Certificates are a Public Key and Identifying Information

learn more… | top users | synonyms (1)

4
votes
0answers
816 views

500 OOPS: SSL: cannot load RSA private key vsftpd

Im configuring vsfptd on debian 7.3, Im trying to use ssl. I generate de certficates using this command: openssl req -x509 -nodes -days 1925 -newkey rsa:2048 -keyout /etc/vsftpd/private/vsftpd2.key ...
3
votes
0answers
11 views

OCSP stapling with nginx

I'm having trouble with OCSP stapling in nginx. So I start up the openssl ocsp daemon, and then I visit my site. Then it says Invalid request. I am using a private PKI and CA. SSL key: 8192bit DH key ...
3
votes
0answers
57 views

How to get OpenSSH to use OCSP for revocation

As the title says, is there any (free) library, patch, etc. that allows OpenSSH to be configured to check x.509 certificate revocation via OCSP (online certificate status protocol)? If so, can you ...
2
votes
0answers
31 views

Certificate can only be used by network service account

Issues : Our service is using one certification for partner service call. It worked well in IIS site which is running as network service account. But when we run test the code as administrator ...
2
votes
0answers
114 views

How do I make a Cisco Ironport appliance send “linked certificates” for HTTPS inspection?

I have a PKI tree, and the ironport is a CA at the second level of the PKI tree, (for issuing HTTPS inspection certs) Although I deployed the root certificate to all clients, and chrome/IE work ...
2
votes
0answers
47 views

How to buy a X.509 certificate for signing digital payloads

I am in a situation where my software is calling a third party web service (SOAP) and using WS-Security for client authentication using a client certificate and digital signing of the message ...
2
votes
0answers
972 views

SChannel “cannot find certificate in either LocalMachine or CurrentUser store”

We have an in-house application that requires the use of client SSL certificates to authenticate with a remote server (not under our control). This has worked without problems before but on deploying ...
2
votes
0answers
108 views

Installing a personal security certificate for Windows Server 2008 Terminal Services user

We use StoneEdge Order Manager, which runs under Microsoft Access, on several Windows computers as well as through Terminal Services on Windows Server 2008. Terminal Services users are unable to ...
2
votes
0answers
129 views

Certificate enrollment request chain not trusted

I am working on a MSFT lab for Direct Access, and need to create a Web certificate. The instructions ask be to do the following: On EDGE1, click Start, type mmc, and then press ENTER. Click ...
1
vote
0answers
61 views

How to set up MS Azure VPN with the password authentication?

I'm trying to connect to the MS Azure VPN. I installed the Client certificate and got access to the VPN network. But now I need, the system request the password when somebody is trying to connect to ...
1
vote
0answers
26 views

Do I need my certificate server?

Good afternoon. I'm getting ready to replace one of my DC's and noticed it is using the Certification Services role on it. I looked and we have about 8 outstanding certificates that have yet to ...
1
vote
0answers
67 views

OpenSSL verification failing with CA signed cert but not with self signed one?

First of all, I know there are plenty of related questions but it seems like most of them are due to the lack of issuer certificates on the server. I have been following this guide to enable client ...
1
vote
0answers
41 views

Can I use both RSA and ECC certificates in apache?

If I simply use "SSLCertificateFile" and "SSLCertificateKeyFile" twice, the certificate chain is broken for the first one. Can I use both RSA and ECC certificate which is issued from different ...
1
vote
0answers
361 views

RDWeb TS connection broken for some users post RemoteApp certificate change

We recently reissued our GoDaddy wildcard cert with the SHA256 signing algorithm (FYI they still revoke the old cert in 72 hours even if you don't re-key it, so you should re-key anyway). We use this ...
1
vote
0answers
36 views

VMs with same name an IP

Does Foreman support managing several VMs with same name and IPs, but with different certname? for example: NAME IP CertName VMLinux001 10.0.0.2 VMLinux001@domain.com ...
1
vote
0answers
96 views

Add trusted remote certificate to Ubuntu server

I'm running an app on an AWS server running Ubuntu 12.04.4 LTS. I'm writing a script to connect to an SFTP server from the command line, but am unable to connect. I believe this is because my Ubuntu ...
1
vote
0answers
68 views

How to setup digital signatures on Microsoft CA (AD-CS)?

