Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

1
vote
0answers
13 views

Cisco vWLC sha2 certificates not supported bug?

I currently have an app running with a Cisco virtual Wireless Lan Controller, all works fine except we get some error messages regarding SHA1 certificates, when I'm looking for SHA2 support the cisco ...
0
votes
1answer
2k views

Unable to renew certificate in certmgr.msc in windows 2003

I am trying to renew a certificate using CertManager on Windows 2003 Server. (I have also used the certificate plug-in in MMC but its the same thing.) I am logged in with the Administrator account. ...
0
votes
3answers
6k views

Certificate Authority - Network Ports?

We are optimizing our QOS router settings and it was decided that we should give priority to our PKI infrastructure. As far as I'm aware, there is network traffic when certificates are verified and ...
30
votes
3answers
2k views

Why are many admins using 'Turn off Automatic Root Certificates Update' Policy?

My company distributes a Windows Installer for a Server based product. As per best practices it is signed using a certificate. In line with Microsoft's advice we use a GlobalSign code signing ...
1
vote
1answer
2k views

Configuring client certificates on IIS8 - Error 403.16

I am trying to implement client certificate authentication on IIS 8. I have deployed my configuration on a development machine and verified it working as expected there. However after setting up on ...
4
votes
2answers
1k views

Certificate Mismatch RDS Session Host

I've been banging my head against this for the last few days. I have a server 2012 remote desktop setup as follows: 1 Gateway Server 1 RD Web Access Serve 1 Session Broker, which is also a session ...
8
votes
1answer
1k views

certutil -ping fails with 30 seconds timeout - what to do?

The certificate store on my Win7 box is constantly hanging. Observe: C:\>1.cmd C:\>certutil -? | findstr /i ping -ping -- Ping Active Directory Certificate Services Request ...
0
votes
0answers
14 views

How to use keystores and trust stores in linux & nginx

I am a newbie to implementing some of these concepts.I have a few questions to ask. I have read about keystores and trust stores using various links. The one that makes sense is this ...
1
vote
0answers
121 views

Certificate stops working after computer reboot

Got a strange issue that I just can't find any clues. We have a program (Qlikview) which talks to a remote admin service via SSL (Qlikview Server) but it uses the certificate to validate the client. ...
0
votes
1answer
13 views

How do I determine if strong key protection is enabled for a certificate private key in Server 2008 R2?

I'm trying to get a Windows Server 2008 R2 domain controller to use SSL with LDAP. I have a certificate installed, but I'm unable to connect on port 636 via ldp.exe (port 389 works just fine). I ...
2
votes
1answer
2k views

RDWeb TS connection broken for some users post RemoteApp certificate change

We recently reissued our GoDaddy wildcard cert with the SHA256 signing algorithm (FYI they still revoke the old cert in 72 hours even if you don't re-key it, so you should re-key anyway). We use this ...
13
votes
1answer
7k views

Certificate does not have a name

I've successfully managed to install an ssl-certificate in IIS, however the 'Name' column is showing as blank even though I entered a friendly name. Is there any way to rectify this? I grabbed a ...
0
votes
1answer
2k views

Recipients Auto Rejecting Emails Sent With Exchange 2010 - Certificate Error

A strange problem recently developed with one of my Exchange 2010 servers. I have an exchange server setup as part of a Windows Small Business Server 2011 installation. The email for the domain was ...
1
vote
1answer
68 views

VMware vCloud Automation Center giving “Unable to create SSL keystore” message

I'm replacing the self-signed certs on a vCAC installation with enterprise signed certificates and the identity server is giving the error "Unable to create SSL keystore" in the gui after we paste in ...
0
votes
0answers
5 views

Is there anyway to parse an OBJECT type from a certificate with opeanssl asn1parse?

let's see this sample code: $ openssl asn1parse -in mysterious_file.pem ... 78:d=5 hl=2 l= 3 prim: OBJECT :organizationalUnitName 83:d=5 hl=2 l= 8 prim: PRINTABLESTRING ...
10
votes
3answers
10k views

Fingerprint of PEM ssh key

I have a PEM file which I add to a running ssh-agent: $ file query.pem query.pem: PEM RSA private key $ ssh-add ./query.pem Identity added: ./query.pem (./query.pem) $ ssh-add -l | grep query 2048 ...
4
votes
1answer
159 views

How to get OpenSSH to use OCSP for revocation

As the title says, is there any (free) library, patch, etc. that allows OpenSSH to be configured to check x.509 certificate revocation via OCSP (online certificate status protocol)? If so, can you ...
6
votes
2answers
2k views

How to manually create Puppet CA and certificates?

