Questions tagged [certificate]

Certificates are a Public Key and Identifying Information

Filter by
Sorted by
Tagged with
0 votes
0 answers
26 views

Windows 10 computer certificate deleted and not issued again after gpupdate /f

I deleted the local computer certificate from: MMC>Certificate>ComputerAccount>Local Computer To test if my network lab is working and the network authentication fallback on the MAB from the ...
0 votes
0 answers
29 views

Bypassing CERT_HAS_EXPIRED leads to 401 Unauthorized

In our Next.js app, axios requests work in client components (using useEffect) but fail with a CERT_HAS_EXPIRED error from server components. As a workaround in development, we run ...
43 votes
2 answers
13k views

Is it possible to restrict the use of a root certificate to a domain

My customer uses a self signed certificate for an application to work. To be able to work, I have to install the root certificate they used to sign the certificate. Is it possible to configure a root ...
0 votes
0 answers
31 views

Spire deployment on kubernetes and certificate retrieval

I am currently trying to deploy spire on my k8s cluster (3 worker nodes). My objective is to successfully deploy spire and use the certificates generated by the spire-server to encrypt the exchanges ...
0 votes
0 answers
71 views

curl: (60) SSL: unable to obtain common name from peer certificate

I'm trying to create self-signed certificates for my webserver but it's not going well. The title is the error message curl gives me when I run curl --noproxy "*" https://example.com (with ...
0 votes
1 answer
8k views

Why do i get openssl error unknown option for -adext?

I am attempting to generate CSR using openssl with subject alternative names however i get an error stating no options for adext. See command below.. I am using OpenSSL 1.0.2k-fips openssl req -new \ -...
0 votes
2 answers
8k views

How to convert .cer and .key file to .pem?

I have a .cer certificate, .key file and I would like to convert it to the .pem format. How do I convert them to .pem?
0 votes
2 answers
42 views

OpenVPN - Properly sharing keys/certificates

I enabled OpenVPN on the router at work so that we can connect to different devices like our NAS and RDP into the computers there without opening those ports to the internet. One cause of concern that ...
0 votes
1 answer
195 views

How to modify the command line used to renew a certificate using WACS

I have been using Let's Encrypt certificates for some of my domains/servers for a while, using the win-acme client for Windows for the generation and renewal. My problem is: every renewal I have to ...
1 vote
2 answers
100 views

Certificate chains on server and client

I have OpenSSL Certificate Authority, and I have generated Root certificate (self-signed), Intermediate certificate (signed by Root certificate), Server certificate (signed by Intermediate certificate)...
0 votes
2 answers
67 views

GPO Wireless Settings - Trusted Root CA

We pushed SSID configuration by GPO. Computer configuration > Policies > Security Settings > Wireless Network Policies. In these settings we enabled certificate authentication, however the ...
0 votes
0 answers
228 views

Issuing Certificate For Child Domain After Issuing One From Parent From Same CA

I am trying it issue a certificate as part of my Enrollment ability for a 2FA device for our child domain from our parent domain. I was able to do this months ago but now it won't let me do the child ...
0 votes
0 answers
35 views

How to add certificates to an existing PKCS#7 bundle (p7b) file?

I have a PKCS#7 bundle (p7b file) that holds many public S/MIME certificates, and I need two more certificates in the bundle. Is there a way to add these certificates using openssl (or possibly ...
2 votes
1 answer
12k views

Still suffering from Windows NPS May 2022 Certficate Update

in May 2022 Microsoft changed the way that client certificates are mapped to AD accounts, causing 802.1X EAP-TLS computer account authentication to stop working. Here is an additional resource with ...
0 votes
1 answer
118 views

VPS https and redirect for domain

I recently bought a vps ( apache + ubuntu) and created ssl-certificates for my domain by using acme.sh --issue --dns -d example.com -d www.example.com and got them. But for my domain I want https to ...
0 votes
1 answer
121 views

Windows hello for business: remove certificate from virtual smartcard

I've managed to add a certificate to windows hello for signin to RDP. See: https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/rdp-sign-in?tabs=intune However ...
0 votes
1 answer
544 views

Unauthorized error when trying to get a ssl certificate with certbot

I recently bought a domain, hosting and a Ubuntu 22.04 vps, all on godaddy. The domain and hosting work, I can access the site by typing the url in. But when I try to get a ssl certificate with ...
4 votes
2 answers
14k views

