Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [certificate]

Certificates are a Public Key and Identifying Information

-1
votes
1answer
23 views

Convert text certificate to crt file

I sent the .CSR file to my client, and they send me the final certificate in text code (copy paste into the mail). Can I convert this code into file .CRT ? The code is OK, I have tested in: https://...
0
votes
0answers
32 views

Postfix TLS with Subject Alternate Name

I have setup Postfix with a purchased SSL certificate. Everything works on the mail server except that the clients perceive the SSL certificate as "invalid - identifies the wrong site". Here are the ...
0
votes
1answer
24 views

How can I add a certificate to a Windows service's certificate store from the command line?

I want to add a certificate to the certificate store belonging to a Windows service, from the command line. So far, the only thing I've found is: certutil -service -store ADAM_Instance-Name\My When ...
1
vote
0answers
29 views

Updating certificate for FTP site for IIS 10 - FTP client does not see newly updated certificate on primary connection

I run a website that uses IIS 10's FTP server and I have it setup to use Explicit FTP over TLS and it's worked great for the last year+. I bought the server certificate through Digicert. The server ...
-1
votes
0answers
17 views

How to centrally manage the certificates needed for RDP connections for the servers in my Windows domain?

I want to use a wildcard cert that is issued from a trusted certifying authority as the cert needed for RDP to connect to my windows servers on the domain, How can I achieve that? thanks!
0
votes
1answer
21 views

What are the best practices for providing S/MIME-Certificates in Outlook?

I got some questions regarding S/MIME in Outlook and certificates in general. Some questions arrised about the possibility to digitally sign emails in my company. As I'm new to the topic I had to do ...
1
vote
1answer
47 views

How to renew VMware certificate in Veeam

I had to reinstall the vcenter appliance. Since that the Veeam backupjobs fail with the error: Task failed error: The remote certificate is invalid according to the validation procedure Presumably ...
0
votes
2answers
57 views

Can I specify multiple hostnames in a single certificate?

I have a cloudera managed Hadoop cluster where I had installed SSL certificates on all servers. Unfortunately, the host name on the servers are not the same as the one configured over dns. When run ...
0
votes
0answers
28 views

Server certificate validation 802.1x

I have recently deployed CA and NPS for WPA2-Enterprise authentication. However doing the pen testing I found out that clients are accepting a certificate from any valid certificate authority. This is ...
0
votes
0answers
33 views

Assigning third-party client certificates/keys to Active Directory users

In our organization, we have a number of third-party vendors that we must interact with using client certificates. We'd like to be able to assign certificates/keys to a particular Active Directory ...
1
vote
1answer
44 views

Fixing Cisco Umbrella Root CA Filtering on OpenVPN

I have a personal VPN running OpenVPN 2.3.10 on ubuntu 16.04 that I installed following this guide. It has worked with a few hiccups over the last two months of intermittent use. Yesterday, I ...
0
votes
0answers
30 views

Apache: restrict access to folder based on certificate

Hope someone can point me in the right direction. I have created a simple Apache srv on 2.4.25 The srv has a cert from letsencrypt and enforces access to https only. I have a "secret" folder (test). ...
1
vote
1answer
39 views

How can I issue a certificate from a CA keypair and CSR?

Now I have these files: CA Keypair (RSA 4096): ca.pem, ca-key.pem Certificate Keypair (ECC 384): server.csr, server-key.pem How can I issue the server certificate "server.pem"? The certificate ...
2
votes
1answer
259 views

Veeam | “Failed to check certificate expiration date” after certificate renewal

Since yesterday we receive the message "Failed to check certificate expiration date" on a Veeam server. The certificate is correct. (Was yesterday renewed!) (German: issued for, issued by, valid ...
1
vote
2answers
77 views

What kind of SSL certificates do I need for 2 IPs and 5 subdomains of the same domain?

I have a domain (my.com) containing 5 subdomains (www.my.com, app1.my.com, app2.my.com, app3.my.com, app4.my.com). The 4 apps are hosted on a Windows/Apache 2.4 server with a single IP using virtual ...
0
votes
2answers
42 views

Generate/Sign certificates with the AD trusted root certificate?

