Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

0
votes
1answer
12 views

Client certificate authentication with no access to private keys

We are trying to set up client certificate authentication for VPN users on Cisco ASA. User certificate store is being used to complete the authentication. The problem we are running into is that the ...
1
vote
1answer
628 views

Certreq -retrieve can't find the specified CA

I'm currently writing a Powershell script and have run into a bit of a roadblock. Basically, the script requests, approves, and retrieves new certificates from our CA using certreq.exe and ...
12
votes
5answers
7k views

What host name should the SSL certificate for an SMTP server contain?

I have a server foo.example.com at 192.0.2.1 It runs exim to receive e-mail for several of my domains. My domains each have an MX record pointing to mx.example.com, which resolves to 192.0.2.1 If I ...
3
votes
1answer
205 views

OpenSSL always shows “unsupported” for all subjectAltName “otherName” UTF8 values

It seems like OpenSSL is broken when trying to read back subjectAltName/otherName/UTF8 values that were written by itself: The relevant openssl.cnf configuration (using an official but random OID): ...
-3
votes
0answers
25 views

Browser Error due to Expired Certificate [on hold]

My browser is not working, it said certificate is expired. What am i going to do? Please help me, im just a student. I need it so badly.
1
vote
1answer
416 views

Certificates compartments (certmgr.msc)?

After reading a while , Im trying to understand what kind of certificates will be found at : Personal Other People Trusted Root Certicfiation Authorities will personal will contains only private ...
1
vote
1answer
1k views

Windows CA to issue certificate to authenticate SSH to a Linux server

I have a Windows Server Root Certificate Authority, Linux SSH server, and users with Windows SSH clients. The Linux box is not part of the AD domain (and probably never will be [sigh]) OpenSSH 5.4 ...
0
votes
2answers
22 views

Where can you get an ADFS token signing certificate template

The topic says it all. Had anyone generated a self signed token signing cert from a template and where can you download a template (not a tool like makecert)? This is not the generic SSL cert, but a ...
3
votes
1answer
198 views

Which browsers and OSes supports ECC based SSL certificates?

We are evaluating whether to buy a RSA based certificate or a ECC based certificate. RSA is older and is supported by all browsers. ECC is newer, they state it is faster due requiring smaller key ...
5
votes
2answers
2k views

How to manually create Puppet CA and certificates?

I am wondering how to manually (using openssl instead of puppet ca command) create CA that would be usable by Puppet? The goal would be to script creation of such CA's to deploy them on multiple ...
1
vote
4answers
2k views

SSL Brand vs EV SSL

A few years ago I switched from using Thawte SSL's (a verisign company) to Verisign because of the better name recognition Verisign provides. To that end I've been happy with it and believe it gave ...
13
votes
5answers
17k views

How to avoid lftp Certificate verification error?

I'm trying to get my Pelican blog working. It uses lftp to transfer the actual blog to ones server, but I always get an error: mirror: Fatal error: Certificate verification: subjectAltName does not ...
0
votes
1answer
1k views

Unable to renew certificate in certmgr.msc in windows 2003

I am trying to renew a certificate using CertManager on Windows 2003 Server. (I have also used the certificate plug-in in MMC but its the same thing.) I am logged in with the Administrator account. ...
0
votes
0answers
12 views

'Generic' Certificates for RADIUS authentication/Encryption (weird?)

Situation: I have a test environment with Server 2008 that's a DC and has NPS for RADIUS authentication/encryption for wireless, and AD CS installed for the self signed cert. As it stands now, my ...
-1
votes
1answer
63 views

VirtualBox fails to start on Windows Server 2003 [closed]

Disclaimer: this is my first post on ServerFault, as well as my first time administering a server, so please bear with me. I posted this on SuperUser a few days ago, but received no response. ...
4
votes
2answers
930 views

Certificate Mismatch RDS Session Host

I've been banging my head against this for the last few days. I have a server 2012 remote desktop setup as follows: 1 Gateway Server 1 RD Web Access Serve 1 Session Broker, which is also a session ...
4
votes
5answers
20k views

