Questions tagged [certutil]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
4
votes
1answer
103 views

How do I sign a new FreeIPA Server's internal CA with my organizational internal CA?

My organization has an internal Certificate Authority (CA) which we have already generated many internal certificates and have installed on machines. I am setting up a FreeIPA LDAP/Kerberos server ...
1
vote
0answers
200 views

How does certutil determine that a cert is revoked

I'm testing that an x509 certificate can be correctly determined to be revoked. I'm taking the cert from https://revoked.badssl.com and verifying it via certutil. When my system is online, it seems to ...
0
votes
0answers
120 views

Invalidating the CRL cache in Windows effectively

Various websites mention using certutil to clear the cache. Most sites mention running the following to wipe the cache completely certutil -urlcache * delete While in some cases, they mention that ...
1
vote
1answer
533 views

CRL revocation check failed

Issue with crl revocation check. I can telnet target server on port 80. I can download crl with internet explorer. But when i launch certutil : C:\Users\Administrateur\Desktop>certutil -urlfetch -...
13
votes
1answer
634 views

How to find out where a Certificate Request came from

I have a CA setup on Server 2012 R2, the person who ran the server left the company and I have setup a new CA server. I am trying to figure out what systems / URL's the certs are for. In the List of ...
1
vote
0answers
1k views

Using Certutil to manage CA, show certificates for requester name/id and revoke

I am searching for another way to manage my CA. I wrote a powershell script, which allows me to show all my certificates for a specified requester name or request id and to revoke those certificates. ...
-1
votes
2answers
912 views

How Do I Migrate SSL Certificates from an NGINX web server to IIS?

I used to host a website in my Linux Server. I bought a SSL certificate from GoDaddy, and https://www.example.com worked well for the site. Today, I wanted to move the site from the Linux Server to ...
1
vote
1answer
327 views

Certutil in CentOS complaining of an incorrect password

I just setup a minimum Centos 7 and ran pwgen and tried to create a new database. It complains that it is the incorrect password. These are my commands: # pwgen -sy 32 1 > /etc/openldap/certs/...
1
vote
0answers
435 views

network device enrollment service greyed out

I've recently installed AD Certification Authority on one of our DCs. It acts as a subordinate enterprise CA, the Root CA is a standalone offline root CA and there is no connection between those two ...
1
vote
1answer
648 views

Certificate status still pending even after completion

I have exchange 2013 on Azure VM which is also a DC. for using services like autodiscover etc I need to get a valid 3rd Party certificate which I got from STARTSSL, I generated the request and got the ...
0
votes
1answer
1k views

certutil -TCAInfo error message RegConnectRegistry/RegOpenKeyEx: The network path was not found. 0x80070035 (WIN32: 53 ERROR_BAD_NETPATH)

Recently we noticed the following errors were occurring daily in our Event Logs for servers in our DMZ: CertificateServicesClient-CertEnroll EventID 82 Certificate enrollment for Local system failed ...
3
votes
1answer
684 views

How to import SSL certificates in a 389 Directory Server using the command line?

I am trying to setup a new 389 Directory Server in a RHEL machine and I am trying to configure SSL for LDAPS using the command line. I have just spent several hours digging through every piece of ...
1
vote
1answer
5k views

Easiest way to generate PFX certificate (Windows)

At the moment to generate PFX Certificate, I use openssl and: Generate a CSR with its private key Connect to my CA website (Microsoft CA), and submit CSR along with (san:dns=) additional attribute. ...
2
votes
1answer
2k views

Can't import PFX with CERTUTIL — “Keyset does not exist”

We have a PFX file that when used on any other Windows system (Server 2008 R2, 7, 8) installs fine. On 2 of my servers, the import fails like so: CertUtil: -importPFX command FAILED: 0x80090016 (-...