Questions tagged [self-signed-certificate]

A self signed certificate is signed with its own private key instead of the private key of a higher or publicly trusted certificate authority (CA).

Filter by
Sorted by
Tagged with
-2 votes
0 answers
39 views

Create Self-Signed Certificate for IP Address (customized domain) on windows

I want to create a Self-Signed Certificate for an IP Address (not domain) using windows OS. Then I want to bind this certificate to my API, which is hosted on IIS on our own server. Finally, I want to ...
user avatar
  • 97
0 votes
0 answers
28 views

Kubernetes: using an intermediate CA which certificate is signed by a self-signed root CA certificate

Does anyone use own certificate chains for Kubernetes clusters? There's an issue with such kind of setup, and I would be grateful for any ideas on how to solve it. Let's assume we have a Root CA which ...
user avatar
0 votes
0 answers
79 views

How to make squid proxy to accept self-signed certificate?

I have an use-case were I have to accept self-signed certificate in Squid. The endpoints are Kubernetes clusters using self-signed certificates. The clusters will be recreated on demand with different ...
user avatar
  • 101
0 votes
0 answers
30 views

Using self-sign certificates with OpenSSH on Windows

I'm wondering if you can use a self-sign certificate on the OpenSSH platform for Windows? Anyone know if this is possible and how to do it? Sincerely John Rosell
user avatar
0 votes
0 answers
28 views

How to replace SCVMM_CERTIFICATE_KEY_CONTAINER SCVMM SSL certificate?

I need to replace SCVMM_CERTIFICATE_KEY_CONTAINER certificate on my SCVMM server and Hyper-V Hosts. How can this be done?
user avatar
0 votes
0 answers
76 views

Install a self-signed certificate in .p7b format, created on another machine, on Ubuntu Tomcat

I am a Microsoft stack guy who is in desperate need for some linux administration... As stated in the title, there is a .p7b file (10kb size) that I need to install on Tomcat, running on Ubuntu. At ...
user avatar
  • 123
1 vote
1 answer
516 views

Replace Self Signed RDP Cert with CA Signed Cert

A few servers are getting picked up by security scans with the following message: The following certificate was at the top of the certificate chain sent by the remote host, but it is signed by an ...
user avatar
  • 578
0 votes
0 answers
39 views

Configure local services to run within the same domain with Nginx

There are 2 different web servers that are deployed under the same domain (example.com and api.example.com) I want to use httpOnly cookie shared across these 2 sites. There is such local configuration:...
user avatar
  • 105
0 votes
0 answers
234 views

TLS 1.2 Client hello resulting in TCP reset

I've been trying to set up a test environment where I have a windows service hosting an IDP. The IDP is, for legacy reasons, available using both HTTP and HTTPS. On the same host I've also deployed a ...
user avatar
  • 1
0 votes
1 answer
1k views

Squid! FATAL: No valid signing certificate configured for HTTPS_port

I've been struggling with Squid 4.13 on Ubuntu 20.04 for about a week now. My latest (and hopefully last) problem is this: FATAL: No valid signing certificate configured for HTTPS_port and this is ...
user avatar
  • 246
2 votes
0 answers
34 views

Which clients support self-signed certificates with DANE?

We've been considering to make more use of DANE as a decentralised authority for our certificates. Especially with S/MIME. However, the key obstacle is... how widely are DANE treated as an authority ...
user avatar
0 votes
0 answers
323 views

HAproxy. Configure ssl connection with self-signed certificate between frontend and backend

I need some help to configure ssl connection with self-signed certificate between Haproxy and Squid. In my case - Haproxy (192.168.10.110) is a frontend and SQUID (192.168.10.149) is a backend. ...
user avatar
  • 1
0 votes
1 answer
145 views

Using hostname only instead of FQDN in certificate

Can a localhost's name be used on a self signed certificate and used internally for the applications running on the same localhost? I am just trying to test my applications with certificates. Forgive ...
user avatar
0 votes
1 answer
79 views

self signed certificate vs a certificat authority with email

I use a self signed certificate with my mail server. I use dovecot and postfix startTLS. I also have a DKIM setup for digital signatures and everything is working. However, when sending mail to ...
user avatar
  • 109
0 votes
1 answer
296 views

Certificates explanation for VPN Server Edgerouter + IPSec/IKEv2 + Active Directory Certification Authority

I’m trying to setup a IPSec/IKEv2 VPN Server for roadwarriors on my EdgeRouter 6P which has Linux Strongswan 5.6.3 on board, with Active Directory CA as TRUSTED ROOT CA and Microsoft NPS as Radius for ...
user avatar
  • 1
0 votes
1 answer
190 views

Does DANE allow for trustable self-signed certificates?

