Questions tagged [certificate]

Certificates are a Public Key and Identifying Information

Filter by
Sorted by
Tagged with
0 votes
0 answers
9 views

"PTY allocation request failed on channel 0" with CertificateFile

I have a problem with TTY allocation when I try to connect via ssh with trusted certificate containing public key. If I perform classic ssh access with the user, e.g. ssh -i test-key-for-vault -o ...
Sim Sca's user avatar
0 votes
0 answers
12 views

Failed verifying certificate revocation for Enterprise certificate from non-domain computer

We have a typical offline root and issuing intermediate CA Enterprise environment. My problem is very similar to the one found here: Certificate revocation check fails for non-domain guest in spite of ...
Steve G.'s user avatar
0 votes
0 answers
17 views

CA root and CA subordinate administrator

I want to deploy a new PKI infrastructure on a domain that has several subdomains and trusted domains. I would like to be able to delegate the administration between several administrators ...
Santyuste's user avatar
0 votes
0 answers
12 views

Can't connect to WebSocket server over wss:// (ws:// works), and no debug information

I have a website on example.com, and a WebSocket server on example-websocket-server.com. Each have an SSL certificate so that I can access them from https:// I am using the websocket server as a ...
B.D Liroy's user avatar
  • 103
0 votes
0 answers
22 views

LDAPS, Certificate Authority, and Domain Controllers

I have a domain environment with 4 2012 Domain Controllers that I am working on replacing with 4 new 2022 domain controllers. I have some questions regarding how the CA works when issuing certificates ...
Tom Gordon's user avatar
0 votes
1 answer
26 views

Can I set my own SSL certificate via .htaccess file in a shared web server?

I am hosted in a shared web (apache) server in a subdomain. I don't have access to any panel, only sshfs. The problem is that the host (lazy), does not issues / uses SSL certificates. I issued my own (...
krg's user avatar
  • 3
0 votes
0 answers
51 views

How to sign a certificate for s/mime and generate pkcs12 store with existing CA?

I want to create a certificate store file in pkcs12 format to use in thunderbird for s/mime signing and encrypting. I already run a mail and web server that use certificates signed by a CA certificate ...
FalcoGer's user avatar
  • 136
0 votes
0 answers
36 views

Certificates issue during RADIUS authentication using NPS server with PEAP MSCHAPv2

I am using NPS as a RADIUS server to authenticate some devices using PEAP MSCHAPv2. I have an issue during the server authentication, I am using a chain of trust certificates, with 1 server cert, 1 ...
Alexandre Rey's user avatar
0 votes
2 answers
32 views

IIS https certificates

I’m migrating the c# web applications and data apis I've developed that are hosted on IIS to use http to use SSL / TSL (https). I have not setup certificates with https before and was wondering if it’...
Sandy's user avatar
  • 13
1 vote
0 answers
34 views

CentOS 7, Integrating SAMBA server with LDAP server to authenticate users through LDAP

I spent many hours trying to solve my problem, but unfortunately to no avail. Im configuring SAMBA server on CentOS 7. I want to fetch users' credentials from LDAP server, so they will be able to ...
Artur Merta's user avatar
0 votes
2 answers
84 views

Can I make strongSwan accept any certificate as long as it is only signed by a specific CA?

Using a swanctl config, is there a way to make strongSwan accept any certificate for an IKEv2 connection as long as it is signed by a specific CA? What I mean is, without having to install the public ...
Mecki's user avatar
  • 869
2 votes
1 answer
68 views

Exporting a PFX file for Smartcard authentication driver issues

I have a ACR122 Smartcard reader I am attempting to export a PFX certificate to for password-less authentication. I have everything set up on the active directory server, but am stuck on the simplest ...
JimmyP624's user avatar
0 votes
2 answers
63 views

With multiple RDP certificates, do all get checked?

If a Windows host has multiple RDP certificates. Do all get checked while connecting or only the first found? I have a RDP certificates deployed from an Root CA with now invalid OCSP location in the ...
Synertry's user avatar
0 votes
1 answer
32 views

RRAS VPN using Wrong Server Authentication Cert

I've got a RRAS VPN setup using IKEv2 and certs issued by the domain's CA. It has a cert for the public domain and I know this is getting presented to the client. How ever it seems that either the ...
Arcath's user avatar
  • 513
0 votes
1 answer
89 views

Ever since changing to Windows 11 we have some workstations that now and then try to connect via smart card, but we don't use smart cards

Ever since changing to Windows 11 we have some workstations that now and then try to connect via smart card, but we don't use smart cards. The event occurs with the computer's account, not a user's ...
Karbashi's user avatar
0 votes
1 answer
35 views

Redirecting subdomain to another domain

I have a subdomain, sub.domain1.com. I want to redirect this to domain2.com. The result is a security exception because the certificate on domain2.com doesn't include sub.domain1.com. How does one ...
Mars's user avatar
  • 101
8 votes
2 answers
463 views