I know that when an Active Directory domain is created: it creates it's own root certificate and that root certificate is automatically pushed into machines when they are joined to the domain You ...
1
vote
1answer
33 views

Add Client certificate when acting as reverse proxy (Apache/NGINX)

My application makes (POST) requests to an external server (not under my control) Now this server requires working with client certificates. My application currently can not handle this (or any time ...
1
vote
1answer
9 views

Is SQL Server capable of sending certificate chain to the client?

I wonder if SQL Server is capable of sending certificate chain to the client, I tried every option while creating certificates and I am aware of what restrictions SQL Server puts on a certificate to ...
1
vote
1answer
46 views

OpenSSL generate certificate with endianess,encoding and charset

I'm having some trouble creating a certificate with the openssl commandline tool. The specs for the private key are: "A digital signature using an RSA 1024 bit key with a SHA-1 hash function (...
0
votes
0answers
12 views

Wifi authentication with NPS while I'm adding a new computer in domain

I would like to use Machine certificate for Wifi WPA-Enterprise authentication of my company. For new PCs I need another method, just for domain admins to add PCs to domain, with their username and ...
1
vote
0answers
15 views

How best to deal with networked device security certificate on domain?

When connecting a managed networked device (printer, router/switch, PC based software service) to a domain, mostly these days it has a https management or user access web portal. When viewing these ...
0
votes
1answer
87 views

How to update certificate for Azure Service Fabric Cluster?

I have Azure Service Fabric Cluster. For it I have certificate that is almost expired. So I want to import new certificate with updated issue date. I have added it to key vaults as new version of ...
3
votes
1answer
46 views

What happens when someone gets to know the secret key (of the web server / a CA)?

basically, I have three questions and I would be grateful for a brief explanation of the differences in the consequences of these thefts: What happens when someone gets to know the secret key of the ...
1
vote
1answer
35 views

Request Certificate points to wrong Server

We migrated a while ago from SBS 2008 to Windows Server 2012 R2. The new Server is also the Certificationauthority. But when I want to renew a certificate, a get the error messsage "Error: RPC Server ...
0
votes
0answers
60 views

An unknown connection request was received from a remote client application, but none of the cipher … The SSL connection request has failed

I am getting too frequent errors in my System Error Logs : An unknown connection request was received from a remote client application, but none of the cipher suites supported by the client ...
2
votes
0answers
55 views

LDAPS Microsoft Active Directory Multiple Certificates RFC6125

We have an Microsoft Active Directory Domain with a large pool of domain controllers (DC) that are are setup with LDAP. These are all setup with LDAPS and uses Certificate Services via a template to ...
2
votes
1answer
37 views

Unable to issue certificates after enabling SAN?

I have a Microsoft CA running, which does not have the SAN field enabled by default, so I have enabled it by certutil -setreg policy\EditFlags +EDITF_ATTRIBUTESUBJECTALTNAME2 Before doing so, ...
-1
votes
1answer
92 views

Dovecot SSL certificate -> Cert Hostname DOES NOT VERIFY

thanks in advance for your patience... I am having trouble to dovecot working with my new wildcard ssl certificate. I put the following sections in my dovecot config: ssl_protocols = !SSLv3 !SSLv2 ...
2
votes
1answer
150 views

Lets Encrypt ACME2 Challenge NameCheap Personal DNS

I'm trying to get a wildcard certificate, but running into the issue that I use Namecheap as a registrar, and for API access I need to spend more money than I'm willing to, so I'm looking for ...
0
votes
1answer
108 views

Problems with certificate in Exchange 2016

We have just installed a new mailserver, with exchange 2016. We need to have our wildcard certificate assigned with the smtp service in exchange. I edit the certificate in exhange EAC, tick the ...
0
votes
2answers
138 views

Can we create certificate sign request (CSR) using HSM?

Can I generate a CSR using HSM? If Yes, then Please guide us. It would be very helpful. Following are our system details: We have HSM(SafeNet) Simulator to test developement application. we are ...
0
votes
1answer
86 views

Trouble with Subordinate CA - Unable to submit CSR

I have a Subordinate CA running on Windows 2016 Server - its been issuing certs until recently where I am now only ever getting the error when trying to submit a CSR: The request contains no ...
0
votes
0answers
23 views

