0
votes
0answers
6 views

EventLog error related to certificates on connectors in exchange 2010

In my functioning production environment of Exchange 2010 i set up a GoDaddy certificate for communicaitions and assigned all services (imap,pop,iis,smtp) to that certificate ( which is part of the ...
-1
votes
1answer
27 views

SSL certificate is not properly installed on Glassfish

I am an java developer not an web server/IT infra guy so i dont know wether I am asking this question correctly or not, So i apologies if I am wrong somewhere. Previously we are having an spring web ...
1
vote
1answer
67 views

Do I need to resign/regen a cert when moving IPs?

Are these errors related to moving a site to a new IP and keeping the same SSL CERT? Will I need to regen/sign to fix this? [Sun Jun 22 07:13:11.054280 2014] [mpm_worker:notice] [pid 2775:tid ...
6
votes
1answer
84 views

Does Apache needs to know about intermediate certificates for client authentication?

I have a following hierarchy of certificates. And I need to do a client authentication on Apache. . └── root (CA) - self signed ├── intermediate 1 (CA) | ├── client1 | ├── client2 ...
3
votes
2answers
82 views

Use DNSSEC for secure connections

From my understanding DNSSEC allows me to create a public key and sign my DNS records. There appears to be multiple ways to have a certificate record (such as DANE see ...
6
votes
1answer
148 views

What does this intention with random numbers mean in a SSL certificate?

I was looking at this site, and out of interest, I was having a look at the certificate in Chrome 32, on Windows 8.1, and I had a look at the certificate. I saw this really strange intention, Apart ...
0
votes
1answer
107 views

CACert.org certificate giving sec_error_unknown_issuer

I have used cacert.org to issue class 1 certificates for my website. I made sure that the subdomain name is correct and that the e-mail address is there, but yet I keep getting the certificate problem ...
0
votes
2answers
149 views

How to disable HTTPS on IIS 7.5

I have a IIS 7.5 on Windows2008, hosting a couple of dozen of sites. Two sites use HTTPS, we call them www.site1.com and www.site2.com Now the problem is that if I (for any reason) browse to ...
2
votes
1answer
61 views

What organizational method or system do you use to manage SSL certificates? [closed]

One of the duties I've been recently assigned is to keep track of the SSL certificates used by the application servers I support. These are managed by external group mainly but internal to our ...
0
votes
1answer
55 views

openssl generate .key from CSR

A customer sent me a CSR and the .CER of a certificate for a linux server that I host. The customer does not have access to this machine. Is this enough data to generate a valid certificate? Is it ...
1
vote
1answer
4k views

SSL Error: self signed certificate in certificate chain

EDIT: AS the following documents describes http://www.novell.com/support/kb/doc.php?id=7002392 i've concatenated thos files like this at domain.key domain.crt sf_bundle.crt >> domain.pem and ...
0
votes
2answers
520 views

Installing SSL certificate on JBoss

I have a server that runs JBoss. When I type bad URL to that server it gives me version like this: JBossWeb/2.0.1.GA - what version of JBoss that would be? A SSL certificate will be bought and ...
0
votes
0answers
109 views

Why does IIS7 on one server work with my certificate while another has problems?

In the setup I describe, we have two servers, Alpha and Bravo. Alpha is a server that has been around for years. It is a Windows 2008 server running IIS7. In order to log in to any application on ...
0
votes
1answer
146 views

Is it possible to allow only some client certificates in Apache to login?

In my virtual host I have something like that: SSLEngine on SSLCertificateKeyFile /etc/apache2/ssl/svn.XXXXX.me.key SSLCertificateFile /etc/apache2/ssl/svn.XXXXX.me.crt SSLProtocol ...
0
votes
2answers
80 views

Using an SSL certificate in multiple locations

I have some issues with respect to using SSL Certificates. I have a website hosted in UK and I also have an organisation in South Africa hosting my company application online for web access. The ...
29
votes
1answer
6k views

How can I work around problems with certificate configuration in Remote Desktop Services?

