Questions tagged [certificate]
Certificates are a Public Key and Identifying Information
-1
votes
1answer
23 views
Convert text certificate to crt file
I sent the .CSR file to my client, and they send me the final certificate in text code (copy paste into the mail). Can I convert this code into file .CRT ?
The code is OK, I have tested in: https://...
0
votes
0answers
32 views
Postfix TLS with Subject Alternate Name
I have setup Postfix with a purchased SSL certificate. Everything works on the mail server except that the clients perceive the SSL certificate as "invalid - identifies the wrong site".
Here are the ...
0
votes
1answer
24 views
How can I add a certificate to a Windows service's certificate store from the command line?
I want to add a certificate to the certificate store belonging to a Windows service, from the command line. So far, the only thing I've found is:
certutil -service -store ADAM_Instance-Name\My
When ...
1
vote
0answers
29 views
Updating certificate for FTP site for IIS 10 - FTP client does not see newly updated certificate on primary connection
I run a website that uses IIS 10's FTP server and I have it setup to use Explicit FTP over TLS and it's worked great for the last year+. I bought the server certificate through Digicert.
The server ...
-1
votes
0answers
17 views
How to centrally manage the certificates needed for RDP connections for the servers in my Windows domain?
I want to use a wildcard cert that is issued from a trusted certifying authority as the cert needed for RDP to connect to my windows servers on the domain, How can I achieve that?
thanks!
0
votes
1answer
21 views
What are the best practices for providing S/MIME-Certificates in Outlook?
I got some questions regarding S/MIME in Outlook and certificates in general. Some questions arrised about the possibility to digitally sign emails in my company. As I'm new to the topic I had to do ...
1
vote
1answer
47 views
How to renew VMware certificate in Veeam
I had to reinstall the vcenter appliance. Since that the Veeam backupjobs fail with the error:
Task failed error: The remote certificate is invalid according to the validation procedure
Presumably ...
0
votes
2answers
57 views
Can I specify multiple hostnames in a single certificate?
I have a cloudera managed Hadoop cluster where I had installed SSL certificates on all servers. Unfortunately, the host name on the servers are not the same as the one configured over dns.
When run ...
0
votes
0answers
28 views
Server certificate validation 802.1x
I have recently deployed CA and NPS for WPA2-Enterprise authentication. However doing the pen testing I found out that clients are accepting a certificate from any valid certificate authority. This is ...
0
votes
0answers
33 views
Assigning third-party client certificates/keys to Active Directory users
In our organization, we have a number of third-party vendors that we must interact with using client certificates. We'd like to be able to assign certificates/keys to a particular Active Directory ...
1
vote
1answer
44 views
Fixing Cisco Umbrella Root CA Filtering on OpenVPN
I have a personal VPN running OpenVPN 2.3.10 on ubuntu 16.04 that I installed following this guide. It has worked with a few hiccups over the last two months of intermittent use.
Yesterday, I ...
0
votes
0answers
30 views
Apache: restrict access to folder based on certificate
Hope someone can point me in the right direction.
I have created a simple Apache srv on 2.4.25
The srv has a cert from letsencrypt and enforces access to https only.
I have a "secret" folder (test). ...
1
vote
1answer
39 views
How can I issue a certificate from a CA keypair and CSR?
Now I have these files:
CA Keypair (RSA 4096):
ca.pem, ca-key.pem
Certificate Keypair (ECC 384):
server.csr, server-key.pem
How can I issue the server certificate "server.pem"?
The certificate ...
2
votes
1answer
259 views
Veeam | “Failed to check certificate expiration date” after certificate renewal
Since yesterday we receive the message "Failed to check certificate expiration date" on a Veeam server.
The certificate is correct. (Was yesterday renewed!)
(German: issued for, issued by, valid ...
1
vote
2answers
77 views
What kind of SSL certificates do I need for 2 IPs and 5 subdomains of the same domain?
I have a domain (my.com) containing 5 subdomains (www.my.com, app1.my.com, app2.my.com, app3.my.com, app4.my.com).
The 4 apps are hosted on a Windows/Apache 2.4 server with a single IP using virtual ...
0
votes
2answers
42 views
Generate/Sign certificates with the AD trusted root certificate?
I know that when an Active Directory domain is created:
it creates it's own root certificate
and that root certificate is automatically pushed into machines when they are joined to the domain
You ...