DANE has 4 modes of operation indexed 0-3 with mode 3 i.e. Domain issued certificate allowing for self-signed certificates. Can this mode be used in a trustable manner? and if so does that mean that ...
user avatar
  • 101
2 votes
1 answer
2k views

Powershell self-signed certifcate private key not exportable

Using Powershell, I'm attempting to create a self-signed ssl certificate with a private key that can be exported. I've read and followed various tutorials, however the end result is always that no ...
user avatar
0 votes
1 answer
1k views

I am unable to provide a valid PEM file to HaProxy despite validating the PEM file and installing the self-signed certificate in the correct places

I will post my private key in its entirety because it is an example for development and debugging purposes. This is the process by which I have created my PEM file: https://serversforhackers.com/c/...
user avatar
  • 101
0 votes
1 answer
1k views

CA with intermediate certificate for vault

I want to setup Private CA for internal services using Vault (HashiCorp). I am generating Root CA & Intermediate CA certificate outside of Vault. Vault will be generating short-lived (30 days) ...
user avatar
  • 109
0 votes
1 answer
670 views

certbot --apache uses wrong domain name but claims to use the right one

I am running a website with apache on RHEL7 on the domain https://www.ayeaye.at. I am using certbot to obtain a certificate. The webserver works, I get a proper certificate for domain, and certbot ...
user avatar
1 vote
0 answers
58 views

Azure VMSS automatic instance repair with LB probe and self signed certificate

I have 2 VMSS in azure with a internal LB infront of them. The LB has a 443 rule, and a probe to execute an https request with a request path pointing to healthcheck endpoint of the deployed ...
user avatar
1 vote
1 answer
4k views

How do I add certificates to Kubernetes to allow images to be pulled from a custom Harbor repository?

I am finding all sorts of walkthroughs on how to add certificates to be used in the pods themselves, but I can't seem to find info on how to setup Kubernetes to allow a self-signed cert for pulling ...
user avatar
  • 233
0 votes
0 answers
83 views

Why does replacing certificate in WebLogic now require TLS1.2

We replaced a self-signed certificate JKS with a signed certificate in WebLogic 12.2.1.3.0. The C# desktop applications that connect to a service hosted there now fail with "The request was aborted: ...
user avatar
1 vote
0 answers
70 views

Migrating Root Certificate Authority

I got thrown into the middle of a CA migration project. My co-workers are migrating a Root Certificate Authority off a 2008 R2 server and onto a new 2019 server. They have both servers running at the ...
user avatar
0 votes
1 answer
3k views

Openssl "Self-signed certificate in certificate chain" when server sends whole certificate chain with the self-signed certificate to the client

I am having the following certificate chain: Self-signed Certificate --> Intermediate --> Client cert, Server cert. I have application for ssl communication and also verify peer setting. I try to ...
user avatar
0 votes
1 answer
825 views

Requirements for certificates to sign PDFs in Adobe Reader?

I'm trying to set up PDF digital signatures using certificates generated by openssl. I have generated a CA certificate, and used that to sign end user certificates, which I archive in PKCS#12 format. ...
user avatar
0 votes
0 answers
72 views

Trusting a Self Signed Certificate on RHEL7

I'm running into an issue where I'm trying to import a self-signed certificate of one of our servers to one of our development boxes. I've tried adding the .cer file from the server to /etc/pki/ca-...
user avatar
0 votes
2 answers
2k views

error when trying to add custom extensions to X509 certificates using openSSL

I am trying to add custom extensions to my self-signed certificate. I tried the following openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -extfile myconfig.cnf -extensions ...
user avatar
1 vote
1 answer
513 views

OpenSSL invalid revocation date / update CRL?

I have an index.txt file where I changed the value of a certificate - whose certificate file I do not have - from V to R to revoke it. The index.txt looks as follows exemplarily: V 220303095424Z ...
user avatar
  • 111
2 votes
1 answer
3k views

Generate end-entity certificate with OpenSSL for localhost on IIS

I would like to ask how to generate end entity certificate based on my own CA root certificate? I've generated root CA this way: openssl req -x509 -newkey rsa:4096 -sha256 -days 3650 -nodes \ -...
user avatar
  • 31
0 votes
1 answer
715 views

How to avoid HSTS error by hosts redirect with self-signed certificate? [closed]

I created this records in windows hosts file 127.0.0.1 a.domain.name 127.0.0.1 b.domain.name 127.0.0.1 c.domain.name where 127.0.0.1 - ip of my server [a,b,c].domain.name - domains wich from i ...
user avatar
1 vote
0 answers
1k views

making HTTPS work on LAN with self signed certificate

This is on a local area network (LAN). There is no internet connection. One admin has admin access to both the linux server and windows10 pc's. I have a linux server running third party software to ...
user avatar
  • 735
1 vote
1 answer
239 views

Unable to Backup or Restore Certificate Authority?