I am setting up a Remote Desktop Services farm, and am having trouble configuring certificates for it to use. A demonstration of the problem I'm seeing can be found in Step #4. At this point I am ...
0
votes
1answer
1k views

Subject Alternative Name not added to certificate

I'm trying to issue a new certificate using the additional attribues field within the Windows CertSrv Web-Enrollment Client. I added the CSR, picked the template and entered this into the attributes ...
3
votes
1answer
40 views

Certificate issue causing code to fail

We have some code that connects to a website to call a web service. When I run the code on our server under my account (local admin) the code runs fine. When I run the code under a different user the ...
8
votes
1answer
164 views

How do SAN Certs degrade performance?

I have heard that when lots of names get added to a single SAN Cert (Subject Alternative Name) performance starts to degrade. Can someone explain how SAN certs are processed so I understand what ...
0
votes
2answers
135 views

What kind of SSL Cert do I need and where do I get it?

I want to have subdomains with SSL within my domain. The main difference is that each subdomain is hosted by a different person with a different public key/private key pair. Let me illustrate with an ...
3
votes
2answers
81 views

certificate creation on Windows Server 2008

On Windows Server 2008 using RD Gateway Manager it is possible to create a SSL self-signed certificate. Which other ways exist to create certificates on Windows Server 2008?
6
votes
1answer
679 views

HTTPS and Certification for dummies

I had never used https on a site and now want to try it. I did some research, but not sure that I understood everything. Answers and corrections are greatly appreciated. Here we go: To use https I ...
1
vote
2answers
331 views

Cannot start httpd service with SSL

Have an issue where I have installed new certificates on Centos 5 and modified the conf file for the following lines: SSLCertificateFile /etc/pki/tls.certs/name.crt SSLCertificateKeyFile ...
0
votes
1answer
973 views

Getting ASN1 bad tag error when trying to complete certificate request in IIS7

I have a multi-domain certificate I'm trying to install on IIS 7.0. When I use the IIS manager to complete certificate request, I get the error: There was an error while performing this operation. ...
3
votes
1answer
3k views

Setup IIS to require client certificate and to use anonymous authentication

Setup IIS to require client certificate and to use anonymous authentication I have a WCF web service for our customers to use. I want to protect this using client certificates. I will also use the ...
8
votes
3answers
7k views

How to avoid lftp Certificate verification error?

I'm trying to get my Pelican blog working. It uses lftp to transfer the actual blog to ones server, but I always get an error: mirror: Fatal error: Certificate verification: subjectAltName does not ...
4
votes
2answers
7k views

802.1x automatically validate certificate in windows clients

We're deploying a wireless networking using Windows Server 2008 NAC as a RADIUS server. When Windows XP or 7 clients connect they initally fail to connect. In order to enable the client to connect we ...
1
vote
2answers
236 views

First SSL pageload slow on NGINX

I have recently purchased a QuickSSL certificate from GeoTrust, and I am using it on NGINX. Everything is fine, but there is a nasty second before the page actually loads. If I look at other SSL ...
3
votes
1answer
70 views

SSL Certificate creation - Which ID type to choose?

I'm trying to find-out how important the "ID type" for a SSL certificate is. I'm trying to generate a cert from my firewall to upload to a CA, but having trouble deciding if I should choose an IP, a ...
1
vote
2answers
2k views

WinHttpCertCfg not importing certificate

I need to setup a deployment script that imports an SSL certificate that my service uses. I have tried importing with WinHttpCertCfg and with CertMgr to no avail. Here are the command-line arguments ...
1
vote
2answers
4k views

How can I make apache request a client SSL certificate without needing to verify it against a known CA?

I'm using apache2 (2.2.3) to serve a site where I'd like to have clients authenticate with certificates. Since I only need to verify that a user presenting a particular certificate is the same user ...
2
votes
4answers
604 views

Do I really need client certificates to be signed by a trusted CA?

Suppose I have a site that I want users to be able to log into with client certificates. As I understand it, the client is presenting the site with the public half of a keypair and proving that they ...
1
vote
2answers
1k views

SSL Certificate by GeoTrust not working

I have signed for an SSL Certificate (Quick SSL Premium) from Geotrust by my VPS provider (1&1). I, did exactly what it is indicated here, I added all of the directives at my subdomain's Virtual ...
3
votes
4answers
139 views

How do certificates improve security?