Java Deployment Rule Set via AD Enterprise CA

My goal is to get a Java Deployment Rule Set in place in my organization, but I do not want to pay third-party certificate authority for a code signing cert when we have a working CA running through ...
0
votes
0answers
13 views

Trouble setting up MACBook to Cisco RV042 VPN

I am trying to create a VPN connection from a MacBook Pro running OS X 10.9.5 to a Cisco RV 042 Firewall/Router. Using the MacBook Pro built in VPN client software. I have exported the client ...
0
votes
1answer
2k views

Recipients Auto Rejecting Emails Sent With Exchange 2010 - Certificate Error

A strange problem recently developed with one of my Exchange 2010 servers. I have an exchange server setup as part of a Windows Small Business Server 2011 installation. The email for the domain was ...
1
vote
1answer
9 views

Extract Certificate Information automatically

In my current setting I have 16 production servers and another 16 to 20 on Dev and QA servers. I also have a lot of certificates in them. We are trying to inventory everything so that we dont miss out ...
0
votes
2answers
96 views

Using an SSL certificate in multiple locations

I have a website hosted in the UK and I also have an organisation in South Africa hosting my company application online for web access. I want to implement SSL for both servers, as it requires login ...
4
votes
1answer
1k views

500 OOPS: SSL: cannot load RSA private key vsftpd

I'm configuring vsfptd on debian 7.3, I'm trying to use ssl. I generate the certficates using this command: openssl req -x509 -nodes -days 1925 -newkey rsa:2048 -keyout ...
2
votes
2answers
2k views

Windows 7 Wifi Certificate Trust Anchor

When attempting to connect to our company wireless while not on the domain, I receive a message saying that our RADIUS server provided a valid certificate issued by our root CA, but that the root CA ...
6
votes
1answer
1k views

certutil -ping fails with 30 seconds timeout - what to do?

The certificate store on my Win7 box is constantly hanging. Observe: C:\>1.cmd C:\>certutil -? | findstr /i ping -ping -- Ping Active Directory Certificate Services Request ...
0
votes
0answers
8 views

understanding how wcf handles certificate requests

If an IIS-hosted wcf service is acting as a client that consumes another web-service across the internet and needs to download an intermediate CA certificate, what store does it put it in? In this ...
1
vote
0answers
9 views

How to install a self-signed certificate in chromium under Debian [migrated]

I have a web server that uses https protocol. I want to create a self signed certificate so I did the following: Issued this command: openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout ...
2
votes
1answer
117 views

Can I use both RSA and ECC certificates in apache?

If I simply use "SSLCertificateFile" and "SSLCertificateKeyFile" twice, the certificate chain is broken for the first one. Can I use both RSA and ECC certificate which is issued from different ...
1
vote
1answer
1k views

Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP

Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)? ...
3
votes
2answers
18k views

Renewing SBS2011 Exchange Self-Signed Certificate w/o changing home page in IE?

On a previous server when we used the built in SBS wizard to renew the certificate it worked, however it reset all of the computers on the domain's IE home page to companyweb. Is there a way to do ...
1
vote
1answer
27 views

Cross Forest Certificate Authority

Looking for help on material for setting up a multi tiered/cross-forest PKI Infrastructure. The only articles I can come across are just setting up the basic two tier systems on one domain. Basically ...
1
vote
2answers
22 views

Issuing own certificates for signing software

We have a windows based infrastructure. Recently I was asked by our software developer if we can issue our own certificates to sign some small programs we're sending to out partners. But I don't fully ...
0
votes
0answers
6 views

Windows ADCS Schannel event ID 36682 on computers

I have a 2 tier PKI hierarchy which contains an offline ROOT Certificate Server ( un-joined to the domain) and Enterprise Sub CA servers. We are using EAP-TLS method for authentication to corp ...
3
votes
1answer
26 views

Can I use different certifcates for www and Exchange?

