Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

0
votes
0answers
17 views

Squid Reverse Proxy with multiple SSL-Certificates

Does Squid Proxy Server offer the possibility to supply multiple SSL certificates to it? I have a server with various virtual machines running Apache web servers for different customers. As an ...
3
votes
1answer
2k views

Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP

Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)? ...
2
votes
1answer
3k views

RDWeb TS connection broken for some users post RemoteApp certificate change

We recently reissued our GoDaddy wildcard cert with the SHA256 signing algorithm (FYI they still revoke the old cert in 72 hours even if you don't re-key it, so you should re-key anyway). We use this ...
1
vote
1answer
40 views

Error in converting crt certificate to pem

I generated a CA certificate using easyRSA and I intend to use it with FreeRadius to use starttls, now I found that the FreeRadius uses pem format for certificates, but in my case the cert is in ...
1
vote
1answer
31 views

Signing OpenVPN server and clients certificates by Samba4 DC auto-signed CA.pem

I installed Samba4 and configured it to be domain controller, and it auto generated ca.pem, cert.pem, key.pem. And now I want to use the same CA of samba to sign the new certificates (maybe generated ...
0
votes
0answers
13 views

Windows CA - Pending Request created during reboot

Each time a machine reboots in our environment (Windows Server 2012R2), certificate request is created under "Pending Requests" on the Certificate Authority server. It is the same Certificate ...
1
vote
1answer
1k views

Can I use the same client certificate in multiple OpenVPN tunnels to the same server?

I have a simple setup like this: SERVER ---- INTERNET ---- CLIENT On SERVER I already have OpenVPN set up with a sertificate for CLIENT. On CLIENT I already have OpenVPN set up to contact the server ...
0
votes
0answers
20 views

Skype for Business 2015 Edge server import certificate installation issue

We are installing Skype for Business server 2015 for testing purposes. I used StartSSL to get free certificate for Skype for Business Edge server. I followed the installation instructions from Jeff ...
0
votes
2answers
24 views

Nginx working with SSL but Private Key mismatch error

Used to work I bought a Rapid SSL from name.com and used the below command to generate the .csr and .key files: sudo openssl req -nodes -days 365 -newkey rsa:2048 -keyout /etc/nginx/ssl/server.key -...
5
votes
1answer
2k views

HTTPS and Certification for dummies

I had never used https on a site and now want to try it. I did some research, but not sure that I understood everything. Answers and corrections are greatly appreciated. Here we go: To use https I ...
1
vote
1answer
24 views

Total Number of Certificates issued / revoked

Currently using Active Directory Certificate Services. Is it possible to find out the total number of certificates that have been published and revoked up till today, and if so how do I do it?
3
votes
3answers
128 views

Using an SSL certificate in multiple locations

I have a website hosted in the UK and I also have an organisation in South Africa hosting my company application online for web access. I want to implement SSL for both servers, as it requires login ...
0
votes
1answer
1k views

error Unable to configure verify locations for client authentication

Starting my apache2 Server on Ubuntu 12.04.5 LTS, I got the following error [error] Unable to configure verify locations for client authentication my Problem, on the server are more than one ...
7
votes
2answers
3k views

How to manually create Puppet CA and certificates?

I am wondering how to manually (using openssl instead of puppet ca command) create CA that would be usable by Puppet? The goal would be to script creation of such CA's to deploy them on multiple ...
0
votes
0answers
17 views

Windows - Log services access to certificate store

I have a software which run as a service (Checkpoint Identity Awareness) which connects to a server and verifies its identity (actually a checkpoint firewall) by checking its certificate, like any ...
2
votes
1answer
23 views

It´s possible to use a wildcard SSL certificate in SFTP/SSH connection?

I have a wildcard SSL certificate, *.mydomain.com, private, public Keys, pem/key file, certificate, etc. I have a SFTP/SSH Server based on MySecureShell to share and get some data using FTPS with ...
1
vote
0answers
20 views

Active Directory Certificate Services Code signing Subject Empty

I'm contracted by a branch of a large multinational company to write some in-house software. I'm trying to push this software out to users using ClickOnce. To sign the application, I was issued a code ...
2
votes
3answers
4k views

Windows Server 2008 R2 - SHA2 based Cipher Suites

I am currently in the process of upgrading the SSL certificates for various websites that I manage from SHA1 to SHA2 compatible certificates. To date we have always used 'RSA' as the key exchange ...
0
votes
2answers
16 views

PKI - What is the equivalency of a Registration Authority (RA) in AD Certificate Services?