I am trying to get my head round server certificates. Am I right in saying: A certificate binds to the requester (ie client), to prove their identity. The certificate at the time of creation is for a ...
2
votes
2answers
2k views

How to trust a certificate for all users on a citrix server

We have a problem with a specific website which our staff need to access via Internet Explorer on our Citrix server (running Win2K3). When connecting via SSL (a requirement), the site is ...
2
votes
1answer
151 views

What is “certs” in openssl.conf for?

In the openssl.conf can I e.g. see [ CA_default ] dir = $ENV::KEY_DIR # Where everything is kept certs = $dir # Where the issued certs are kept crl_dir ...
0
votes
2answers
803 views

Kloxo/CentOS 5.7 install .p12 certificate

I have just got a free StartSSL certificate, I received a .p12 file, and only a .key file. I'm not really sure how to install this on my server and replace the current one. It's running Kloxo latest ...
4
votes
1answer
2k views

Opening certmgr.msc to display the Machine level certificates

I want to view the certificates installed at the machine level, if I open certmgr.msc. I am aware that we can open an mmc and app a snap in for certmgr. But I dont want to go that way. I am aware ...
3
votes
1answer
483 views

Adding a self-signed cert into trusted certificates list with powershell on Windows 7

I created a self-signed certificate on Windows 7 and deployed a web site with this certificate just to try it out. When I configured the HTTPS endpoint and visit the site with HTTPS protocol, I get ...
3
votes
2answers
3k views

Cannot issue Computer cert to standalone computer from my ECA

All Windows 2K8R2 SP1 environment. I have a working Enterprise Certificate Authority in my domain. I want to issue a Computer certificate (for Server Authentication purpose) to an external, ...
1
vote
1answer
503 views

Is it okay to use the FREE SSL Certificate offered by: Instant SSL by comodo? or Is StartCom better? [closed]

Is it okay to use the FREE SSL Certificate offered by: Instant SSL by comodo. The site says: Our promise to you: There is absolutely no cost or commitment for your SSL certificate. ...
1
vote
1answer
1k views

RDP Certificate Distribution Points

I am receiving the message "Your computer can't connect to the remote computer because the Remote Desktop Gateway's server's certificate has expired or has been revoked" when trying to access a TS ...
0
votes
1answer
340 views

There is no certificate chain in portal certificate file

I am trying to install Mcafee EMM in a lab environment. I have created an enterprise CA and created a certificate. But while installing the EMM, its showing the error of there is no certificate ...
1
vote
2answers
1k views

Apache Client Certificate Authentication

How can I configure Apache 2 (on Ubuntu 10.04) to use Client Certificate Authentication where my domain (secure.somedomain.com) is secured by a third party trusted SSL certificate, and the client ...
1
vote
1answer
2k views

Certificate does not have a name

I've successfully managed to install an ssl-certificate in IIS, however the 'Name' column is showing as blank even though I entered a friendly name. Is there any way to rectify this? The screenshot I ...
2
votes
4answers
259 views

Is there a provider that offers free SSL certificates that don't give a warning in Firefox 4?

I am looking to install SSL certificates for frequently used https services. I used to use StartSSL for this, but they "temporarily" stopped offering their services. I wonder if there are any other ...
2
votes
1answer
1k views

Why can't I export a certificate that I imported as exportable?

On Windows 2008, I'm using OpenSSL to generate a self-signed certificate (the openssl.cfg file is empty): openssl.exe req -x509 -config openssl.cfg -days 10950 -subj ...
2
votes
2answers
2k views

suppress warnings from windows live mail untrusted cerficate ssl

Hi we have setup our own mailserver using ssl. Each time I start up windows live mail, in comes up with an annoying message that "The server you are connected to is using a security certificate that ...
1
vote
2answers
2k views

Adding an RP to ADFS 2

I'm trying to add a Trusted Relying Party using the ADFS 2 wizard. My dev site (IIS hosted) has an HTTP binding at port 61080 while the HTTPS binding is on port 61443. I've got a self signed .PFX ...
1
vote
2answers
207 views

Advice regarding Exchange 2010 topology and certificates

By chance, I've been asked to do some research on a migration from Exchange 2003 to 2010. I've been working with Exchange 2007 for some years but without any formal certification or the likes. I've ...