Questions tagged [certificate]

Certificates are a Public Key and Identifying Information

280 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
10
votes
1answer
3k views

certutil -ping fails with 30 seconds timeout - what to do?

The certificate store on my Win7 box is constantly hanging. Observe: C:\>1.cmd C:\>certutil -? | findstr /i ping -ping -- Ping Active Directory Certificate Services Request interface ...
8
votes
1answer
6k views

LFTP: certificate common name doesn't match requested host name

Using lftp to upload files to a remote server from two computers on my network. Using the exact same code this works fine on one and doesn't work on the other. Transcripts of a problem session and a ...
8
votes
1answer
1k views

Direct Access Certificates

I want to know if I can use a single certificate for all the direct access functionality. I am working at actually setting up DirectAccess on a relatively small network. Since this is a small ...
5
votes
0answers
3k views

EC2 Windows: Certificate for local system with Thumbprint … is about to expire or already expired

I regularly see this error in the Windows Error Log on one of my EC2 instances: Certificate for local system with Thumbprint aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa is about to ...
4
votes
0answers
191 views

How to configure Apache to make him check the client certificate with the one in LDAP?

I’m trying to configure my Apache server for an HTTPS authentication with client certificates using LDAP as my users directory. What I want to do is that Apache asks users to authenticate themselves ...
4
votes
0answers
816 views

Windows - Log services access to certificate store

I have a software which run as a service (Checkpoint Identity Awareness) which connects to a server and verifies its identity (actually a checkpoint firewall) by checking its certificate, like any ...
4
votes
1answer
5k views

Configuring client certificates on IIS8 - Error 403.16

I am trying to implement client certificate authentication on IIS 8. I have deployed my configuration on a development machine and verified it working as expected there. However after setting up on ...
3
votes
0answers
224 views

Intermediate and root certificates expired but my certificate has not, what happens?

I have just renewed a certificate that is used for our web services and asymmetric encryption. I received the following bundle that I will need to provide to my clients, but two of the certificates in ...
3
votes
0answers
3k views

How to add a friendly name in a x509 certificate or pkcs#7 with OpenSSL

I would like to know if it is possible to insert a friendly name in a generated certificate, or in a p7 file. I found that is possible with a p12 file with -name option, but it seems to be impossible ...
3
votes
0answers
2k views

Chrome client certificate prompt doesn't list my certificates

I'm in charge of my organization's certificate scheme, I am trying to conform to the new requirements enforced by Google Chrome regarding RFC2818 (the requirement for "Subject Alternate Name" in a ...
3
votes
0answers
117 views

Active Directory expired certs causing issues with 802.1x authentication

We are in the process of rolling out 802.1x in our environment. With that said, there are quite a few clients that revert back to an older (expired) certificate which prevents them from ...
3
votes
1answer
40 views

Can I use different certifcates for www and Exchange?

I have a website www.domainname.com and a published Exchange address of webmail.domainname.com The website is hosted offsite and the Exchange server is on-premises. I need extended validation for the ...
3
votes
0answers
1k views

How to set up MS Azure VPN with the password authentication?

I'm trying to connect to the MS Azure VPN. I installed the Client certificate and got access to the VPN network. But now I need, the system request the password when somebody is trying to connect to ...
3
votes
2answers
944 views

Exchange 2010 SP1 Certificate renewal, the new rule not allowing local intranet domains and will this change mail flow?

I'm in a pickle with the infamous "The Security certificate has Expired or is not yet valid" message and I know it is due to our (multi domain name certificate; or I think that is called a SAN cert? ...
3
votes
0answers
3k views

SChannel “cannot find certificate in either LocalMachine or CurrentUser store”

We have an in-house application that requires the use of client SSL certificates to authenticate with a remote server (not under our control). This has worked without problems before but on deploying ...
3
votes
1answer
967 views

apache authentication with SSL certificate and SSLUserName

i just try to put an SSL authentification for a SVN server over https. I would like that the client certificate allow authorized person to check their repositories. <VirtualHost 37.187.96.147:443&...
3
votes
1answer
310 views

Good way to store domain CSR and KEY files

For my company I'm starting to manage more and more domains; and with that more and more certificates for those domains. What is a good way to store the basic KEY and CSR files generated? I was ...
3
votes
1answer
1k views

Can't request computer certificate

I am using MMC with the snaping of certificates. I am requesting certificates from a brand new installation of a CA. Requesting User certificates works perfectly. Requesting Computer certificates ...
2
votes
0answers
14 views

Microsoft CA Problem for Windows 10 Clients with Wireshark Installed

This is a most bizarre scenario, but hoping someone else has ran into this at some point to shed some light. We are in the process of migrating to a new host Microsoft CA service. There are CA ...
2
votes
1answer
144 views

Can an Active Directory CA issue certificates for one-way trusted domains?