1
vote
1answer
33 views
Add Client certificate when acting as reverse proxy (Apache/NGINX)
My application makes (POST) requests to an external server (not under my control)
Now this server requires working with client certificates.
My application currently can not handle this (or any time ...
1
vote
1answer
9 views
Is SQL Server capable of sending certificate chain to the client?
I wonder if SQL Server is capable of sending certificate chain to the client, I tried every option while creating certificates and I am aware of what restrictions SQL Server puts on a certificate to ...
1
vote
1answer
46 views
OpenSSL generate certificate with endianess,encoding and charset
I'm having some trouble creating a certificate with the openssl commandline tool.
The specs for the private key are:
"A digital signature using an RSA 1024 bit key with a SHA-1 hash
function (...
0
votes
0answers
12 views
Wifi authentication with NPS while I'm adding a new computer in domain
I would like to use Machine certificate for Wifi WPA-Enterprise authentication of my company. For new PCs I need another method, just for domain admins to add PCs to domain, with their username and ...
1
vote
0answers
15 views
How best to deal with networked device security certificate on domain?
When connecting a managed networked device (printer, router/switch, PC based software service) to a domain, mostly these days it has a https management or user access web portal. When viewing these ...
0
votes
1answer
87 views
How to update certificate for Azure Service Fabric Cluster?
I have Azure Service Fabric Cluster. For it I have certificate that is almost expired. So I want to import new certificate with updated issue date.
I have added it to key vaults as new version of ...
3
votes
1answer
46 views
What happens when someone gets to know the secret key (of the web server / a CA)?
basically, I have three questions and I would be grateful for a brief explanation of the differences in the consequences of these thefts:
What happens when someone gets to know the secret key of the ...
1
vote
1answer
35 views
Request Certificate points to wrong Server
We migrated a while ago from SBS 2008 to Windows Server 2012 R2. The new Server is also the Certificationauthority. But when I want to renew a certificate, a get the error messsage "Error: RPC Server ...
0
votes
0answers
60 views
An unknown connection request was received from a remote client application, but none of the cipher … The SSL connection request has failed
I am getting too frequent errors in my System Error Logs :
An unknown connection request was received from a remote client
application, but none of the cipher suites supported by the client
...
2
votes
0answers
55 views
LDAPS Microsoft Active Directory Multiple Certificates RFC6125
We have an Microsoft Active Directory Domain with a large pool of domain controllers (DC) that are are setup with LDAP. These are all setup with LDAPS and uses Certificate Services via a template to ...
2
votes
1answer
37 views
Unable to issue certificates after enabling SAN?
I have a Microsoft CA running, which does not have the SAN field enabled by default, so I have enabled it by
certutil -setreg policy\EditFlags +EDITF_ATTRIBUTESUBJECTALTNAME2
Before doing so, ...
-1
votes
1answer
92 views
Dovecot SSL certificate -> Cert Hostname DOES NOT VERIFY
thanks in advance for your patience...
I am having trouble to dovecot working with my new wildcard ssl certificate.
I put the following sections in my dovecot config:
ssl_protocols = !SSLv3 !SSLv2
...
2
votes
1answer
150 views
Lets Encrypt ACME2 Challenge NameCheap Personal DNS
I'm trying to get a wildcard certificate, but running into the issue that I use Namecheap as a registrar, and for API access I need to spend more money than I'm willing to, so I'm looking for ...
0
votes
1answer
108 views
Problems with certificate in Exchange 2016
We have just installed a new mailserver, with exchange 2016. We need to have our wildcard certificate assigned with the smtp service in exchange. I edit the certificate in exhange EAC, tick the ...
0
votes
2answers
138 views
Can we create certificate sign request (CSR) using HSM?
Can I generate a CSR using HSM? If Yes, then Please guide us. It would be very helpful.
Following are our system details:
We have HSM(SafeNet) Simulator to test developement application.
we are ...
0
votes
1answer
86 views
Trouble with Subordinate CA - Unable to submit CSR
I have a Subordinate CA running on Windows 2016 Server - its been issuing certs until recently where I am now only ever getting the error when trying to submit a CSR:
The request contains no ...
0
votes
0answers
23 views
Having issue to convert crt to pfx because of private key mismatch
Using openssl I created a key and with that key a CSR.
The CSR was submitted to https://cheapsslsecurity.com and I was granted a crt for code signing purposes.
I want to sign msi files and therefor I ...