SAN certificate with URI fragment

I need to generate a TLS certificate with a SAN URI where the URI has a fragment (has a hash '#'). But when I try to generate a certificate using openssl, the fragment gets stripped. # generate key ...
Rich Remer's user avatar
-2 votes
1 answer
122 views

How to discover HTTPS servers on local network with certificate for particular hostname

I am making a network-connected device (using Raspberry Pi 4 inside), and I would like a way for these devices to discover each other (when on the same local subnet). I am vaguely aware of protocols ...
jacobq's user avatar
  • 132
0 votes
1 answer
59 views

NetApp: Cannot import private key from an external CA

Using the ONTAP System Manager, I'm trying to add a certificate according to the docs. Unfortunately, whenever I try to import the private key file, I get the following error: No valid private keys ...
stackprotector's user avatar
0 votes
1 answer
39 views

NetApp ONTAP certificate expiry_time format

I want to configure an expiration period of 5 years for a root CA certificate on NetApp ONTAP via its API. The expiry_time is documented like this: expiry_time Certificate expiration time. Can be ...
stackprotector's user avatar
0 votes
1 answer
348 views

Error when importing certificate via PowerShell to Local Certificate Store. Missing PrivateKey Information

I have have tried the following ways to import a certificate to the localmachine store via PowerShell. The console was running as administrator. Import-PfxCertificate -Exportable -Password (secure....
Jessie's user avatar
  • 180
1 vote
1 answer
166 views

Error message "The format of the file is invalid" when attempting to import certificate on HP printer

On some HP printers, when I try to import a certificate to enable HTTPS for the printer's Embedded Web Server (EWS), I get the error message "The format of the file is invalid". This happens ...
Jay Michaud's user avatar
  • 3,975
0 votes
0 answers
202 views

How to import a PFX certificate to LocalMachine/Personal via GPO

I would like to deploy P12 certificate (for OpenVPN) to Windws Certificate Store, to be more precise to LocalMachine\Personal. The reason is the certificate will be protected at least by local admin ...
aldomoro's user avatar
0 votes
1 answer
39 views

Can we add a subordinate enterprise certificate authority linked to an existing enterprise Root certificate authority

The Root CA is domain joined. The Sub CA will be domain joined. The Sub CA will deliver workstation Authentification (template) to PC clients via GPO. Is there any known issue with this configuration? ...
dr23trik's user avatar
0 votes
2 answers
50 views

Can a CA generate a signed certificate for a host in to a top-level domain not under the CA's control?

Background I need to replace an existing certificate on a host named h1.vx.mydomain.net (not the real domain obviously). The existing certificate says it was issued by a chain of CAs that I do not ...
JamesHoux's user avatar
  • 257
0 votes
1 answer
218 views

Are wildcard certificates allowed for a top-level domain

Curl returns curl: (60) SSL: no alternative certificate subject name matches target host name 'elasticsearch-0.elasticsearch' even if SAN clearly stands DNS:elasticsearch, DNS:*.elasticsearch ...
Владимир Тюхтин's user avatar
0 votes
0 answers
58 views

Client side certificate cannot be installed on Apple ios. Error-"The authenticity of "cloudflare" cannot be verified"

We use client side Cloudflare certificate to allow or disallow access to our site since the site is meant to be used by a small group of users who are provided a Cloudflare client certificate. Our ...
Muhammad Ebrahym's user avatar
1 vote
1 answer
4k views

Still suffering from Windows NPS May 2022 Certficate Update

in May 2022 Microsoft changed the way that client certificates are mapped to AD accounts, causing 802.1X EAP-TLS computer account authentication to stop working. Here is an additional resource with ...
namezero's user avatar
  • 171
0 votes
0 answers
135 views

How do i manage my client certificates on google cloud platform?

I have built a https server on google cloud platform. This can now be visited by anyone, I wanted to avoid this by using client certificates. So with this the question is how do I get a client.cert ...
user avatar
0 votes
1 answer
97 views

DNS records could not be found. Certificate activation will retry automatically

Our website is down and it is showing certificate is expired. When I check the custom domain settings section in GCP, I am getting the following warning. We have removed the records and re-added them, ...
Sulagna Nandi's user avatar
0 votes
0 answers
16 views

Questions about kubeproxy authentication

When I was binary deploying kubernetes, I found that kubelet can automatically issue certificates using TLS BootStrap. The TLS Bootstrap method I checked the relevant information and said that if ...
xiaowangc's user avatar
0 votes
1 answer
2k views

How to convert .cer and .key file to .pem?

I have a .cer certificate, .key file and I would like to convert it to the .pem format. How do I convert them to .pem?
Wassim BEN FATMA's user avatar
2 votes
2 answers
252 views

create a self-signed certificate for a subdomain, the main domain does not belong to me

I have my internet box provider who offers me a free subdomain to connect to my network, ex: xxxxx.provider.com I have generated a self-signed certificate for the subdomain foo.provider.com I tried to ...
Pascal de Sélys's user avatar
-2 votes
1 answer
222 views

Can I create an SSL Certificate to a domain that redirects to other domain servers?

