Questions tagged [certificate]
Certificates are a Public Key and Identifying Information
1,273
questions
0
votes
1
answer
29
views
Domain Member Servers - Accessing Certificate Revocation List (CRL)
In my environment I have a Enterprise Root CA installed on a domain controller and a separate domain controller configured as a Subordinate CA - I know this isn't recommended for security reasons but ...
- 578
0
votes
0
answers
60
views
Odd TLS Error when using curl on origin server x.509
I am hoping someone can help explain what is happening in this situation..
As of now, I have a domain from google domains and I am using cloudflare for my DNS management. I am not using any TLS/SSL ...
0
votes
0
answers
51
views
Strongswan VPN certificate authentication failed
I've installed strongswan vpn on my ubuntu server. Set up certificate authentication. I've set up my android-phone and it works fine. But connection didn't established on the windows machine. I copied ...
0
votes
1
answer
103
views
The certificate request was submitted to the online authority, but was not issued. The request was denied
I've a Hyper-V lab with few VMs. I'm trying to renew expired server certificate for one of my virtual machines which is running Windows Server 2019 (version 1809). I'm trying to renew the certificate ...
- 225
0
votes
1
answer
28
views
How does OCSP handle deleted certificates?
We have a Microsoft Certificate Authority running on Windows Server 2019. We are issuing certificates to Android devices via a MDM. The Android device users browse to a web application (hosted by ...
0
votes
0
answers
61
views
Setting up CloudFront with SSL/TLS certificate and EC2 instance
Community.
I have a web page served by Apache running on a EC2 AWS instance. I am using AWS Certificate Manager with CloudFront to manage SSL/TLS in order to access the web page using HTTPS
My ...
- 1
0
votes
0
answers
11
views
AWK Command to add new line ending to send Encrypted Private Key via API
How to add new line ending \n to Encrypted private key which has a blank line.
Example Encrypted Private:
-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: AES-128-CBC,...
- 1
0
votes
0
answers
24
views
Trouble with a certificate when sending email through PHP
I have a server that is running a PHP app through docker. In it, I'm using the PHPMailer package to send an email through another server I have, which has postfix running. When I send the email, I get ...
- 123
0
votes
0
answers
32
views
Using self-sign certificates with OpenSSH on Windows
I'm wondering if you can use a self-sign certificate on the OpenSSH platform for Windows? Anyone know if this is possible and how to do it?
Sincerely
John Rosell
0
votes
0
answers
42
views
802.1x Wireless with certificates for AADJ/Intune devices without user affinity
I can setup certificate distribution and wireless profiles in Intune for devices with user affinity and this works fine. The user account is synchronised with our on site AD server and NPS has an ...
0
votes
0
answers
24
views
Which certificates are to be used for SSL verification programatically?
I am trying to invoke an API using python and it requires me to do SSL verification. I have a jks certificate which I converted to a pem file using below commands.
keytool -importkeystore -...
- 101
0
votes
0
answers
28
views
Renewing domain CA SSL/SSTP Certificate from non-domain Clients
I have a VPN setup using RRAS/SSTP to authenticate clients. However, some of the clients are connecting via personal computers which are not joined to the domain. Initial setup was done by manually ...
- 1
1
vote
1
answer
75
views
Domino Console port 2050 certificate expired. Can it be renewed?
The original problem is that when you open the Domino Console app and try to connect to the server, you get "Either the server controller is not running or not listening on port 2050." The ...
- 113
1
vote
1
answer
88
views
How do I sign my own SSL certificates so that they cover www and non-www domain names?
When using a commercial Certificate Authority, generating a csr for the common name www.mysite.com and sending it to them will result in a certificate being issued that works for both www.mysite.com ...
- 4,413
1
vote
3
answers
4k
views
Apt-Get Update Failing because of Certificate Validation
Using Ubuntu Focal fossa. I was trying to install a checkpoint ssl software for VPN, but seems like something messed up all my certificates. Now whenever I try
sudo apt-get update
I get the following ...
- 113
0
votes
1
answer
324
views
Kuberentes kubelet-client-current.pem expired
I'm new in K8s and I'm facing a problem with certificate.
1.13 version is used.
One of the worker nodes is in NotReady status.
I check logs and it turned out that:
Part of the existing bootstrap ...
- 1
0
votes
0
answers
93
views
Private key is not generating from .p12 file
I generated my .p12 file using the below command
keytool -importkeystore -srckeystore mycert.jks -destkeystore keystore.p12 -deststoretype PKCS12
The above command successfully generated a 7 KB .p12 ...
