Questions tagged [certificate]
Certificates are a Public Key and Identifying Information
1,370
questions
0
votes
0
answers
26
views
Windows 10 computer certificate deleted and not issued again after gpupdate /f
I deleted the local computer certificate from:
MMC>Certificate>ComputerAccount>Local Computer
To test if my network lab is working and the network authentication fallback on the MAB from the ...
0
votes
0
answers
29
views
Bypassing CERT_HAS_EXPIRED leads to 401 Unauthorized
In our Next.js app, axios requests work in client components (using useEffect) but fail with a CERT_HAS_EXPIRED error from server components. As a workaround in development, we run ...
43
votes
2
answers
13k
views
Is it possible to restrict the use of a root certificate to a domain
My customer uses a self signed certificate for an application to work. To be able to work, I have to install the root certificate they used to sign the certificate.
Is it possible to configure a root ...
0
votes
0
answers
31
views
Spire deployment on kubernetes and certificate retrieval
I am currently trying to deploy spire on my k8s cluster (3 worker nodes). My objective is to successfully deploy spire and use the certificates generated by the spire-server to encrypt the exchanges ...
0
votes
0
answers
71
views
curl: (60) SSL: unable to obtain common name from peer certificate
I'm trying to create self-signed certificates for my webserver but it's not going well. The title is the error message curl gives me when I run
curl --noproxy "*" https://example.com
(with ...
0
votes
1
answer
8k
views
Why do i get openssl error unknown option for -adext?
I am attempting to generate CSR using openssl with subject alternative names however i get an error stating no options for adext. See command below.. I am using OpenSSL 1.0.2k-fips
openssl req -new \
-...
0
votes
2
answers
8k
views
How to convert .cer and .key file to .pem?
I have a .cer certificate, .key file and I would like to convert it to the .pem format.
How do I convert them to .pem?
0
votes
2
answers
42
views
OpenVPN - Properly sharing keys/certificates
I enabled OpenVPN on the router at work so that we can connect to different devices like our NAS and RDP into the computers there without opening those ports to the internet.
One cause of concern that ...
0
votes
1
answer
195
views
How to modify the command line used to renew a certificate using WACS
I have been using Let's Encrypt certificates for some of my domains/servers for a while, using the win-acme client for Windows for the generation and renewal.
My problem is: every renewal I have to ...
1
vote
2
answers
100
views
Certificate chains on server and client
I have OpenSSL Certificate Authority, and I have generated Root certificate (self-signed), Intermediate certificate (signed by Root certificate), Server certificate (signed by Intermediate certificate)...
0
votes
2
answers
67
views
GPO Wireless Settings - Trusted Root CA
We pushed SSID configuration by GPO. Computer configuration > Policies > Security Settings > Wireless Network Policies.
In these settings we enabled certificate authentication, however the ...
0
votes
0
answers
228
views
Issuing Certificate For Child Domain After Issuing One From Parent From Same CA
I am trying it issue a certificate as part of my Enrollment ability for a 2FA device for our child domain from our parent domain. I was able to do this months ago but now it won't let me do the child ...
0
votes
0
answers
35
views
How to add certificates to an existing PKCS#7 bundle (p7b) file?
I have a PKCS#7 bundle (p7b file) that holds many public S/MIME certificates, and I need two more certificates in the bundle.
Is there a way to add these certificates using openssl (or possibly ...
2
votes
1
answer
12k
views
Still suffering from Windows NPS May 2022 Certficate Update
in May 2022 Microsoft changed the way that client certificates are mapped to AD accounts, causing 802.1X EAP-TLS computer account authentication to stop working.
Here is an additional resource with ...
0
votes
1
answer
118
views
VPS https and redirect for domain
I recently bought a vps ( apache + ubuntu) and created ssl-certificates for my domain by using acme.sh --issue --dns -d example.com -d www.example.com and got them. But for my domain I want https to ...
0
votes
1
answer
121
views
Windows hello for business: remove certificate from virtual smartcard
I've managed to add a certificate to windows hello for signin to RDP.
See: https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/rdp-sign-in?tabs=intune
However ...
0
votes
1
answer
544
views
Unauthorized error when trying to get a ssl certificate with certbot
I recently bought a domain, hosting and a Ubuntu 22.04 vps, all on godaddy.
The domain and hosting work, I can access the site by typing the url in.
But when I try to get a ssl certificate with ...
