Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

4
votes
0answers
620 views

500 OOPS: SSL: cannot load RSA private key vsftpd

Im configuring vsfptd on debian 7.3, Im trying to use ssl. I generate de certficates using this command: openssl req -x509 -nodes -days 1925 -newkey rsa:2048 -keyout /etc/vsftpd/private/vsftpd2.key ...
3
votes
0answers
42 views

How to get OpenSSH to use OCSP for revocation

As the title says, is there any (free) library, patch, etc. that allows OpenSSH to be configured to check x.509 certificate revocation via OCSP (online certificate status protocol)? If so, can you ...
2
votes
0answers
25 views

Certificate can only be used by network service account

Issues : Our service is using one certification for partner service call. It worked well in IIS site which is running as network service account. But when we run test the code as administrator ...
2
votes
0answers
26 views

How do I make a Cisco Ironport appliance send “linked certificates” for HTTPS inspection?

I have a PKI tree, and the ironport is a CA at the second level of the PKI tree, (for issuing HTTPS inspection certs) Although I deployed the root certificate to all clients, and chrome/IE work ...
2
votes
0answers
33 views

How to buy a X.509 certificate for signing digital payloads

I am in a situation where my software is calling a third party web service (SOAP) and using WS-Security for client authentication using a client certificate and digital signing of the message ...
2
votes
0answers
794 views

SChannel “cannot find certificate in either LocalMachine or CurrentUser store”

We have an in-house application that requires the use of client SSL certificates to authenticate with a remote server (not under our control). This has worked without problems before but on deploying ...
2
votes
0answers
126 views

Certificate enrollment request chain not trusted

I am working on a MSFT lab for Direct Access, and need to create a Web certificate. The instructions ask be to do the following: On EDGE1, click Start, type mmc, and then press ENTER. Click ...
1
vote
0answers
35 views

VMs with same name an IP

Does Foreman support managing several VMs with same name and IPs, but with different certname? for example: NAME IP CertName VMLinux001 10.0.0.2 VMLinux001@domain.com ...
1
vote
0answers
38 views

Add trusted remote certificate to Ubuntu server

I'm running an app on an AWS server running Ubuntu 12.04.4 LTS. I'm writing a script to connect to an SFTP server from the command line, but am unable to connect. I believe this is because my Ubuntu ...
1
vote
0answers
37 views

How to setup digital signatures on Microsoft CA (AD-CS)?

I've been trying to research across the web on how to setup a Microsoft CA (AD-CS on Windows Server 2008 R2) in order to create a certificate for digital signatures, allowing you to digitally sign ...
1
vote
0answers
97 views

wdsutil claims Windows Server 2012 R2 drivers are unsigned, but they have a valid certificate

I'm trying to import some Windows Server 2012 R2 drivers to a driver group in WDS. My WDS server is running Windows Server 2012 (not R2). When I run the following command: WDSUTIL /Add-DriverPackage ...
1
vote
0answers
66 views

Remote Desktop Certificate Template Application Policy Extension

We are setting up remote desktop authentication with the use of certificates and ran into an issue in one of the environments. I am editing the RemoteDesktopComputer2008 certificate template, in ...
1
vote
0answers
60 views

Attach certificate to remote desktop connection - not gateway services

I have a Windows server that I want to attach a 3rd party signed certificate for remote desktop connections. This is not a remote desktop services server, i.e. it is just remote desktop ...
1
vote
0answers
78 views

Windows - Replace subject from CSR when issuing certificate

I've received a CSR from a client with a CN, but not with all the subject fields we require. According to this answer from Scott*, it should be possible to specify the final subject values when the ...
1
vote
0answers
109 views

Openssl cert not accepted on cisco load balancer

Been fighting a expired cert issue for the past few days. I am updating a cisco ace load balancer with an updated cert. However every time I attempt to validate the cert it is not valid or does not ...
1
vote
0answers
122 views

What's the Correct Way to Implement Certificates on an RDS Farm?

