Tag Info

New answers tagged

2

If you want to retrieve the fingerprint of your lost public key file, you can recover it from the private key file: $ ssh-keygen -yf path/to/private_key_file > path/to/store/public_key_file Then you are able to ascertain the public fingerprint: $ ssh-keygen -lf path/to/store/public_key_file


1

The problem here is two-fold: You need to ensure that the certificate you are using can be verified from the server certificate (the one you expose) to the root CA. In Java application servers, this usually means that you use a keystore to store the private key and the matching server certificate, and a truststore to store CAs (certificate authorities). ...


0

The agent is not using the pregenerated client certificate. It created a CSR (with a new key) instead, so the master will not trust the agent. Make sure that the files found in `puppet agent --configprint ssldir`/{certs,private_keys}/`puppet agent --configprint certname` are identical to those that you pregenerated and put on your master as well. (The ...


1

Simply save the text as filename.crt and double click and in the certificate tool use the "install certificate" button to start certificate import wizard. This will import the root certicate giving you the ability to validate certificates issues by the that root CA. The alternative is to fire up mmc load the certificates snap-in, browse to the root ...


1

The KeyUsage is a v3 extension, which may or may not be present in a certificate. A useful (if slightly dated) summary of id-ce-keyUsage values: http://www.alvestrand.no/objectid/2.5.29.15.html [newly added values are 7 = encipherOnly and 8 = decipherOnly] The trick is that this "OID=2.5.29.15 keyUsage extension" /might or might not/ be present in a ...


1

I always get a certificate error, even after installing the cert via Certmgr.exe The browser is doing the certificate security checks, so you would have to refer to the browser's documentation for installing certificates. certmgr.msc is able to install a certificate into the Windows Certificate Store, which is used to check certificates by Internet ...


0

1.click and open the registry editor tool. 2.In the editor, place the following registry key as follows: HKey_Local_Machine\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0. 3.right click on the SSL 2.0 then choose new and then click key option. 4.name the new folder server. 5.Inside the Server folder, click the Edit menu, ...


0

Installing a commercial certificate resolved the above issue.


3

No, typically the SSL certificate is tied to the common name of a server, it's DNS name. Changing the IP-address of www.example.com does not invalidate the certificate for www.example.com. Your error message server certificate is a CA certificate suggests that you either copied the wrong certificate of misconfigured and now SSLCertificateFile points to what ...


3

No, you cannot set an empty PIN on a Windows 8 Virtual Smart Card. At first I said "having a smart card with no PIN defeats the purpose." But that was too flippant of me. I have Bitlocker enabled on my laptop with a TPM, and I don't need to enter a PIN manually every time I boot up to unlock it. But the fact remains that you can't set an empty PIN on a ...


1

They are issued now by Comodo as part of their PositiveSSL offering. I can't say they're advertising it too well, but living proof by math exists: -----BEGIN CERTIFICATE----- MIID0DCCA3WgAwIBAgIQTOFIoMgcOpPD5P72Ag+HhTAKBggqhkjOPQQDAjCBkDEL MAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UE ...


1

Turns out I had been given the wrong files. The certificate had already been created, for the most part. After I figured out the steps I created a how-to: First you will need to request a wildcard certificate from GoDaddy - please see: GoDaddy SSL certificates Once you have the files you need, you will need to copy them over to the server you want to ...


1

You need to pass the -ext flag to the second command as well: $ keytool -keystore keystore.jks -storepass changeme -alias spam -certreq -ext san=dns:spam,ip:192.168.0.1 -file spam.csr Then the certificate contains the alt name: $ openssl req -noout -text -in spam.csr | grep -A2 "Requested Extensions" Requested Extensions: X509v3 ...


0

I managed to solve a similar problem I was having by following the instructions here: http://casualtechs.blogspot.com.au/2010/06/problem-when-trying-to-import.html (with the only difference being that we want to add the certificate to "Trusted Root Certification Authorities -> Local Computer" instead of the "Trusted Publishers" that is mentioned on that ...


2

First figure out if your wildcard.domain.org.key is encrypted or not. For apache to start/restart automatically it must be decrypted. You can can view it with your favorite text editor/viewer. The encrypted key would have a first like like this. -----BEGIN ENCRYPTED PRIVATE KEY----- The unencrypted key would have a first line like this. -----BEGIN RSA ...


0

There's always CertUtil.exe: CertUtil -p Password -ImportPFX File.pfx For more options, look here: http://technet.microsoft.com/en-us/library/cc732443.aspx Or try: CertUtil -ImportPFX -?



Top 50 recent answers are included