Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

2
votes
6answers
4k views

Setting up https with a self-signed certificate on Apache

I'm trying to set up HTTPS on Apache, using a self-signed certificate. But instead of displaying the page, I get a bunch of weird errors. An a different error from each browser! From Chrome: ...
7
votes
2answers
15k views

How do I set up an sftp user to login with a password to an EC2 ubuntu server?

I have an Ubuntu Server running on an EC2 instance. To login to that server I use a certificate file without any password. I've installed and configured vsftpd and created a user (let's call him "...
0
votes
1answer
2k views

error Unable to configure verify locations for client authentication

Starting my apache2 Server on Ubuntu 12.04.5 LTS, I got the following error [error] Unable to configure verify locations for client authentication my Problem, on the server are more than one ...
7
votes
2answers
3k views

How to manually create Puppet CA and certificates?

I am wondering how to manually (using openssl instead of puppet ca command) create CA that would be usable by Puppet? The goal would be to script creation of such CA's to deploy them on multiple ...
21
votes
2answers
31k views

How to inspect remote SMTP server's TLS certificate?

We have an Exchange 2007 server running on Windows Server 2008. Our client uses another vendor's mail server. Their security policies require us to use enforced TLS. This was working fine until ...
0
votes
1answer
23 views

How to prevent other Apache 2.2 multiple VirtualHosts domains from accessing https (SSL_ERROR_BAD_CERT_DOMAIN) using SNI?

I am running Apache 2.2 on Ubuntu 14.04.4 LTS on a Linode server. I have multiple domains hosted on this machine (with only 1 IP address). I have a domain tbw.com hosted here for which I have an SSL ...
0
votes
1answer
307 views

Get the latest CTL or list of trusted root certificates

I need to implement a service that does not start because the certificate cannot be validated. This certificate have a root ca that was recently created, so my windows 7 machines does not trust in ...
1
vote
2answers
2k views

Unrevoke a certificate which was revoked with a status different from Certificate Hold

Is there a way to unrevoke a revoked certificate, which was revoked with the “Superseded” reason code? I'm using the Certification Authority provided with Windows Server 2008 SP2.
0
votes
2answers
88 views

Exchange 2013 ECP ,Redirect loop with wildcard cert

Recently we were unable to log into ECP, after successful login we a re redirected to de login prompt, on our two Exchange servers and no configuration change were made, we are using a wildcart cert ...
5
votes
5answers
10k views

Ubuntu 12.04 LDAP SSL self-signed cert not accepted

I'm working with Ubuntu 12.04, using OpenLDAP server. I've followed the instructions on the Ubuntu help pages and can happily connect without security. To test my connection, I'm using ldapsearch ...
0
votes
1answer
20 views

exim4 checking client certificates always invalid

My exim server is configured to ask for a client certificates when a connection is made. I set up an ACL (at rcpt stage) to log or add a header resp. of the outcome of the certificate check: warn ...
8
votes
1answer
1k views

certutil -ping fails with 30 seconds timeout - what to do?

The certificate store on my Win7 box is constantly hanging. Observe: C:\>1.cmd C:\>certutil -? | findstr /i ping -ping -- Ping Active Directory Certificate Services Request ...
1
vote
1answer
2k views

Configuring client certificates on IIS8 - Error 403.16

I am trying to implement client certificate authentication on IIS 8. I have deployed my configuration on a development machine and verified it working as expected there. However after setting up on ...
0
votes
1answer
2k views

Recipients Auto Rejecting Emails Sent With Exchange 2010 - Certificate Error

A strange problem recently developed with one of my Exchange 2010 servers. I have an exchange server setup as part of a Windows Small Business Server 2011 installation. The email for the domain was ...
0
votes
0answers
57 views

Change of Server (IP Address) Affects Access to the server from Domain SSL Certificated by LetsEncrypt

According to many answers the Certificate is not bound to the IP address but bound to the domain. But still I can not reach the application by using the domain. Is there a way to notify the DNS that ...
3
votes
1answer
2k views

Remote VPN - two-factor authentication with Cisco ASA + OpenLDAP

Can somebody give me a pathway (or link to the documentation / how to) to implement two-factor authentication (LDAP password + certificate) on Cisco ASA for RemoteVPN (with Anyconnect client)? ...
2
votes
1answer
3k views

