Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

0
votes
0answers
7 views

Sonicwall SSLVPN Godaddy Certificate Trust Issues

Okay, I have a Sonicwall E5500 I'm trying to get SSLVPN working with my Godaddy SSL wildcard certificate. It seems to only throw errors when I try to use this certificate for the SSLVPN port. ...
1
vote
1answer
41 views

Group policy removes certificate from personal store

We have a Code Signing certificate that is issued by our enterprise CA. We are using a group policy to deploy this certificate to the Trusted Publishers store on our domain computers. This works as ...
5
votes
1answer
4k views

New server unable to fetch configuration from Puppetmaster due to some ssl error

Three machines in the production environment had some hardware issues and were decommissioned. The infrastructure team has reinstalled them and gave them the same hostnames and IP addresses. The aim ...
6
votes
1answer
135 views

OCSP stapling with nginx

I'm having trouble with OCSP stapling in nginx. So I start up the openssl ocsp daemon, and then I visit my site. Then it says Invalid request. I am using a private PKI and CA. SSL key: 8192bit DH key ...
13
votes
6answers
18k views

How to avoid lftp Certificate verification error?

I'm trying to get my Pelican blog working. It uses lftp to transfer the actual blog to ones server, but I always get an error: mirror: Fatal error: Certificate verification: subjectAltName does not ...
3
votes
2answers
32 views

StartSSL cert doesn't work with Dovecot/OpenSMTPD

I've an issue with my StartSSL certificate. When I try to use it to activate SSL encryption on Dovecot, I get the following error in my log when a client attempt a connection to the imap server : ...
2
votes
3answers
33 views

Issuing own certificates for signing software

We have a windows based infrastructure. Recently I was asked by our software developer if we can issue our own certificates to sign some small programs we're sending to out partners. But I don't fully ...
0
votes
1answer
34 views

Nginx proxying http to https with client certificate

We have an application that is not client-certificate aware and must consume a client-certificate authenticated web-service. To fix this, we're trying to use Nginx to reverse proxy a local (http) url ...
2
votes
1answer
1k views

Windows CA to issue certificate to authenticate SSH to a Linux server

I have a Windows Server Root Certificate Authority, Linux SSH server, and users with Windows SSH clients. The Linux box is not part of the AD domain (and probably never will be [sigh]) OpenSSH 5.4 ...
5
votes
2answers
2k views

How to manually create Puppet CA and certificates?

I am wondering how to manually (using openssl instead of puppet ca command) create CA that would be usable by Puppet? The goal would be to script creation of such CA's to deploy them on multiple ...
4
votes
3answers
7k views

SSLCertificateChainFile Deprecation Warning on Apache 2.4.8+

We have an SSL Certificate for our website from Network Solutions. After upgrading Apache/OpenSSL to version 2.4.9, I now get the following warning when starting HTTPD: AH02559: The ...
478
votes
3answers
419k views

What is a Pem file and how does it differ from other OpenSSL Generated Key File Formats?

I am responsible for maintaining two Debian servers. Every time I have to do anything with security certificates, I Google for tutorials and beat away until it finally works. However, in my searches ...
0
votes
1answer
1k views

Unable to renew certificate in certmgr.msc in windows 2003

I am trying to renew a certificate using CertManager on Windows 2003 Server. (I have also used the certificate plug-in in MMC but its the same thing.) I am logged in with the Administrator account. ...
0
votes
0answers
41 views

Tomcat two way SSL with APR loses client certificate after a few requests

I found that when accessing a web application that uses client certificate authentication run on Tomcat/APR (on Windows) with Firefox or Chrome, the client cert is "lost" after a short while. To the ...
0
votes
0answers
14 views

EFS can decrypt a file but not re-encrypt after modification

I have a Windows 2008 R2 server with a shared folder containing an encrypted subfolder (EFS) for each user with important files. For security reasons 2 additional DRA's have been configured on the ...
4
votes
1answer
1k views

500 OOPS: SSL: cannot load RSA private key vsftpd

I'm configuring vsfptd on debian 7.3, I'm trying to use ssl. I generate the certficates using this command: openssl req -x509 -nodes -days 1925 -newkey rsa:2048 -keyout ...
4
votes
2answers
961 views