What is the equivalency of a Registration Authority (RA) in AD Certificate Services? I was reading documentation on TechNet (the best ever, jk) and it had explained that NDES was technically the ...
1
vote
1answer
2k views

Configuring client certificates on IIS8 - Error 403.16

I am trying to implement client certificate authentication on IIS 8. I have deployed my configuration on a development machine and verified it working as expected there. However after setting up on ...
8
votes
1answer
1k views

certutil -ping fails with 30 seconds timeout - what to do?

The certificate store on my Win7 box is constantly hanging. Observe: C:\>1.cmd C:\>certutil -? | findstr /i ping -ping -- Ping Active Directory Certificate Services Request ...
5
votes
2answers
162 views

Can Squid be used as “TLS termination proxy” to encrypt TCP connections using client certificates?

Abstract I need an encrypted TCP connection from multiple clients to a single port over the internet. Can this be realized with Squid? Concrete situation We use a monitoring and client management ...
0
votes
2answers
172 views

openssl generate .key from CSR

A customer sent me a CSR and the .CER of a certificate for a linux server that I host. The customer does not have access to this machine. Is this enough data to generate a valid certificate? Is it ...
0
votes
1answer
27 views

Certificate Not showing on the Web console

On a Windows 2008 R2, with an AD level of Windows 2008 R2 We need to create a cert to allow user/admin to enroll via the Web service page (https://CA/certsrv/) On CA, right-click Certificate template ...
0
votes
0answers
93 views

How to add a certificate to the keystore

As part of some changes required by PayPal I need to discontinue using the VeriSign G2 Root Certificate and use the G5 Root Certificate. The server is running Red Hat Enterprise Linux Server 6.6. I ...
0
votes
0answers
43 views

SHA1 Migration to SHA2 - ADCS Windows 2012 R2

I am a little new to AD CS and I was tasked with upgrading our entire PKI infrastructure from SHA1 to SHA256 for the SHA1 deprecation. I have read somewhere that SHA256 can read SHA1 hashes. This ...
0
votes
1answer
2k views

Recipients Auto Rejecting Emails Sent With Exchange 2010 - Certificate Error

A strange problem recently developed with one of my Exchange 2010 servers. I have an exchange server setup as part of a Windows Small Business Server 2011 installation. The email for the domain was ...
0
votes
0answers
15 views

Using OpenSSL Certificate with Windows Firewall Connection Security

I'm attempting to set up an IPSec transport mode connection between Windows 7 machines, using Windows Firewall Connection Security, authenticating using certificates. I can get it to work correctly by ...
11
votes
3answers
42k views

Import of PEM certificate chain and key to Java Keystore

There are plenty of resources out there about this topic, but none I found which covers this slightly special case. I have 4 files; privatekey.pem certificate.pem intermediate_rapidssl.pem ...
0
votes
1answer
69 views

how do I covert a certificate with extension .cer to .asc

I have a certificate file (with extension .cer) that has content which looks something like this. -----BEGIN CERTIFICATE----- lots of data here -----END CERTIFICATE----- It is our signing ...
0
votes
1answer
43 views

openvpn certificate error prevents from connection

I try to connect with Tunnelblick to my private VPN, but I get the following error message. 2016-05-24 12:18:07 VERIFY ERROR: depth=1, error=unable to get issuer certificate: C=IL, O=StartCom Ltd., ...
0
votes
0answers
47 views

Domain is issuing trust certificate instead of root authority

I was running into an issue on Windows Server 2012 R2 where any website I visited was throwing a untrusted certificate error. I circumvented this issue by copying the certifications from another ...
3
votes
3answers
3k views

How are Windows MachineKey Container File Name's Derived?