4
votes
2
answers
14k
views
How to set up an SSL Cert with Subject Alternative Name
To test a specific embedded client, I need to set up a web server serving a couple of SSL (HTTPS) sites, say "main.mysite.com" and "alternate.mysite.com". These should be handled ...
0
votes
0
answers
37
views
FreeRadius EAP-TLS Auth using Email Address
We have a requirement to authenticate devices to WIFI using the user's email address stored in AD. The devices are enrolled into InTune and the only shared piece of information is the email address.
...
0
votes
1
answer
58
views
Path #2: Not trusted in SSLLabs domain check
First and foremost I want to apologize, because I am really an amateur in networking. I tried to run a SSLLabs check on a web domain my company owns. The overall rating is "A" and everything ...
9
votes
3
answers
31k
views
NGINX SSL: error:0200100D:system library:fopen:Permission denied
I have been stuck on this for ages and I'm hoping someone can offer some advice.
Trying to install a new SSL certificate on a site. On running nginx -t i get the following error:
nginx: [emerg] ...
4
votes
2
answers
14k
views
Export certificate after approving pending request standalone CA
I have submitted a certificate request to my windows standalone-Certification Authority(CA). I already issued the certificate by approving the pending request, but I don't know how to export the .cer ...
0
votes
0
answers
30
views
ssh-certificate LDAP schema existence?
Hello.
I'm looking for an LDAP schema to make it possible to publish my ssh-certificates into user/host LDAP nodes.
Is there any common one?
0
votes
1
answer
281
views
How to assign certificate to IMAP/S and SMTP/S in Exchange 2016?
Please advise me because I pull all my hair out.
I have Exchange 2016 and I want to assign one officially signed-off certificate to the IMAP/S port 993/tcp and SMTP/S port 465/tcp .
I went through ...
11
votes
1
answer
5k
views
certutil -ping fails with 30 seconds timeout - what to do?
The certificate store on my Win7 box is constantly hanging. Observe:
C:\>1.cmd
C:\>certutil -? | findstr /i ping
-ping -- Ping Active Directory Certificate Services Request interface
...
1
vote
1
answer
6k
views
How can I add a certificate to a Windows service's certificate store from the command line?
I want to add a certificate to the certificate store belonging to a Windows service, from the command line. So far, the only thing I've found is:
certutil -service -store ADAM_Instance-Name\My
When ...
4
votes
2
answers
7k
views
Configuring client certificates on IIS8 - Error 403.16
I am trying to implement client certificate authentication on IIS 8. I have deployed my configuration on a development machine and verified it working as expected there. However after setting up on ...
0
votes
0
answers
97
views
StrongSwan IPSec VPN - IKEv2 - LetsEncrypt Certificate Issue (building CRED_PRIVATE_KEY - RSA failed, tried 10 builders)
I followed the link below for setup IKEv2 VPN Using Strongswan and Let's encrypt on CentOS 7.
How to Setup IKEv2 VPN Using Strongswan and Let's encrypt on CentOS 7
But info on that link has been ...
0
votes
1
answer
5k
views
Associate SSL certificate for SQL Server which does not use the FQDN
We would like to connect securely to SQL 2008 R2 over the internet for reporting purposes. Speed is not a huge concern for these smaller data sets, and users are going to be using simple reporting ...
0
votes
1
answer
64
views
TLS Server Hello message has incorrect Certificate information
I am using a self-signed certificate for my forest created by Microsoft CA. All DC's are auto-enrolled and receive the correct certificate from the CA and LDAPS connections can be established using ...
0
votes
0
answers
392
views
Verify return code: 21 unable to verify the first certificate
I'm encountering an issue on my Ubuntu server when attempting to establish an email connection from the frontend application. The error message I receive reads: "Verify return code: 21 unable to ...
0
votes
2
answers
72
views
How do I list all existing open vpn certificates
I need to know how to view existing certificates in OpenVPN, the internal documentation passed me (written by a past employer) contains creating, removing, retrieving and revoking user, see below
/etc/...
0
votes
1
answer
396
views
Docker- Giving Container access to Host's CA certs
I was wondering security wise if there was anything wrong with volume mounting the host's ca certs into a container. I.e,
docker run \
-v /usr/local/share/ca-certificates:/usr/local/share/ca-...
0
votes
0
answers
38
views
Generating certificate with subjectUniqueID field
I would like to generate a certificate with the subjectUniqueID field as indicated in rfc5280( https://www.rfc-editor.org/rfc/rfc5280#section-4).I have tried this:
openssl req -config myConfigFile....