I hope you could help me with this one. Here is the case: I have a domain in ZoneEdit name dummysite.org. This domain has the following A records: HOST IP ADDRESS TTL @.dummysite.org 193.10.xx.xx ...
Haetnim Ha's user avatar
1 vote
2 answers
131 views

What is the best practice to handle expiring S/MIME mail certificates

where can I find info regarding the proper way to handle expiring mail certificates? Here's the problem: our certificates for digitally signing mails expire after a year. If, a week before expiry, I ...
Jürgen Depicker's user avatar
0 votes
1 answer
211 views

ADCS WebServer Autoenrollment best practise

As in any IT environment, the number of web server certificates is constantly increasing. With the reduction of the duration to 1 year, the administration effort increases at the same time if such ...
Sinista's user avatar
  • 87
0 votes
0 answers
489 views

kubernetes kubectl Undo --insecure-skip-tls-verify to enable TLS Verification once again after it has been disabled

For testing purposes I have disabled tls verification for my cluster by typing: $ kubectl get nodes --insecure-skip-tls-verify This was done to temporarily fix a problem with an invalid certificate. ...
Jakub's user avatar
  • 11
-1 votes
2 answers
200 views

SSL certificate

I have root and intermediate certificate, and I need to create the certificate which I need to install on RADIUS server. However, I don't have clear idea in my head about this. Here are my questions: ...
Quirik's user avatar
  • 99
0 votes
0 answers
2k views

How do I deal with "Some challenges have failed" in certbot?

I am trying to request a TLS certificate using Certbot (source: https://certbot.eff.org/instructions) with sudo certbot --nginx. It is supposed to be for a docker registry used as a pull through cache ...
naraghi's user avatar
  • 101
1 vote
1 answer
650 views

OpenVPN - Can client certificates and keys be created if you only have ca.crt

All servers are debian 9 linux. I have 200 servers with openvpn installed, each with three to four clients (tunnel 2) clients ---> server1 (1 of 200) (also client for jumpserver) ---> jumpserver ...
Cruise5's user avatar
  • 73
0 votes
0 answers
209 views

Is it possible to generate a new self-signed certificate from an existing private key with powershell?

New-SelfSignedCertificate -ExistingKey "c:\cts_privkey.pem" -Container localhost -Provider "Microsoft Enhanced RSA and AES cryptographic Provider" -DnsName "example.com" -...
tks.tman's user avatar
  • 101
0 votes
0 answers
147 views

Certbot and changing the subdomain name

We had the domain nextcloud.example.com and issued the certificate for the apache2 server for this domain: certbot --apache -d **nextcloud.example.com** and got additional file nextcloud-le-ssl.conf ...
Павел Иванов's user avatar
1 vote
0 answers
2k views

How to convert SSL certificate to PFX if the certificate does not allow private key export

I have an SSL certificate that I need to convert to PFX file. I have the following info .crt file .pem file .p7b file The CSR and the Private key. I tried to follow the direction listed here which ...
Jay's user avatar
  • 111
0 votes
1 answer
158 views

Why is my Windows 11 host sending connection reset packets to AWX using certificate authentication?

Here is what I have done so far. Installed AWX 2.9 using docker on CentOS. Successfully managing Windows nodes (8,10) through AWX and WinRM using certificate authentication. (No problem here) ...
Abhisek Dash's user avatar
1 vote
0 answers
115 views

CA Certificate files get randomly updated

Is there some automated process that periodically updates the modify time on CA Certificates? Our File Integrity Manager is alerting on files beneath /etc/certs/. How are those files maintained? ...
Chris K's user avatar
  • 13
-1 votes
1 answer
369 views

Cant Enroll/renew Certificate : Server 2008R2 as client ans Server 2019 as CA

I have an issue with all my 2008R2 servers, they can no longer enroll/renew certificates. It works with windows 10 and server 2012 R2 as client. Error is RPC not available. From Event Viewer L’...
Alex Lum's user avatar
  • 145
0 votes
1 answer
182 views

How can I create a self-signed certificate that works with the browser?

I have been trying to create a self-signed certificate. The Firefox browser says the certificate is "not secure." I created the certificate following this SO explaination: Is it possible to ...
brohjoe's user avatar
  • 101
0 votes
0 answers
73 views

Update Oracle java 8 cacerts in ubuntu

I have an old ubuntu ec2-classic machine (v. 14.04) on which a critical application (under migration process) is running. I need to update the certs at /usr/lib/jvm/java-8-oracle/jre/lib/security ...
somya's user avatar
  • 3
0 votes
0 answers
55 views

Pin additional data (including a Verifiable Credential) to a x509 certificate

I am new to working with x509 certificates and I have a question (perhaps dumb) about pinning additional data to it. I want to send some important data to a service. The data payload includes x509 ...
Decrypter's user avatar
  • 111
0 votes
0 answers
34 views

Where are docker server certificates stored on Linux

One of the boxes in my Azure account is giving me the following cirtial security warnings But where do I find the Docker server certificates on RHEL?
PrestonDocks's user avatar

1
2 3 4 5
27