2022 Developer Survey is open! Take survey.

Questions tagged [certificate]

Certificates are a Public Key and Identifying Information

Filter by
Sorted by
Tagged with
0 votes
1 answer
29 views

Domain Member Servers - Accessing Certificate Revocation List (CRL)

In my environment I have a Enterprise Root CA installed on a domain controller and a separate domain controller configured as a Subordinate CA - I know this isn't recommended for security reasons but ...
user avatar
  • 578
0 votes
0 answers
60 views

Odd TLS Error when using curl on origin server x.509

I am hoping someone can help explain what is happening in this situation.. As of now, I have a domain from google domains and I am using cloudflare for my DNS management. I am not using any TLS/SSL ...
user avatar
0 votes
0 answers
51 views

Strongswan VPN certificate authentication failed

I've installed strongswan vpn on my ubuntu server. Set up certificate authentication. I've set up my android-phone and it works fine. But connection didn't established on the windows machine. I copied ...
user avatar
0 votes
1 answer
103 views

The certificate request was submitted to the online authority, but was not issued. The request was denied

I've a Hyper-V lab with few VMs. I'm trying to renew expired server certificate for one of my virtual machines which is running Windows Server 2019 (version 1809). I'm trying to renew the certificate ...
user avatar
  • 225
0 votes
1 answer
28 views

How does OCSP handle deleted certificates?

We have a Microsoft Certificate Authority running on Windows Server 2019. We are issuing certificates to Android devices via a MDM. The Android device users browse to a web application (hosted by ...
user avatar
0 votes
0 answers
61 views

Setting up CloudFront with SSL/TLS certificate and EC2 instance

Community. I have a web page served by Apache running on a EC2 AWS instance. I am using AWS Certificate Manager with CloudFront to manage SSL/TLS in order to access the web page using HTTPS My ...
user avatar
0 votes
0 answers
11 views

AWK Command to add new line ending to send Encrypted Private Key via API

How to add new line ending \n to Encrypted private key which has a blank line. Example Encrypted Private: -----BEGIN RSA PRIVATE KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: AES-128-CBC,...
user avatar
0 votes
0 answers
24 views

Trouble with a certificate when sending email through PHP

I have a server that is running a PHP app through docker. In it, I'm using the PHPMailer package to send an email through another server I have, which has postfix running. When I send the email, I get ...
user avatar
  • 123
0 votes
0 answers
32 views

Using self-sign certificates with OpenSSH on Windows

I'm wondering if you can use a self-sign certificate on the OpenSSH platform for Windows? Anyone know if this is possible and how to do it? Sincerely John Rosell
user avatar
0 votes
0 answers
42 views

802.1x Wireless with certificates for AADJ/Intune devices without user affinity

I can setup certificate distribution and wireless profiles in Intune for devices with user affinity and this works fine. The user account is synchronised with our on site AD server and NPS has an ...
user avatar
0 votes
0 answers
24 views

Which certificates are to be used for SSL verification programatically?

I am trying to invoke an API using python and it requires me to do SSL verification. I have a jks certificate which I converted to a pem file using below commands. keytool -importkeystore -...
user avatar
0 votes
0 answers
28 views

Renewing domain CA SSL/SSTP Certificate from non-domain Clients

I have a VPN setup using RRAS/SSTP to authenticate clients. However, some of the clients are connecting via personal computers which are not joined to the domain. Initial setup was done by manually ...
user avatar
  • 1
1 vote
1 answer
75 views

Domino Console port 2050 certificate expired. Can it be renewed?

The original problem is that when you open the Domino Console app and try to connect to the server, you get "Either the server controller is not running or not listening on port 2050." The ...
user avatar
  • 113
1 vote
1 answer
88 views

How do I sign my own SSL certificates so that they cover www and non-www domain names?

When using a commercial Certificate Authority, generating a csr for the common name www.mysite.com and sending it to them will result in a certificate being issued that works for both www.mysite.com ...
user avatar
  • 4,413
1 vote
3 answers
4k views

Apt-Get Update Failing because of Certificate Validation

Using Ubuntu Focal fossa. I was trying to install a checkpoint ssl software for VPN, but seems like something messed up all my certificates. Now whenever I try sudo apt-get update I get the following ...
user avatar
  • 113
0 votes
1 answer
324 views

Kuberentes kubelet-client-current.pem expired

I'm new in K8s and I'm facing a problem with certificate. 1.13 version is used. One of the worker nodes is in NotReady status. I check logs and it turned out that: Part of the existing bootstrap ...
user avatar
0 votes
0 answers
93 views

Private key is not generating from .p12 file

I generated my .p12 file using the below command keytool -importkeystore -srckeystore mycert.jks -destkeystore keystore.p12 -deststoretype PKCS12 The above command successfully generated a 7 KB .p12 ...
user avatar
1 vote
1 answer
66 views

Can a server offer more than one TLS certificate?

