Questions tagged [certificate]
Certificates are a Public Key and Identifying Information
1,315
questions
0
votes
0
answers
9
views
"PTY allocation request failed on channel 0" with CertificateFile
I have a problem with TTY allocation when I try to connect via ssh with trusted certificate containing public key.
If I perform classic ssh access with the user, e.g. ssh -i test-key-for-vault -o ...
- 1
0
votes
0
answers
12
views
Failed verifying certificate revocation for Enterprise certificate from non-domain computer
We have a typical offline root and issuing intermediate CA Enterprise environment.
My problem is very similar to the one found here:
Certificate revocation check fails for non-domain guest in spite of ...
- 1
0
votes
0
answers
17
views
CA root and CA subordinate administrator
I want to deploy a new PKI infrastructure on a domain that has several subdomains and trusted domains.
I would like to be able to delegate the administration between several administrators ...
- 11
0
votes
0
answers
12
views
Can't connect to WebSocket server over wss:// (ws:// works), and no debug information
I have a website on example.com, and a WebSocket server on example-websocket-server.com.
Each have an SSL certificate so that I can access them from https://
I am using the websocket server as a ...
- 103
0
votes
0
answers
22
views
LDAPS, Certificate Authority, and Domain Controllers
I have a domain environment with 4 2012 Domain Controllers that I am working on replacing with 4 new 2022 domain controllers. I have some questions regarding how the CA works when issuing certificates ...
- 101
0
votes
1
answer
26
views
Can I set my own SSL certificate via .htaccess file in a shared web server?
I am hosted in a shared web (apache) server in a subdomain. I don't have access to any panel, only sshfs.
The problem is that the host (lazy), does not issues / uses SSL certificates.
I issued my own (...
- 3
0
votes
0
answers
51
views
How to sign a certificate for s/mime and generate pkcs12 store with existing CA?
I want to create a certificate store file in pkcs12 format to use in thunderbird for s/mime signing and encrypting. I already run a mail and web server that use certificates signed by a CA certificate ...
- 136
0
votes
0
answers
36
views
Certificates issue during RADIUS authentication using NPS server with PEAP MSCHAPv2
I am using NPS as a RADIUS server to authenticate some devices using PEAP MSCHAPv2.
I have an issue during the server authentication, I am using a chain of trust certificates, with 1 server cert, 1 ...
0
votes
2
answers
32
views
IIS https certificates
I’m migrating the c# web applications and data apis I've developed that are hosted on IIS to use http to use SSL / TSL (https).
I have not setup certificates with https before and was wondering if it’...
- 13
1
vote
0
answers
34
views
CentOS 7, Integrating SAMBA server with LDAP server to authenticate users through LDAP
I spent many hours trying to solve my problem, but unfortunately to no avail.
Im configuring SAMBA server on CentOS 7. I want to fetch users' credentials from LDAP server, so they will be able to ...
- 11
0
votes
2
answers
84
views
Can I make strongSwan accept any certificate as long as it is only signed by a specific CA?
Using a swanctl config, is there a way to make strongSwan accept any certificate for an IKEv2 connection as long as it is signed by a specific CA? What I mean is, without having to install the public ...
- 869
2
votes
1
answer
68
views
Exporting a PFX file for Smartcard authentication driver issues
I have a ACR122 Smartcard reader I am attempting to export a PFX certificate to for password-less authentication. I have everything set up on the active directory server, but am stuck on the simplest ...
- 23
0
votes
2
answers
63
views
With multiple RDP certificates, do all get checked?
If a Windows host has multiple RDP certificates. Do all get checked while connecting or only the first found?
I have a RDP certificates deployed from an Root CA with now invalid OCSP location in the ...
- 83
0
votes
1
answer
32
views
RRAS VPN using Wrong Server Authentication Cert
I've got a RRAS VPN setup using IKEv2 and certs issued by the domain's CA. It has a cert for the public domain and I know this is getting presented to the client.
How ever it seems that either the ...
- 513
0
votes
1
answer
89
views
Ever since changing to Windows 11 we have some workstations that now and then try to connect via smart card, but we don't use smart cards
Ever since changing to Windows 11 we have some workstations that now and then try to connect via smart card, but we don't use smart cards.
The event occurs with the computer's account, not a user's ...
- 1
0
votes
1
answer
35
views
Redirecting subdomain to another domain
I have a subdomain, sub.domain1.com. I want to redirect this to domain2.com.
The result is a security exception because the certificate on domain2.com doesn't include sub.domain1.com.
How does one ...
- 101
8
votes
2
answers
463
views
SAN certificate with URI fragment
I need to generate a TLS certificate with a SAN URI where the URI has a fragment (has a hash '#'). But when I try to generate a certificate using openssl, the fragment gets stripped.
