Questions tagged [certificate]
Certificates are a Public Key and Identifying Information
1,178
questions
0
votes
1answer
13 views
SSL Certificate error for self signed certificate although certificate is installed
we are using a server that is used by like 5 coworkers and is accessed by its web interface.
It is a internal only website and doesn't have a valid SSL certificate as it is self signed.
The ...
0
votes
0answers
12 views
Wrong certificate used when using the Windows L2TP VPN client
I have my VPN security gateway configured to only allow clients having a VPN computer certificate issued by a specific CA.
Such a certificate is correctly installed on the client side.
In addition to ...
0
votes
1answer
114 views
OpenVPN Access Server - Encounter the Warning X509_V_ERR_CERT_HAS_EXPIRED but the cert is actually not expired yet
I was trying to connect to my company openvpn network via MacOS openvpn application and hitting the warning "The server vpn.my_company.com has an UNTRUSTED SSL certificate. Allow the connection to ...
0
votes
0answers
136 views
Certificate expiration, pfsense wont update ddns
I'm having certificate expiration issues, my pfsense server not update anymore. Starting today, the AddTrust External certificate expired, and I can only suppose these are related.
[2.4.5-RELEASE][...
0
votes
0answers
30 views
Why does replacing certificate in WebLogic now require TLS1.2
We replaced a self-signed certificate JKS with a signed certificate in WebLogic 12.2.1.3.0.
The C# desktop applications that connect to a service hosted there now fail with "The request was aborted: ...
0
votes
0answers
18 views
Cylance: bad signature status
I am running Cylance Antivirus 2.1 on OS X 10.11.6.
I am seeing this error in my Console log every minute:
May 28 11:53:34 MacBook-Pro CylanceSvc[93623]: CyHelperOSX.clientIsAllowedToConnect: bad ...
0
votes
1answer
28 views
Two sites on the same server with unwanted redirection
I have two different sites
domain1.com
domain2.com
Problem : I only can access domain2.com by using www.domain2.com
If i try domain2.com it redirects to domain1.com.
Configuration files:
domain1....
0
votes
0answers
17 views
Centos-webpanel Installation Error - problems making certificate request [closed]
This is my first time in this website and also first time using centos - webpanel and google cloud computing engine.
I have a virtual machine in google compute engine and I have installed Centos - 7 ...
google-compute-engine
2
votes
1answer
8 views
X509 certificates - Are there any naming conventions?
As per the title, what are the naming conventions when buying certificates ?
When buying a cert for TLS / https from a particular Server, naturally I will default to the Server name, for example, if ...
0
votes
0answers
28 views
What is the verification process with OpenSSL PKCS7_NOCHAIN flag
Im confused with the meaning of OpenSSL verify flag PKCS7_NOCHAIN. By definition it says:
If PKCS7_NOCHAIN is set then the certificates contained in the message
are not used as untrusted CAs. ...
0
votes
2answers
33 views
What's the difference between in generating CSR file from OpenSSL and IIS?
I've been shown how to generate .csr files by using OpenSSL and have successfully created, converted and installed the signed certificates (.pfx files) onto some of our web servers with IIS 10.
I've ...
0
votes
2answers
38 views
Why should I renew a cert instead of upload a new one in Exchange
I have a certificate for Exchange 2016 expiring in the next couple months and I have downloaded the new cert. I can go through the steps here to renew the cert but why couldn't I just upload the new ...
1
vote
0answers
25 views
How to hide the IIS 8.5 Header when response code 403.7 is returned?
We have a ColdFusion 11 website, requiring client certificates, running on a publicly accessible Windows Server 2012R2 running IIS 8.5. There is a URL rewrite rule in place to remove the value set in ...
0
votes
2answers
33 views
AWS Certificate Manager: Get SSL certificate for IP for IP adress instead of domain
Is there a possibility to get or use a SSL certificate in AWS Certificate Manager for a public IP instead of a domain name?
I need a SSL certificate for my EC2 server on AWS, but I don't want to ...
0
votes
0answers
11 views
How to add self-signed certificate to a non root docker image?
I have a node docker image running as a non-root user.
How can I add a self signed certificate (or CA chain) to the image?
I can't get a root for this image though...
