Questions tagged [certificate]
Certificates are a Public Key and Identifying Information
1
vote
0answers
12 views
How best to deal with networked device security certificate on domain?
When connecting a managed networked device (printer, router/switch, PC based software service) to a domain, mostly these days it has a https management or user access web portal. When viewing these ...
0
votes
1answer
27 views
How to update certificate for Azure Service Fabric Cluster?
I have Azure Service Fabric Cluster. For it I have certificate that is almost expired. So I want to import new certificate with updated issue date.
I have added it to key vaults as new version of ...
3
votes
1answer
34 views
What happens when someone gets to know the secret key (of the web server / a CA)?
basically, I have three questions and I would be grateful for a brief explanation of the differences in the consequences of these thefts:
What happens when someone gets to know the secret key of the ...
1
vote
1answer
33 views
Request Certificate points to wrong Server
We migrated a while ago from SBS 2008 to Windows Server 2012 R2. The new Server is also the Certificationauthority. But when I want to renew a certificate, a get the error messsage "Error: RPC Server ...
0
votes
0answers
13 views
HAPROXY certificate for Virtual IP
I got 2 RHEL servers that functions as balancer and send the request using HAPROXY to two other servers which has a weblogic cluster.
The RHEL servers are in DMZ that will be accessible through the ...
0
votes
0answers
21 views
Client and Server certificate with xca
I followed the following tutorial to create certificates to use in securing WCF NetTCP connection
How to Create Certificates for a Client-to-Site VPN , I copied the certificates from the issuer ...
0
votes
0answers
18 views
An unknown connection request was received from a remote client application, but none of the cipher … The SSL connection request has failed
I am getting too frequent errors in my System Error Logs :
An unknown connection request was received from a remote client
application, but none of the cipher suites supported by the client
...
2
votes
0answers
38 views
LDAPS Microsoft Active Directory Multiple Certificates RFC6125
We have an Microsoft Active Directory Domain with a large pool of domain controllers (DC) that are are setup with LDAP. These are all setup with LDAPS and uses Certificate Services via a template to ...
2
votes
1answer
24 views
Unable to issue certificates after enabling SAN?
I have a Microsoft CA running, which does not have the SAN field enabled by default, so I have enabled it by
certutil -setreg policy\EditFlags +EDITF_ATTRIBUTESUBJECTALTNAME2
Before doing so, ...
-1
votes
1answer
49 views
Dovecot SSL certificate -> Cert Hostname DOES NOT VERIFY
thanks in advance for your patience...
I am having trouble to dovecot working with my new wildcard ssl certificate.
I put the following sections in my dovecot config:
ssl_protocols = !SSLv3 !SSLv2
...
2
votes
1answer
73 views
Lets Encrypt ACME2 Challenge NameCheap Personal DNS
I'm trying to get a wildcard certificate, but running into the issue that I use Namecheap as a registrar, and for API access I need to spend more money than I'm willing to, so I'm looking for ...
0
votes
1answer
46 views
Problems with certificate in Exchange 2016
We have just installed a new mailserver, with exchange 2016. We need to have our wildcard certificate assigned with the smtp service in exchange. I edit the certificate in exhange EAC, tick the ...
0
votes
2answers
30 views
Can we create certificate sign request (CSR) using HSM?
Can I generate a CSR using HSM? If Yes, then Please guide us. It would be very helpful.
Following are our system details:
We have HSM(SafeNet) Simulator to test developement application.
we are ...
0
votes
0answers
21 views
Error Installing Certificate - Cisco WLC - Password protected PEM
So I will start with saying, I'm not good at all with certificates, I got this .pem file that I'm going to upload to a WLC for Webauth, since the old one is from GeoTrust.
At first the .pem didn't ...
0
votes
1answer
26 views
Trouble with Subordinate CA - Unable to submit CSR
I have a Subordinate CA running on Windows 2016 Server - its been issuing certs until recently where I am now only ever getting the error when trying to submit a CSR:
The request contains no ...
0
votes
0answers
14 views
Having issue to convert crt to pfx because of private key mismatch
Using openssl I created a key and with that key a CSR.
The CSR was submitted to https://cheapsslsecurity.com and I was granted a crt for code signing purposes.
I want to sign msi files and therefor I ...
0
votes
0answers
56 views
sstp eap-tls vpn command line connect
When I creating new SSTP VPN connection via powershell, I want to connect via script with rasdial. But there is error : "Remote Access error 703 - The connection needs information from you, but the ...
