Questions tagged [certificate]

Certificates are a Public Key and Identifying Information

Filter by
Sorted by
Tagged with
2
votes
1answer
38 views

How can I generate and use a third-party certificate on a Remote Desktop Server?

I have a freshly installed Windows Server 2016 Remote Desktop Server and I am attempting to generate a certificate for it. Specifically, I believe I need to configure a certificate for the "RD ...
2
votes
2answers
55 views

Puppet cert clean not working

So, I am standing up a new server to replace an existing one. Should be easy, right? Revoke the old cert, create a new one and off you go. Here's the loop I am stuck in: I've redacted the server ...
0
votes
0answers
18 views

Windows Server - Export private key of an already deleted certificate with certutil.exe

I want to replace my current CA. So I queried the different KSP's and found a private key, which is not used in any certificates issued or stored at this CA. I concluded that this key must be from an ...
1
vote
0answers
18 views

Windows service user account can't access the certificate store

Background I have a Windows 7 VM with two user accounts (condor_usr1 and condor_usr2) that is used for source code compiling. The condor_usr[1|2] accounts are members of the administrators group. I ...
0
votes
0answers
13 views

Aruba Instant Guest Wifi Certificate error DLG_FLAGS_INVALID_CA

I have an Aruba Instant Access Point. Everytime someone connects to the guest wifi using opera, edge, firefox, chrome he can't reach the login page. If he uses internet explorer he can tell the ...
1
vote
1answer
25 views

How do I get a Linux box to use RADIUS authentication with a certificate?

Googling anything involving RADIUS configuration has been hell, as many of the terms get mixed together, making search results useless, so... I have a RADIUS server offering EAP-TTLS based ...
0
votes
1answer
25 views

Questions about SSH certification

I have some SSH login questions from the client computer to the backup computer. I have a laptop (client) which should make backups to a Synology via rsync / SSH. I have read a lot about it in the ...
0
votes
0answers
19 views

Certificate failure for mail.domain.com: self signed certificate: /CN=mail.domain.com when create a new mail in Rukovoditel 2.5.1

I installed a fresh Rukovoditel 2.5.1 and after setup the mail account, I found the error in the the subject. Below the setup details for the email: Receiving mail Mail Server: mail.domain:993/imap/...
0
votes
1answer
31 views

Centos 7 - SSL without virtual host [closed]

so after many many hours I somehow manage to repair/reinstall whole VPS, sweting my blood literally. Now last step setting up SSL - ultra cautious, because I think, last time here I manage to fk up, ...
0
votes
1answer
44 views

sublime text 3 certificate verification failed

I was following the official instruction to install Sublime text 3 but get errors shown as below when I do sudo apt-get update: Ign:10 https://download.sublimetext.com apt/stable/ InRelease Hit:12 ...
0
votes
0answers
25 views

Need some clarifications on CA certificates and the way they work

I'm gonna try to explain my question as clear as I can (Windows Server 2019 with roles: AD DC/DHCP/DNS/VPN RemoteAccess) So for example we create a template for VPN certificate (for IKEv2 and SSTP) ...
0
votes
0answers
78 views

Deployed certificate to Personal store using GPO

I am trying to find a user GPO to install a certificate in the personal store (this is a browser certificate and if installed in other stores it won't work so it has to be installed in the Personal ...
1
vote
1answer
104 views

Generate CSR including certificate template information with OpenSSL

I'm generating a CSR with OpenSSL using the following configuration file: [ req ] default_bits = 2048 default_keyfile = usercert.key distinguished_name = req_distinguished_name ...
0
votes
1answer
39 views

AWS Cloud Map Certificate

I really love AWS Cloud Map (Service Discovery in AWS). It integrates with the AWS DNS to make service discovery very simple. Just register an instance of a service and you can discover the service ...
0
votes
0answers
36 views

Windows Server 2019 + Radius + trusted certificate

I have Radius (NPS) service on the Windows Server 2019. I want to use it for wireless users authentication in an Active Directory. I tried to use self signed certificate. And users authenticated ...
0
votes
1answer
17 views

Redhat 8 rsyslog TLS collector taking over old log collector. Can I reuse certificate?