Our network is composed primarily of Windows servers on our internal domain which is managed by Active Directory (natch). We also have a small population of Linux servers which, for reasons, are ...
2
votes
1answer
682 views

RSA/Machine keys broken on new 1809

When deploying an image of 1809, slipstreamed with any updates from January 2019 onward I'm having issue where the permissions are broken on the RSA\MachineKeys located here: C:\ProgramData\Microsoft\...
2
votes
0answers
654 views

LDAPS Microsoft Active Directory Multiple Certificates RFC6125

We have an Microsoft Active Directory Domain with a large pool of domain controllers (DC) that are are setup with LDAP. These are all setup with LDAPS and uses Certificate Services via a template to ...
2
votes
1answer
98 views

MAAS install CA to new machines

How could we add custom trusted Certificate Authority to the new deployed ubuntu 16.04 machines on MAAS v2.3 ? is there a direct way to do that, or we have to perform custom installation nodes ?
2
votes
0answers
169 views

HAProxy multiple certificates error on first call

I have a load balancer running HAProxy 1.7.5-2 with the following setup: multiple https-enabled frontends each frontend binds the following (for different IPs): bind <ip>:443 ssl crt /opt/...
2
votes
0answers
18k views

The revocation function was unable to check revocation because the revocation server was offline

I have a chain of certificates: MYROOTCERT -> MYCHILDCERT. The MYCHILDCERT certificate has a CRL distribution point extension: [1]CRL Distribution Point Distribution Point Name: Full ...
2
votes
0answers
760 views

Installing/Updating Root Certificates in Windows Server 2003

First of all, I'm not a Sysadmin, I'm a developer. My Problem is now that the Application I develop is installed and runs on an Windows Server 2003 at a client. I'm using AWS SES Service to send e-...
2
votes
0answers
1k views

Why might a ssl certificate fail to validate after the root certificate was installed?

I am building an openssl Certificate Authority for an intranet. I have root.crt, intermediate.crt which is signed by the root, and server.crt which is signed by the intermediate. I can validate the ...
2
votes
0answers
1k views

How does one create a certificate request for a managed service account in Windows?

I have a managed service account which needs a certificate in its personal store for decryption. I tried opening the Certificates snap-in and pointing to the service, but when I right-click on the "...
2
votes
0answers
152 views

Certificate can only be used by network service account

Issues : Our service is using one certification for partner service call. It worked well in IIS site which is running as network service account. But when we run test the code as administrator (...
2
votes
0answers
415 views

Windows - Replace subject from CSR when issuing certificate

I've received a CSR from a client with a CN, but not with all the subject fields we require. According to this answer from Scott*, it should be possible to specify the final subject values when the ...
2
votes
1answer
541 views

How to include all dns records and IP address of a server in automatic certificate enrollment of Microsoft AD CS?

In my company there are a lot of servers which users remotely login to them to do their duties. We have enabled computer certificate auto enrollment for them to assure secure connection. But because ...
2
votes
1answer
35 views

Installing SSL on Apache 2.x - self-signed errror

So I bought an SSL cert from GoDaddy and followed their instructions on how to get it signed, and downloaded and installed it. It's not working. It says the SSL certificate was self-signed and the ...
2
votes
0answers
135 views

Installing a personal security certificate for Windows Server 2008 Terminal Services user

We use StoneEdge Order Manager, which runs under Microsoft Access, on several Windows computers as well as through Terminal Services on Windows Server 2008. Terminal Services users are unable to ...
2
votes
1answer
719 views

add certificate to all files in EFS-folder with script

I try to set up collective access to EFS-folder. I want to add certificates of all users to all files in folder. Is it posible do with using powershell scripts or some another way? Thanks.
2
votes
0answers
270 views