1
vote
1answer
10 views
FTP over TLS, with multiple sites hosted on the same server
Is it possible to have FTP over TLS on a server that hosts multiple websites (domains) ?
I can get certificates for any of the domains, but the problem is that I have no way of knowing to which ...
-2
votes
2answers
49 views
block Certificate authority server [closed]
is this possible to block a specific TLS CA(certificate authority) on network ?
for example block all certs that is issued by letsencrypt on my network
is there any ip or host name for blocking ?
0
votes
1answer
58 views
IIS Windows Authentication : IE not choosing the right certificate
I am trying to setup an intranet website (osTicket ticketing solution). I want my users to connect automatically to the website, so they don't have to fill their credentials. For this I have :
...
0
votes
0answers
99 views
Apache 2.4 won't start when SSLEngine on directive enabled on two Virtual Hosts
I have very strange issue with Apache today. This is RedHat 7.5 new server and we have same set up working just fine on the other RedHat server.
Here is the deal:
All I have is two SSL Virtual Hosts, ...
1
vote
1answer
77 views
ADFS Event 329 - Certificate Could Not Be Decrypted
Using MS scripts, I attempted a migration of an ADFS 2.0 configuration (on Windows 2008R2) to a new ADFS server (Windows 2016) server. I have warnings in my event log that seem to be linked, via the ...
0
votes
0answers
30 views
Prevent Smart Card prompt when looking for Enrollment Certificate
I'm using an Enrollment Agent user certificate to amend CSRs (in order to add SANs)
My method is working fine - using the following command:
certreq -config "CertAuth" -policy "PathtoCSR" "Path to ...
-3
votes
1answer
109 views
ESXi 6.5 web client mutual SSL authentication
Has anyone done it? Don't like the idea of relying exclusively on a user and password.
Thanks!
1
vote
1answer
19 views
How to know the origin of a certificate on a windows PC (Especially Win 10 embedded LTSB)
I have a specific type of problem but maybe someone have a hint for me:
We have some systems with special PCIe-Hardware for which we wrote and signed a driver. One certificate in the path of trust is ...
1
vote
0answers
20 views
certbot creates a certificate with “wwww” instead of a bare domain one - unlike before [duplicate]
I've been creating certificates this way for over a year:
export website="my_domain1111.com"
sudo certbot certonly --standalone -d $website -d www.$website --email hello@$website
and it's always ...
0
votes
1answer
255 views
letsencrypt certificate with windows / exchange server
I try to install and then renew Letsencrypt certificate with Exchange server for owa and activesync. Windows Server 2008 R2 with Exchange Server 2010. (Which will be upgraded to more recent version ...
2
votes
1answer
37 views
MAAS install CA to new machines
How could we add custom trusted Certificate Authority to the new deployed ubuntu 16.04 machines on MAAS v2.3 ?
is there a direct way to do that, or we have to perform custom installation nodes ?
2
votes
1answer
405 views
Cannot add a self signed certificate in Firefox
I need to set up an IIS webserver that will be accessed by a small, finite number of users. I was considering using a self-signed certificate only, and manually installing it on the user's systems.
...
0
votes
0answers
31 views
How to create self-signed certificate to sign Office macros
I need to create a self-signed certificate which I can use to sign different kind of Office macros (for Outlook, Excel etc.).
I must be able to use this certificate on all workstations in my domain, ...
2
votes
1answer
65 views
What is the use of SigningCertificate in AWS Cognito
I'm using AWS Cognito for my user authentication. I want to know the actual use of SigningCertificate in AWS cognito?
NOTE: We can get the SigningCertificate of AWS Cognito usign this ...
0
votes
0answers
14 views
Apache and Windows Certificate KeyStore?
Sorry in advance for the possibly stupid question...
Why does't Apache use the windows certificate keystore? It would make things a lot easier for compliance engineers like me who have to replace ...
3
votes
1answer
55 views
SSL client certification
OS: CentOS 7
SW: NginX
Existing stuff
dhparam.pem
mydomain.com.crt
mydomain.com.csr
mydomain.com.key
Issue:
I'm trying to create a client verification by creating client certificates and then ...
1
vote
1answer
117 views
List all client certificates installed on user profiles in a domain
I'm taking initial steps to start securing a network, and I've come across the fact that a number of machines have Client Certificates for websites installed in the user client certificate store, ...