I am building a redhat 8 rsyslog log collector to replace an old log collector and am required to set it up with TLS. I am using the same public IP address and was hoping to reuse the same purchased ...
2
votes
1answer
65 views

x509 certificate with excluded subtree violation issue

I would like to use self-signed x509 certificates in our testing environment so I followed the process described in Ivan Ristic's "OpenSSL Cookbook". Great resource. I decided to go the private CA ...
0
votes
0answers
41 views

Mailserver postfix+dovecot: use multiple certificates/combine certificates?

UPDATED TO CLARIFY OK, so I have this Postfix/Dovecot combo running nicely, using virtual domains and virtual users through mysql. Now the problem is to provide TLS I have to point my users to my....
-1
votes
1answer
24 views

Renew the chain certificate from p12 file

I have the ROOT, chain certificates, p12 key and key password. I don’t have the CA root key details. My requirement is, I need to do renew the chain certificate by using these. Without change the ...
1
vote
1answer
231 views

How does one forward a client authentication certificate through HA proxy while terminating TLS?

I have a web API fronted by an HA Proxy load balancer. The web API uses client authentication certificates for identity authentication and authorization. I'd like the HA Proxy appliance to terminate ...
0
votes
1answer
22 views

OpenSSl certificates management

I'm trying to complete a entire process of request/verify of a trusted timestamp. I'm working with a TSA server and i'm able to create a valid timestamp request. I know that it's valid because tsa ...
0
votes
0answers
12 views

8021.x EAP-TLS linux supplicant NPS windows server

My POC's environment : 1 server MS2016 AD, 1 server MS2016 ADCS, 1 server MS2016 NPS (radius server 1 switch aruba 2930F (authenticathor) workstation : windows 10 and CentOs 7.6 (supplicants) Only ...
0
votes
1answer
49 views

SSL Cert for AWS Client-Side VPN

We are in the process of migrating to AWS from Azure. I want to use a client-side VPN on AWS instead of a Bastion. Can I create a separate SSL cert for the AWS VPN using the same domain name that's ...
0
votes
1answer
84 views

Self signed ssl I created for localhost cannot be trusted even though I have already imported it to chrome

I generated a certificate using ssl by running the script from the following link: https://gist.github.com/bjanderson/075fadfccdd12623ab935e57eff58eb4 The script ran just fine and I received all the ...
0
votes
1answer
41 views

Two different SSL certificates with one ip and same port but different host headers (IIS 8)

I have IIS 8 and I have two website with two different domain names. I have for each domain it's SSL certificate, but I only have one IP address. Is it possible to attached each website it's own SSL ...
1
vote
0answers
19 views

SHA256 timestamps from comodo vs symantec for 2008r2 drivers

When signing a cab with a sha256 EV certificate we wanted to also use a sha256 timestamp. When trying with the comodo (where we got the EV cert) server we tried: /tr http://timestamp.comodoca.com/?td=...
0
votes
1answer
152 views

HAProxy as a reverse proxy for backend already ssl enabled and SSL terminator for a backend exposed in port 80

I have 4 servers: proxy_server, $BK_SERVER_001, $BK_SERVER_002 and $BK_SERVER_003 The "proxy_server" only has an HAProxy enabled service with this configuration: (please look at the rows marked ...
0
votes
2answers
61 views

What and where a private key in the Microsoft CA?

I need a certificate to exchange a data with some service provider. This provider suggests to use OpenSSL, they provide example for every step to create a certificate: Create new private key. Create ...
2
votes
1answer
40 views

Can I use the same SSL/TLS certificate as both a “server” and “client”?

I have a proxy server. Clients connect to it over HTTPS, so it needs a server certificate. The proxy server also makes outgoing requests to other backend servers. One of those backend servers ...
0
votes
1answer
64 views

How do I extended the validity of a client certificate?

I have this script for creating a root and client certificate for azure point to site vpn connection. I have extended the root certificate validity to 5 years but when I generate my client ...
0
votes
0answers
36 views

EJBCA unable to apply newly created Certificate

The office is using EJBCA for its PKI infrastructure. The RootCA certificate has expired and has to be renewed. A new CA was generated called "Root2CA" and activated. The below steps were to be ...
0
votes
0answers
29 views

Apache Reverse Proxy to IIS TLS/Client certificate authentication debacle

After thorough research I have come to ask for assistance. What I want is to create a configuration similar to what Apache/Tomcat have with I believe AJP only Apache to IIS. I know due to TLS, it is ...
1
vote
0answers
14 views