2
votes
1
answer
4k
views
How to get a client certificate chain during a certificate auth with Apache?
I'm trying to configure an Apache 2.4.29 server as an SSL terminating reverse proxy for my app. The proxy should request a client certificate during the SSL handshake and pass it to the app for ...
0
votes
1
answer
42
views
Single domain, two webservers running on different ports, two different SSL issuers possible?
Short, Can a domain have multiple SSL issuers installed on different servers ?
Long ,
I have a domain.
example.com
Its running on two different servers , two different websites, two different ports , ...
5
votes
6
answers
8k
views
How to give a user access to the Certificate Store on Windows Server 2012?
I've battling an issue for the last couple of days that I cannot seem to resolve. I'm not an administrator although I have some knowledge about some administrative tasks.
I have a PowerShell script ...
0
votes
1
answer
738
views
Use openssl 3 to create a self-signed certificate just like what "New-SelfSignedCertificate" can
First of all, I did googling about openssl, such as this one, and also tried dozens of time on creating a valid self-signed certificate.
But I guess asking on serverfault would be much quicker.
My ...
0
votes
2
answers
5k
views
Exchange 2013 ECP ,Redirect loop with wildcard cert
Recently we were unable to log into ECP, after successful login we a re redirected to de login prompt, on our two Exchange servers and no configuration change were made, we are using a wildcart cert ...
0
votes
1
answer
411
views
AH02565: Certificate and private key from <cert> and <private key> do not match
I'm trying to update some expired SSL certificates internally on some Ubuntu and Redhat servers. I have an internal certificate authority for this (ADCS). These are the steps I'm taking:
Generate CSR ...
1
vote
2
answers
518
views
Local Machine certificate (certlm.msc) - choosing "Microsoft Software Key Storage Provider" on import
When importing a device certificate/private key through CERTLM, the GUI seems to choose a deprecated Cryptography Service Provider (CSP) called "Microsoft Strong Cryptographic Provider"; I'm ...
2
votes
1
answer
388
views
Exporting a PFX file for Smartcard authentication driver issues
I have a ACR122 Smartcard reader I am attempting to export a PFX certificate to for password-less authentication. I have everything set up on the active directory server, but am stuck on the simplest ...
1
vote
1
answer
428
views
Error: The issuer of this certificate could not be found for AD issued Code Signing Certificate
Problem
I've created a certificate through AD certificate services, but it has the error "The issuer of this certificate could not be found." despite the full chain being present in the PFX.
...
0
votes
1
answer
233
views
Why is certificate request invalid from Exchange 2019?
I am creating a cert request in powershell on an exchange 2019 server as follows:
$binrequest = New-ExchangeCertificate -Server "exchange" -BinaryEncoded -GenerateRequest -FriendlyName "...
1
vote
1
answer
130
views
openssl ignores intermediate certificate in pkcs12 file
After creating a new S/MIME certificate, I am stuck with creating a valid PKCS #12 file that is accepted by most mail clients:
$ openssl verify smime.pfx
CN = [email protected], emailAddress = mail@...
0
votes
1
answer
984
views
How to extract CA Certificate from .pfx file and add it to a trust store file
I have a .pfx file that has multiple certificates, one of them is the signing CA certificate of a server certificate assigned to the IBM i Remote Command Server in DCM.
I managed to use openssl and ...
1
vote
0
answers
204
views
Windows CA Publishing Expired Certs in CRL When not configured to do so
I have a Windows ADDS CA that for some reason is publishing revoked but expired certificates in the CRL and I can't for the life of me figure out why. Here is my configuration:
Server 2012 R2
...
6
votes
1
answer
42k
views
How to renew VMware certificate in Veeam
I had to reinstall the vcenter appliance. Since that the Veeam backupjobs fail with the error:
Task failed error: The remote certificate is invalid according to the validation procedure
Presumably ...
1
vote
1
answer
369
views
Bluehost - wrong certificate presented by host for API call to Twilio
Bluehost VPS running CentOS, but cat /etc/redhat-release reveals CloudLinux release 6.10 (Final).
Executing curl commands against Twilio APIs on my local PC (Win11/IIS/PHP) works fine. When I attempt ...
0
votes
1
answer
138
views
Microsoft Certificate Authority Machine Template - add single label host name to SAN
I would like to create a machine certificate template on a Microsoft Certificate Authority that includes the single label Active Directory (AD) Computer Names in the SAN.
I have tens of thousands of ...