Questions tagged [certificate]
Certificates are a Public Key and Identifying Information
1,229
questions
0
votes
0answers
5 views
On Premise NPS server check computer account in Azure AD
I've got a Windows based NPS Radius server for authenticating my wireless clients based on device certificates (supplied by my internal CA). In my NPS network policy I have set conditions to grant ...
1
vote
0answers
59 views
How to add correct chain certificate when acessing url with wget? [migrated]
There is a site (https://datashare.is.ed.ac.uk/bitstream/handle/10283/3192/CINIC-10.tar.gz) which I know is misconfigured and I can get the new chained certificate from here: https://whatsmychaincert....
0
votes
0answers
39 views
Nginx SSL configuration
I want to setup Nginx for SSL termination. All request with valid client certificates will be terminated at Nginx and request will be forwarded to backend app. I have following Nginx configuration
...
0
votes
0answers
13 views
Custom Certificate for Amazon Aurora
Does anyone know a decent way to use a custom certificate (AWS ACM is fine) with Amazon Aurora Mysql Serverless? I'd like to use a custom DNS name with my DB and would like the name on the cert to ...
1
vote
0answers
16 views
Is it possible to mount an external file system using certificates instead of user/password?
I have mounted an external windows filesystem using fstab and username/password credentials. However, I'd much prefer to use user certificates. Is this possible?
2
votes
1answer
38 views
Windows Certificate Authority Server runaway issuing certs
In our environment, we have a Windows Certificate Authority server. We've distributed our CA to our folks, and generated some certificates with CSRs for internal websites. That works great. We tried ...
0
votes
0answers
16 views
RDP authentication using Certificates only
I have two computers - one configured with Windows Server and the other with a Linux distribution.
It's easily doable to start a RDP connection from the Linux client, using the Windows Server user ...
0
votes
0answers
17 views
Why autoenrollment of some certificates out of the box in Windows Server with CA installed
I have learned that I have to do three things to start autoenrollment of certificates:
activate a template with autoenrollment and grant permissions on security tab for those users/ computers
Issue ...
-1
votes
0answers
10 views
Remote Desktop Services Issue Certificate Error that the Name Doesn't Match
I have renewed a certificate issued by the internal PKI and then exported that certificate's private key to a file. I went into remote desktop services and configure deployment and then added the ...
1
vote
1answer
50 views
certificates for samba share
As far as I understand windows shares use the samba protocol?
Is there any non-password version where you use some kind of key/certificate?
Thinking of something like the authorized_keys in linux ssh.
...
-5
votes
1answer
192 views
How do I renew my cert? ACMEv1 Brownout in Progress [closed]
I dont know what this means, their website doesn't offer any guides, and googling it doesn't provide any help. My whole website is now inaccessible and I can't fix it.
Cert is due for renewal, auto-...
0
votes
0answers
25 views
“ASN1 parser: value is not valid” error when generating self-signed certificate
I'm trying to set up taskserver and I've got to the stage of generating the certificates. This is for personal use so I'm happy to use the provided script that generates self-signed certificates. ...
2
votes
2answers
30 views
Why aren't my websites configured in IIS using the correct certificates?
My sites are similarly named:
hi.api.domain.tld
hi.test.domain.tld
The .api domain is my api and .test is the webapp that consumes the api.
I've got a certificate for each one but they don't seem to ...
0
votes
0answers
15 views
While you are setting up Azure VPN with Windows Radius server, why you don't need to enroll a server certicate in the Windows Radius server?
According to MS's NPS documents: With PEAP-MS-CHAP v2, PEAP-TLS, or EAP-TLS as the authentication method, the NPS must use a server certificate that meets the minimum server certificate requirements. ...
1
vote
0answers
43 views
App service managed certificate for a naked domain
I've successfully created certificates (App service managed certificate) for other custom domains (for example www.cortoso.com, cortoso.com, www.cortoso.cz, cortoso.cz, ...). However, I am unable to ...
0
votes
0answers
26 views
How to apply third party CA certificate and self signed certificate to azure logic app
We are using an Azure logic app to integrate a third party API service with a D365FO instance. The third party supplied us with a public CA certificate file (crt) and a self signed certificate plus ...
0
votes
1answer
22 views
How do I forward a www subdomain through DDNS and use the domain's certificate? - Ubuntu Nginx Let's Encrypt DDNS
I think I am missing something simple, but I just can't see it.