Having issue to convert crt to pfx because of private key mismatch

Using openssl I created a key and with that key a CSR. The CSR was submitted to https://cheapsslsecurity.com and I was granted a crt for code signing purposes. I want to sign msi files and therefor I ...
0
votes
0answers
108 views

sstp eap-tls vpn command line connect

When I creating new SSTP VPN connection via powershell, I want to connect via script with rasdial. But there is error : "Remote Access error 703 - The connection needs information from you, but the ...
1
vote
1answer
12 views

FTP over TLS, with multiple sites hosted on the same server

Is it possible to have FTP over TLS on a server that hosts multiple websites (domains) ? I can get certificates for any of the domains, but the problem is that I have no way of knowing to which ...
-2
votes
2answers
49 views

block Certificate authority server [closed]

is this possible to block a specific TLS CA(certificate authority) on network ? for example block all certs that is issued by letsencrypt on my network is there any ip or host name for blocking ?
0
votes
1answer
92 views

IIS Windows Authentication : IE not choosing the right certificate

I am trying to setup an intranet website (osTicket ticketing solution). I want my users to connect automatically to the website, so they don't have to fill their credentials. For this I have : ...
0
votes
0answers
212 views

Apache 2.4 won't start when SSLEngine on directive enabled on two Virtual Hosts

I have very strange issue with Apache today. This is RedHat 7.5 new server and we have same set up working just fine on the other RedHat server. Here is the deal: All I have is two SSL Virtual Hosts, ...
1
vote
1answer
96 views

ADFS Event 329 - Certificate Could Not Be Decrypted

Using MS scripts, I attempted a migration of an ADFS 2.0 configuration (on Windows 2008R2) to a new ADFS server (Windows 2016) server. I have warnings in my event log that seem to be linked, via the ...
0
votes
0answers
66 views

Prevent Smart Card prompt when looking for Enrollment Certificate

I'm using an Enrollment Agent user certificate to amend CSRs (in order to add SANs) My method is working fine - using the following command: certreq -config "CertAuth" -policy "PathtoCSR" "Path to ...
-3
votes
1answer
119 views

ESXi 6.5 web client mutual SSL authentication

Has anyone done it? Don't like the idea of relying exclusively on a user and password. Thanks!
1
vote
1answer
19 views

How to know the origin of a certificate on a windows PC (Especially Win 10 embedded LTSB)

I have a specific type of problem but maybe someone have a hint for me: We have some systems with special PCIe-Hardware for which we wrote and signed a driver. One certificate in the path of trust is ...
1
vote
0answers
20 views

certbot creates a certificate with “wwww” instead of a bare domain one - unlike before [duplicate]

I've been creating certificates this way for over a year: export website="my_domain1111.com" sudo certbot certonly --standalone -d $website -d www.$website --email hello@$website and it's always ...
0
votes
1answer
403 views

letsencrypt certificate with windows / exchange server

I try to install and then renew Letsencrypt certificate with Exchange server for owa and activesync. Windows Server 2008 R2 with Exchange Server 2010. (Which will be upgraded to more recent version ...
2
votes
1answer
38 views

MAAS install CA to new machines

How could we add custom trusted Certificate Authority to the new deployed ubuntu 16.04 machines on MAAS v2.3 ? is there a direct way to do that, or we have to perform custom installation nodes ?
2
votes
1answer
580 views

Cannot add a self signed certificate in Firefox

I need to set up an IIS webserver that will be accessed by a small, finite number of users. I was considering using a self-signed certificate only, and manually installing it on the user's systems. ...
0
votes
0answers
42 views

How to create self-signed certificate to sign Office macros

I need to create a self-signed certificate which I can use to sign different kind of Office macros (for Outlook, Excel etc.). I must be able to use this certificate on all workstations in my domain, ...
2
votes
1answer
99 views

What is the use of SigningCertificate in AWS Cognito

I'm using AWS Cognito for my user authentication. I want to know the actual use of SigningCertificate in AWS cognito? NOTE: We can get the SigningCertificate of AWS Cognito usign this ...
0
votes
0answers
20 views

Apache and Windows Certificate KeyStore?

Sorry in advance for the possibly stupid question... Why does't Apache use the windows certificate keystore? It would make things a lot easier for compliance engineers like me who have to replace ...
3
votes
1answer
60 views

SSL client certification

OS: CentOS 7 SW: NginX Existing stuff dhparam.pem mydomain.com.crt mydomain.com.csr mydomain.com.key Issue: I'm trying to create a client verification by creating client certificates and then ...