Certificate Mismatch RDS Session Host

I've been banging my head against this for the last few days. I have a server 2012 remote desktop setup as follows: 1 Gateway Server 1 RD Web Access Serve 1 Session Broker, which is also a session ...
0
votes
1answer
2k views

Recipients Auto Rejecting Emails Sent With Exchange 2010 - Certificate Error

A strange problem recently developed with one of my Exchange 2010 servers. I have an exchange server setup as part of a Windows Small Business Server 2011 installation. The email for the domain was ...
1
vote
1answer
32 views

Create a self-signed certificate to exchange SSL in W2003 SB

I'm doing a migration of some accounts in a local exchange server (W2003 server SB). Because of a limitation of O365 that seems to need SSL 993 connection to perform the IMAP migration, i need to ...
2
votes
1answer
869 views

Import CER file into NTAuth Store on Windows Server 2003

I have to import a third party CER file into the NTAuth Store on a Windows server 2003 machine. I followed the as described in the Microsoft documentation at http://support.microsoft.com/kb/295663, ...
0
votes
0answers
11 views

How to disable some ciphers in nsSSL3ciphers command?

Referring to Sun Directory Server Man Page Reference, can anybody tell whether - or + is really needed for scenario? I need to: enable only TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, and disable ...
6
votes
1answer
1k views

certutil -ping fails with 30 seconds timeout - what to do?

The certificate store on my Win7 box is constantly hanging. Observe: C:\>1.cmd C:\>certutil -? | findstr /i ping -ping -- Ping Active Directory Certificate Services Request ...
0
votes
0answers
43 views

How to create a SSL certificate using SSL certificate text?

I have received a certificate from StartSSL for my domain in pure text which looks somewhat like: -----BEGIN CERTIFICATE----- [...]Many letters and digits[...] -----END CERTIFICATE----- I'm trying ...
2
votes
1answer
1k views

Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP

Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)? ...
0
votes
2answers
24 views

How to get CSR Value from KeyChain Access

So...probably a dumb question but I followed the instructions here And I'm trying to upload my CSR to digicert where the format is suppose to look like this -----BEGIN CERTIFICATE REQUEST----- ...
0
votes
1answer
22 views

What is the Difference Between An Immediate Signing Certificate and an Intermediate Certificate?

I am doing some work with AWS, and in the process of uploading my certificate to AWS, the certificate chain I am uploading is throwing an error that says, The certificate chain must start with ...
0
votes
1answer
36 views

Certification Authority CPS VS certificate template crypyography

I'm really confused,When I choose cryptography service provider for certification authority (RSA # microsoft software key storage provider), why again should I choose rsa algorithm at new ...
0
votes
0answers
40 views

Unable to load Cert into OpenLDAP userCertificate attribute

I having troubles to add particular cert into userCertificate attribute (DER encoded certificate) in standard scheme of openldap-servers-2.4.39-3.el7.x86_64 running on Centos7 Slapd uses: include ...
2
votes
4answers
13k views

Peer's Certificate has been revoked

I just upgraded our web server with a renewed cert as our current cert expires later this week. When I browse to our site via FF it is throwing this error: Secure Connection Failed An error ...
4
votes
0answers
96 views

How to get OpenSSH to use OCSP for revocation

As the title says, is there any (free) library, patch, etc. that allows OpenSSH to be configured to check x.509 certificate revocation via OCSP (online certificate status protocol)? If so, can you ...
0
votes
1answer
21 views

Client certificate authentication with no access to private keys

We are trying to set up client certificate authentication for VPN users on Cisco ASA. User certificate store is being used to complete the authentication. The problem we are running into is that the ...
1
vote
1answer
636 views

Certreq -retrieve can't find the specified CA

I'm currently writing a Powershell script and have run into a bit of a roadblock. Basically, the script requests, approves, and retrieves new certificates from our CA using certreq.exe and ...
12
votes
5answers
7k views

What host name should the SSL certificate for an SMTP server contain?

