Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [certificate]

Certificates are a Public Key and Identifying Information

1
vote
0answers
12 views

How best to deal with networked device security certificate on domain?

When connecting a managed networked device (printer, router/switch, PC based software service) to a domain, mostly these days it has a https management or user access web portal. When viewing these ...
0
votes
1answer
27 views

How to update certificate for Azure Service Fabric Cluster?

I have Azure Service Fabric Cluster. For it I have certificate that is almost expired. So I want to import new certificate with updated issue date. I have added it to key vaults as new version of ...
3
votes
1answer
34 views

What happens when someone gets to know the secret key (of the web server / a CA)?

basically, I have three questions and I would be grateful for a brief explanation of the differences in the consequences of these thefts: What happens when someone gets to know the secret key of the ...
1
vote
1answer
33 views

Request Certificate points to wrong Server

We migrated a while ago from SBS 2008 to Windows Server 2012 R2. The new Server is also the Certificationauthority. But when I want to renew a certificate, a get the error messsage "Error: RPC Server ...
0
votes
0answers
13 views

HAPROXY certificate for Virtual IP

I got 2 RHEL servers that functions as balancer and send the request using HAPROXY to two other servers which has a weblogic cluster. The RHEL servers are in DMZ that will be accessible through the ...
0
votes
0answers
21 views

Client and Server certificate with xca

I followed the following tutorial to create certificates to use in securing WCF NetTCP connection How to Create Certificates for a Client-to-Site VPN , I copied the certificates from the issuer ...
0
votes
0answers
18 views

An unknown connection request was received from a remote client application, but none of the cipher … The SSL connection request has failed

I am getting too frequent errors in my System Error Logs : An unknown connection request was received from a remote client application, but none of the cipher suites supported by the client ...
2
votes
0answers
38 views

LDAPS Microsoft Active Directory Multiple Certificates RFC6125

We have an Microsoft Active Directory Domain with a large pool of domain controllers (DC) that are are setup with LDAP. These are all setup with LDAPS and uses Certificate Services via a template to ...
2
votes
1answer
24 views

Unable to issue certificates after enabling SAN?

I have a Microsoft CA running, which does not have the SAN field enabled by default, so I have enabled it by certutil -setreg policy\EditFlags +EDITF_ATTRIBUTESUBJECTALTNAME2 Before doing so, ...
-1
votes
1answer
49 views

Dovecot SSL certificate -> Cert Hostname DOES NOT VERIFY

thanks in advance for your patience... I am having trouble to dovecot working with my new wildcard ssl certificate. I put the following sections in my dovecot config: ssl_protocols = !SSLv3 !SSLv2 ...
2
votes
1answer
73 views

Lets Encrypt ACME2 Challenge NameCheap Personal DNS

I'm trying to get a wildcard certificate, but running into the issue that I use Namecheap as a registrar, and for API access I need to spend more money than I'm willing to, so I'm looking for ...
0
votes
1answer
46 views

Problems with certificate in Exchange 2016

We have just installed a new mailserver, with exchange 2016. We need to have our wildcard certificate assigned with the smtp service in exchange. I edit the certificate in exhange EAC, tick the ...
0
votes
2answers
30 views

Can we create certificate sign request (CSR) using HSM?

Can I generate a CSR using HSM? If Yes, then Please guide us. It would be very helpful. Following are our system details: We have HSM(SafeNet) Simulator to test developement application. we are ...
0
votes
0answers
21 views

Error Installing Certificate - Cisco WLC - Password protected PEM

So I will start with saying, I'm not good at all with certificates, I got this .pem file that I'm going to upload to a WLC for Webauth, since the old one is from GeoTrust. At first the .pem didn't ...
0
votes
1answer
26 views

Trouble with Subordinate CA - Unable to submit CSR

I have a Subordinate CA running on Windows 2016 Server - its been issuing certs until recently where I am now only ever getting the error when trying to submit a CSR: The request contains no ...
0
votes
0answers
14 views

Having issue to convert crt to pfx because of private key mismatch

Using openssl I created a key and with that key a CSR. The CSR was submitted to https://cheapsslsecurity.com and I was granted a crt for code signing purposes. I want to sign msi files and therefor I ...
0
votes
0answers
56 views

sstp eap-tls vpn command line connect

When I creating new SSTP VPN connection via powershell, I want to connect via script with rasdial. But there is error : "Remote Access error 703 - The connection needs information from you, but the ...
1
vote
1answer
10 views

