Questions tagged [certificate]
Certificates are a Public Key and Identifying Information
-2
votes
2answers
46 views
block Certificate authority server [closed]
is this possible to block a specific TLS CA(certificate authority) on network ?
for example block all certs that is issued by letsencrypt on my network
is there any ip or host name for blocking ?
0
votes
1answer
35 views
IIS Windows Authentication : IE not choosing the right certificate
I am trying to setup an intranet website (osTicket ticketing solution). I want my users to connect automatically to the website, so they don't have to fill their credentials. For this I have :
...
0
votes
0answers
23 views
Apache 2.4 won't start when SSLEngine on directive enabled on two Virtual Hosts
I have very strange issue with Apache today. This is RedHat 7.5 new server and we have same set up working just fine on the other RedHat server.
Here is the deal:
All I have is two SSL Virtual Hosts, ...
1
vote
1answer
52 views
ADFS Event 329 - Certificate Could Not Be Decrypted
Using MS scripts, I attempted a migration of an ADFS 2.0 configuration (on Windows 2008R2) to a new ADFS server (Windows 2016) server. I have warnings in my event log that seem to be linked, via the ...
0
votes
0answers
19 views
Prevent Smart Card prompt when looking for Enrollment Certificate
I'm using an Enrollment Agent user certificate to amend CSRs (in order to add SANs)
My method is working fine - using the following command:
certreq -config "CertAuth" -policy "PathtoCSR" "Path to ...
-3
votes
1answer
107 views
ESXi 6.5 web client mutual SSL authentication
Has anyone done it? Don't like the idea of relying exclusively on a user and password.
Thanks!
1
vote
1answer
19 views
How to know the origin of a certificate on a windows PC (Especially Win 10 embedded LTSB)
I have a specific type of problem but maybe someone have a hint for me:
We have some systems with special PCIe-Hardware for which we wrote and signed a driver. One certificate in the path of trust is ...
1
vote
0answers
20 views
certbot creates a certificate with “wwww” instead of a bare domain one - unlike before [duplicate]
I've been creating certificates this way for over a year:
export website="my_domain1111.com"
sudo certbot certonly --standalone -d $website -d www.$website --email hello@$website
and it's always ...
0
votes
1answer
104 views
letsencrypt certificate with windows / exchange server
I try to install and then renew Letsencrypt certificate with Exchange server for owa and activesync. Windows Server 2008 R2 with Exchange Server 2010. (Which will be upgraded to more recent version ...
2
votes
1answer
36 views
MAAS install CA to new machines
How could we add custom trusted Certificate Authority to the new deployed ubuntu 16.04 machines on MAAS v2.3 ?
is there a direct way to do that, or we have to perform custom installation nodes ?
2
votes
1answer
190 views
Cannot add a self signed certificate in Firefox
I need to set up an IIS webserver that will be accessed by a small, finite number of users. I was considering using a self-signed certificate only, and manually installing it on the user's systems.
...
0
votes
0answers
21 views
How to create self-signed certificate to sign Office macros
I need to create a self-signed certificate which I can use to sign different kind of Office macros (for Outlook, Excel etc.).
I must be able to use this certificate on all workstations in my domain, ...
2
votes
1answer
46 views
What is the use of SigningCertificate in AWS Cognito
I'm using AWS Cognito for my user authentication. I want to know the actual use of SigningCertificate in AWS cognito?
NOTE: We can get the SigningCertificate of AWS Cognito usign this ...
0
votes
0answers
12 views
Apache and Windows Certificate KeyStore?
Sorry in advance for the possibly stupid question...
Why does't Apache use the windows certificate keystore? It would make things a lot easier for compliance engineers like me who have to replace ...
3
votes
1answer
53 views
SSL client certification
OS: CentOS 7
SW: NginX
Existing stuff
dhparam.pem
mydomain.com.crt
mydomain.com.csr
mydomain.com.key
Issue:
I'm trying to create a client verification by creating client certificates and then ...
0
votes
1answer
39 views
List all client certificates installed on user profiles in a domain
I'm taking initial steps to start securing a network, and I've come across the fact that a number of machines have Client Certificates for websites installed in the user client certificate store, ...
0
votes
1answer
282 views
EMC VNX 5300 - How to access Control Station
We have an EMC VNX 5300 and the certificate has expired. I have already researched the instructions for viewing the certificate and regenerating a new one. The steps require accessing the Control ...