Let's say I have a TLS certificate for a domain but I'm not sure if all user agents potentially connecting over HTTP would accept it. Can I obtain another certificate, signed by another certificate ...
user avatar
  • 133
0 votes
1 answer
82 views

Parent Domain Certificate Authority For Child Domains

I have a parent domain and 2 child domains of that parent. All servers are Windows Server 2019. I am working on deploying security software and I need to obtain a valid certificate from the ...
user avatar
  • 761
0 votes
0 answers
34 views

CertUtil Windows Update gives me 430+ certificates?

There are several well known methods of downloading certificate lists from Microsoft, including certutil -generateSSTfromWU c:\my_cert\ Doing that (or just downloading authrootstl.cab) gives me a ...
user avatar
0 votes
1 answer
300 views

How to Properly Migrate Active Directory Certificate Services

I have Active Directory Certificate Services installed on a Windows 2016 domain controller. We plan on spinning up Windows 2019 instances to replace our 2016 domain controllers. We have one DC with ...
user avatar
  • 578
0 votes
1 answer
65 views

Windows doesn't create assign "Key Container" when adding cert tied to Cavium (AWS CloudHSMv2)

I've got two windows systems tied to the AWS CloudHSM v2 (the cavium HSM). On one, I generated the CSR, and accepts/added the cert purchased with that CSR. I can sign and the private key is pulled ...
user avatar
0 votes
1 answer
49 views

How do you generate a certificate with a RSA key instead of a regular key?

I am trying to see how the certificate was made, I have a key file called site.com.crt a bundle file called site.com.bundle and a key file called site.com.key and I have no way of generating the same ...
user avatar
0 votes
0 answers
35 views

ADFS SSO error: Invalid audience for this response

My team are about to launch a new site, which authenticates users using SSO to our internal ADFS. SSO works on our local and staging environments and now we're setting up what will be the live ...
user avatar
  • 243
0 votes
0 answers
75 views

FreeRadius with mixed CAs

Is it possible to run FreeRadius (version 3.0.13) with two different CAs? So that I have a server certificate from one CA and the client certificates come from a different CA? Our current setup in /...
user avatar
  • 135
1 vote
1 answer
242 views

How to install a validated SSL certificate on Ubiquiti UniFi Network Application (Controller) running on Linux

I want to replace the self signed Unifi certificate used for the web interface of the UniFi Network application / server v6.5 (on Ubuntu 18 Linux) with a signed (wildcard) certificate and private key ...
user avatar
  • 341
0 votes
1 answer
273 views

will ssh work with a .cer file?

I'm trying to set up an Avalance node on AWS. When following the instructions to set up a key pair, the file generated was a .cer file instead of a .pem file. Will I still be able to SSH onto the ...
user avatar
0 votes
1 answer
157 views

Create new SubCA certificate fails with NTE_PROV_TYPE_NOT_DEF

I am trying to manually create a key and CSR for a new Windows AD CS Enterprise Subordinate CA (Windows Server 2019). I'd like to store the key in the modern Microsoft Software Key Storage Provider. ...
user avatar
  • 6,663
0 votes
0 answers
141 views

An I/O error occurred while reading from the JWK Set source: PKIX path building failed: unable to find valid certification path to requested target

I am trying to test my spring boot application in my local with http://localhost:8294/test but keep getting the certificate error. It was working until last week and all of sudden stopped working. I ...
user avatar
  • 1
0 votes
0 answers
174 views

Group Policy Trust Center Trusted Certificates

I want my office/excel to accept only VBA code from my own trusted publisher. So I've selected the following: Disable VBA macros except digitally signed macros Require macros to be signed by a ...
user avatar
0 votes
0 answers
43 views

IIS7.5 How to make a binding for 2 domains, 2 IPs and 2 certificates

I am clutching at straws... hope you can help me with this old server. I want to bind domain1.com to ip 123.456.7.1 and domain2.com to 123.456.7.2, each with its own certificate. As longs as I ...
user avatar
0 votes
2 answers
60 views

Pass HTTPS certificates from downstream servers through NGINX proxy to client

I have a fleet of Ubuntu edge computers that host simple web HMI servers. Many are behind dynamic IPs where port forwarding is unavailable. So, to access them each uses autossh to create a reverse ...
user avatar
0 votes
1 answer
923 views

Why do i get openssl error unknown option for -adext?