RDWeb TS connection broken for some users post RemoteApp certificate change

We recently reissued our GoDaddy wildcard cert with the SHA256 signing algorithm (FYI they still revoke the old cert in 72 hours even if you don't re-key it, so you should re-key anyway). We use this ...
1
vote
1answer
50 views

Error in converting crt certificate to pem

I generated a CA certificate using easyRSA and I intend to use it with FreeRadius to use starttls, now I found that the FreeRadius uses pem format for certificates, but in my case the cert is in ...
1
vote
1answer
46 views

Signing OpenVPN server and clients certificates by Samba4 DC auto-signed CA.pem

I installed Samba4 and configured it to be domain controller, and it auto generated ca.pem, cert.pem, key.pem. And now I want to use the same CA of samba to sign the new certificates (maybe generated ...
0
votes
0answers
13 views

Windows CA - Pending Request created during reboot

Each time a machine reboots in our environment (Windows Server 2012R2), certificate request is created under "Pending Requests" on the Certificate Authority server. It is the same Certificate ...
1
vote
1answer
1k views

Can I use the same client certificate in multiple OpenVPN tunnels to the same server?

I have a simple setup like this: SERVER ---- INTERNET ---- CLIENT On SERVER I already have OpenVPN set up with a sertificate for CLIENT. On CLIENT I already have OpenVPN set up to contact the server ...
0
votes
0answers
35 views

Skype for Business 2015 Edge server import certificate installation issue

We are installing Skype for Business server 2015 for testing purposes. I used StartSSL to get free certificate for Skype for Business Edge server. I followed the installation instructions from Jeff ...
0
votes
2answers
35 views

Nginx working with SSL but Private Key mismatch error

Used to work I bought a Rapid SSL from name.com and used the below command to generate the .csr and .key files: sudo openssl req -nodes -days 365 -newkey rsa:2048 -keyout /etc/nginx/ssl/server.key -...
5
votes
1answer
2k views

HTTPS and Certification for dummies

I had never used https on a site and now want to try it. I did some research, but not sure that I understood everything. Answers and corrections are greatly appreciated. Here we go: To use https I ...
1
vote
1answer
28 views

Total Number of Certificates issued / revoked

Currently using Active Directory Certificate Services. Is it possible to find out the total number of certificates that have been published and revoked up till today, and if so how do I do it?
3
votes
3answers
132 views

Using an SSL certificate in multiple locations

I have a website hosted in the UK and I also have an organisation in South Africa hosting my company application online for web access. I want to implement SSL for both servers, as it requires login ...
0
votes
0answers
19 views

Windows - Log services access to certificate store

I have a software which run as a service (Checkpoint Identity Awareness) which connects to a server and verifies its identity (actually a checkpoint firewall) by checking its certificate, like any ...
2
votes
1answer
25 views

It´s possible to use a wildcard SSL certificate in SFTP/SSH connection?

I have a wildcard SSL certificate, *.mydomain.com, private, public Keys, pem/key file, certificate, etc. I have a SFTP/SSH Server based on MySecureShell to share and get some data using FTPS with ...
1
vote
0answers
22 views

Active Directory Certificate Services Code signing Subject Empty

I'm contracted by a branch of a large multinational company to write some in-house software. I'm trying to push this software out to users using ClickOnce. To sign the application, I was issued a code ...
2
votes
3answers
5k views

Windows Server 2008 R2 - SHA2 based Cipher Suites

I am currently in the process of upgrading the SSL certificates for various websites that I manage from SHA1 to SHA2 compatible certificates. To date we have always used 'RSA' as the key exchange ...
0
votes
2answers
23 views

PKI - What is the equivalency of a Registration Authority (RA) in AD Certificate Services?

What is the equivalency of a Registration Authority (RA) in AD Certificate Services? I was reading documentation on TechNet (the best ever, jk) and it had explained that NDES was technically the ...
6
votes
2answers
249 views

Can Squid be used as “TLS termination proxy” to encrypt TCP connections using client certificates?

