Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [certificate]

Certificates are a Public Key and Identifying Information

-2
votes
2answers
46 views

block Certificate authority server [closed]

is this possible to block a specific TLS CA(certificate authority) on network ? for example block all certs that is issued by letsencrypt on my network is there any ip or host name for blocking ?
0
votes
1answer
35 views

IIS Windows Authentication : IE not choosing the right certificate

I am trying to setup an intranet website (osTicket ticketing solution). I want my users to connect automatically to the website, so they don't have to fill their credentials. For this I have : ...
0
votes
0answers
23 views

Apache 2.4 won't start when SSLEngine on directive enabled on two Virtual Hosts

I have very strange issue with Apache today. This is RedHat 7.5 new server and we have same set up working just fine on the other RedHat server. Here is the deal: All I have is two SSL Virtual Hosts, ...
1
vote
1answer
52 views

ADFS Event 329 - Certificate Could Not Be Decrypted

Using MS scripts, I attempted a migration of an ADFS 2.0 configuration (on Windows 2008R2) to a new ADFS server (Windows 2016) server. I have warnings in my event log that seem to be linked, via the ...
0
votes
0answers
19 views

Prevent Smart Card prompt when looking for Enrollment Certificate

I'm using an Enrollment Agent user certificate to amend CSRs (in order to add SANs) My method is working fine - using the following command: certreq -config "CertAuth" -policy "PathtoCSR" "Path to ...
-3
votes
1answer
107 views

ESXi 6.5 web client mutual SSL authentication

Has anyone done it? Don't like the idea of relying exclusively on a user and password. Thanks!
1
vote
1answer
19 views

How to know the origin of a certificate on a windows PC (Especially Win 10 embedded LTSB)

I have a specific type of problem but maybe someone have a hint for me: We have some systems with special PCIe-Hardware for which we wrote and signed a driver. One certificate in the path of trust is ...
1
vote
0answers
20 views

certbot creates a certificate with “wwww” instead of a bare domain one - unlike before [duplicate]

I've been creating certificates this way for over a year: export website="my_domain1111.com" sudo certbot certonly --standalone -d $website -d www.$website --email hello@$website and it's always ...
0
votes
1answer
104 views

letsencrypt certificate with windows / exchange server

I try to install and then renew Letsencrypt certificate with Exchange server for owa and activesync. Windows Server 2008 R2 with Exchange Server 2010. (Which will be upgraded to more recent version ...
2
votes
1answer
36 views

MAAS install CA to new machines

How could we add custom trusted Certificate Authority to the new deployed ubuntu 16.04 machines on MAAS v2.3 ? is there a direct way to do that, or we have to perform custom installation nodes ?
2
votes
1answer
190 views

Cannot add a self signed certificate in Firefox

I need to set up an IIS webserver that will be accessed by a small, finite number of users. I was considering using a self-signed certificate only, and manually installing it on the user's systems. ...
0
votes
0answers
21 views

How to create self-signed certificate to sign Office macros

I need to create a self-signed certificate which I can use to sign different kind of Office macros (for Outlook, Excel etc.). I must be able to use this certificate on all workstations in my domain, ...
2
votes
1answer
46 views

What is the use of SigningCertificate in AWS Cognito

I'm using AWS Cognito for my user authentication. I want to know the actual use of SigningCertificate in AWS cognito? NOTE: We can get the SigningCertificate of AWS Cognito usign this ...
0
votes
0answers
12 views

Apache and Windows Certificate KeyStore?

Sorry in advance for the possibly stupid question... Why does't Apache use the windows certificate keystore? It would make things a lot easier for compliance engineers like me who have to replace ...
3
votes
1answer
53 views

SSL client certification

OS: CentOS 7 SW: NginX Existing stuff dhparam.pem mydomain.com.crt mydomain.com.csr mydomain.com.key Issue: I'm trying to create a client verification by creating client certificates and then ...
0
votes
1answer
39 views

List all client certificates installed on user profiles in a domain

I'm taking initial steps to start securing a network, and I've come across the fact that a number of machines have Client Certificates for websites installed in the user client certificate store, ...
0
votes
1answer
282 views

EMC VNX 5300 - How to access Control Station

We have an EMC VNX 5300 and the certificate has expired. I have already researched the instructions for viewing the certificate and regenerating a new one. The steps require accessing the Control ...
0
votes
1answer
122 views