# generate key ...
- 205
-2
votes
1
answer
122
views
How to discover HTTPS servers on local network with certificate for particular hostname
I am making a network-connected device (using Raspberry Pi 4 inside), and I would like a way for these devices to discover each other (when on the same local subnet). I am vaguely aware of protocols ...
- 132
0
votes
1
answer
59
views
NetApp: Cannot import private key from an external CA
Using the ONTAP System Manager, I'm trying to add a certificate according to the docs. Unfortunately, whenever I try to import the private key file, I get the following error:
No valid private keys ...
- 556
0
votes
1
answer
39
views
NetApp ONTAP certificate expiry_time format
I want to configure an expiration period of 5 years for a root CA certificate on NetApp ONTAP via its API.
The expiry_time is documented like this:
expiry_time
Certificate expiration time. Can be ...
- 556
0
votes
1
answer
348
views
Error when importing certificate via PowerShell to Local Certificate Store. Missing PrivateKey Information
I have have tried the following ways to import a certificate to the localmachine store via PowerShell. The console was running as administrator.
Import-PfxCertificate -Exportable -Password (secure....
- 180
1
vote
1
answer
166
views
Error message "The format of the file is invalid" when attempting to import certificate on HP printer
On some HP printers, when I try to import a certificate to enable HTTPS for the printer's Embedded Web Server (EWS), I get the error message "The format of the file is invalid". This happens ...
- 3,975
0
votes
0
answers
202
views
How to import a PFX certificate to LocalMachine/Personal via GPO
I would like to deploy P12 certificate (for OpenVPN) to Windws Certificate Store, to be more precise to LocalMachine\Personal. The reason is the certificate will be protected at least by local admin ...
- 1
0
votes
1
answer
39
views
Can we add a subordinate enterprise certificate authority linked to an existing enterprise Root certificate authority
The Root CA is domain joined.
The Sub CA will be domain joined.
The Sub CA will deliver workstation Authentification (template) to PC clients via GPO.
Is there any known issue with this configuration?
...
- 3
0
votes
2
answers
50
views
Can a CA generate a signed certificate for a host in to a top-level domain not under the CA's control?
Background
I need to replace an existing certificate on a host named h1.vx.mydomain.net (not the real domain obviously).
The existing certificate says it was issued by a chain of CAs that I do not ...
- 257
0
votes
1
answer
218
views
Are wildcard certificates allowed for a top-level domain
Curl returns curl: (60) SSL: no alternative certificate subject name matches target host name 'elasticsearch-0.elasticsearch' even if SAN clearly stands DNS:elasticsearch, DNS:*.elasticsearch
...
- 173
0
votes
0
answers
58
views
Client side certificate cannot be installed on Apple ios. Error-"The authenticity of "cloudflare" cannot be verified"
We use client side Cloudflare certificate to allow or disallow access to our site since the site is meant to be used by a small group of users who are provided a Cloudflare client certificate.
Our ...
1
vote
1
answer
4k
views
Still suffering from Windows NPS May 2022 Certficate Update
in May 2022 Microsoft changed the way that client certificates are mapped to AD accounts, causing 802.1X EAP-TLS computer account authentication to stop working.
Here is an additional resource with ...
- 171
0
votes
0
answers
135
views
How do i manage my client certificates on google cloud platform?
I have built a https server on google cloud platform. This can now be visited by anyone, I wanted to avoid this by using client certificates.
So with this the question is how do I get a client.cert ...
google-cloud-platform
Christoph Sanders
0
votes
1
answer
97
views
DNS records could not be found. Certificate activation will retry automatically
Our website is down and it is showing certificate is expired. When I check the custom domain settings section in GCP, I am getting the following warning.
We have removed the records and re-added them, ...
0
votes
0
answers
16
views
Questions about kubeproxy authentication
When I was binary deploying kubernetes, I found that kubelet can automatically issue certificates using TLS BootStrap.
The TLS Bootstrap method I checked the relevant information and said that if ...
0
votes
1
answer
2k
views
How to convert .cer and .key file to .pem?
I have a .cer certificate, .key file and I would like to convert it to the .pem format.
How do I convert them to .pem?
2
votes
2
answers
252
views
create a self-signed certificate for a subdomain, the main domain does not belong to me
I have my internet box provider who offers me a free subdomain to connect to my network, ex: xxxxx.provider.com
I have generated a self-signed certificate for the subdomain foo.provider.com
I tried to ...
-2
votes
1
answer
222
views
Can I create an SSL Certificate to a domain that redirects to other domain servers?