I've been trying to research across the web on how to setup a Microsoft CA (AD-CS on Windows Server 2008 R2) in order to create a certificate for digital signatures, allowing you to digitally sign ...
1
vote
0answers
53 views

Owncloud - Proxy changes certificate

I'm running an owncloud server 7.0.2 with apache(Ubuntu host) and configured it to use a self-signed ssl certificate. Everything works fine on my home-PC On an other machine I would like to use the ...
1
vote
0answers
160 views

wdsutil claims Windows Server 2012 R2 drivers are unsigned, but they have a valid certificate

I'm trying to import some Windows Server 2012 R2 drivers to a driver group in WDS. My WDS server is running Windows Server 2012 (not R2). When I run the following command: WDSUTIL /Add-DriverPackage ...
1
vote
0answers
78 views

Remote Desktop Certificate Template Application Policy Extension

We are setting up remote desktop authentication with the use of certificates and ran into an issue in one of the environments. I am editing the RemoteDesktopComputer2008 certificate template, in ...
1
vote
0answers
84 views

Attach certificate to remote desktop connection - not gateway services

I have a Windows server that I want to attach a 3rd party signed certificate for remote desktop connections. This is not a remote desktop services server, i.e. it is just remote desktop ...
1
vote
0answers
101 views

Windows - Replace subject from CSR when issuing certificate

I've received a CSR from a client with a CN, but not with all the subject fields we require. According to this answer from Scott*, it should be possible to specify the final subject values when the ...
1
vote
0answers
128 views

Openssl cert not accepted on cisco load balancer

Been fighting a expired cert issue for the past few days. I am updating a cisco ace load balancer with an updated cert. However every time I attempt to validate the cert it is not valid or does not ...
1
vote
0answers
144 views

What's the Correct Way to Implement Certificates on an RDS Farm?

We currently deploying six terminal servers in a farm that will be accessed by thin clients running Windows Embedded. The idea behind the thin clients is to have a seamless single-sign on whereby as ...
1
vote
0answers
93 views

Exchange on WP7 - 80072F0D

Last week, the self-signed certificate on our Exchange 2010 mailserver expired, so we made a new one. Everything works fine after this, except mail on Windows Phone 7. All phones are giving an error ...
1
vote
0answers
159 views

RPC over HTTP - Outlook

I'm trying to configure an Outlook client to use RPC over HTTP so that my client can read his mail without connecting to the VPN. The mailserver is an SBS2011 server and Outlook Anywhere has never ...
1
vote
0answers
151 views

OpenSSL always shows “unsupported” for all subjectAltName “otherName” UTF8 values

It seems like OpenSSL is broken when trying to read back subjectAltName/otherName/UTF8 values that were written by itself: The relevant openssl.cnf configuration (using an official but random OID): ...
1
vote
0answers
77 views

How to include all dns records and IP address of a server in automatic certificate enrollment of Microsoft AD CS?

In my company there are a lot of servers which users remotely login to them to do their duties. We have enabled computer certificate auto enrollment for them to assure secure connection. But because ...
1
vote
0answers
5k views

openssl s_client -connect: 20 error with server signed certificate for client

What I want I want to connect to a server using a given signed certificate (by the company running the server) What I have Ubuntu 12.04 LTS My key and CSR files A signed certificate. It was signed ...
1
vote
0answers
28 views

Need help configuring Exchange 2010 server certificate

I've set an a multi-role Exchange server (SVR1) for my office, and now I am setting up a second multi-role server (SVR2) in a different site. Outlook Anywhere is not activated, and I don't have an ...
1
vote
0answers
517 views

ADCS WebEnrollment : The context was acquired as silent

I have setup Active Directory Certificate Services with Web Enrollment and I have the following error when enrolling certificate on other computers that are in the same domain : Certificate ...
1
vote
0answers
31 views

Transfer cacerts file to another das

I was wondering if its possible to transfer the cacerts.jks file to another glassfish DAS machine? The idea is to synchronize both das machines without having to import every certificate manually. ...
1
vote
0answers
314 views

apache authentication with SSL certificate and SSLUserName

i just try to put an SSL authentification for a SVN server over https. I would like that the client certificate allow authorized person to check their repositories. <VirtualHost ...
1
vote
0answers
195 views

