Skip to main content

Questions tagged [certificate]

Certificates are a Public Key and Identifying Information

Filter by
Sorted by
Tagged with
2 votes
1 answer
88 views

Server certificate has expired

When I try to log in to my mail client I get this: This certificate belongs to: mail.ssk.pm This certificate was issued by: R3 Let's Encrypt US This certificate is valid from Thu, 21 ...
m27's user avatar
  • 163
1 vote
0 answers
33 views

One individual being served a different scrambled security certificate for our website? [closed]

We have set up a new certificate for our website using Let's Encrypt. We don't have customers using the site yet, but when we test it from multiple locations, almost everyone that goes to our site is ...
dallin's user avatar
  • 119
2 votes
2 answers
79 views

How to obtain authorization to access EKS cluster

Followed this document Cert Signing to get the certificate issued. I created cluster role and role binding to test it. $ kubectl auth can-i create pods --as=myserver yes $ kubectl auth can-i list pods ...
Alexy Pulivelil's user avatar
0 votes
0 answers
13 views

OpenXPKI - handling an invalid issued certificate

I am working with a test installation of OpenXPKI v3 running in a FreeBSD-13.3 jail. As part of my testing I issued a certificate with the incorrect SubjectAlternateName (SAN). I revoked this ...
James B. Byrne's user avatar
0 votes
1 answer
32 views

cert-manager Certificate.spec.secretTempate is not updating annotations on the output secret

I recently needed to share a tls configuration between two different namespaces, looking at the docs I saw that you can use reflector to sync secrets between namespaces. I copy/pasted the documented ...
Marcus Ruddick's user avatar
0 votes
1 answer
883 views

Certificate for gnome-remote-desktop

I'm trying to set up to set-up gnome-remote-desktop installed via dnf onto a Fedora 40 LXC-container. I've stumbled upon a certificate error. [root@RemoteDesktop ~]# grdctl rdp enable [01:08:49:343] [...
eugrus's user avatar
  • 1
0 votes
2 answers
95 views

Two HTTPS applications on the same host

Is it possible to run to HTTPS applications on the same host? For example: Python FastAPI Back-End on port 8000 using HTTPS. JS React Front-End on port 4000 using HTTPS. Will it work without a TLS ...
ulik kulinyak's user avatar
2 votes
0 answers
28 views

Client certificates and custom revoked html

I can configure Apache to authenticate users with client certificate and validate them via OCSP. Do you know how can I redirect the user to a custom html page if the certificate is revoked? The ...
Tibor's user avatar
  • 121
0 votes
0 answers
119 views

How to create manually a KSP container object in "SafeNet Key Storage Provider"

I've a Windows PKI system running with Luna Network HSM 7 and need to use a certificate which its private key resides in the HSM and not exportable by design of the system. This cert was generated ...
Metin Ozkan's user avatar
2 votes
1 answer
191 views

how to handle ssh certificate based authentication from one region to another with certificate validity time?

Im trying to create an ssh certificate using keygen tool from One region(ex: india) to connect the server in another region(ex: us). Im giving the validity for the certificate as (current time) to (...
gowtham krishna's user avatar
0 votes
0 answers
129 views

Has anybody seen a certificate store in chinese letters?

I just happened to check the certificates on my computer (Windows 11) and found a certificate store, both in certlm and certmgr in chinese letters while the system language is german: ...
Thomas's user avatar
  • 13
0 votes
0 answers
61 views

OpenXPKI import existing certificates

We have installed OpenXPKI-3.24 on FreeBSD-13.2p9 (running in a jail). We have completed the setup and installed the issuing CA key and certificate. User access is configured using the suggested ...
James B. Byrne's user avatar
0 votes
0 answers
205 views

Bypassing CERT_HAS_EXPIRED leads to 401 Unauthorized

In our Next.js app, axios requests work in client components (using useEffect) but fail with a CERT_HAS_EXPIRED error from server components. As a workaround in development, we run ...
wyc's user avatar
  • 115
0 votes
0 answers
63 views

Windows 10 computer certificate deleted and not issued again after gpupdate /f

I deleted the local computer certificate from: MMC>Certificate>ComputerAccount>Local Computer To test if my network lab is working and the network authentication fallback on the MAB from the ...
user22482857's user avatar
0 votes
0 answers
64 views

Spire deployment on kubernetes and certificate retrieval

I am currently trying to deploy spire on my k8s cluster (3 worker nodes). My objective is to successfully deploy spire and use the certificates generated by the spire-server to encrypt the exchanges ...
Grusat's user avatar
  • 1
0 votes
0 answers
292 views

curl: (60) SSL: unable to obtain common name from peer certificate

I'm trying to create self-signed certificates for my webserver but it's not going well. The title is the error message curl gives me when I run curl --noproxy "*" https://example.com (with ...
Seal_bebbe's user avatar
0 votes
2 answers
57 views

OpenVPN - Properly sharing keys/certificates

I enabled OpenVPN on the router at work so that we can connect to different devices like our NAS and RDP into the computers there without opening those ports to the internet. One cause of concern that ...
Andrew Cline's user avatar
1 vote
2 answers
416 views

Certificate chains on server and client

I have OpenSSL Certificate Authority, and I have generated Root certificate (self-signed), Intermediate certificate (signed by Root certificate), Server certificate (signed by Intermediate certificate)...
John's user avatar
  • 115
0 votes
2 answers
206 views

GPO Wireless Settings - Trusted Root CA

We pushed SSID configuration by GPO. Computer configuration > Policies > Security Settings > Wireless Network Policies. In these settings we enabled certificate authentication, however the ...
Jotabong's user avatar
0 votes
0 answers
75 views

How to add certificates to an existing PKCS#7 bundle (p7b) file?