In the C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys directory there's an enumeration of Key Containers. The naming convention is <uniqueGUID>_<staticGUID> and I presume the <...
3
votes
3answers
36k views

Renewing SBS2011 Exchange Self-Signed Certificate w/o changing home page in IE?

On a previous server when we used the built in SBS wizard to renew the certificate it worked, however it reset all of the computers on the domain's IE home page to companyweb. Is there a way to do ...
1
vote
2answers
210 views

Certificate stops working after computer reboot

Got a strange issue that I just can't find any clues. We have a program (Qlikview) which talks to a remote admin service via SSL (Qlikview Server) but it uses the certificate to validate the client. ...
1
vote
0answers
16 views

sbs 2011 certificate not renewing properly

I'm working on an SBS 2011 server here, the client advised she could no longer access mail on her laptop because her certificate had expired. The company uses a self assigned certificate. So I run the ...
4
votes
2answers
1k views

Listing domains on a UCC/SAN SSL Certificate

Is there a way to list all domains on an SAN/UCC SSL Certificate (ideally using command line on linux/os x)? Clearly there must be some way to extract the data, since browsers can do it. ...
2
votes
1answer
23 views

Finding Certificate Template in Certificate Authority

I'm following this tutorial: https://technet.microsoft.com/en-us/library/dn781428(v=ws.11).aspx I am on this step: Click to select the Certificate Templates container (under the CA name, not the ...
11
votes
2answers
2k views

Cost of getting in-house certificate authority trusted

My company has an in-house certificate authority that is currently self-signed. Since we want to start using it for external SSL and secure email to our customers, we need to get it trusted. Does ...
12
votes
4answers
18k views

IIS 7.5 Creating self signed certificates with validation date of more than a year

I am creating self-signed SSL certificates in IIS 7.5 for internal use. The problem I have is that I want to create them so that they last for 10 years as it is only a dev environment. I can't see an ...
0
votes
0answers
26 views

C# Web API is called by CICS cobol over https and it returns 403.16 error

A C# Web API is called by CICS cobol over https and it returns 403.16 error. The mainframe is the HTTP Client. This works with http but not https. A 403 forbidden access error occurs on the Web ...
0
votes
1answer
27 views

Exchange 2010/Outlook certificate errors

We are running Exchange 2010 on SBS 2011. About a year ago, I renewed the certificate for the mail server, however, ever since that time, we receive certificate errors on OWA, and internally, we ...
13
votes
4answers
14k views

Fingerprint of PEM ssh key

I have a PEM file which I add to a running ssh-agent: $ file query.pem query.pem: PEM RSA private key $ ssh-add ./query.pem Identity added: ./query.pem (./query.pem) $ ssh-add -l | grep query 2048 ...
0
votes
1answer
80 views

determine assosicate service installed certficate on windows server 2003 or which service is using that certficate

I have been facing issue to determine the purpose of installed certificate on windows server. Further, Is there any way to determine which service is using any particular certificate. So that before ...
0
votes
2answers
69 views

ADFS and relying party web form

We are in the process of configuring our ADFS server to allow SMAL authentication from a third party web application. We are slightly confused as listed below: We received metadata file and ...
2
votes
3answers
877 views

Will DirectAccess clients renew workstation certificates off-site?

I setup MS DirectAccess nearly a year ago, which required configuring computer certificate auto-enrollment. The first computer certificate is going to expire in about a month, and now I'm wondering ...
2
votes
1answer
143 views

How to include all dns records and IP address of a server in automatic certificate enrollment of Microsoft AD CS?

In my company there are a lot of servers which users remotely login to them to do their duties. We have enabled computer certificate auto enrollment for them to assure secure connection. But because ...
1
vote
1answer
66 views

PKI EJBCA : extract CA from EJBCA instance and just keep sub-CA

I'm looking for a solution to extract the CA from EJBCA instance, put it on an external drive, which is secured in a safe-deposit for instance. So I only keep the sub-ca for signing the end user ...
0
votes
0answers
20 views

Self signed Cisco VPN Certificate

So I just rented some servers protected with a Cisco Firewall from a data center provider. I plan on accessing these servers through VPN. The instructions from the data center provider was to ...