I am wondering how to manually (using openssl instead of puppet ca command) create CA that would be usable by Puppet? The goal would be to script creation of such CA's to deploy them on multiple ...
0
votes
1answer
17 views

Add additional information to auto-enrolled certificates (Windows Active Directory CA)

I successfully enabled auto-enrollment for client computer certificates within our Active Directory domain. However, I want to include additional details in the auto-enrolled certificate such as the ...
2
votes
1answer
21 views

HP ilo Bulk Certificate update

I have a mixture of iLo 1-4 to update the self signed certs to use our CA. I have found some tools for the version 3/4 through PS and the new HP cmdlets. So two questions. Anyone know a way to bulk ...
3
votes
1answer
2k views

Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP

Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)? ...
10
votes
3answers
16k views

IIS 7.5 Creating self signed certificates with validation date of more than a year

I am creating self-signed SSL certificates in IIS 7.5 for internal use. The problem I have is that I want to create them so that they last for 10 years as it is only a dev environment. I can't see an ...
4
votes
1answer
30 views

how to configure sendmail with multiple ssl certificates for multiple domains

I need to configure a server to host multiple email domains on a single IP, and thus install multiple ssl certificates. Miraculously, I have been able to get apache and dovecot to work with multiple ...
0
votes
2answers
282 views

sendmail: how can I restrict access to clients that only have a valid certificate?

I want to reject all connections that don't present a valid SSL/TLS certificate. First of all is the access db file the correct one to be changing? I have already tried using the basic rule given in ...
3
votes
1answer
420 views

apache authentication with SSL certificate and SSLUserName

i just try to put an SSL authentification for a SVN server over https. I would like that the client certificate allow authorized person to check their repositories. <VirtualHost ...
2
votes
1answer
46 views

Can I use a Comodo Wildcard-Subdomain Cert for RDP on Win10?

I followed Using CA certificate for Remote Desktop Connection Configure custom SSL certificate for RDP on Windows Server 2012 in Remote Administration mode? to secure RDP with a proper cert ...
0
votes
2answers
1k views

Redhat - command/s run post-install to generate default localhost.crt?

I cloned a VM and the ssl certificate has the old hostname. I need to generate a new ssl certificate. My question is what method was used by the server to create the initial certificate? Was this ...
1
vote
1answer
942 views

ADCS WebEnrollment : The context was acquired as silent

I have setup Active Directory Certificate Services with Web Enrollment and I have the following error when enrolling certificate on other computers that are in the same domain : Certificate ...
0
votes
0answers
42 views

determine assosicate service installed certficate on windows server 2003 or which service is using that certficate

I have been facing issue to determine the purpose of installed certificate on windows server. Further, Is there any way to determine which service is using any particular certificate. So that before ...
3
votes
0answers
7 views

How well does haproxy scale for handling client certificate authentication?

My IoT company would like to use client certificate authentication to secure communications between each "thing" and a central server. We deploy about 30K things per year, and they have about a 5-year ...
0
votes
1answer
15 views

Subject not considered in a certificate with SAN

I have here a certificate with the subject "server01.department.company.com" and two subject alternative names "app1" and "app2". When I connect with app1 or app2 to the server all is fine. But when I ...
5
votes
3answers
6k views

SSL setup: UCC or wildcard certificates?

I've scoured the web for a clear and concise answer to my SSL question, but to no avail. So here goes: I have a web-service requiring SSL support for authentication pages. The root-level domain ...
9
votes
3answers
34k views

Import of PEM certificate chain and key to Java Keystore

There are plenty of resources out there about this topic, but none I found which covers this slightly special case. I have 4 files; privatekey.pem certificate.pem intermediate_rapidssl.pem ...
1
vote
1answer
21 views

Office365 Cert renewal

Do you need to purchase and renew a certificate for a hybrid setup of Exchange and Office365. We have multiple exchange servers setup on site for authentication but none of them have any specific cert ...
0
votes
2answers
1k views

XCA Signing Problem

I am trying to make a self-signed SSL Certificate for Sun WebServer 6.1 using the XCA Certificate GUI. Here is my process: Login to Sun Webserver admin console. Use the "Generate CSR" function to ...
22
votes
7answers
11k views

Can I be my own trusted CA via an signed intermediate certificate?