I hope you could help me with this one.
Here is the case:
I have a domain in ZoneEdit name dummysite.org.
This domain has the following A records:
HOST
IP ADDRESS
TTL
@.dummysite.org
193.10.xx.xx
...
1
vote
2
answers
131
views
What is the best practice to handle expiring S/MIME mail certificates
where can I find info regarding the proper way to handle expiring mail certificates?
Here's the problem: our certificates for digitally signing mails expire after a year. If, a week before expiry, I ...
0
votes
1
answer
211
views
ADCS WebServer Autoenrollment best practise
As in any IT environment, the number of web server certificates is constantly increasing. With the reduction of the duration to 1 year, the administration effort increases at the same time if such ...
- 87
0
votes
0
answers
489
views
kubernetes kubectl Undo --insecure-skip-tls-verify to enable TLS Verification once again after it has been disabled
For testing purposes I have disabled tls verification for my cluster by typing:
$ kubectl get nodes --insecure-skip-tls-verify
This was done to temporarily fix a problem with an invalid certificate.
...
- 11
-1
votes
2
answers
200
views
SSL certificate
I have root and intermediate certificate, and I need to create the certificate which I need to install on RADIUS server. However, I don't have clear idea in my head about this. Here are my questions:
...
- 99
0
votes
0
answers
2k
views
How do I deal with "Some challenges have failed" in certbot?
I am trying to request a TLS certificate using Certbot (source: https://certbot.eff.org/instructions) with sudo certbot --nginx. It is supposed to be for a docker registry used as a pull through cache ...
- 101
1
vote
1
answer
650
views
OpenVPN - Can client certificates and keys be created if you only have ca.crt
All servers are debian 9 linux. I have 200 servers with openvpn installed, each with three to four clients (tunnel 2)
clients ---> server1 (1 of 200) (also client for jumpserver) ---> jumpserver ...
- 73
0
votes
0
answers
209
views
Is it possible to generate a new self-signed certificate from an existing private key with powershell?
New-SelfSignedCertificate -ExistingKey "c:\cts_privkey.pem" -Container localhost -Provider "Microsoft Enhanced RSA and AES cryptographic Provider" -DnsName "example.com" -...
- 101
0
votes
0
answers
147
views
Certbot and changing the subdomain name
We had the domain nextcloud.example.com and issued the certificate for the apache2 server for this domain:
certbot --apache -d **nextcloud.example.com**
and got additional file nextcloud-le-ssl.conf ...
- 113
1
vote
0
answers
2k
views
How to convert SSL certificate to PFX if the certificate does not allow private key export
I have an SSL certificate that I need to convert to PFX file.
I have the following info
.crt file
.pem file
.p7b file
The CSR and the Private key.
I tried to follow the direction listed here which ...
- 111
0
votes
1
answer
158
views
Why is my Windows 11 host sending connection reset packets to AWX using certificate authentication?
Here is what I have done so far.
Installed AWX 2.9 using docker on CentOS.
Successfully managing Windows nodes (8,10) through AWX and WinRM using certificate authentication. (No problem here)
...
1
vote
0
answers
115
views
CA Certificate files get randomly updated
Is there some automated process that periodically updates the modify time on CA Certificates? Our File Integrity Manager is alerting on files beneath /etc/certs/. How are those files maintained? ...
- 13
-1
votes
1
answer
369
views
Cant Enroll/renew Certificate : Server 2008R2 as client ans Server 2019 as CA
I have an issue with all my 2008R2 servers, they can no longer enroll/renew certificates.
It works with windows 10 and server 2012 R2 as client.
Error is RPC not available.
From Event Viewer
L’...
- 145
0
votes
1
answer
182
views
How can I create a self-signed certificate that works with the browser?
I have been trying to create a self-signed certificate. The Firefox browser says the certificate is "not secure."
I created the certificate following this SO explaination: Is it possible to ...
- 101
0
votes
0
answers
73
views
Update Oracle java 8 cacerts in ubuntu
I have an old ubuntu ec2-classic machine (v. 14.04) on which a critical application (under migration process) is running.
I need to update the certs at /usr/lib/jvm/java-8-oracle/jre/lib/security ...
- 3
0
votes
0
answers
55
views
Pin additional data (including a Verifiable Credential) to a x509 certificate
I am new to working with x509 certificates and I have a question (perhaps dumb) about pinning additional data to it. I want to send some important data to a service.
The data payload includes
x509 ...
- 111
0
votes
0
answers
34
views
Where are docker server certificates stored on Linux
One of the boxes in my Azure account is giving me the following cirtial security warnings
But where do I find the Docker server certificates on RHEL?
- 215