- 101
1
vote
1
answer
66
views
Can a server offer more than one TLS certificate?
Let's say I have a TLS certificate for a domain but I'm not sure if all user agents potentially connecting over HTTP would accept it. Can I obtain another certificate, signed by another certificate ...
- 133
0
votes
1
answer
82
views
Parent Domain Certificate Authority For Child Domains
I have a parent domain and 2 child domains of that parent. All servers are Windows Server 2019. I am working on deploying security software and I need to obtain a valid certificate from the ...
- 761
0
votes
0
answers
34
views
CertUtil Windows Update gives me 430+ certificates?
There are several well known methods of downloading certificate lists from Microsoft, including
certutil -generateSSTfromWU c:\my_cert\
Doing that (or just downloading authrootstl.cab) gives me a ...
- 272
0
votes
1
answer
300
views
How to Properly Migrate Active Directory Certificate Services
I have Active Directory Certificate Services installed on a Windows 2016 domain controller. We plan on spinning up Windows 2019 instances to replace our 2016 domain controllers. We have one DC with ...
- 578
0
votes
1
answer
65
views
Windows doesn't create assign "Key Container" when adding cert tied to Cavium (AWS CloudHSMv2)
I've got two windows systems tied to the AWS CloudHSM v2 (the cavium HSM). On one, I generated the CSR, and accepts/added the cert purchased with that CSR. I can sign and the private key is pulled ...
- 187
0
votes
1
answer
49
views
How do you generate a certificate with a RSA key instead of a regular key?
I am trying to see how the certificate was made, I have a key file called site.com.crt a bundle file called site.com.bundle and a key file called site.com.key and I have no way of generating the same ...
- 3
0
votes
0
answers
35
views
ADFS SSO error: Invalid audience for this response
My team are about to launch a new site, which authenticates users using SSO to our internal ADFS.
SSO works on our local and staging environments and now we're setting up what will be the live ...
- 243
0
votes
0
answers
75
views
FreeRadius with mixed CAs
Is it possible to run FreeRadius (version 3.0.13) with two different CAs? So that I have a server certificate from one CA and the client certificates come from a different CA?
Our current setup in /...
- 135
1
vote
1
answer
242
views
How to install a validated SSL certificate on Ubiquiti UniFi Network Application (Controller) running on Linux
I want to replace the self signed Unifi certificate used for the web interface of the UniFi Network application / server v6.5 (on Ubuntu 18 Linux) with a signed (wildcard) certificate and private key ...
- 341
0
votes
1
answer
273
views
will ssh work with a .cer file?
I'm trying to set up an Avalance node on AWS. When following the instructions to set up a key pair, the file generated was a .cer file instead of a .pem file. Will I still be able to SSH onto the ...
- 101
0
votes
1
answer
157
views
Create new SubCA certificate fails with NTE_PROV_TYPE_NOT_DEF
I am trying to manually create a key and CSR for a new Windows AD CS Enterprise Subordinate CA (Windows Server 2019).
I'd like to store the key in the modern Microsoft Software Key Storage Provider.
...
- 6,663
0
votes
0
answers
141
views
An I/O error occurred while reading from the JWK Set source: PKIX path building failed: unable to find valid certification path to requested target
I am trying to test my spring boot application in my local with http://localhost:8294/test but keep getting the certificate error. It was working until last week and all of sudden stopped working. I ...
- 1
0
votes
0
answers
174
views
Group Policy Trust Center Trusted Certificates
I want my office/excel to accept only VBA code from my own trusted publisher. So I've selected the following:
Disable VBA macros except digitally signed macros
Require macros to be signed by a ...
0
votes
0
answers
43
views
IIS7.5 How to make a binding for 2 domains, 2 IPs and 2 certificates
I am clutching at straws... hope you can help me with this old server.
I want to bind domain1.com to ip 123.456.7.1 and domain2.com to 123.456.7.2, each with its own certificate. As longs as I ...
0
votes
2
answers
60
views
Pass HTTPS certificates from downstream servers through NGINX proxy to client
I have a fleet of Ubuntu edge computers that host simple web HMI servers. Many are behind dynamic IPs where port forwarding is unavailable.
So, to access them each uses autossh to create a reverse ...
- 1
0
votes
1
answer
923
views
Why do i get openssl error unknown option for -adext?
I am attempting to generate CSR using openssl with subject alternative names however i get an error stating no options for adext. See command below.. I am using OpenSSL 1.0.2k-fips
openssl req -new \
-...