0
votes
0answers
41 views
Active Directory server is sending RST when client Hello is send over TLSv1.2
I am facing the same problem as stated Server sends RST after receiving Client Hello when binding certain certificate when I try to authenticate to AD (Active Directory server) over TLSv1.2. Wireshark ...
0
votes
1answer
21 views
Active Directory - Difference between User-Cert and X509-Cert attributes
I came across two user object attributes User-Cert (ldap name: userCert) and X509-Cert (ldap name: userCertificate) in Active Directory that sound similar, but doesn't seem so.
As per documentation (...
0
votes
0answers
22 views
Webserver client certificate request is not presented by the browser through Nginx load balancer
I'm deploying a load balancer with nginx and have a problem with client authentication.
This load balancer redirect traffic to two apache webservers. The webservers ask for a client certificate when ...
0
votes
1answer
22 views
Apache reverse proxy with SSL for DNS changeover
I'm currently migrating to a new host. There are around 20 domains all set up as name-based VHosts in apache.
I read about Apache's reverse proxy ability as an idea to overcome DNS downtime, as not ...
0
votes
1answer
49 views
Renew Issuing CA Certificate via offline Root CA
I have an offline root CA and an enterprise issuing CA. I created a req from the issuing CA and issued a cert with it on the offline root CA. When I try to install the cert on the issuing CA with the ...
0
votes
2answers
216 views
How to clear (remove/delete) certificate (ssl/https) cache from chrome browser?
I lost many hours while setting up some self-signed certificates; the problem turned out to be that the browser (Chrome) cached a bad version of the certificate and then just wouldn't let go. I did ...
1
vote
1answer
25 views
Windows Certificate Service Authority templates to issues
I have the problem that I cannot issue self-made certificate templates in the certificate authority, i.e. in the certificate authority, right click to certificate templates and select certificate ...
0
votes
0answers
28 views
nginx reverse proxy problems with upstream server
I'm try to setup nginx reverse proxy for my company, I'm currently in test phase.
This is schema what I have temporary.
client---https-->nginx(VM1)---https-->backend(IIS 8)(VM2)
My nginx.conf file.
...
0
votes
0answers
35 views
Microsoft NDES Automated Challenge Password retrieval
We recently implemented NDES and we are looking for a way to automate the challenge password retrieval with dynamic passwords as apposed to using a static password. However from my search on the ...
0
votes
1answer
12 views
Replace IIS certificate in IIS version 6.1
I wanted to change a certificate, the certificate is in an IIS v6.1.
I went to IIS management console and issued a new Certificate Request, the certification autority then elaborated my request and ...
0
votes
0answers
37 views
Self-signed certificate added to trust store is trusted by Chrome on Windows but is not trusted by Chrome on Android
I'm testing push notifications with service workers in a local network. I created a self-signed certificate like this:
openssl genrsa -out server.key 1024
openssl req -new -key server.key -out server....
3
votes
2answers
241 views
How to view certificate chain using openssl
I use a mixture of Windows, Linux, and Macs and have noticed big differences in how each OS shows certificate details using the default tools available in each.
The way Windows displays certificate ...
0
votes
0answers
31 views
ADCS Change AIA information from existing certificate
We have built a tier 2 PKI. Recently we decided to start hosting our CDP & AIA on a seperate webserver. However this was not originally in the design, so now we have problems with the certificate ...
0
votes
1answer
53 views
Requirements for certificates to sign PDFs in Adobe Reader?
I'm trying to set up PDF digital signatures using certificates generated by openssl. I have generated a CA certificate, and used that to sign end user certificates, which I archive in PKCS#12 format. ...
1
vote
1answer
36 views
How to constrain ADCS Certificate template to user or computer type
How do I differentiate between a User or Computer certificate in my certificate templates? I currently have a template designed for a webserver SSL certificate, however, both users and computers can ...
0
votes
1answer
53 views
Windows 10 SSTP with self-signed certificates
I can't seem to get the Windows 10 sstp client to connect to the (router) sstp server
I have tried numerous combinations when creating my self signed certificates (ca & server) but I have to ...
0
votes
1answer
71 views
How to properly generate an x509 certificate with restricted usage
I'm putting certificates into a repository that will not allow a successive certificate with more limited usage than the previous one. I need an initial dummy cert/key/chain to bootstrap the process ...
0
votes
0answers
14 views
How to find a lost server?
I tried searching for a similar topic but couldn't find one so here I am with a burning hot question.