Importing Mozilla's CACerts to JRE

I recently grabbed a copy of Mozilla's list of CA certs and I'm attempting to import to a new JRE I've downloaded. List in question (in pem) can be found here: https://curl.haxx.se/docs/caextract....
1
vote
1answer
32 views

Certificate expiration does not match validity period in template (Windows CA)

I'm trying to request a new Bitlocker DRA certificate from my internal CA. The template is set to two years, as shown here Template I'm trying to request a new certificate via the Certificates MMC ...
0
votes
1answer
18 views

Powershell signing in AD enviroment

I got a powershell script and i wanted to distribute that to all clients. However, it is prescribed in my company (because I am only an OU administrator) that I only distribute signed scripts. I have ...
0
votes
2answers
48 views

Redirect subdomain to an external secured URL

I have a domain name (www.domain.com) and subdomains that are only used to redirect users to the correct application. For ex, todo.domain.com redirects to the proper TODO website's URL. The problem ...
0
votes
0answers
28 views

TomCat new Cert not taking affect

We have a website running on Tomcat whose certificate will epire in a few weeks. I generated a CSR, got a new cert. Added that cert to the new store and changed the server.xml file to point to the ...
0
votes
0answers
264 views

why do I need a certificate to establish a secure gRPC connection as a client?

When using gRPC over plain TCP the client establishes a channel with the server like this (in ruby): stub = Helloworld::Greeter::Stub.new(service_url, :this_channel_is_insecure) but then, when I ...
0
votes
1answer
251 views

Strongswan eap-identity no trusted certificate

Here is the situation : GW installed on CentOS7 with Strongswan 5.7.2 with these plugins loaded : charon pkcs11 tpm aesni aes des rc2 sha2 sha1 md4 md5 mgf1 random nonce x509 revocation ...
3
votes
1answer
73 views

Intermediate certificate not in keystore even though I added it

I was tasked to set up an ssl in a server, this server uses wildfly, so I have to make a keystore that contains all of the certificates that I got, the server certificate, the intermediate and the ...
0
votes
0answers
24 views

802.1x Certificate Authentication issues

I'm deploying 802.1x on my wired networking and i'm facing a problem on the computers that do not have the cached profile created. The service works fine when i have cached profiles, but when it ...
0
votes
1answer
326 views

Windows Server 2019 - Certificate with private key export, encryption type

I noticed that starting in Windows Server 2019, and an unknown version of Windows 10 (I'm running 1903, and I tried on 1809 as well), when you export a certificate and choose to export it's private ...
0
votes
1answer
62 views

Internal CA certificate fails validation for AIA and CDP

Using an internal certificate authority I have issued a wildcard certificate that was installed on a remote desktop session host server. I have installed the root and intermediate CA certificate on ...
0
votes
2answers
20 views

Can I add certificate management console to Windows server Administrative Tools

Windows Server has always had an MMC snap-in for certificates, but it is not visible. I would like to add an icon to the administrative tools control panel so that administrators without a lot of ...
0
votes
0answers
26 views

Certificate Enrollment fails after working all morning

Good morning, everyone. I was working on SSL cert tasks all yesterday morning without issue, and then all of the sudden I get a failure when making a new request and it looks like this: What is even ...
0
votes
0answers
23 views

What could be preventing this certificate from installing?

To access our Azure VMs over a VPN I need to install a certificate on client machines that need access. I was able to install it on someone else's laptop just fine, but am unable to install it on my ...
0
votes
0answers
17 views

Clean Freeipa install but unable to browse certificates page

I have install a clean Freeipa server. We use it for DNS, automount and users authentication. [root@ipa01 ~]# ipa --version VERSION: 4.6.4, API_VERSION: 2.230 Everything is working just fine but ...
1
vote
0answers
28 views

Do expired certificates in a Remote Desktop Deployment matter?

In Server Manager > Remote Desktop Services > Overview > Edit Deployment Properties, all of our RD certificates are Trusted but Expired. I would expect there to be a warning of some sort when ...
-1
votes
1answer
110 views

NGINX two domains SSL presents wrong cert

I have two domains, both of which are wildcards. Both use https only eg. *.example.something.com *.example.com The issue is that nginx seems to always present the default certificate (example....
0
votes
1answer
53 views

OpenVPN Copy Server Certificate/Keys Onto Different Server

Let's say on Server 1 I setup all OpenVPN server credentials, certificate authority, etc... All these files have been generated on Server 1 using the following commands: ./easyrsa build-ca //create ...