Always get a Security Error for Internal HTTPS Website

Full disclosure, I asked this question over at Ask Different (http://apple.stackexchange.com/questions/96776/always-get-a-security-error-for-internal-https-website) but didn't get much helpful ...
1
vote
0answers
237 views

Is it possible to view a user's certificate store while signed in as a different user? Windows Server 2008 R2

I'm currently migrating a Jenkins server and I need to install a certificate on the new machine for some of my builds. The problem is I'm not sure on which store to use and no one remembers the ...
1
vote
0answers
425 views

Client Certificates not working with IIS7

I have been trying to get a webservice we are creating to require client certificates for connections for several weeks and haven't been having much luck. I thought that I would attempt to make a ...
1
vote
0answers
146 views

Using Same X.509 serviceCertificate on Multiple WCF Services?

I have an application which exposes multiple WCF services (each a distinct facade for different client applications). Right now I'm managing a distinct certificate (created from our internal ...
1
vote
0answers
30 views

Is it possible to configure windows server 2008 to do windows form authentication BEFORE client certificate authentication?

I have setup a lab on vmware with both of them. It works but it doesn't suit my business case. I would like to have windows form authentication first. If sucessfull I want to check client certificate. ...
1
vote
0answers
165 views

Server 2008R2 RemoteApp authentication asked twice

My Problem is when the client logs in RDweb, he is asked to enter his credentials again once he's tries to open an application. My applications are signed with a standard GoDaddy cert. Everything ...
1
vote
0answers
1k views

EC2 Windows: Certificate for local system with Thumbprint … is about to expire or already expired

I regularly see this error in the Windows Error Log on one of my EC2 instances: Certificate for local system with Thumbprint aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa is about to ...
1
vote
0answers
73 views

Get ALL certificates installed in a Windows 2003 box

It seems that one of our Servers has a certificate that has expired, unfortunately we cannot find it, in other words, it's not in the local machine store or any of the personal stores of any of the ...
1
vote
0answers
781 views

Corrupted RDP Certificate

One of our machines crashed earlier, so I connected to it to find out what the issue was. It has been spitting out the following error in the logs for the past couple of days apparently... The RDP ...
1
vote
0answers
551 views

Certreq -retrieve can't find the specified CA

I'm currently writing a Powershell script and have run into a bit of a roadblock. Basically, the script requests, approves, and retrieves new certificates from our CA using certreq.exe and ...
1
vote
0answers
314 views

Switch stunnel from self-signed cert to signed by CA cert

We use stunnel configured to provide SSL-tunnel between SERVER A (where we have stunnel configured as client) and many SERVERS B (where we deployed stunnel configured to work in server mode). We use ...
1
vote
0answers
776 views

Import CER file into NTAuth Store on Windows Server 2003

I have to import a third party CER file into the NTAuth Store on a Windows server 2003 machine. I followed the as described in the Microsoft documentation at http://support.microsoft.com/kb/295663, ...
1
vote
0answers
367 views

Windows 2008 R2 Capi 2 errors

We have a couple of Windows 2008 SP2 servers running on a ESX 4.1 host. The problem is they have started to report are CAPI2 errors such as; Log Name: Microsoft-Windows-CAPI2/Operational ...
1
vote
0answers
787 views

Certificate issue on remote desktop

Please see this link : Certificate issue on remote desktop I have 2 PCs with Windows 7 Ultimate... (both are in NETHOME) PC 1 : computer name = alfa -> (main pc) , IP = 192.168.0.1 PC 2 : computer ...
1
vote
0answers
400 views

Apache, mod_ssl, mod_jk, tomcat and client certificates filtering

I am working on a very specific apache+mod_ssl+mod_jk+tomcat So far, a basic configuration works as I want: accessing my webapps behind all that stuff works great. I am using a wildcard certificate ...
1
vote
0answers
499 views

Install client side ssl cert on Openfire

I'm developing client-server app and trying to secure the connection. I'm using openfire as the server. I don't want any other jabber-clients to connect to it except mine. I want to make it by using ...
0
votes
0answers
10 views

Mutliple SSTP Certificates for RRAS Server

Is it possible to use multiple sstp certificates at a time in Routing and remote access services server. Any references are highly appreciated. Thank You.