I have a PKCS#7 bundle (p7b file) that holds many public S/MIME certificates, and I need two more certificates in the bundle. Is there a way to add these certificates using openssl (or possibly ...
not2savvy's user avatar
  • 227
0 votes
1 answer
197 views

VPS https and redirect for domain

I recently bought a vps ( apache + ubuntu) and created ssl-certificates for my domain by using acme.sh --issue --dns -d example.com -d www.example.com and got them. But for my domain I want https to ...
intero's user avatar
  • 1
0 votes
1 answer
2k views

Unauthorized error when trying to get a ssl certificate with certbot

I recently bought a domain, hosting and a Ubuntu 22.04 vps, all on godaddy. The domain and hosting work, I can access the site by typing the url in. But when I try to get a ssl certificate with ...
intero's user avatar
  • 1
0 votes
1 answer
412 views

Windows hello for business: remove certificate from virtual smartcard

I've managed to add a certificate to windows hello for signin to RDP. See: https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/rdp-sign-in?tabs=intune However ...
AnalyticaL's user avatar
0 votes
0 answers
58 views

FreeRadius EAP-TLS Auth using Email Address

We have a requirement to authenticate devices to WIFI using the user's email address stored in AD. The devices are enrolled into InTune and the only shared piece of information is the email address. ...
Phil Lowes's user avatar
0 votes
1 answer
69 views

Path #2: Not trusted in SSLLabs domain check

First and foremost I want to apologize, because I am really an amateur in networking. I tried to run a SSLLabs check on a web domain my company owns. The overall rating is "A" and everything ...
Simon Rempel's user avatar
0 votes
0 answers
49 views

ssh-certificate LDAP schema existence?

Hello. I'm looking for an LDAP schema to make it possible to publish my ssh-certificates into user/host LDAP nodes. Is there any common one?
X bl lJJ H i K's user avatar
0 votes
1 answer
1k views

How to assign certificate to IMAP/S and SMTP/S in Exchange 2016?

Please advise me because I pull all my hair out. I have Exchange 2016 and I want to assign one officially signed-off certificate to the IMAP/S port 993/tcp and SMTP/S port 465/tcp . I went through ...
supi007's user avatar
  • 96
0 votes
0 answers
194 views

StrongSwan IPSec VPN - IKEv2 - LetsEncrypt Certificate Issue (building CRED_PRIVATE_KEY - RSA failed, tried 10 builders)

I followed the link below for setup IKEv2 VPN Using Strongswan and Let's encrypt on CentOS 7. How to Setup IKEv2 VPN Using Strongswan and Let's encrypt on CentOS 7 But info on that link has been ...
helius.dev's user avatar
0 votes
1 answer
208 views

TLS Server Hello message has incorrect Certificate information

I am using a self-signed certificate for my forest created by Microsoft CA. All DC's are auto-enrolled and receive the correct certificate from the CA and LDAPS connections can be established using ...
M3Driver's user avatar
0 votes
0 answers
805 views

Verify return code: 21 unable to verify the first certificate

I'm encountering an issue on my Ubuntu server when attempting to establish an email connection from the frontend application. The error message I receive reads: "Verify return code: 21 unable to ...
Swapneswar Mohapatra's user avatar
0 votes
2 answers
246 views

How do I list all existing open vpn certificates

I need to know how to view existing certificates in OpenVPN, the internal documentation passed me (written by a past employer) contains creating, removing, retrieving and revoking user, see below /etc/...
Emma's user avatar
  • 1
0 votes
1 answer
2k views

Docker- Giving Container access to Host's CA certs

I was wondering security wise if there was anything wrong with volume mounting the host's ca certs into a container. I.e, docker run \ -v /usr/local/share/ca-certificates:/usr/local/share/ca-...
Snappawapa's user avatar
0 votes
1 answer
292 views

How to modify the command line used to renew a certificate using WACS

I have been using Let's Encrypt certificates for some of my domains/servers for a while, using the win-acme client for Windows for the generation and renewal. My problem is: every renewal I have to ...
Rodrigo Gómez's user avatar
0 votes
0 answers
72 views

Generating certificate with subjectUniqueID field

I would like to generate a certificate with the subjectUniqueID field as indicated in rfc5280( https://www.rfc-editor.org/rfc/rfc5280#section-4).I have tried this: openssl req -config myConfigFile....
alvy's user avatar
  • 1
0 votes
1 answer
44 views

Single domain, two webservers running on different ports, two different SSL issuers possible?