We currently deploying six terminal servers in a farm that will be accessed by thin clients running Windows Embedded. The idea behind the thin clients is to have a seamless single-sign on whereby as ...
1
vote
0answers
76 views

Exchange on WP7 - 80072F0D

Last week, the self-signed certificate on our Exchange 2010 mailserver expired, so we made a new one. Everything works fine after this, except mail on Windows Phone 7. All phones are giving an error ...
1
vote
0answers
145 views

RPC over HTTP - Outlook

I'm trying to configure an Outlook client to use RPC over HTTP so that my client can read his mail without connecting to the VPN. The mailserver is an SBS2011 server and Outlook Anywhere has never ...
1
vote
0answers
27 views

Need help configuring Exchange 2010 server certificate

I've set an a multi-role Exchange server (SVR1) for my office, and now I am setting up a second multi-role server (SVR2) in a different site. Outlook Anywhere is not activated, and I don't have an ...
1
vote
0answers
437 views

ADCS WebEnrollment : The context was acquired as silent

I have setup Active Directory Certificate Services with Web Enrollment and I have the following error when enrolling certificate on other computers that are in the same domain : Certificate ...
1
vote
0answers
30 views

Transfer cacerts file to another das

I was wondering if its possible to transfer the cacerts.jks file to another glassfish DAS machine? The idea is to synchronize both das machines without having to import every certificate manually. ...
1
vote
0answers
276 views

apache authentication with SSL certificate and SSLUserName

i just try to put an SSL authentification for a SVN server over https. I would like that the client certificate allow authorized person to check their repositories. <VirtualHost ...
1
vote
0answers
179 views

Always get a Security Error for Internal HTTPS Website

Full disclosure, I asked this question over at Ask Different (http://apple.stackexchange.com/questions/96776/always-get-a-security-error-for-internal-https-website) but didn't get much helpful ...
1
vote
0answers
184 views

Is it possible to view a user's certificate store while signed in as a different user? Windows Server 2008 R2

I'm currently migrating a Jenkins server and I need to install a certificate on the new machine for some of my builds. The problem is I'm not sure on which store to use and no one remembers the ...
1
vote
0answers
683 views

Why my certificates doesn't match?

I've stablished a VPN using OpenVPN and it is all working.. almost.. My machines can see each other but on Handshake it all fails. The error at first referred to a blocked port but ports are good. ...
1
vote
0answers
135 views

Using Same X.509 serviceCertificate on Multiple WCF Services?

I have an application which exposes multiple WCF services (each a distinct facade for different client applications). Right now I'm managing a distinct certificate (created from our internal ...
1
vote
0answers
29 views

Is it possible to configure windows server 2008 to do windows form authentication BEFORE client certificate authentication?

I have setup a lab on vmware with both of them. It works but it doesn't suit my business case. I would like to have windows form authentication first. If sucessfull I want to check client certificate. ...
1
vote
0answers
162 views

Server 2008R2 RemoteApp authentication asked twice

My Problem is when the client logs in RDweb, he is asked to enter his credentials again once he's tries to open an application. My applications are signed with a standard GoDaddy cert. Everything ...
1
vote
0answers
1k views

EC2 Windows: Certificate for local system with Thumbprint … is about to expire or already expired

I regularly see this error in the Windows Error Log on one of my EC2 instances: Certificate for local system with Thumbprint aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa is about to ...
1
vote
0answers
71 views

Get ALL certificates installed in a Windows 2003 box

It seems that one of our Servers has a certificate that has expired, unfortunately we cannot find it, in other words, it's not in the local machine store or any of the personal stores of any of the ...
1
vote
0answers
715 views

Corrupted RDP Certificate

One of our machines crashed earlier, so I connected to it to find out what the issue was. It has been spitting out the following error in the logs for the past couple of days apparently... The RDP ...
1
vote
0answers
506 views

Certreq -retrieve can't find the specified CA

I'm currently writing a Powershell script and have run into a bit of a roadblock. Basically, the script requests, approves, and retrieves new certificates from our CA using certreq.exe and ...
1
vote
0answers
725 views

Import CER file into NTAuth Store on Windows Server 2003

I have to import a third party CER file into the NTAuth Store on a Windows server 2003 machine. I followed the as described in the Microsoft documentation at http://support.microsoft.com/kb/295663, ...
1
vote
0answers
355 views

Windows 2008 R2 Capi 2 errors

We have a couple of Windows 2008 SP2 servers running on a ESX 4.1 host. The problem is they have started to report are CAPI2 errors such as; Log Name: Microsoft-Windows-CAPI2/Operational ...
1
vote
0answers
745 views