0
votes
0answers
108 views
sstp eap-tls vpn command line connect
When I creating new SSTP VPN connection via powershell, I want to connect via script with rasdial. But there is error : "Remote Access error 703 - The connection needs information from you, but the ...
1
vote
1answer
12 views
FTP over TLS, with multiple sites hosted on the same server
Is it possible to have FTP over TLS on a server that hosts multiple websites (domains) ?
I can get certificates for any of the domains, but the problem is that I have no way of knowing to which ...
-2
votes
2answers
49 views
block Certificate authority server [closed]
is this possible to block a specific TLS CA(certificate authority) on network ?
for example block all certs that is issued by letsencrypt on my network
is there any ip or host name for blocking ?
0
votes
1answer
92 views
IIS Windows Authentication : IE not choosing the right certificate
I am trying to setup an intranet website (osTicket ticketing solution). I want my users to connect automatically to the website, so they don't have to fill their credentials. For this I have :
...
0
votes
0answers
212 views
Apache 2.4 won't start when SSLEngine on directive enabled on two Virtual Hosts
I have very strange issue with Apache today. This is RedHat 7.5 new server and we have same set up working just fine on the other RedHat server.
Here is the deal:
All I have is two SSL Virtual Hosts, ...
1
vote
1answer
96 views
ADFS Event 329 - Certificate Could Not Be Decrypted
Using MS scripts, I attempted a migration of an ADFS 2.0 configuration (on Windows 2008R2) to a new ADFS server (Windows 2016) server. I have warnings in my event log that seem to be linked, via the ...
0
votes
0answers
66 views
Prevent Smart Card prompt when looking for Enrollment Certificate
I'm using an Enrollment Agent user certificate to amend CSRs (in order to add SANs)
My method is working fine - using the following command:
certreq -config "CertAuth" -policy "PathtoCSR" "Path to ...
-3
votes
1answer
119 views
ESXi 6.5 web client mutual SSL authentication
Has anyone done it? Don't like the idea of relying exclusively on a user and password.
Thanks!
1
vote
1answer
19 views
How to know the origin of a certificate on a windows PC (Especially Win 10 embedded LTSB)
I have a specific type of problem but maybe someone have a hint for me:
We have some systems with special PCIe-Hardware for which we wrote and signed a driver. One certificate in the path of trust is ...
1
vote
0answers
20 views
certbot creates a certificate with “wwww” instead of a bare domain one - unlike before [duplicate]
I've been creating certificates this way for over a year:
export website="my_domain1111.com"
sudo certbot certonly --standalone -d $website -d www.$website --email hello@$website
and it's always ...
0
votes
1answer
403 views
letsencrypt certificate with windows / exchange server
I try to install and then renew Letsencrypt certificate with Exchange server for owa and activesync. Windows Server 2008 R2 with Exchange Server 2010. (Which will be upgraded to more recent version ...
2
votes
1answer
38 views
MAAS install CA to new machines
How could we add custom trusted Certificate Authority to the new deployed ubuntu 16.04 machines on MAAS v2.3 ?
is there a direct way to do that, or we have to perform custom installation nodes ?
2
votes
1answer
580 views
Cannot add a self signed certificate in Firefox
I need to set up an IIS webserver that will be accessed by a small, finite number of users. I was considering using a self-signed certificate only, and manually installing it on the user's systems.
...
0
votes
0answers
42 views
How to create self-signed certificate to sign Office macros
I need to create a self-signed certificate which I can use to sign different kind of Office macros (for Outlook, Excel etc.).
I must be able to use this certificate on all workstations in my domain, ...
2
votes
1answer
99 views
What is the use of SigningCertificate in AWS Cognito
I'm using AWS Cognito for my user authentication. I want to know the actual use of SigningCertificate in AWS cognito?
NOTE: We can get the SigningCertificate of AWS Cognito usign this ...
0
votes
0answers
20 views
Apache and Windows Certificate KeyStore?
Sorry in advance for the possibly stupid question...
Why does't Apache use the windows certificate keystore? It would make things a lot easier for compliance engineers like me who have to replace ...
3
votes
1answer
60 views
SSL client certification
OS: CentOS 7
SW: NginX
Existing stuff
dhparam.pem
mydomain.com.crt
mydomain.com.csr
mydomain.com.key
Issue:
I'm trying to create a client verification by creating client certificates and then ...