FTP over TLS, with multiple sites hosted on the same server

Is it possible to have FTP over TLS on a server that hosts multiple websites (domains) ? I can get certificates for any of the domains, but the problem is that I have no way of knowing to which ...
-2
votes
2answers
49 views

block Certificate authority server [closed]

is this possible to block a specific TLS CA(certificate authority) on network ? for example block all certs that is issued by letsencrypt on my network is there any ip or host name for blocking ?
0
votes
1answer
58 views

IIS Windows Authentication : IE not choosing the right certificate

I am trying to setup an intranet website (osTicket ticketing solution). I want my users to connect automatically to the website, so they don't have to fill their credentials. For this I have : ...
0
votes
0answers
99 views

Apache 2.4 won't start when SSLEngine on directive enabled on two Virtual Hosts

I have very strange issue with Apache today. This is RedHat 7.5 new server and we have same set up working just fine on the other RedHat server. Here is the deal: All I have is two SSL Virtual Hosts, ...
1
vote
1answer
77 views

ADFS Event 329 - Certificate Could Not Be Decrypted

Using MS scripts, I attempted a migration of an ADFS 2.0 configuration (on Windows 2008R2) to a new ADFS server (Windows 2016) server. I have warnings in my event log that seem to be linked, via the ...
0
votes
0answers
30 views

Prevent Smart Card prompt when looking for Enrollment Certificate

I'm using an Enrollment Agent user certificate to amend CSRs (in order to add SANs) My method is working fine - using the following command: certreq -config "CertAuth" -policy "PathtoCSR" "Path to ...
-3
votes
1answer
109 views

ESXi 6.5 web client mutual SSL authentication

Has anyone done it? Don't like the idea of relying exclusively on a user and password. Thanks!
1
vote
1answer
19 views

How to know the origin of a certificate on a windows PC (Especially Win 10 embedded LTSB)

I have a specific type of problem but maybe someone have a hint for me: We have some systems with special PCIe-Hardware for which we wrote and signed a driver. One certificate in the path of trust is ...
1
vote
0answers
20 views

certbot creates a certificate with “wwww” instead of a bare domain one - unlike before [duplicate]

I've been creating certificates this way for over a year: export website="my_domain1111.com" sudo certbot certonly --standalone -d $website -d www.$website --email hello@$website and it's always ...
0
votes
1answer
255 views

letsencrypt certificate with windows / exchange server

I try to install and then renew Letsencrypt certificate with Exchange server for owa and activesync. Windows Server 2008 R2 with Exchange Server 2010. (Which will be upgraded to more recent version ...
2
votes
1answer
37 views

MAAS install CA to new machines

How could we add custom trusted Certificate Authority to the new deployed ubuntu 16.04 machines on MAAS v2.3 ? is there a direct way to do that, or we have to perform custom installation nodes ?
2
votes
1answer
405 views

Cannot add a self signed certificate in Firefox

I need to set up an IIS webserver that will be accessed by a small, finite number of users. I was considering using a self-signed certificate only, and manually installing it on the user's systems. ...
0
votes
0answers
31 views

How to create self-signed certificate to sign Office macros

I need to create a self-signed certificate which I can use to sign different kind of Office macros (for Outlook, Excel etc.). I must be able to use this certificate on all workstations in my domain, ...
2
votes
1answer
65 views

What is the use of SigningCertificate in AWS Cognito

I'm using AWS Cognito for my user authentication. I want to know the actual use of SigningCertificate in AWS cognito? NOTE: We can get the SigningCertificate of AWS Cognito usign this ...
0
votes
0answers
14 views

Apache and Windows Certificate KeyStore?