Certbot and letsencrypt: after renewing my certificate has 2 weeks more of validity instead of 3 months

My letsencrypt certificate will expire soon. I ran "certbot" to renew it for the next 3 months: $ sudo certbot certonly --standalone -d $website --email admin@$website Saving debug log to /var/...
1
vote
1answer
78 views

Seeking ground truth on TLS certificates and MacOS - browser, curl, openssl compared

On a Mac, High Sierra 10.13.5, I'm seeing a difference in TLS certification validation. Chrome and Safari are happy with TLS validation when visiting https://www.visitflorida.com. Also, curl has no ...
0
votes
0answers
42 views

Extract public and private keys from JBOSS

Our sysadmin is requiring that I provide the with the public and private key for a standalone Jboss sever. I find a file "keystore" in wildfly-10.1.0.Final/standalone/configuration Using [...
1
vote
0answers
31 views

BizTalk 2016 Server Administration - Instance of the WMI class is not found

I am brand new to BizTalk administration and trying to setup the certificate to use for AS2 communication, and running into some problems. The developer who built everything inside BizTalk did it ...
0
votes
1answer
84 views

Kube dns wont connect to the Kubernetes api process

Running kubernetes v1.10.0 amd kube-dns using the gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.14.8 container When the kube-dns container starts it says this in the log: I0610 06:47:06.051414 ...
0
votes
1answer
156 views

How to auto publish user certificate to GAL (Exchange 2016)?

I have set up a PKI infrastructure for my users, all is working fine : the CA, auto-enrollment, certificates published in AD and roaming mode enabled : everyone can log on any PC, automatically ...
1
vote
0answers
251 views

slapd won't start (due to missing certificate?)

I'm trying to setup a OpenLDAP server on a CentOS 7.5. Following this guide seemed to work very well until something went wrong (LDAP-password wasn't accepted any longer) due to a server crash. I ...
0
votes
0answers
88 views

How to hide/delete No SNI Certificate in Nginx?

I have 2 domains hi.com and hello.com using one IP 234.235.236.237 If I check domain hi.com in ssllabs.com I see 1 certificate, nice. But, if I check domain hello.com in ssllabs.com I see 2 ...
0
votes
1answer
179 views

Git: server certificate verification failed using Bitbucket Server

I have a Bitbucket server running onprem with a certificate. I added it to the keystore ussing the follwing commands openssl pkcs12 -export -in myurl.com.cer -inkey myurl.com.key -out myurl.com.p12 ...
0
votes
1answer
130 views

How to use rootcert.pem certificate with curl?

I have a file/certificate in next format rootcert.pem. How to use this certificate with curl ?
0
votes
0answers
76 views

NGINX - Extract Distinguished Name from a certificate inside a HTTP header

I have this Web infrastructure: Clients ---> External Anti-DDOS service (reverse Proxy) ---> NGINX (Reverse Proxy) ---> PHP APP (Apache) Clients are using 'client certificates' in this way: 1-Client ...
-1
votes
1answer
39 views

What's a quick/secure way to set up a valid https certificate for a NAS without domain control?

I'm operating several NAS devices on my employer's LAN. I do so with the employer's blessing, but I do not have control over the domain, and the devices are only available to a small working group on ...
0
votes
1answer
59 views

StrongswanPKI - Adding status_request or MustStaple TLS extension to certificate?

Using PKI tool from strongswan to setup a CA. Trying to setup the OCSP side of things have run into many issues as per another thread I posted (Strongswan PKI - ED25519 Certifcates - OCSP Responder ...
0
votes
2answers
414 views

Handshake failure if URL path is specified

I'm trying to use a REST API over HTTPS but I'm getting a handshake failure only if I specify an URL path (not getting the error with the domain name only). Following the instructions of the API ...
0
votes
1answer
34 views

HTTPS server certificate fails

Is there a way to check the certificate used for HTTPS for errors or problems in general? One of the websites I access is always shown by Chrome as Not Secure. To view the site I then have to click on ...
0
votes
1answer
68 views

Google Cloud ISO 27001, 27017, 27018 certificates have expired. Where can I get the new ones

I have a project hosted on Google Cloud Platform and as part of a security audit we found out that the certificates issued by EY CertifyPoint to Google for ISO 27001, ISO 27017 and ISO 27018 ...
0
votes
1answer
26 views

Setting up DNS mask with forwarding through SSL

My setup is as follows: User goes to subdomain.mainsite.org.uk.example The site I want to be visible is www.site2.example, however they still have to see subdomain.mainsite.org.uk.example in the URL ...
0
votes
2answers
53 views

Why are my site certificates different on different machines?