How to set up an SSL Cert with Subject Alternative Name

To test a specific embedded client, I need to set up a web server serving a couple of SSL (HTTPS) sites, say "main.mysite.com" and "alternate.mysite.com". These should be handled ...
0 votes
0 answers
37 views

FreeRadius EAP-TLS Auth using Email Address

We have a requirement to authenticate devices to WIFI using the user's email address stored in AD. The devices are enrolled into InTune and the only shared piece of information is the email address. ...
0 votes
1 answer
58 views

Path #2: Not trusted in SSLLabs domain check

First and foremost I want to apologize, because I am really an amateur in networking. I tried to run a SSLLabs check on a web domain my company owns. The overall rating is "A" and everything ...
9 votes
3 answers
31k views

NGINX SSL: error:0200100D:system library:fopen:Permission denied

I have been stuck on this for ages and I'm hoping someone can offer some advice. Trying to install a new SSL certificate on a site. On running nginx -t i get the following error: nginx: [emerg] ...
4 votes
2 answers
14k views

Export certificate after approving pending request standalone CA

I have submitted a certificate request to my windows standalone-Certification Authority(CA). I already issued the certificate by approving the pending request, but I don't know how to export the .cer ...
0 votes
0 answers
30 views

ssh-certificate LDAP schema existence?

Hello. I'm looking for an LDAP schema to make it possible to publish my ssh-certificates into user/host LDAP nodes. Is there any common one?
0 votes
1 answer
281 views

How to assign certificate to IMAP/S and SMTP/S in Exchange 2016?

Please advise me because I pull all my hair out. I have Exchange 2016 and I want to assign one officially signed-off certificate to the IMAP/S port 993/tcp and SMTP/S port 465/tcp . I went through ...
11 votes
1 answer
5k views

certutil -ping fails with 30 seconds timeout - what to do?

The certificate store on my Win7 box is constantly hanging. Observe: C:\>1.cmd C:\>certutil -? | findstr /i ping -ping -- Ping Active Directory Certificate Services Request interface ...
1 vote
1 answer
6k views

How can I add a certificate to a Windows service's certificate store from the command line?

I want to add a certificate to the certificate store belonging to a Windows service, from the command line. So far, the only thing I've found is: certutil -service -store ADAM_Instance-Name\My When ...
4 votes
2 answers
7k views

Configuring client certificates on IIS8 - Error 403.16

I am trying to implement client certificate authentication on IIS 8. I have deployed my configuration on a development machine and verified it working as expected there. However after setting up on ...
0 votes
0 answers
97 views

StrongSwan IPSec VPN - IKEv2 - LetsEncrypt Certificate Issue (building CRED_PRIVATE_KEY - RSA failed, tried 10 builders)

I followed the link below for setup IKEv2 VPN Using Strongswan and Let's encrypt on CentOS 7. How to Setup IKEv2 VPN Using Strongswan and Let's encrypt on CentOS 7 But info on that link has been ...
0 votes
1 answer
5k views

Associate SSL certificate for SQL Server which does not use the FQDN

We would like to connect securely to SQL 2008 R2 over the internet for reporting purposes. Speed is not a huge concern for these smaller data sets, and users are going to be using simple reporting ...
0 votes
1 answer
64 views

TLS Server Hello message has incorrect Certificate information

I am using a self-signed certificate for my forest created by Microsoft CA. All DC's are auto-enrolled and receive the correct certificate from the CA and LDAPS connections can be established using ...
0 votes
0 answers
392 views

Verify return code: 21 unable to verify the first certificate

I'm encountering an issue on my Ubuntu server when attempting to establish an email connection from the frontend application. The error message I receive reads: "Verify return code: 21 unable to ...
0 votes
2 answers
72 views

How do I list all existing open vpn certificates

I need to know how to view existing certificates in OpenVPN, the internal documentation passed me (written by a past employer) contains creating, removing, retrieving and revoking user, see below /etc/...
0 votes
1 answer
396 views

Docker- Giving Container access to Host's CA certs

I was wondering security wise if there was anything wrong with volume mounting the host's ca certs into a container. I.e, docker run \ -v /usr/local/share/ca-certificates:/usr/local/share/ca-...
0 votes
0 answers
38 views

Generating certificate with subjectUniqueID field

I would like to generate a certificate with the subjectUniqueID field as indicated in rfc5280( https://www.rfc-editor.org/rfc/rfc5280#section-4).I have tried this: openssl req -config myConfigFile....
2 votes
1 answer
4k views

How to get a client certificate chain during a certificate auth with Apache?