Abstract I need an encrypted TCP connection from multiple clients to a single port over the internet. Can this be realized with Squid? Concrete situation We use a monitoring and client management ...
0
votes
2answers
175 views

openssl generate .key from CSR

A customer sent me a CSR and the .CER of a certificate for a linux server that I host. The customer does not have access to this machine. Is this enough data to generate a valid certificate? Is it ...
0
votes
1answer
35 views

Certificate Not showing on the Web console

On a Windows 2008 R2, with an AD level of Windows 2008 R2 We need to create a cert to allow user/admin to enroll via the Web service page (https://CA/certsrv/) On CA, right-click Certificate template ...
0
votes
0answers
130 views

How to add a certificate to the keystore

As part of some changes required by PayPal I need to discontinue using the VeriSign G2 Root Certificate and use the G5 Root Certificate. The server is running Red Hat Enterprise Linux Server 6.6. I ...
0
votes
0answers
78 views

SHA1 Migration to SHA2 - ADCS Windows 2012 R2

I am a little new to AD CS and I was tasked with upgrading our entire PKI infrastructure from SHA1 to SHA256 for the SHA1 deprecation. I have read somewhere that SHA256 can read SHA1 hashes. This ...
0
votes
0answers
17 views

Using OpenSSL Certificate with Windows Firewall Connection Security

I'm attempting to set up an IPSec transport mode connection between Windows 7 machines, using Windows Firewall Connection Security, authenticating using certificates. I can get it to work correctly by ...
13
votes
3answers
44k views

Import of PEM certificate chain and key to Java Keystore

There are plenty of resources out there about this topic, but none I found which covers this slightly special case. I have 4 files; privatekey.pem certificate.pem intermediate_rapidssl.pem ...
0
votes
1answer
99 views

how do I covert a certificate with extension .cer to .asc

I have a certificate file (with extension .cer) that has content which looks something like this. -----BEGIN CERTIFICATE----- lots of data here -----END CERTIFICATE----- It is our signing ...
0
votes
1answer
94 views

openvpn certificate error prevents from connection

I try to connect with Tunnelblick to my private VPN, but I get the following error message. 2016-05-24 12:18:07 VERIFY ERROR: depth=1, error=unable to get issuer certificate: C=IL, O=StartCom Ltd., ...
0
votes
0answers
50 views

Domain is issuing trust certificate instead of root authority

I was running into an issue on Windows Server 2012 R2 where any website I visited was throwing a untrusted certificate error. I circumvented this issue by copying the certifications from another ...
3
votes
3answers
3k views

How are Windows MachineKey Container File Name's Derived?

In the C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys directory there's an enumeration of Key Containers. The naming convention is <uniqueGUID>_<staticGUID> and I presume the <...
3
votes
3answers
38k views

Renewing SBS2011 Exchange Self-Signed Certificate w/o changing home page in IE?

On a previous server when we used the built in SBS wizard to renew the certificate it worked, however it reset all of the computers on the domain's IE home page to companyweb. Is there a way to do ...
1
vote
2answers
232 views

Certificate stops working after computer reboot

Got a strange issue that I just can't find any clues. We have a program (Qlikview) which talks to a remote admin service via SSL (Qlikview Server) but it uses the certificate to validate the client. ...
1
vote
0answers
18 views

sbs 2011 certificate not renewing properly

I'm working on an SBS 2011 server here, the client advised she could no longer access mail on her laptop because her certificate had expired. The company uses a self assigned certificate. So I run the ...
4
votes
2answers
1k views

Listing domains on a UCC/SAN SSL Certificate

Is there a way to list all domains on an SAN/UCC SSL Certificate (ideally using command line on linux/os x)? Clearly there must be some way to extract the data, since browsers can do it. ...
2
votes
1answer
28 views

Finding Certificate Template in Certificate Authority

I'm following this tutorial: https://technet.microsoft.com/en-us/library/dn781428(v=ws.11).aspx I am on this step: Click to select the Certificate Templates container (under the CA name, not the ...
11
votes
2answers
2k views

Cost of getting in-house certificate authority trusted

My company has an in-house certificate authority that is currently self-signed. Since we want to start using it for external SSL and secure email to our customers, we need to get it trusted. Does ...
12
votes
4answers
19k views

IIS 7.5 Creating self signed certificates with validation date of more than a year

I am creating self-signed SSL certificates in IIS 7.5 for internal use. The problem I have is that I want to create them so that they last for 10 years as it is only a dev environment. I can't see an ...
0
votes
0answers
31 views

C# Web API is called by CICS cobol over https and it returns 403.16 error

A C# Web API is called by CICS cobol over https and it returns 403.16 error. The mainframe is the HTTP Client. This works with http but not https. A 403 forbidden access error occurs on the Web ...