I have 2 AWS CentOS machines behind a load balancer. They are both spun up from the same AMI image and they both have the same contents in the /etc/pki directories. They have the same Apache config ...
0
votes
0answers
245 views

How to get a client certificate chain during a certificate auth with Apache?

I'm trying to configure an Apache 2.4.29 server as an SSL terminating reverse proxy for my app. The proxy should request a client certificate during the SSL handshake and pass it to the app for ...
0
votes
0answers
185 views

Nginx 502 Bad Gateway after AWS Certificate Manager

I just got problem. I just issued my domain using AWS Certificate Manager and a Load Balancer with Target Groups. my following domain: curiosity.id My domain is accessible through http:// or ...
0
votes
0answers
235 views

create bouncycastle keystore for certificate file

I use openssl command fetched my server certificate mycert.pem . I downloaded the bouncycastle.jar . Now, I would like to use bouncycastle.jar to generate keystore file for my certficate in command ...
0
votes
1answer
189 views

When secure calling with asterisk (SRTP), why are client certificates needed for SIP devices?

I just added security to Asterisk by following this tutorial: https://wiki.asterisk.org/wiki/display/AST/Secure+Calling+Tutorial#SecureCallingTutorial-Keys Note that asterisk does not install by ...
0
votes
0answers
48 views

get SHA256 has of certificate chain of my certificate

I got my server certificate mycert.pem by command: cho -n | openssl s_client -connect <my.server.hostname> | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > mycert.pem. I would like ...
0
votes
0answers
72 views

Fails to read certfile/keyfile when run as SYSTEMD

EDIT: I wrote a python script that starts mosquitto client with TLS options ON. All worked fine when I run it from command line (w/o sudo). Now it broke after re-installing some packages. However, I ...
0
votes
1answer
144 views

How Windows check radius server certificate?

How Windows check radius server certificate (for wifi connections)? Does it look only on CN field from radius server certificate and not look at Subject Alternative Name field altogether? I did some ...
2
votes
1answer
48 views

Active Directory: LDAP over SSL between two Domains

Might be a silly question, but I don't wanna risk messing up a working system. We have two separate Active Directories, let's say "example.local" and "example.com". There's a trust between the two, ...
0
votes
0answers
27 views

how to know if browser rejected SSL certificate

I am using Root CA generated SSL certificate to setup a SSL connection for HAProxy which connects to a web server that only support http. When the browser connects there is a invalid certificate error ...
0
votes
1answer
77 views

Allow using specific certificates only when connecting from specific hosts

I set up my VPN users using certificates. The certificates are unique for every user, but they can be used on every PC. Is there a way to restrict a certificate to a computer, e. g. based on its mac ...
0
votes
1answer
471 views

Godaddy Codesigning Certificate Convert spc to PFX

I have used this link to create a CSR for GoDaddy code signing (done in Linux environment though) I got the spc file from Goddady Followed their documentation Creating the pfx file as per their ...
0
votes
0answers
234 views

How to fix error in process of generation of let's encrypt cert

I have A-record on my server: 192.0.2.4 - my external ip (of course this is a example); master.example.org - A-record for this ip address Command: certbot certonly --webroot --agree-tos --email ...
0
votes
1answer
359 views

What's “COMODO DCV” is looking for on my server?

Setup: Apache 2.4 Webmin/Virtualmin I'm getting my SSL certificate with Let's encrypt, using also auto renewal. Several hosts with SSL certificate has been created but delete since several months(~...
1
vote
1answer
192 views

Certificate not showing up in certmgr

Through powershell Cert:\LocalMachine\My certificate store I do see the certificate but through Certificate Manager certmgr.msc I do not see it any where. How do i make it appear there or in IIS ...
0
votes
2answers
66 views

which GPO will put a certificate in to the localmachine\personal?

I have a wildcard certificate used mostly for IIS websites. I would like to install the certificate via GPO. Not necessarily change IIS to use the certificate, but at least get it installed in to the ...