0
votes
1answer
122 views
Certbot and letsencrypt: after renewing my certificate has 2 weeks more of validity instead of 3 months
My letsencrypt certificate will expire soon. I ran "certbot" to renew it for the next 3 months:
$ sudo certbot certonly --standalone -d $website --email admin@$website
Saving debug log to /var/...
1
vote
1answer
78 views
Seeking ground truth on TLS certificates and MacOS - browser, curl, openssl compared
On a Mac, High Sierra 10.13.5, I'm seeing a difference in TLS certification validation. Chrome and Safari are happy with TLS validation when visiting https://www.visitflorida.com. Also, curl has no ...
0
votes
0answers
42 views
Extract public and private keys from JBOSS
Our sysadmin is requiring that I provide the with the public and private key for a standalone Jboss sever. I find a file "keystore" in
wildfly-10.1.0.Final/standalone/configuration
Using
[...
1
vote
0answers
31 views
BizTalk 2016 Server Administration - Instance of the WMI class is not found
I am brand new to BizTalk administration and trying to setup the certificate to use for AS2 communication, and running into some problems. The developer who built everything inside BizTalk did it ...
0
votes
1answer
84 views
Kube dns wont connect to the Kubernetes api process
Running kubernetes v1.10.0 amd kube-dns using the gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.14.8 container
When the kube-dns container starts it says this in the log:
I0610 06:47:06.051414 ...
0
votes
1answer
156 views
How to auto publish user certificate to GAL (Exchange 2016)?
I have set up a PKI infrastructure for my users, all is working fine : the CA, auto-enrollment, certificates published in AD and roaming mode enabled : everyone can log on any PC, automatically ...
1
vote
0answers
251 views
slapd won't start (due to missing certificate?)
I'm trying to setup a OpenLDAP server on a CentOS 7.5. Following this guide seemed to work very well until something went wrong (LDAP-password wasn't accepted any longer) due to a server crash. I ...
0
votes
0answers
88 views
How to hide/delete No SNI Certificate in Nginx?
I have 2 domains hi.com and hello.com using one IP 234.235.236.237
If I check domain hi.com in ssllabs.com I see 1 certificate, nice.
But, if I check domain hello.com in ssllabs.com I see 2 ...
0
votes
1answer
179 views
Git: server certificate verification failed using Bitbucket Server
I have a Bitbucket server running onprem with a certificate.
I added it to the keystore ussing the follwing commands
openssl pkcs12 -export -in myurl.com.cer -inkey myurl.com.key -out myurl.com.p12
...
0
votes
1answer
130 views
How to use rootcert.pem certificate with curl?
I have a file/certificate in next format rootcert.pem. How to use this certificate with curl ?
0
votes
0answers
76 views
NGINX - Extract Distinguished Name from a certificate inside a HTTP header
I have this Web infrastructure:
Clients ---> External Anti-DDOS service (reverse Proxy) ---> NGINX (Reverse Proxy) ---> PHP APP (Apache)
Clients are using 'client certificates' in this way:
1-Client ...
-1
votes
1answer
39 views
What's a quick/secure way to set up a valid https certificate for a NAS without domain control?
I'm operating several NAS devices on my employer's LAN. I do so with the employer's blessing, but I do not have control over the domain, and the devices are only available to a small working group on ...
0
votes
1answer
59 views
StrongswanPKI - Adding status_request or MustStaple TLS extension to certificate?
Using PKI tool from strongswan to setup a CA.
Trying to setup the OCSP side of things have run into many issues as per another thread I posted (Strongswan PKI - ED25519 Certifcates - OCSP Responder ...
0
votes
2answers
414 views
Handshake failure if URL path is specified
I'm trying to use a REST API over HTTPS but I'm getting a handshake failure only if I specify an URL path (not getting the error with the domain name only).
Following the instructions of the API ...
0
votes
1answer
34 views
HTTPS server certificate fails
Is there a way to check the certificate used for HTTPS for errors or problems in general? One of the websites I access is always shown by Chrome as Not Secure. To view the site I then have to click on ...
0
votes
1answer
68 views
Google Cloud ISO 27001, 27017, 27018 certificates have expired. Where can I get the new ones
I have a project hosted on Google Cloud Platform and as part of a security audit we found out that the certificates issued by EY CertifyPoint to Google for ISO 27001, ISO 27017 and ISO 27018 ...
google-cloud-platform
0
votes
1answer
26 views
Setting up DNS mask with forwarding through SSL
My setup is as follows:
User goes to subdomain.mainsite.org.uk.example
The site I want to be visible is www.site2.example, however they still have to see subdomain.mainsite.org.uk.example in the URL ...