Certificate enrollment request chain not trusted

I am working on a MSFT lab for Direct Access, and need to create a Web certificate. The instructions ask be to do the following: On EDGE1, click Start, type mmc, and then press ENTER. Click Yes ...
2
votes
1answer
775 views

“Unknown Publisher” on digitally signed exe

We're trying to sign an installer exe, but we keep getting "Unknown Publisher" errors on the machines that download them. Here's our steps: Build the code and create an installer Sign the installer (...
2
votes
1answer
1k views

Import CER file into NTAuth Store on Windows Server 2003

I have to import a third party CER file into the NTAuth Store on a Windows server 2003 machine. I followed the as described in the Microsoft documentation at http://support.microsoft.com/kb/295663, ...
1
vote
1answer
51 views

HAProxy - CA Signed Certificate not trusted, despite being in trust store

Repost from Stack Overflow. Was suggested that I post here instead, as Stack Overflow is meant for programming, and this question is focused on SSL and HAProxy. I'm trying to complete the setup of SSL ...
1
vote
0answers
28 views

How to hide the IIS 8.5 Header when response code 403.7 is returned?

We have a ColdFusion 11 website, requiring client certificates, running on a publicly accessible Windows Server 2012R2 running IIS 8.5. There is a URL rewrite rule in place to remove the value set in ...
1
vote
1answer
87 views

OpenSSL invalid revocation date / update CRL?

I have an index.txt file where I changed the value of a certificate - whose certificate file I do not have - from V to R to revoke it. The index.txt looks as follows exemplarily: V 220303095424Z ...
1
vote
0answers
121 views

Strong Private Key Protection being ignored

I've tested installing a certificate with Strong Private Key Protection on Windows 10 Enterprise and confirmed when the VPN software tries to access it, Windows prompts me to enter the password I set ...
1
vote
0answers
103 views

Unable to Backup or Restore Certificate Authority?

I migrated Certificate Authority Enterprise from windows server 2012 R2 to Windows Server 2019. Both Server are VMs Here are the steps I took: Baskup CA database, key and registry config of the ...
1
vote
0answers
226 views

Windows service user account can't access the certificate store

Background I have a Windows 7 VM with two user accounts (condor_usr1 and condor_usr2) that is used for source code compiling. The condor_usr[1|2] accounts are members of the administrators group. I ...
1
vote
1answer
142 views

How do I get a Linux box to use RADIUS authentication with a certificate?

Googling anything involving RADIUS configuration has been hell, as many of the terms get mixed together, making search results useless, so... I have a RADIUS server offering EAP-TTLS based ...
1
vote
0answers
50 views

SHA256 timestamps from comodo vs symantec for 2008r2 drivers

When signing a cab with a sha256 EV certificate we wanted to also use a sha256 timestamp. When trying with the comodo (where we got the EV cert) server we tried: /tr http://timestamp.comodoca.com/?td=...
1
vote
0answers
70 views

Do expired certificates in a Remote Desktop Deployment matter?

In Server Manager > Remote Desktop Services > Overview > Edit Deployment Properties, all of our RD certificates are Trusted but Expired. I would expect there to be a warning of some sort when ...
1
vote
1answer
64 views

WPA2 Enterprise: no risks for preconfigured clients when it comes to Rogue APs?

We are using, as default, PEAP and MS-CHAPv2 as inner authentication. I was concerned with security risks when it comes to rogue APs but a colleague told me that there are no risks for preconfigured ...
1
vote
0answers
584 views

cert-manager tls.crt and ca.crt 0 bytes

I am practicing k8s on cert-manager topic. I had carefully followed the official docs. The everything went fine. Until I stuck at step7 $ kubectl get certificate NAME quickstart-example-tls This is ...
1
vote
0answers
193 views

CNG Certificate Request, certificate needs to use CryptoAPI (legacy)

We've created a CSR with Template "(No template) CNG key" and received our certificate from a valid CA. However, it seems our product (VMWare Horizon) doesn't like CNG and we are trying to figure if ...
1
vote
0answers
68 views

Changing a certificate from earlier wildcard to specific host

Please see an error when clients attempt to upload images to the endpoint https://prod.example.net.au:9433/ I am not sure it is related but we had renewed the SSL certificate and changed from a wild ...

1
2 3 4 5 6