Short, Can a domain have multiple SSL issuers installed on different servers ? Long , I have a domain. example.com Its running on two different servers , two different websites, two different ports , ...
user9082746's user avatar
1 vote
1 answer
2k views

Use openssl 3 to create a self-signed certificate just like what "New-SelfSignedCertificate" can

First of all, I did googling about openssl, such as this one, and also tried dozens of time on creating a valid self-signed certificate. But I guess asking on serverfault would be much quicker. My ...
user53815's user avatar
0 votes
0 answers
293 views

Issuing Certificate For Child Domain After Issuing One From Parent From Same CA

I am trying it issue a certificate as part of my Enrollment ability for a 2FA device for our child domain from our parent domain. I was able to do this months ago but now it won't let me do the child ...
JukEboX's user avatar
  • 835
0 votes
1 answer
588 views

AH02565: Certificate and private key from <cert> and <private key> do not match

I'm trying to update some expired SSL certificates internally on some Ubuntu and Redhat servers. I have an internal certificate authority for this (ADCS). These are the steps I'm taking: Generate CSR ...
poppopretn's user avatar
2 votes
2 answers
1k views

Local Machine certificate (certlm.msc) - choosing "Microsoft Software Key Storage Provider" on import

When importing a device certificate/private key through CERTLM, the GUI seems to choose a deprecated Cryptography Service Provider (CSP) called "Microsoft Strong Cryptographic Provider"; I'm ...
tb1's user avatar
  • 187
1 vote
1 answer
867 views

Error: The issuer of this certificate could not be found for AD issued Code Signing Certificate

Problem I've created a certificate through AD certificate services, but it has the error "The issuer of this certificate could not be found." despite the full chain being present in the PFX. ...
JohnLBevan's user avatar
  • 1,344
0 votes
1 answer
319 views

Why is certificate request invalid from Exchange 2019?

I am creating a cert request in powershell on an exchange 2019 server as follows: $binrequest = New-ExchangeCertificate -Server "exchange" -BinaryEncoded -GenerateRequest -FriendlyName "...
TSG's user avatar
  • 1,852
2 votes
1 answer
267 views

openssl ignores intermediate certificate in pkcs12 file

After creating a new S/MIME certificate, I am stuck with creating a valid PKCS #12 file that is accepted by most mail clients: $ openssl verify smime.pfx CN = [email protected], emailAddress = mail@...
Stephan Windmüller's user avatar
1 vote
1 answer
3k views

How to extract CA Certificate from .pfx file and add it to a trust store file

I have a .pfx file that has multiple certificates, one of them is the signing CA certificate of a server certificate assigned to the IBM i Remote Command Server in DCM. I managed to use openssl and ...
tarekahf's user avatar
  • 119
1 vote
0 answers
386 views

Windows CA Publishing Expired Certs in CRL When not configured to do so

I have a Windows ADDS CA that for some reason is publishing revoked but expired certificates in the CRL and I can't for the life of me figure out why. Here is my configuration: Server 2012 R2 ...
Helstrom's user avatar
0 votes
1 answer
310 views

Microsoft Certificate Authority Machine Template - add single label host name to SAN

I would like to create a machine certificate template on a Microsoft Certificate Authority that includes the single label Active Directory (AD) Computer Names in the SAN. I have tens of thousands of ...
Walter's user avatar
  • 1
1 vote
1 answer
284 views

FreeIPA subject name encoding mismatch when renewing certificate

When reading this question and answer, it seems this should be possible but I need a little more help understanding the answer. Is there a way to change the string format for an existing CSR "...
Sapg's user avatar
  • 11
1 vote
1 answer
379 views

Bluehost - wrong certificate presented by host for API call to Twilio

Bluehost VPS running CentOS, but cat /etc/redhat-release reveals CloudLinux release 6.10 (Final). Executing curl commands against Twilio APIs on my local PC (Win11/IIS/PHP) works fine. When I attempt ...
HerrimanCoder's user avatar
0 votes
0 answers
154 views

Windows Remote Desktop Certificate is re-created after deleting from the Remote Desktop store

I'm running a WS2019 in Hyper-V. After deleting a certificate in the Remote Desktop Store and it returns after deleting it. I changed Certificate Auto enrollment settings but it does not help, the ...
Albert's user avatar
  • 1
0 votes
0 answers
810 views

Why do I get ECONNREFUSED|ECONNREFUSED for an openvpn server, after doing easyrsa gen-crl?

My OpenVPN server has been working perfectly fine on an Arch Linux install. I've done regular pacman -Syu updates over the past year, every now and then I've had to run: easyrsa gen-crl When the ...
AlphaCentauri's user avatar
0 votes
1 answer
43 views

Certificate management: which party should request certificates?

My question is concerned with proper certificate management. Different parties provide domain / server / application services to our organisation. One party manages our DNS (and more). Another party ...
Timmeh's user avatar
  • 1

1
2 3 4 5
28