed]

Our requirements are simply to secure end-to-end communication over https://. We need it from a CA that will be available on most android / iphones. The variety of certificates out there are simply ...
0
votes
1answer
1k views

Unable to renew certificate in certmgr.msc in windows 2003

I am trying to renew a certificate using CertManager on Windows 2003 Server. (I have also used the certificate plug-in in MMC but its the same thing.) I am logged in with the Administrator account. ...
0
votes
1answer
21 views

Client side certificates in IIS for accessing a web app only from an specific PC

We have an ASP.NET web app running in IIS, with about 200 users, some are inside our LAN and other ones are outside our LAN. Every user has a userid account and a password to login. Besides those ...
0
votes
1answer
13 views

Certificate not found error trying to set up PEAP-MS-Chap v2 authentication

I am trying to set up PEAP-MS-Chap v2 authentication for my VPN on a Windows 2003 SP2 server using a self-signed certificate. I have meticulously followed the PEAP certificate requirements when ...
2
votes
1answer
384 views

HTTPS Proxy - Is it possible to proxy a HTTPS request without having certificates setup?

HTTPS Proxy - Is it possible to proxy a HTTPS request without having certificates setup? In my case I'm still trying to workout how to do this with .NET HttpListener & HttpWebRequest. I've got ...
4
votes
1answer
912 views

500 OOPS: SSL: cannot load RSA private key vsftpd

I'm configuring vsfptd on debian 7.3, I'm trying to use ssl. I generate the certficates using this command: openssl req -x509 -nodes -days 1925 -newkey rsa:2048 -keyout ...
0
votes
0answers
11 views

Random HTTPS failures, rebooting helped

I'm a web developer working on a product that has a web component and an Android application component. The Android part connects to the same web backend that provides the website. On Friday a lot of ...
1
vote
3answers
283 views

Windows Server 2008 R2 - SHA2 based Cipher Suites

I am currently in the process of upgrading the SSL certificates for various websites that I manage from SHA1 to SHA2 compatible certificates. To date we have always used 'RSA' as the key exchange ...
0
votes
1answer
1k views

Recipients Auto Rejecting Emails Sent With Exchange 2010 - Certificate Error

A strange problem recently developed with one of my Exchange 2010 servers. I have an exchange server setup as part of a Windows Small Business Server 2011 installation. The email for the domain was ...
5
votes
1answer
1k views

certutil -ping fails with 30 seconds timeout - what to do?

The certificate store on my Win7 box is constantly hanging. Observe: C:\>1.cmd C:\>certutil -? | findstr /i ping -ping -- Ping Active Directory Certificate Services Request ...
5
votes
2answers
2k views

OpenSSL: how to generate a CSR with interactively solicited Subject Alternative Names (SANs)?

I wish to configure OpenSSL such that when running openssl req -new to generate a new certificate signing request, I am prompted for any alternative subject names to include on the CSR. I have added ...
3
votes
2answers
149 views

Do I need to purchase a trusted cert for offline environment?

I have a webserver used self-sign cert which is not connected to internet and those connect to my webserver also have no connection to internet, in such environment, do I need to purchase a trusted ...
3
votes
3answers
3k views

suppress warnings from windows live mail untrusted cerficate ssl

Hi we have setup our own mailserver using ssl. Each time I start up windows live mail, in comes up with an annoying message that "The server you are connected to is using a security certificate that ...
0
votes
1answer
31 views

RDP Certificate/s for Static IP+Port/s

I need to RDP into multiple machines behind an external static IP. The method I'm using is to port forward selected ports to a target IP:3389. E.g. forward 100.110.120.130:10001 to ...
-1
votes
0answers
68 views

Differences between Exchange's “default” SMTP certificate and others enabled for SMTP?

I know that: You can enable the SMTP service for multiple certificates in Exchange The last certificate enabled for SMTP becomes the "default SMTP certificate" My question: What are the ...
17
votes
4answers
1k views

Where do companies typically store SSL certificates for future use?

We recently bought a wildcard SSL cert for our domain. We converted all of the certs to a Java keystore, but now we are asking ourselves where we should store these for later use. Do people use ...
1
vote
0answers
20 views

How does one create a certificate request for a managed service account in Windows?

I have a managed service account which needs a certificate in its personal store for decryption. I tried opening the Certificates snap-in and pointing to the service, but when I right-click on the ...
0
votes
1answer
24 views

Powershell to transfer certificates to a new PC - how to determine if certificate is exportable

I'm using the following powershell to get a list of certificates including any archived ones so that I can easily transfer them to a new PC $store=new-object ...
0
votes
1answer
1k views

Windows 7 Wifi Certificate Trust Anchor

When attempting to connect to our company wireless while not on the domain, I receive a message saying that our RADIUS server provided a valid certificate issued by our root CA, but that the root CA ...
0
votes
0answers
13 views

Non-domain log forwarding certificate types

I'm trying to set up a source initiated subscription (Log forwarding) where the event source server is not in the same domain as the event collector server. I'm following these steps. It states that ...
0
votes
1answer
16 views

Can a client certificate be revoked and reissued with the same name in OpenVpn?

