Tag Info

Hot answers tagged

3

No, you cannot set an empty PIN on a Windows 8 Virtual Smart Card. At first I said "having a smart card with no PIN defeats the purpose." But that was too flippant of me. I have Bitlocker enabled on my laptop with a TPM, and I don't need to enter a PIN manually every time I boot up to unlock it. But the fact remains that you can't set an empty PIN on a ...


3

No, typically the SSL certificate is tied to the common name of a server, it's DNS name. Changing the IP-address of www.example.com does not invalidate the certificate for www.example.com. Your error message server certificate is a CA certificate suggests that you either copied the wrong certificate of misconfigured and now SSLCertificateFile points to what ...


2

If you want to retrieve the fingerprint of your lost public key file, you can recover it from the private key file: $ ssh-keygen -yf path/to/private_key_file > path/to/store/public_key_file Then you are able to ascertain the public fingerprint: $ ssh-keygen -lf path/to/store/public_key_file


1

Turns out I had been given the wrong files. The certificate had already been created, for the most part. After I figured out the steps I created a how-to: First you will need to request a wildcard certificate from GoDaddy - please see: GoDaddy SSL certificates Once you have the files you need, you will need to copy them over to the server you want to ...


1

You need to pass the -ext flag to the second command as well: $ keytool -keystore keystore.jks -storepass changeme -alias spam -certreq -ext san=dns:spam,ip:192.168.0.1 -file spam.csr Then the certificate contains the alt name: $ openssl req -noout -text -in spam.csr | grep -A2 "Requested Extensions" Requested Extensions: X509v3 ...


1

They are issued now by Comodo as part of their PositiveSSL offering. I can't say they're advertising it too well, but living proof by math exists: -----BEGIN CERTIFICATE----- MIID0DCCA3WgAwIBAgIQTOFIoMgcOpPD5P72Ag+HhTAKBggqhkjOPQQDAjCBkDEL MAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UE ...


1

The KeyUsage is a v3 extension, which may or may not be present in a certificate. A useful (if slightly dated) summary of id-ce-keyUsage values: http://www.alvestrand.no/objectid/2.5.29.15.html [newly added values are 7 = encipherOnly and 8 = decipherOnly] The trick is that this "OID=2.5.29.15 keyUsage extension" /might or might not/ be present in a ...


1

I always get a certificate error, even after installing the cert via Certmgr.exe The browser is doing the certificate security checks, so you would have to refer to the browser's documentation for installing certificates. certmgr.msc is able to install a certificate into the Windows Certificate Store, which is used to check certificates by Internet ...


1

Simply save the text as filename.crt and double click and in the certificate tool use the "install certificate" button to start certificate import wizard. This will import the root certicate giving you the ability to validate certificates issues by the that root CA. The alternative is to fire up mmc load the certificates snap-in, browse to the root ...


1

The problem here is two-fold: You need to ensure that the certificate you are using can be verified from the server certificate (the one you expose) to the root CA. In Java application servers, this usually means that you use a keystore to store the private key and the matching server certificate, and a truststore to store CAs (certificate authorities). ...



Only top voted, non community-wiki answers of a minimum length are eligible