Tag Info

Hot answers tagged

8

As a rule of thumb: No, implied in trusting the customer's CA certificate is the trust in every certificate signed by that CA. I don't know of any applications/libraries that have an easy option that allows you as the end-user to select that you'll trust your customers or any other CA certificate only for certain (sub-) domains i.e. only for *.example.com ...


5

I do a similar thing for my servers, but I'm not using pure PowerShell: psexec.exe -accepteula -u sql -p sqlspassword certutil.exe -p certpassword -importPFX cert.pfx This just runs the certutil command under the specified account, you need to download psexec.exe,


3

In the Remote Desktop Services configuration, you can specify a certificate to use. You can also see the details of the current certificate. Compare the the thumbprint on that certificate to the one presented when you connect. What's probably happening is the certificate is being automatically generated with a short expiration date. If you generate a ...


3

My guess is that you have to enable NameVirtualHost for the SSL port. It can be done by editing the file /etc/apache2/ports.conf. There you can see the configuration for port 80: NameVirtualHost *:80 Listen 80 You can also see the IFmodule mod_ssl.c tags. By default there should only be "Listen 443" inside the tags and you just have to add ...


2

Turns out, the Nginx documentation is somewhat misleading and goes at odds with SNI. Running openssl s_client -connect lanzz.org:443: CONNECTED(00000003) depth=0 C = GB, CN = www.lanzz.org, emailAddress = postmaster@lanzz.org verify error:num=20:unable to get local issuer certificate verify return:1 depth=0 C = GB, CN = www.lanzz.org, emailAddress = ...


2

One is a public cert, the other is a key. As Federico stated in comments, this question addresses it pretty well. That being said, what are you trying to do?


2

The difference is exactly what it says. With Windows, certificates get assigned to accounts. So, if you want to apply a certificate to a specific computer, that's done by assigning the certificate to the computer account. This is a slight difference that's mainly just semantic when compared to *nix systems, where a user-certificate would be stored in the ...


1

Okay this is what I did on 5.2 so that I could use a certificate signed by our internal CA: System->Certificates->Local Certificates->Generate (this will generate the CR) Check-click the newly created CR and Download it and process it on your favorite CA System->Certificates->Local Certificates->Import (this will import the signed cert), set Type to 'Local ...


1

I had the same exact issue and found the fix. It's all how you created the certificate template and request the certificate. Here is the fix: Create a certificate template from by duplicating the Computer template Edit the new certificate and these two important mods 2a. Allow export private key 2b. On the Subject Name tab select "Supply in the request" ...



Only top voted, non community-wiki answers of a minimum length are eligible