I have a server foo.example.com at 192.0.2.1 It runs exim to receive e-mail for several of my domains. My domains each have an MX record pointing to mx.example.com, which resolves to 192.0.2.1 If I ...
3
votes
1answer
226 views

OpenSSL always shows “unsupported” for all subjectAltName “otherName” UTF8 values

It seems like OpenSSL is broken when trying to read back subjectAltName/otherName/UTF8 values that were written by itself: The relevant openssl.cnf configuration (using an official but random OID): ...
1
vote
1answer
431 views

Certificates compartments (certmgr.msc)?

After reading a while , Im trying to understand what kind of certificates will be found at : Personal Other People Trusted Root Certicfiation Authorities will personal will contains only private ...
0
votes
2answers
31 views

Where can you get an ADFS token signing certificate template

The topic says it all. Had anyone generated a self signed token signing cert from a template and where can you download a template (not a tool like makecert)? This is not the generic SSL cert, but a ...
3
votes
1answer
251 views

Which browsers and OSes supports ECC based SSL certificates?

We are evaluating whether to buy a RSA based certificate or a ECC based certificate. RSA is older and is supported by all browsers. ECC is newer, they state it is faster due requiring smaller key ...
1
vote
4answers
2k views

SSL Brand vs EV SSL

A few years ago I switched from using Thawte SSL's (a verisign company) to Verisign because of the better name recognition Verisign provides. To that end I've been happy with it and believe it gave ...
0
votes
0answers
14 views

'Generic' Certificates for RADIUS authentication/Encryption (weird?)

Situation: I have a test environment with Server 2008 that's a DC and has NPS for RADIUS authentication/encryption for wireless, and AD CS installed for the self signed cert. As it stands now, my ...
5
votes
5answers
21k views

Java Deployment Rule Set via AD Enterprise CA

My goal is to get a Java Deployment Rule Set in place in my organization, but I do not want to pay third-party certificate authority for a code signing cert when we have a working CA running through ...
0
votes
0answers
19 views

Trouble setting up MACBook to Cisco RV042 VPN

I am trying to create a VPN connection from a MacBook Pro running OS X 10.9.5 to a Cisco RV 042 Firewall/Router. Using the MacBook Pro built in VPN client software. I have exported the client ...
1
vote
1answer
11 views

Extract Certificate Information automatically

In my current setting I have 16 production servers and another 16 to 20 on Dev and QA servers. I also have a lot of certificates in them. We are trying to inventory everything so that we dont miss out ...
0
votes
2answers
101 views

Using an SSL certificate in multiple locations

I have a website hosted in the UK and I also have an organisation in South Africa hosting my company application online for web access. I want to implement SSL for both servers, as it requires login ...
2
votes
2answers
2k views

Windows 7 Wifi Certificate Trust Anchor

When attempting to connect to our company wireless while not on the domain, I receive a message saying that our RADIUS server provided a valid certificate issued by our root CA, but that the root CA ...
0
votes
0answers
11 views

understanding how wcf handles certificate requests

If an IIS-hosted wcf service is acting as a client that consumes another web-service across the internet and needs to download an intermediate CA certificate, what store does it put it in? In this ...
2
votes
1answer
137 views

Can I use both RSA and ECC certificates in apache?

If I simply use "SSLCertificateFile" and "SSLCertificateKeyFile" twice, the certificate chain is broken for the first one. Can I use both RSA and ECC certificate which is issued from different ...
3
votes
2answers
20k views

Renewing SBS2011 Exchange Self-Signed Certificate w/o changing home page in IE?

On a previous server when we used the built in SBS wizard to renew the certificate it worked, however it reset all of the computers on the domain's IE home page to companyweb. Is there a way to do ...
1
vote
1answer
51 views

Cross Forest Certificate Authority

Looking for help on material for setting up a multi tiered/cross-forest PKI Infrastructure. The only articles I can come across are just setting up the basic two tier systems on one domain. Basically ...
0
votes
0answers
9 views

Windows ADCS Schannel event ID 36682 on computers

I have a 2 tier PKI hierarchy which contains an offline ROOT Certificate Server ( un-joined to the domain) and Enterprise Sub CA servers. We are using EAP-TLS method for authentication to corp ...
3
votes
1answer
29 views

Can I use different certifcates for www and Exchange?

I have a website www.domainname.com and a published Exchange address of webmail.domainname.com The website is hosted offsite and the Exchange server is on-premises. I need extended validation for the ...