0
votes
2answers
53 views
Why are my site certificates different on different machines?
I have 2 AWS CentOS machines behind a load balancer. They are both spun up from the same AMI image and they both have the same contents in the /etc/pki directories. They have the same Apache config ...
0
votes
0answers
245 views
How to get a client certificate chain during a certificate auth with Apache?
I'm trying to configure an Apache 2.4.29 server as an SSL terminating reverse proxy for my app. The proxy should request a client certificate during the SSL handshake and pass it to the app for ...
0
votes
0answers
185 views
Nginx 502 Bad Gateway after AWS Certificate Manager
I just got problem.
I just issued my domain using AWS Certificate Manager and a Load Balancer with Target Groups.
my following domain: curiosity.id
My domain is accessible through http:// or ...
0
votes
0answers
235 views
create bouncycastle keystore for certificate file
I use openssl command fetched my server certificate mycert.pem .
I downloaded the bouncycastle.jar . Now, I would like to use bouncycastle.jar to generate keystore file for my certficate in command ...
0
votes
1answer
189 views
When secure calling with asterisk (SRTP), why are client certificates needed for SIP devices?
I just added security to Asterisk by following this tutorial:
https://wiki.asterisk.org/wiki/display/AST/Secure+Calling+Tutorial#SecureCallingTutorial-Keys
Note that asterisk does not install by ...
0
votes
0answers
48 views
get SHA256 has of certificate chain of my certificate
I got my server certificate mycert.pem by command:
cho -n | openssl s_client -connect <my.server.hostname> | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > mycert.pem.
I would like ...
0
votes
0answers
72 views
Fails to read certfile/keyfile when run as SYSTEMD
EDIT:
I wrote a python script that starts mosquitto client with TLS options ON. All worked fine when I run it from command line (w/o sudo). Now it broke after re-installing some packages.
However, I ...
0
votes
1answer
144 views
How Windows check radius server certificate?
How Windows check radius server certificate (for wifi connections)? Does it look only on CN field from radius server certificate and not look at Subject Alternative Name field altogether?
I did some ...
2
votes
1answer
48 views
Active Directory: LDAP over SSL between two Domains
Might be a silly question, but I don't wanna risk messing up a working system.
We have two separate Active Directories, let's say "example.local" and "example.com". There's a trust between the two, ...
0
votes
0answers
27 views
how to know if browser rejected SSL certificate
I am using Root CA generated SSL certificate to setup a SSL connection for HAProxy which connects to a web server that only support http. When the browser connects there is a invalid certificate error ...
0
votes
1answer
77 views
Allow using specific certificates only when connecting from specific hosts
I set up my VPN users using certificates. The certificates are unique for every user, but they can be used on every PC.
Is there a way to restrict a certificate to a computer, e. g. based on its mac ...
0
votes
1answer
471 views
Godaddy Codesigning Certificate Convert spc to PFX
I have used this link to create a CSR for GoDaddy code signing (done in Linux environment though)
I got the spc file from Goddady
Followed their documentation
Creating the pfx file as per their ...
0
votes
0answers
234 views
How to fix error in process of generation of let's encrypt cert
I have A-record on my server:
192.0.2.4 - my external ip (of course this is a example);
master.example.org - A-record for this ip address
Command:
certbot certonly --webroot --agree-tos --email ...
0
votes
1answer
359 views
What's “COMODO DCV” is looking for on my server?
Setup:
Apache 2.4
Webmin/Virtualmin
I'm getting my SSL certificate with Let's encrypt, using also auto renewal.
Several hosts with SSL certificate has been created but delete since several months(~...
1
vote
1answer
192 views
Certificate not showing up in certmgr
Through powershell Cert:\LocalMachine\My certificate store I do see the certificate but through Certificate Manager certmgr.msc I do not see it any where. How do i make it appear there or in IIS ...
0
votes
2answers
66 views
which GPO will put a certificate in to the localmachine\personal?
I have a wildcard certificate used mostly for IIS websites. I would like to install the certificate via GPO. Not necessarily change IIS to use the certificate, but at least get it installed in to the ...