I don't work in our company's IT, but for some reason I got tasked with upgrading an SSL ...
0
votes
1answer
97 views
Cert Hostname DOES NOT VERIFY
I've created a mail server with https://github.com/tomav/docker-mailserver. Everything works, except the certificate.
I have tested the TLS on CheckTLS.com and I've got the following output messages:
...
0
votes
1answer
40 views
IKev2 VPN Event ID 20209 - Server Authentication
I have made only one certificate for VPN access with ikev2. Within 2 days i got event id 20209, even though I didn't tried to connect. The certificate is still with me and no one else has access to it....
0
votes
0answers
40 views
How can you Certificate Path Validation Settings programatically or via InTune
I am trying to configure a local group policy setting "Certificate Path Validation Settings option" in "Computer Configuration\Windows Settings\Security Settings\Public Key Policies" to "Allow User ...
0
votes
1answer
306 views
Unable to import certificate into User Trusted Root Certificate store
When trying to import a certificate into the User trusted root certificate store we get the error:
“The import failed because the store was read-only, the store was full, or the store did not open ...
1
vote
1answer
47 views
Active Directory Certificate Services autorenew
I have an LDAP application which needs to talk to Active Directory via LDAPS (LDAP over SSL). I installed Active Directory Certificate Services on a test Domain Controller (I know this is not best ...
0
votes
1answer
124 views
Authorize Multiple Authorities (CA) in OpenVPN
Desiring to transfer to a new Certificate Authority, I want to allow old clients to connect the VPN for some overlap time. Can I do this without running separate OpenVPN instances?
I see that I can ...
1
vote
1answer
259 views
How to tell domain controllers to not enroll a “Kerberos Authentication” certificate?
As per this question, I have an environment where certificates based on the "Kerberos Authentication" template cannot be issued (there are remote sites without direct connectivity to the CA, ...
1
vote
2answers
36 views
Moved to another computer, lost certificates
I recently bought a new computer which is running Windows 10 Pro. In preparation to the move, I copied all the files from the old one which was running Windows 7 Pro to a backup drive.
After a while, ...
5
votes
2answers
446 views
Error enrolling “Kerberos Authentication” certificate in a sparse network
I'm currently working on implementing an Enterprise Certification Authority for a customer whose network is not fully connected; it spans several geographical sites, and some of them don't have ...
0
votes
0answers
27 views
Trusting a Self Signed Certificate on RHEL7
I'm running into an issue where I'm trying to import a self-signed certificate of one of our servers to one of our development boxes.
I've tried adding the .cer file from the server to /etc/pki/ca-...
1
vote
1answer
94 views
FreeIPA refuses to sign a VMWare certificate signing request (CSR)
I'm attempting to make VMWare's certificate authority (VMCA) v6.7 a trusted sub-CA of a FreeIPA certificate authority. I should be able to generate a certificate signing request within VMCA using ...
0
votes
1answer
97 views
ldaps certificate for connections using domain.local instead of fqdn
We have multiple Windows Server 2016 AD Domain Controllers and we need to replace all LDAP connections with LDAPS connections. For High Availability we would like to connect all LDAPS sessions to "...
0
votes
0answers
53 views
Create a Self Signed Certificate for WSUS
I am following this as I want to set up SCCM to obtain updates for 3rd party products. Is there a way I can create a self signed certificate for WSUS? The information I can find online is using 3rd ...
0
votes
1answer
69 views
SSRS Report Builder Error: Target Principal name is incorrect
Here is our problem, when using SSRS Report Builder we are able to successfully connect to our data source with no errors, but when we try to connect to a data set we get the following error. ...
2
votes
0answers
167 views
Intermediate and root certificates expired but my certificate has not, what happens?
I have just renewed a certificate that is used for our web services and asymmetric encryption. I received the following bundle that I will need to provide to my clients, but two of the certificates in ...
1
vote
1answer
66 views
OpenSSL invalid revocation date / update CRL?
I have an index.txt file where I changed the value of a certificate - whose certificate file I do not have - from V to R to revoke it.
The index.txt looks as follows exemplarily:
V 220303095424Z ...
1
vote
0answers
119 views
Strong Private Key Protection being ignored
I've tested installing a certificate with Strong Private Key Protection on Windows 10 Enterprise and confirmed when the VPN software tries to access it, Windows prompts me to enter the password I set ...
