Tag Info

New answers tagged

0

Brian answer did the trick. For a weird reason... I can't select your answer as an the good answer. You solved my problem! Sorry it took so long to acknowledge it! Your link was exactly what I needed!


0

Now I got the solution, simply using or to exclude the target URL path. <Virtualhost *:443> ServerName myserver DocumentRoot /path/to/my/server/root ProxyPass /myservice/register http://localhost:4444/register ProxyPass /myservice/ ajp://localhost:8009/myservice/ SSLEngine on SSLProtocol all -SSLv2 SSLCertificateFile ...


8

As a rule of thumb: No, implied in trusting the customer's CA certificate is the trust in every certificate signed by that CA. I don't know of any applications/libraries that have an easy option that allows you as the end-user to select that you'll trust your customers or any other CA certificate only for certain (sub-) domains i.e. only for *.example.com ...


0

There are several certificates in a SAML2 and WS-federation trusts. I will ignore here the TLS certificate of the https url of the servers (ADFS calls it the communication certificate). Each party can have a signing certificate. The messages that the party sends are signed with the private key of that certificate. SAML2 parties often sign both requests and ...


3

In the Remote Desktop Services configuration, you can specify a certificate to use. You can also see the details of the current certificate. Compare the the thumbprint on that certificate to the one presented when you connect. What's probably happening is the certificate is being automatically generated with a short expiration date. If you generate a ...


0

this can happen automatically. It's more than that, it DOES happen automatically! Your certificates are automatically renewed every X days, X being the value of the property "CertificateRolloverInterval" (or maybe "CertificateDuration", I have a doubt; run Get-ADFSProperties to retrieve them). how do I know if a relying party trust is configured for ...


2

One is a public cert, the other is a key. As Federico stated in comments, this question addresses it pretty well. That being said, what are you trying to do?


1

I had the same exact issue and found the fix. It's all how you created the certificate template and request the certificate. Here is the fix: Create a certificate template from by duplicating the Computer template Edit the new certificate and these two important mods 2a. Allow export private key 2b. On the Subject Name tab select "Supply in the request" ...


0

On September, 17th 2014, the Primary Root CA - G3 (intermediate with a SHA-256 signature) was still not accepted by latest Mac operating systems. Thawte submitted an Apple Bug Number 17095623 in order to have them fix this issue.


2

The difference is exactly what it says. With Windows, certificates get assigned to accounts. So, if you want to apply a certificate to a specific computer, that's done by assigning the certificate to the computer account. This is a slight difference that's mainly just semantic when compared to *nix systems, where a user-certificate would be stored in the ...


0

I'll bet it's either Autodiscover, or Outlook Anywhere. Or both.


0

Getting to the bottom of this took quite a bit of time and involved some conversations with our Microsoft rep. While there is an option to enable both cert-based auth and NTLM, it would require some bubble capacity because we would need one CAS cluster to handle requests authenticating with NTLM and another to handle the requests using cert-based auth. It's ...


0

i'm also in a similar situation, i found this msdn page that talks about setting up collectors in non domain situations https://msdn.microsoft.com/en-us/library/windows/desktop/bb870973(v=vs.85).aspx


0

The files server.pem and client.pem should have 3 sections in it and should look like this: -----BEGIN RSA PRIVATE KEY----- <lots of base64 encoded data> -----END RSA PRIVATE KEY----- -----BEGIN CERTIFICATE----- <lots of base64 encoded data> -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- <lots of base64 encoded data> -----END ...


0

You are doing it wrong. If you use Windows CA to issue certificates, then only Windows CA should sign certificates with that particular CA certificate and key pair. You are compromising your PKI by using openssl and 3rd party libraries to sign client certificates with Windows CA certificate. Because you violate RFC5280 ยง4.1.2.2 requirement: CA must keep the ...


0

I ended up using Start-Process with -Credentials and the free importpfx.exe tool. Basically the same idea as @Mathias stated and @Peter gave an example of. Thank you both for your help. This was a lot easier than the past two days of research has led me to believe.


5

I do a similar thing for my servers, but I'm not using pure PowerShell: psexec.exe -accepteula -u sql -p sqlspassword certutil.exe -p certpassword -importPFX cert.pfx This just runs the certutil command under the specified account, you need to download psexec.exe,


2

Turns out, the Nginx documentation is somewhat misleading and goes at odds with SNI. Running openssl s_client -connect lanzz.org:443: CONNECTED(00000003) depth=0 C = GB, CN = www.lanzz.org, emailAddress = postmaster@lanzz.org verify error:num=20:unable to get local issuer certificate verify return:1 depth=0 C = GB, CN = www.lanzz.org, emailAddress = ...


3

My guess is that you have to enable NameVirtualHost for the SSL port. It can be done by editing the file /etc/apache2/ports.conf. There you can see the configuration for port 80: NameVirtualHost *:80 Listen 80 You can also see the IFmodule mod_ssl.c tags. By default there should only be "Listen 443" inside the tags and you just have to add ...


1

Okay this is what I did on 5.2 so that I could use a certificate signed by our internal CA: System->Certificates->Local Certificates->Generate (this will generate the CR) Check-click the newly created CR and Download it and process it on your favorite CA System->Certificates->Local Certificates->Import (this will import the signed cert), set Type to 'Local ...



Top 50 recent answers are included