I have a website www.domainname.com and a published Exchange address of webmail.domainname.com The website is hosted offsite and the Exchange server is on-premises. I need extended validation for the ...
1
vote
1answer
20 views

SSL configuration for Intranet/VPN site

We've got a web site in development, that is to be used internally within our intranet, but also used externally by one client that will be accessing it via VPN. As far as Certificates go, what's the ...
1
vote
2answers
398 views

Jersey web-service token based on hostname

I recently built a RESTful service using Jersey and is currently used by 3 other systems internal to the network (not people). How can I make sure the requests to the service are honored only based ...
0
votes
1answer
21 views

SSL certificate, manage domain and subdomain with SAN

We've got a question on the certificate and the SAN part. Can i put as common name my domain name (eg: example.tld) and use the SAN part to protect my subdomaine (eg: www.example.tld) ? Actually ...
4
votes
2answers
5k views

SSL setup: UCC or wildcard certificates?

I've scoured the web for a clear and concise answer to my SSL question, but to no avail. So here goes: I have a web-service requiring SSL support for authentication pages. The root-level domain ...
2
votes
3answers
72 views

Multiple wildcard certificates for same common name on different servers

We've recently ventured into the cloud for hosting a number of websites. On our on-premise hosting we're using a wildcard certificate for a number of websites, and we want to do the same for our ...
20
votes
2answers
64k views

How do I view the details of a digital certificate .cer file?

I am using Windows and have been given a .cer file. How can I view the details of it?
6
votes
3answers
5k views

Fingerprint of PEM ssh key

I have a PEM file which I add to a running ssh-agent: $ file query.pem query.pem: PEM RSA private key $ ssh-add ./query.pem Identity added: ./query.pem (./query.pem) $ ssh-add -l | grep query 2048 ...
0
votes
1answer
29 views

How to tell outlook 2013 where to pick up certificates for exchange 2013?

We got new exchange 2013 server in place and using OWA for long time. now we are trying to push outlook 2013 application to all users. Some of users can run outlook 2013 app without any issue. Some of ...
1
vote
2answers
2k views

Thunderbird not trusting certificate signed with self-signed authority

I have generated a self-signed certificate authority using mydomain.org as the common name. I imported the public certificate using Thunderbird's certificate manager under the "Authorities" tab. So ...
6
votes
1answer
3k views

Unable to generate certificate with Subject Alternate Name using Java 1.7 keytool utility

I'm having an issue generating a keypair with subject alternate name using the Java keytool utility from Java 1.7. I'm attempting to follow the instructions found here. An example of the command I'm ...
1
vote
1answer
65 views

Delete certificate from user local store using script

I manage to delete a certificate using a script with command : certutil -delstore -v -enterprise CA "Certificate CN" But unfortunately, it only works if this certificate was first added using the ...
1
vote
1answer
35 views

windows 7 certificate store - certificate disapear/get lost

We are running Windows 7 pro 64bit and using certificates for authentication. The certifactes are stored in the "My" certification store. The problem is that about 5% if our user base lose their ...
0
votes
0answers
27 views

RDS 2012R2 Certificate Issue

I've Googled around everywhere but cannot find an answer to this.. So we have 3 servers, RDS01..02..03, this is NOT accessible externally, so no RDGW. They are as follows: RDS01 - RDCB/RDWeb RDS02 - ...
1
vote
1answer
16 views

Can BizTalk Use X509 V1 Public Key?

We have a trading partner that has supplied a public key ".cer" file for use with AS2 EDI transactions. I've successfully imported the certificate into the certificate store under Local Computer\Other ...
4
votes
0answers
64 views

Windows server 2012 R2 - delay before certificates start working

I have this weird unexplained delay before the certificates i put in my servers start actually working it goes something like this: I add the certificates snap-in to mmc to manage the computer ...
31
votes
7answers
23k views

Wildcard SSL certificate for second-level subdomain

I'd like to know if any certificates support a double wildcard like *.*.example.com? I've just been on the phone with my current SSL provider (register.com) and the girl there said they don't offer ...
1
vote
0answers
58 views

Windows Firewall Connection Security with Certificate (2)

I have a similar problem as the question with the same title from last October. On a Windows Server 2008 machine, using Windows Firewall's Connection Security rules, I need to establish an IPsec ...