- 101
1
vote
1
answer
2k
views
curl says a valid certificate is expired
I have a gitlab community edition hosted on a server, and when using curl on this server to fetch this local gitlab website, I get an expired certificate error even if the dates are valid:
curl --...
- 13
0
votes
0
answers
195
views
SSL3 decrypt error lead to openssl_handshake bad signature
I have an authentication server based on certificate. The previous roll of certificate (1 CA + 1 Server + 1 Client) worked perfectly. A few days ago the client certificate expired and I had to ...
- 59
0
votes
1
answer
28
views
How does XCEP policy (XML) define SubjectType for User or Computer constraint?
We've developed our own implementation of a XCEP/CES WCF service that uses a combination of our certificate management solution and the Microsoft CA to issue the certificates. The standard XCEP XML ...
0
votes
0
answers
48
views
Unable to scrape kublet api from prometheus
I am setting up prometheus to scrape kubernetes cluster. I am trying to use "role: node" with kubernetes_sd_config to monitor one of the K8s cluster.
I created certificate ashishcert.pem for ...
0
votes
1
answer
148
views
Ldap service not running on Windows Server 2019
I have 2 windows server 2019. e.g. server1 and server2.
server1 is the domain controller.
server1 has below roles installed: ADDS, ADCS, DNS, FILE STORAGE, IIS.
server2 is connected to that domain ...
- 101
0
votes
1
answer
32
views
How does HTTPS certificate presentation work, exactly?
I'm troubleshooting an issue with a SAS vendor. To be clear, this question isn't "how do I fix it?", nor is it "what exactly is causing this problem?" -- rather, it's "how do ...
- 105
0
votes
1
answer
158
views
How to Enable SSL for Amazon EC2 Instance(LAMP packaged by Bitnami)?
I launch an EC2 instance with an AMI from the marketplace, which is called LAMP packaged by Bitnami.
After the instance is launched, I find I can only access its DNS name or IP via HTTP, not HTTPS. It ...
- 171
0
votes
0
answers
196
views
WinRM "Access Denied" Cross Domain
I have SERVER1 in DOMAINA and SERVER2 in DOMAINB. There is a firewall between the domains. SERVER1 is running Windows 2012 R2 and SERVER2 is running Windows 2016 Std. SERVER1 is a domain controller ...
- 1
0
votes
1
answer
30
views
X.509 signed certificate validity
We are trying to generate server certificates for a cluster of Kafka servers to communicate over SSL.
The procedure works, but the resulting validity of the certificates is only 30 days.
We are ...
- 103
0
votes
1
answer
106
views
Verify two pfx certificates are not the same without the password
I need to verify that two pfx files are indeed different certificates, and not the same data pasted two times. My constraints are:
I don't have access to the certificate password, therefore I cannot ...
0
votes
0
answers
24
views
Certificate for Azure Point-To-Site VPN via Custom HostName
I have a feeling there's something about this I don't understand.
I have a working point-to-site VPN connection between my computer (using Windows' native rasphone component), and our Azure Virtual ...
- 173
0
votes
0
answers
100
views
Howto dump loaded valid ssl cert's from running nginx, which was erased from disk by mistake?
I knew about gdb.
I already dump memory of running nginx process.
I see all txt *.conf configs in that dump.
But! howto find, convert, etc... some of memory range from that dump to valid initial and ...
- 1
0
votes
1
answer
165
views
iOS 14.7.1 + Exchange 2019 - Server certificate no longer trusted
After upgrade to iOS 14.7.1 I am no longer able to sync my email/calendar/contacts with company Exchange 2019.
Our Exchange uses certificate issued by our enterprise CA and these seem to become ...
- 1
1
vote
2
answers
260
views
openssl upgrade | fail validating certificate
I am working on CentOS7 machine, and I am trying to upgrade my machine's openssl version 1.0.2k -> 1.1.0l. It seems like the handshake process with my server(which didn't change) fails after the ...
- 11
0
votes
0
answers
93
views
How to configure Windows to execute only .exe with certificate signing?
I want to run (on a certain computer with Windows 10) only those exe. files, who signed by certificates, which installed on the computer (it can be certificates from CA or my own test certificate).
I ...
1
vote
0
answers
68
views
ERROR: Site default does not exist! when I perfomr a2dissite default command after SSL certificate generation
I am not a system administrator or a network administrator (I have a software developer background). I am finding some difficulties trying to follow this tutorial in order to implement SLL client ...
0
votes
1
answer
33
views
What if you give a certificate without domain authentication? [closed]
I know that domain authentication is required to get a certificate for HTTPS.
But I really don't know why this is needed. Can't you just give a certificate without domain verification? What happens if ...
- 13