I am running the latest Nginx on a home machine running Ubuntu 20.04 version 2. I have pfsense as my router/firewall running on a ...
0
votes
0answers
19 views
Create EJBCA subCA during EJBCA installation
I am learning how to install and use EJBCA to deploy an enterprise PKI. I know I can install EJBCA using a quick install configuring the script ejbca-setup like is explained here, and I also have ...
0
votes
1answer
20 views
Apache SSL certificate and Private key
we've a server apache and the certificate is expired. We have an SSL Wildcard certificate issued by Sectigo.
I generated the new certificate on our reseller site and we're going to upload it in the ...
0
votes
0answers
16 views
Wireless Radius Authentication to allow Laptops to use in 2 Forests with Selective Authentication
This sounds a bit complicated but I will try my best to explain.
We have 2 AD forests (DOMA and DOMB) joined by inter-forest trust with selection authentication
Each forest has their own NPS (NPSA ...
0
votes
0answers
16 views
SQL Server Always On Availability Group Database Mirroring Certificate Zero Downtime Renewal Procedure?
Here I have a 2-node SQL Server 2016 AlwaysOn Availability Group cluster, with 1 primary and 1 secondary, and there are certificates that encrypt the traffic from node 1 -> node 2, and node 2 -> ...
0
votes
1answer
21 views
How to configure openssl client to only accept specific server certificates?
I'm new to this community and kind of to things related to security.
I have three servers
Web Server (Client)
Mail Server (eSMTP)
Web Server
All servers have their own SSL certificates and got asked ...
0
votes
1answer
89 views
Some clients can only authenticate to VPN when connecting as Administrator
I'm trying to set up users to connect to our Azure-hosted network over a VPN. All client machines are running Windows 10. The connection is installed on the client machines by directly adding the ...
0
votes
0answers
34 views
ServerHello incomplete?
I try to configure two servers 'httpd' with TLS1.2 (Client Certificate check enabled)
It works fine on one. But not on the second... I get : "unable to get local issuer certificate"
I tested ...
1
vote
1answer
39 views
Signing Excel .XLSM-documents, expiring code signing certificates and trusted publishers
Short: Is there anyway to trust a certificate or publisher, so that the trust remains even after the certificate has expired?
Much longer: We develop (among other things) Excel documents for a number ...
1
vote
1answer
91 views
Why is this PEM file invalid?
I have a file chain.pem that contains two PEM encoded certificates, the first one being the TSA certificate and the second one being the self-signed CA.
the file content is exactly:
-----BEGIN ...
0
votes
1answer
35 views
Preventing certificate export in Windows for non-admin user
Our organization is thinking to use client certificates to add a new factor in authentication for VPN. We have corporate laptops that would be pre-configured with client certificates and then given ...
0
votes
1answer
31 views
Upgrading certificate template schema
I need to update one of my Active Directory Certificate Services (ADCS) certificate templates from schema v2 to v3, to support KSP providers. It seems that I can only do this by cloning the template (...
0
votes
1answer
36 views
Verifying Certificate is installed on all computers in an OU - Powershell
I'm trying to confirm a certain certificate is installed on all computer in the Trusted Root Certification Authority folder. This is what I have so far:
$Computers = Get-ADComputer -Filter {...
0
votes
1answer
87 views
TLS Cert for unknown IP (shippable software)
I am writing a distributed application that will be sold to multiple customers and hosted on premise. This application operates as a distributed system where many of the same applications communicate ...
1
vote
0answers
29 views
How to get the issuing certificate authority from an apple push notification certificate
I want to import the Apple push notification certificate into AWS ACM. So first, I had to convert it to pem. Using openssl pkcs12, I was able to get the Certificate and the Private Key. But when ...
0
votes
1answer
26 views
Issue certs with Windows CA?
I recently installed AD cert services. Right now everything in my home network is using certs issued by my firewall. On the firewall, I can sign CSR's, I can simply create certs and define the ...
1
vote
1answer
41 views
Certificates in docker local registry
I'm trying to set up a docker local registry within my university network. Since they offer certificates from rediris I requested one, so I have now three different files:
cert.pem
intermediate.pem
...