I'm trying to configure an Apache 2.4.29 server as an SSL terminating reverse proxy for my app. The proxy should request a client certificate during the SSL handshake and pass it to the app for ...
0 votes
1 answer
42 views

Single domain, two webservers running on different ports, two different SSL issuers possible?

Short, Can a domain have multiple SSL issuers installed on different servers ? Long , I have a domain. example.com Its running on two different servers , two different websites, two different ports , ...
5 votes
6 answers
8k views

How to give a user access to the Certificate Store on Windows Server 2012?

I've battling an issue for the last couple of days that I cannot seem to resolve. I'm not an administrator although I have some knowledge about some administrative tasks. I have a PowerShell script ...
0 votes
1 answer
738 views

Use openssl 3 to create a self-signed certificate just like what "New-SelfSignedCertificate" can

First of all, I did googling about openssl, such as this one, and also tried dozens of time on creating a valid self-signed certificate. But I guess asking on serverfault would be much quicker. My ...
0 votes
2 answers
5k views

Exchange 2013 ECP ,Redirect loop with wildcard cert

Recently we were unable to log into ECP, after successful login we a re redirected to de login prompt, on our two Exchange servers and no configuration change were made, we are using a wildcart cert ...
0 votes
1 answer
411 views

AH02565: Certificate and private key from <cert> and <private key> do not match

I'm trying to update some expired SSL certificates internally on some Ubuntu and Redhat servers. I have an internal certificate authority for this (ADCS). These are the steps I'm taking: Generate CSR ...
1 vote
2 answers
518 views

Local Machine certificate (certlm.msc) - choosing "Microsoft Software Key Storage Provider" on import

When importing a device certificate/private key through CERTLM, the GUI seems to choose a deprecated Cryptography Service Provider (CSP) called "Microsoft Strong Cryptographic Provider"; I'm ...
2 votes
1 answer
388 views

Exporting a PFX file for Smartcard authentication driver issues

I have a ACR122 Smartcard reader I am attempting to export a PFX certificate to for password-less authentication. I have everything set up on the active directory server, but am stuck on the simplest ...
1 vote
1 answer
428 views

Error: The issuer of this certificate could not be found for AD issued Code Signing Certificate

Problem I've created a certificate through AD certificate services, but it has the error "The issuer of this certificate could not be found." despite the full chain being present in the PFX. ...
0 votes
1 answer
233 views

Why is certificate request invalid from Exchange 2019?

I am creating a cert request in powershell on an exchange 2019 server as follows: $binrequest = New-ExchangeCertificate -Server "exchange" -BinaryEncoded -GenerateRequest -FriendlyName "...
1 vote
1 answer
130 views

openssl ignores intermediate certificate in pkcs12 file

After creating a new S/MIME certificate, I am stuck with creating a valid PKCS #12 file that is accepted by most mail clients: $ openssl verify smime.pfx CN = [email protected], emailAddress = mail@...
0 votes
1 answer
984 views

How to extract CA Certificate from .pfx file and add it to a trust store file

I have a .pfx file that has multiple certificates, one of them is the signing CA certificate of a server certificate assigned to the IBM i Remote Command Server in DCM. I managed to use openssl and ...
1 vote
0 answers
204 views

Windows CA Publishing Expired Certs in CRL When not configured to do so

I have a Windows ADDS CA that for some reason is publishing revoked but expired certificates in the CRL and I can't for the life of me figure out why. Here is my configuration: Server 2012 R2 ...
6 votes
1 answer
42k views

How to renew VMware certificate in Veeam

I had to reinstall the vcenter appliance. Since that the Veeam backupjobs fail with the error: Task failed error: The remote certificate is invalid according to the validation procedure Presumably ...
1 vote
1 answer
369 views

Bluehost - wrong certificate presented by host for API call to Twilio

Bluehost VPS running CentOS, but cat /etc/redhat-release reveals CloudLinux release 6.10 (Final). Executing curl commands against Twilio APIs on my local PC (Win11/IIS/PHP) works fine. When I attempt ...
0 votes
1 answer
138 views

Microsoft Certificate Authority Machine Template - add single label host name to SAN

I would like to create a machine certificate template on a Microsoft Certificate Authority that includes the single label Active Directory (AD) Computer Names in the SAN. I have tens of thousands of ...

1
2 3 4 5
28