0
votes
1answer
742 views
EMC VNX 5300 - How to access Control Station
We have an EMC VNX 5300 and the certificate has expired. I have already researched the instructions for viewing the certificate and regenerating a new one. The steps require accessing the Control ...
0
votes
1answer
189 views
Certbot and letsencrypt: after renewing my certificate has 2 weeks more of validity instead of 3 months
My letsencrypt certificate will expire soon. I ran "certbot" to renew it for the next 3 months:
$ sudo certbot certonly --standalone -d $website --email admin@$website
Saving debug log to /var/...
1
vote
1answer
131 views
Seeking ground truth on TLS certificates and MacOS - browser, curl, openssl compared
On a Mac, High Sierra 10.13.5, I'm seeing a difference in TLS certification validation. Chrome and Safari are happy with TLS validation when visiting https://www.visitflorida.com. Also, curl has no ...
0
votes
0answers
66 views
Extract public and private keys from JBOSS
Our sysadmin is requiring that I provide the with the public and private key for a standalone Jboss sever. I find a file "keystore" in
wildfly-10.1.0.Final/standalone/configuration
Using
[...
1
vote
0answers
44 views
BizTalk 2016 Server Administration - Instance of the WMI class is not found
I am brand new to BizTalk administration and trying to setup the certificate to use for AS2 communication, and running into some problems. The developer who built everything inside BizTalk did it ...
0
votes
1answer
123 views
Kube dns wont connect to the Kubernetes api process
Running kubernetes v1.10.0 amd kube-dns using the gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.14.8 container
When the kube-dns container starts it says this in the log:
I0610 06:47:06.051414 ...
0
votes
1answer
287 views
How to auto publish user certificate to GAL (Exchange 2016)?
I have set up a PKI infrastructure for my users, all is working fine : the CA, auto-enrollment, certificates published in AD and roaming mode enabled : everyone can log on any PC, automatically ...
1
vote
0answers
377 views
slapd won't start (due to missing certificate?)
I'm trying to setup a OpenLDAP server on a CentOS 7.5. Following this guide seemed to work very well until something went wrong (LDAP-password wasn't accepted any longer) due to a server crash. I ...
0
votes
0answers
123 views
How to hide/delete No SNI Certificate in Nginx?
I have 2 domains hi.com and hello.com using one IP 234.235.236.237
If I check domain hi.com in ssllabs.com I see 1 certificate, nice.
But, if I check domain hello.com in ssllabs.com I see 2 ...
0
votes
1answer
246 views
Git: server certificate verification failed using Bitbucket Server
I have a Bitbucket server running onprem with a certificate.
I added it to the keystore ussing the follwing commands
openssl pkcs12 -export -in myurl.com.cer -inkey myurl.com.key -out myurl.com.p12
...
0
votes
1answer
559 views
How to use rootcert.pem certificate with curl?
I have a file/certificate in next format rootcert.pem. How to use this certificate with curl ?
1
vote
0answers
108 views
NGINX - Extract Distinguished Name from a certificate inside a HTTP header
I have this Web infrastructure:
Clients ---> External Anti-DDOS service (reverse Proxy) ---> NGINX (Reverse Proxy) ---> PHP APP (Apache)
Clients are using 'client certificates' in this way:
1-Client ...
-1
votes
1answer
40 views
What's a quick/secure way to set up a valid https certificate for a NAS without domain control?
I'm operating several NAS devices on my employer's LAN. I do so with the employer's blessing, but I do not have control over the domain, and the devices are only available to a small working group on ...
0
votes
1answer
74 views
StrongswanPKI - Adding status_request or MustStaple TLS extension to certificate?
Using PKI tool from strongswan to setup a CA.
Trying to setup the OCSP side of things have run into many issues as per another thread I posted (Strongswan PKI - ED25519 Certifcates - OCSP Responder ...
0
votes
2answers
668 views
Handshake failure if URL path is specified
I'm trying to use a REST API over HTTPS but I'm getting a handshake failure only if I specify an URL path (not getting the error with the domain name only).
Following the instructions of the API ...
0
votes
1answer
35 views
HTTPS server certificate fails
Is there a way to check the certificate used for HTTPS for errors or problems in general? One of the websites I access is always shown by Chrome as Not Secure. To view the site I then have to click on ...