0
votes
0answers
18 views
Resources using a successfully issued (I think?) ACM Certificate produce net::ERR_CERT_AUTHORITY_INVALID when accessed
We're using an ACM certificate to afford custom CNAMEs in a CloudFront Distribution and an API Gateway API. This was working correctly until we recently moved the creation and assignment of this ...
1
vote
1answer
56 views
Where does Chrome fetch my identity from after having deleted cookies?
I'm trying to figure out where does Google CHrome fetch my identity from when authenticating to an Identity Provider (SAML with certificate authentication)
What I have tried :
Delete all cookies, ...
1
vote
1answer
269 views
Primary domain SSL not working, but wildcard subdomains are working
I have a domain through AWS Route 53,
the Primary domain was secured via letsencrypt methods, but were not working for any wildcard / subdomains...
I tried to redo the cert with the *.example.com ...
0
votes
1answer
69 views
number of crl certificate(s) or pem certificate(s) present in p7s file
Q. How can we find out the number of CRL files or number of PEM files that can be generated from a P7S file?
I understand ( from here ) that the data that is contained in a P7S file is nothing but the ...
0
votes
2answers
40 views
Opening port securely
I'm operating a webapp that should be accessible only to a small number of people equipped with tablets.
It is served on port 80 of a server that is on our local network behind the ISP router.
The ...
0
votes
1answer
120 views
Open SSL Error on Windows 10 - Converting a signed CSR from PEM to CRT
I am attempting to create an IPSec VPN connection with x.509 cert authentication for users.
What follows is a test to get things going and isn't a secure implementation. I will get a certificate from ...
0
votes
0answers
40 views
Access denied loading pfx cert in a specific context
TL;DR: I am trying to do authenticode signing in a jenkins pipeline, which runs ephemeral docker containers as agents. For some reason when I try to load the codesigning pfx cert, I get 'Access ...
0
votes
0answers
112 views
Dumping certificates from Trusted Root Certification Authorities
When certificates are installed into a local machine's certificate store via group policy, and the key indicates it has a private key included.
I am concerned that the private key has been ...
0
votes
0answers
8 views
Azure AD Newby: How do I monitor JWT issues for Application access
In Azure AD I am using Client Id and Client Secret successfully to get a JWT to acces from client app to a server app. What I want to do is see the event.
How do I set up the logging and monitoring of ...
0
votes
0answers
51 views
OpenVPN says incorrect password for (correct) saved password
I am connecting to an OpenVPN server hosted on a Synology NAS. Sometimes when I connect to the server I will get an incorrect password popup, even though the password is saved (and correct). In the ...
1
vote
0answers
254 views
FreeIPA - Login failed due to an unknown reason - SSL certificate: unable to get local issuer certificate
I believe my FreeIPA instance has a certificate issue, which manifests in the "Login failed due to an unknown reason" error on the web ui. This seems to be really close to the issue ...
0
votes
1answer
470 views
CA with intermediate certificate for vault
I want to setup Private CA for internal services using Vault (HashiCorp). I am generating Root CA & Intermediate CA certificate outside of Vault. Vault will be generating short-lived (30 days) ...
0
votes
0answers
34 views
Local Domain LDAP certificate
I'm really new to certificates, I had a windows server 2012 R2 we did an in-place upgrade from 2008 R2, lets call that ADServer. It was the AD DC and everything was fine. I bought new servers and ...
0
votes
0answers
54 views
Apache 2.4 forced Forbidden when client certificate fails
Our case we are migrating sites from Apache 2.2 to 2.4, and follow a lot tips of this documentation: https://httpd.apache.org/docs/2.4/upgrading.html
But still not working fine redirecting the users ...
0
votes
1answer
173 views
powershell signed script does not run in different domain
so I managed to sign a powershell script using this nice tutorial
https://www.darkoperator.com/blog/2013/3/5/powershell-basics-execution-policy-part-1.html
I have one script signed and it works fine ...
1
vote
1answer
21 views
Where to store service certificates and their associated private key?
I created a program that gets the Let’s Encrypt certificates for my services (web sites, dovecot and smtp).
I previously stored these service certificates in /etc/ssl/certs (I’m on Debian), and just ...
0
votes
1answer
56 views
Strongswan 5.7.x not sending intermediate certificate
I am attempting to use a letsencrypt certificate on my strong swan server; but I also see this behaviour with my own internal CA.
When trying to connect from a windows 10 host to a strong swan ...