Certificate issue on remote desktop

Please see this link : Certificate issue on remote desktop I have 2 PCs with Windows 7 Ultimate... (both are in NETHOME) PC 1 : computer name = alfa -> (main pc) , IP = 192.168.0.1 PC 2 : computer ...
1
vote
0answers
380 views

Apache, mod_ssl, mod_jk, tomcat and client certificates filtering

I am working on a very specific apache+mod_ssl+mod_jk+tomcat So far, a basic configuration works as I want: accessing my webapps behind all that stuff works great. I am using a wildcard certificate ...
0
votes
0answers
7 views

error Unable to configure verify locations for client authentication

Starting my apache2 Server on Ubuntu 12.04.5 LTS, I got the following error [error] Unable to configure verify locations for client authentication my Problem, on the server are more than one ...
0
votes
0answers
17 views

Effects of changing from basic auth to cert based auth?

I have been doing a bit of research on how to solve some frustrations our users have with mobile email and it looks like changing the Exchange settings to allow cert-based auth will help. I have been ...
0
votes
0answers
42 views

Apache Webserver: Map ClientCertificate to Active Directory

Using Apache Webserver 2.4 and mod_ssl and mod_authzn_ldap I'm trying to Authenticate the user by a ClientCertificate (PKI smartcard) Authorize the user by membership of certain Active Directory ...
0
votes
0answers
225 views

HAProxy - ssl client ca chain cannot be verified

Situation: I want this to work: requests come from clients and goes to haproxy through 443 port (ssl) and then it must go to backend on 80 port. I have server certificate given by intermediate ca ...
0
votes
0answers
38 views

OpenVPN and adding .p12 cert

Is there a way to add the .p12 type of cert to the openvpn config file? I've read and learned how to add the other files like so: <ca> -----BEGIN CERTIFICATE----- # insert base64 blob from ...
0
votes
0answers
68 views

WSO2EMM (MDM) Profile Installation Failed - Certificate is invalid

I followed the documentation (https://docs.wso2.com/display/EMM110/General+Server+Configurations) to generate the certificate and depoly the iOS agent but when I try to setup the certificate I have ...
0
votes
0answers
103 views

SCCM 2012 R2 and Client Certificates for HTTPS

We have a SCCM 2012 R2 site with a Management Point and a Distribution Point, all of which are using HTTPS with certificates issued by our Enterprise CA. We want to do OS Deployments (PXE for bare ...
0
votes
0answers
115 views

Require smart cards for connections to Windows 2012 remote access server

We have a Windows 2012 server accepting VPN connections over SSTP and authenticating them using the Network Policy Server feature on the same server. For client authentication we've set it up to ...
0
votes
0answers
61 views

When is a deleted Windows computer-certificate really gone?

We got a strange issue affecting a very small number (1%) of Windows 7 clients in our domain. These laptops are issued a Computer-certificate (X509) through AD for VPN access. We have a PowerShell ...
0
votes
0answers
125 views

MS CA “certutil -deleterow” not doing anything

I'm trying to cleanup old and failed certificates on my CA using certutil. I'd like to delete all failed requests prior to July 1st, 2014. I'm running the following: certutil -v -deleterow 7/1/2014 ...
0
votes
0answers
61 views

How do I set the certificate name as prompted by an Android phone in Microsoft ADCS?

When I import this SMIME test signing certificate, (password is the letter q) Android phones will come up with this screen: My goal is to import the certificate, with the right name, into the user ...
0
votes
0answers
199 views

Wildcard and multiname certificates aren't recognized by clients?

So, this is my problem. I have dev environment under internal domain - let's say machine name is dev. Every single working copy I create is autodetected by puppet and appropriate virtual host is ...
0
votes
0answers
10 views

What is happening/where is the error when multiple accounts have the same certificate mapped?

In our environment if multiple accounts (such as a basic user and an administrative account) have the same certificate mapped this causes access issues with our web applications. By removing one of ...
0
votes
0answers
39 views

getting multiple SSTP VPN certificate on client mmc console

I have succesfully installled SSTP VPN using technet document and Video on windows 2008 VM. The client can connect by installing certificate in appropriate place using mmc console. The only problem I ...