Can a client certificate be revoked and reissued with the same name in OpenVpn? Please Help.
4
votes
1answer
238 views

IIS HTTPS Host Headers

In IIS I need to map www.example.com and example.com to use a specific SSL certificate. I have tried using appcmd and editing applicationHost.config but I don't see how to tie each host-header to a ...
1
vote
1answer
43 views

the same certificates are sold at different prices?

I've encountered so many times with this situation. For example everybody know if I buy a Positive SSL for a year from a reseller, its price is about $5.95 . If I buy the certificate from CA ...
0
votes
1answer
32 views

Work Folders / IIS - Using Wrong Certificate - Ignoring Bindings

I can't seem to get Work Folders to serve using the correct certificate. I've bound it via netsh to a wild card certificate, and when I check "netsh http show sslcert" every binding uses the correct ...
3
votes
0answers
54 views

OCSP stapling with nginx

I'm having trouble with OCSP stapling in nginx. So I start up the openssl ocsp daemon, and then I visit my site. Then it says Invalid request. I am using a private PKI and CA. SSL key: 8192bit DH key ...
2
votes
3answers
13k views

Peer's Certificate has been revoked

I just upgraded our web server with a renewed cert as our current cert expires later this week. When I browse to our site via FF it is throwing this error: Secure Connection Failed An error ...
0
votes
0answers
44 views

Exchange 2010 can't display certificate

We have a problem with our exchange 2010 certificate for the hybrid mode with Office365. Server: "Windows server 2008 R2 Sp1" Exchange: "Exchange Server 2010 SP3 14.03.0123.004" When we : Try to ...
0
votes
0answers
28 views

Is it possible to use RADIUS with client certificate for Checkpoint VPN?

I have Checkpoint Gaia R77 acting as VPN gateway, and Microsoft NPS acting as RADIUS. Is it possible to use client certificates for VPN authentication against RADIUS server? I know for sure that ...
1
vote
1answer
42 views

Freeradius TLS cetificate(win 7 and previous)

I'm configuring FreeRADIUS 2.2.6. I use TLS because TTLS is not supported by windows 7. With Windows 8.1 the WiFi connection works very well without installing certificate With Windows 7 and ...
0
votes
1answer
43 views

Allow in-house application administrative rights within corporate AD domain

We have a couple of in-house developed application in the company and those application need to be able to use "C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe" in order to register ...
1
vote
0answers
101 views

How to set up MS Azure VPN with the password authentication?

I'm trying to connect to the MS Azure VPN. I installed the Client certificate and got access to the VPN network. But now I need, the system request the password when somebody is trying to connect to ...
0
votes
2answers
997 views

Kloxo/CentOS 5.7 install .p12 certificate [closed]

I have just got a free StartSSL certificate, I received a .p12 file, and only a .key file. I'm not really sure how to install this on my server and replace the current one. It's running Kloxo latest ...
17
votes
1answer
16k views

How to inspect remote SMTP server's TLS certificate?

We have an Exchange 2007 server running on Windows Server 2008. Our client uses another vendor's mail server. Their security policies require us to use enforced TLS. This was working fine until ...
1
vote
1answer
1k views

Certificate 'not verified' when doing 802.x1 authentication on Apple ios

I've setup a new wifi network including a Freeradius server. Everything works fine except that Apple iOS gives a 'certificate not verified' warning when connecting. When the user accept the ...
0
votes
2answers
1k views

Installing SSL certificate on JBoss

I have a server that runs JBoss. When I type bad URL to that server it gives me version like this: JBossWeb/2.0.1.GA - what version of JBoss that would be? A SSL certificate will be bought and ...
8
votes
5answers
12k views

How to create a multi-domain self-signed certificate for Apache2?

I've got a little private webserver where I have several virtualhosts. I know that it's impossible to assign a certificate to each individual virtualhost, because the server finds out which ...
0
votes
0answers
20 views

Extra certs issue with Nginx SSL config

It seems that I've set up my SSL wrong. SSL labs gives me the following: https://www.ssllabs.com/ssltest/analyze.html?d=pitot.io&hideResults=on The issue in question is "extra certs". This ...
22
votes
3answers
5k views

How do I create the identity certificate required to setup Mobile Device Management on an iOS device?

I'm trying to provision an iOS device to be managed using the Apple MDM capabilities. Using the iPhone Configuration Utility, I'm trying to create a configuration profile. Under the Mobile Device ...
2
votes
1answer
41 views

Can I use a self-signed certificate in Tomcat for private APIs and a commercial certificate for public pages?

I distribute a Java desktop application that needs to communicate with some RESTful APIs served by embedded Tomcat within a Spring Boot webapp. I was planning on using a self-signed certificate for ...
1
vote
3answers
663 views

ADFS and relying party token-signing certificates

I haven't quite gotten the grasp of relying party token-signing certificate's functionality with ADFS 2.0 / 3.0. Once the automatic self-signed certificate roll-over occurs (by default), there are ...
1
vote
0answers
29 views

Do I need my certificate server?

Good afternoon. I'm getting ready to replace one of my DC's and noticed it is using the Certification Services role on it. I looked and we have about 8 outstanding certificates that have yet to ...