Can I get a certificate from a root CA that I can then use to sign my own web server certificates? I would, if possible, use a signed certificate as an intermediate to sign other certs. I know that I ...
5
votes
1answer
2k views

500 OOPS: SSL: cannot load RSA private key vsftpd

I'm configuring vsfptd on debian 7.3, I'm trying to use ssl. I generate the certficates using this command: openssl req -x509 -nodes -days 1925 -newkey rsa:2048 -keyout ...
6
votes
2answers
4k views

How to create self signed wildcard (*.example.com) certificate

I'm trying to install Dynamics CRM 2011 RC and configure it for Internet Facing Deployment. One of the requirements for this is a wildcard SSL certificate. Since I'm installing development/testing ...
0
votes
1answer
19 views

Puppet revokes OpenSSL certificates

I'm experiencing some certification revokations in the puppet master and this behavior seems to be random. I just checked one of the CA certificates and I found this: # openssl crl -text -in ...
5
votes
2answers
253 views

How to allow login to a SMTP server better than with password?

I'm planning on creating a mail server, but I don't want to use passwords at all. They seem a wrong security choice to me. I'd love to use a certificate to login. This seems easy to do in HTTP, but I ...
5
votes
2answers
44 views

Outlook 2010 Warning About Old Cert that No-longer Exists on Exchange 2007 server

We've recently made a change to the Internal URLs of many of our Exchange Virtual Directories. Following that change, we're seeing end-users report errors from Outlook stating that the certificate ...
0
votes
2answers
42 views

Authenticating Client Certificates from Different Issuer

Ok, here's the scenario. A company called "Corp" issues SSL certificates to all their employees for accessing Corp's web resources. Corp also provides a certificate for their Certificate Authority so ...
4
votes
3answers
2k views

How to redirect https://domain.com to https://www.domain.com using IIS?

I have a 301 set up which redirects http://domain.com to http://www.domain.com (http://www.domain.com$S$Q) but if I browse to https://domain.com I get an SSL error (as it expects www.domain.com). Is ...
3
votes
2answers
26 views

Are Windows internal CA-issued certificates compatible with Mac clients?

I am looking into deploying an internal CA to replace the GlobalSign certificates we use for our internal email encryption: Internal CA would be set up using ADCS in a two-tier hierarchy, no other ...
5
votes
3answers
18k views

802.1x automatically validate certificate in windows clients

We're deploying a wireless networking using Windows Server 2008 NAC as a RADIUS server. When Windows XP or 7 clients connect they initally fail to connect. In order to enable the client to connect we ...
0
votes
0answers
8 views

cPanel - Cant send mail [closed]

I am in the process of setting up a VPS for the first time. I am currently trying to setup mail accounts on the server, but I have stumbled into some problems. When accessing the mail account through ...
5
votes
1answer
265 views

Windows server 2012 R2 - delay before certificates start working

I have this weird unexplained delay before the certificates i put in my servers start actually working it goes something like this: I add the certificates snap-in to mmc to manage the computer ...
0
votes
0answers
39 views

Is it possible to use certificate from public CA for IKEv2 without importing intermediate cert?

I have configured ikev2 vpn on a strongswan server and a Windows 10 client, and it works fine. The authorization method is leftauth=pubkey and rightauth=eap-mschapv2. Because the leftcert to ...
1
vote
1answer
51 views

Find certificate file expiration with powershell

I know how to do this normally, but the problem is all of the certs in question are not installed on my local machine. I have a source control directory where they all sit, and I need to iterate over ...
6
votes
2answers
11k views

Install a root certificate in CentOS 6

I know it has been already asked, but despite many hours of research I couldn't find a working solution. I am trying to install my root certificate in my server, so internal service can bind to each ...