I am attempting to generate CSR using openssl with subject alternative names however i get an error stating no options for adext. See command below.. I am using OpenSSL 1.0.2k-fips openssl req -new \ -...
user avatar
1 vote
1 answer
2k views

curl says a valid certificate is expired

I have a gitlab community edition hosted on a server, and when using curl on this server to fetch this local gitlab website, I get an expired certificate error even if the dates are valid: curl --...
user avatar
  • 13
0 votes
0 answers
195 views

SSL3 decrypt error lead to openssl_handshake bad signature

I have an authentication server based on certificate. The previous roll of certificate (1 CA + 1 Server + 1 Client) worked perfectly. A few days ago the client certificate expired and I had to ...
user avatar
  • 59
0 votes
1 answer
28 views

How does XCEP policy (XML) define SubjectType for User or Computer constraint?

We've developed our own implementation of a XCEP/CES WCF service that uses a combination of our certificate management solution and the Microsoft CA to issue the certificates. The standard XCEP XML ...
user avatar
0 votes
0 answers
48 views

Unable to scrape kublet api from prometheus

I am setting up prometheus to scrape kubernetes cluster. I am trying to use "role: node" with kubernetes_sd_config to monitor one of the K8s cluster. I created certificate ashishcert.pem for ...
user avatar
0 votes
1 answer
148 views

Ldap service not running on Windows Server 2019

I have 2 windows server 2019. e.g. server1 and server2. server1 is the domain controller. server1 has below roles installed: ADDS, ADCS, DNS, FILE STORAGE, IIS. server2 is connected to that domain ...
user avatar
  • 101
0 votes
1 answer
32 views

How does HTTPS certificate presentation work, exactly?

I'm troubleshooting an issue with a SAS vendor. To be clear, this question isn't "how do I fix it?", nor is it "what exactly is causing this problem?" -- rather, it's "how do ...
user avatar
  • 105
0 votes
1 answer
158 views

How to Enable SSL for Amazon EC2 Instance(LAMP packaged by Bitnami)?

I launch an EC2 instance with an AMI from the marketplace, which is called LAMP packaged by Bitnami. After the instance is launched, I find I can only access its DNS name or IP via HTTP, not HTTPS. It ...
user avatar
  • 171
0 votes
0 answers
196 views

WinRM "Access Denied" Cross Domain

I have SERVER1 in DOMAINA and SERVER2 in DOMAINB. There is a firewall between the domains. SERVER1 is running Windows 2012 R2 and SERVER2 is running Windows 2016 Std. SERVER1 is a domain controller ...
user avatar
  • 1
0 votes
1 answer
30 views

X.509 signed certificate validity

We are trying to generate server certificates for a cluster of Kafka servers to communicate over SSL. The procedure works, but the resulting validity of the certificates is only 30 days. We are ...
user avatar
0 votes
1 answer
106 views

Verify two pfx certificates are not the same without the password

I need to verify that two pfx files are indeed different certificates, and not the same data pasted two times. My constraints are: I don't have access to the certificate password, therefore I cannot ...
user avatar
0 votes
0 answers
24 views

Certificate for Azure Point-To-Site VPN via Custom HostName

I have a feeling there's something about this I don't understand. I have a working point-to-site VPN connection between my computer (using Windows' native rasphone component), and our Azure Virtual ...
user avatar
0 votes
0 answers
100 views

Howto dump loaded valid ssl cert's from running nginx, which was erased from disk by mistake?

I knew about gdb. I already dump memory of running nginx process. I see all txt *.conf configs in that dump. But! howto find, convert, etc... some of memory range from that dump to valid initial and ...
user avatar
  • 1
0 votes
1 answer
165 views

iOS 14.7.1 + Exchange 2019 - Server certificate no longer trusted

After upgrade to iOS 14.7.1 I am no longer able to sync my email/calendar/contacts with company Exchange 2019. Our Exchange uses certificate issued by our enterprise CA and these seem to become ...
user avatar
  • 1
1 vote
2 answers
260 views

openssl upgrade | fail validating certificate

I am working on CentOS7 machine, and I am trying to upgrade my machine's openssl version 1.0.2k -> 1.1.0l. It seems like the handshake process with my server(which didn't change) fails after the ...
user avatar
0 votes
0 answers
93 views

How to configure Windows to execute only .exe with certificate signing?

I want to run (on a certain computer with Windows 10) only those exe. files, who signed by certificates, which installed on the computer (it can be certificates from CA or my own test certificate). I ...
user avatar
1 vote
0 answers
68 views

ERROR: Site default does not exist! when I perfomr a2dissite default command after SSL certificate generation

I am not a system administrator or a network administrator (I have a software developer background). I am finding some difficulties trying to follow this tutorial in order to implement SLL client ...
user avatar
0 votes
1 answer
33 views

What if you give a certificate without domain authentication? [closed]

I know that domain authentication is required to get a certificate for HTTPS. But I really don't know why this is needed. Can't you just give a certificate without domain verification? What happens if ...
user avatar

1
2 3 4 5
26