Sorry in advance for the possibly stupid question... Why does't Apache use the windows certificate keystore? It would make things a lot easier for compliance engineers like me who have to replace ...
3
votes
1answer
55 views

SSL client certification

OS: CentOS 7 SW: NginX Existing stuff dhparam.pem mydomain.com.crt mydomain.com.csr mydomain.com.key Issue: I'm trying to create a client verification by creating client certificates and then ...
1
vote
1answer
117 views

List all client certificates installed on user profiles in a domain

I'm taking initial steps to start securing a network, and I've come across the fact that a number of machines have Client Certificates for websites installed in the user client certificate store, ...
0
votes
1answer
742 views

EMC VNX 5300 - How to access Control Station

We have an EMC VNX 5300 and the certificate has expired. I have already researched the instructions for viewing the certificate and regenerating a new one. The steps require accessing the Control ...
0
votes
1answer
189 views

Certbot and letsencrypt: after renewing my certificate has 2 weeks more of validity instead of 3 months

My letsencrypt certificate will expire soon. I ran "certbot" to renew it for the next 3 months: $ sudo certbot certonly --standalone -d $website --email admin@$website Saving debug log to /var/...
1
vote
1answer
131 views

Seeking ground truth on TLS certificates and MacOS - browser, curl, openssl compared

On a Mac, High Sierra 10.13.5, I'm seeing a difference in TLS certification validation. Chrome and Safari are happy with TLS validation when visiting https://www.visitflorida.com. Also, curl has no ...
0
votes
0answers
66 views

Extract public and private keys from JBOSS

Our sysadmin is requiring that I provide the with the public and private key for a standalone Jboss sever. I find a file "keystore" in wildfly-10.1.0.Final/standalone/configuration Using [...
1
vote
0answers
44 views

BizTalk 2016 Server Administration - Instance of the WMI class is not found

I am brand new to BizTalk administration and trying to setup the certificate to use for AS2 communication, and running into some problems. The developer who built everything inside BizTalk did it ...
0
votes
1answer
123 views

Kube dns wont connect to the Kubernetes api process

Running kubernetes v1.10.0 amd kube-dns using the gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.14.8 container When the kube-dns container starts it says this in the log: I0610 06:47:06.051414 ...
0
votes
1answer
287 views

How to auto publish user certificate to GAL (Exchange 2016)?

I have set up a PKI infrastructure for my users, all is working fine : the CA, auto-enrollment, certificates published in AD and roaming mode enabled : everyone can log on any PC, automatically ...
1
vote
0answers
377 views

slapd won't start (due to missing certificate?)

I'm trying to setup a OpenLDAP server on a CentOS 7.5. Following this guide seemed to work very well until something went wrong (LDAP-password wasn't accepted any longer) due to a server crash. I ...
0
votes
0answers
123 views

How to hide/delete No SNI Certificate in Nginx?

I have 2 domains hi.com and hello.com using one IP 234.235.236.237 If I check domain hi.com in ssllabs.com I see 1 certificate, nice. But, if I check domain hello.com in ssllabs.com I see 2 ...
0
votes
1answer
246 views

Git: server certificate verification failed using Bitbucket Server

I have a Bitbucket server running onprem with a certificate. I added it to the keystore ussing the follwing commands openssl pkcs12 -export -in myurl.com.cer -inkey myurl.com.key -out myurl.com.p12 ...
0
votes
1answer
559 views

How to use rootcert.pem certificate with curl?

I have a file/certificate in next format rootcert.pem. How to use this certificate with curl ?
1
vote
0answers
108 views

NGINX - Extract Distinguished Name from a certificate inside a HTTP header

I have this Web infrastructure: Clients ---> External Anti-DDOS service (reverse Proxy) ---> NGINX (Reverse Proxy) ---> PHP APP (Apache) Clients are using 'client certificates' in this way: 1-Client ...
-1
votes
1answer
40 views

What's a quick/secure way to set up a valid https certificate for a NAS without domain control?

I'm operating several NAS devices on my employer's LAN. I do so with the employer's blessing, but I do not have control over the domain, and the devices are only available to a small working group on ...
0
votes
1answer
74 views

StrongswanPKI - Adding status_request or MustStaple TLS extension to certificate?

Using PKI tool from strongswan to setup a CA. Trying to setup the OCSP side of things have run into many issues as per another thread I posted (Strongswan PKI - ED25519 Certifcates - OCSP Responder ...
0
votes
2answers
668 views

Handshake failure if URL path is specified

I'm trying to use a REST API over HTTPS but I'm getting a handshake failure only if I specify an URL path (not getting the error with the domain name only). Following the instructions of the API ...
0
votes
1answer
35 views

HTTPS server certificate fails

Is there a way to check the certificate used for HTTPS for errors or problems in general? One of the websites I access is always shown by Chrome as Not Secure. To view the site I then have to click on ...