I migrated Certificate Authority Enterprise from windows server 2012 R2 to Windows Server 2019. Both Server are VMs Here are the steps I took: Baskup CA database, key and registry config of the ...
user avatar
  • 111
0 votes
2 answers
7k views

How to add a header to my apache2 server

I have an apache2 web server for testing only (not a production server). It is running on Ubuntu 18.04. I have configured it with TLS. I want to add a header. So I navigated to this file: /etc/...
user avatar
  • 15
3 votes
2 answers
9k views

openssl keeps creating v1 certificate instead of v3

Hell everyone, so i'm trying to create a self signed certificate for my domain and for some reason openssl keeps creating V1 certificates for my server instead of V3 and that is causing browsers to ...
user avatar
0 votes
1 answer
623 views

How long it takes for the Issued certificates to reach the requester's computer?

Windows server 2019 with CA role, made a certificate template and enabled the option "CA certificate manager approval" in it, then issued it on my CA server. now on a client I went to the personal ...
user avatar
0 votes
1 answer
448 views

IIS-created self signed certificates (2 servers, same domain)

I have 2 web servers in Azure (prod and test). I have created (temporarily) a self signed certificate (using IIS) on both. One certificate works fine, but the other is causing downloads to fail ...
user avatar
  • 137
5 votes
1 answer
9k views

Self signed ssl I created for localhost cannot be trusted even though I have already imported it to chrome

I am creating https server side that I am using to practice OAuth to Instagram which requires https. I generated a certificate using ssl by running the script from the following link: https://gist....
user avatar
  • 53
1 vote
2 answers
1k views

Cannot validate certificate hostname without SNI

I am using 2 proxies to intercept the communication between my phone and my server. Here is my topology: phone --> proxy 1 --> proxy 2 --> server proxy1 is listening to port 8080, proxy 2 is ...
user avatar
  • 111
2 votes
1 answer
1k views

cannot trust development https self-signed certificate in ubuntu 18.04.2 LTS

I created a rest api project and I'm tring to access the https endpoint using curl like this: $ dotnet new angular $ curl -I -X GET 'https://localhost:5001/api/SampleData/WeatherForecasts' curl: (60)...
user avatar
  • 1,111
1 vote
1 answer
992 views

Apache 2.4 mutual authentication - AH01797: client denied by server configuration

So I'm trying to set up Apache 2.4 mutual authentication on a virtual host configuration. Given the below environment, what am I missing? Server is: Slackware 14.2 x64, Apache 2.4.39, OpenSSL 1.0.2r ...
user avatar
2 votes
1 answer
941 views

RSA/Machine keys broken on new 1809

When deploying an image of 1809, slipstreamed with any updates from January 2019 onward I'm having issue where the permissions are broken on the RSA\MachineKeys located here: C:\ProgramData\Microsoft\...
user avatar
3 votes
0 answers
13k views

x509 certificate not valid for any names when added IP address to openssl.cnf

A self-signed certificate works well while the command used to generate it on a ubuntu machine is: openssl req -x509 -newkey rsa:4096 -keyout private.key -out cert.crt -days 365 -nodes If the ...
user avatar
  • 171
0 votes
1 answer
227 views

How can I generate a self signed certificate that will not fire a SSL_ERROR_BAD_CERT_DOMAIN?

I need to generate a self signed certificate for my application and I want to be able to make it valid if a self generated root certificate have been added to the web browser manually. The problem is ...
user avatar
  • 111
0 votes
1 answer
269 views

Self-Signed Certificate working in OS X but not Windows

Im trying to create a self-signed certificate to use a HTTPS connection to access my internal site (jira.intranet.com). I have successfully followed this article https://security.stackexchange.com/...
user avatar
  • 1
0 votes
2 answers
6k views

SSL Self-Signed Certificate Vulnerability Keeps Returning

So, I've been dealing with a recurring problem with my workstations self-generating certificates. They're appearing in the "Personal" certificate store. Even after I manually delete them from the ...
user avatar
1 vote
0 answers
998 views

Self-signed certificate for SSTP VPN server

I'm developing a custom VPN solution that needs to support SSTP for Windows clients. For this, the SSTP specifications (and Windows) require my server to authenticate itself using a certificate during ...
user avatar
  • 409
23 votes
2 answers
61k views

Why openssl ignore -days for expiration date for self signed certificate?

I have a bash script that generates a self-signed certificate and works perfectly fine: #! /bin/bash # Generate self signed root CA cert openssl req -nodes -x509 -days 358000 -newkey rsa:2048 -...
user avatar
  • 563
4 votes
1 answer
6k views

Cannot add a self signed certificate in Firefox

I need to set up an IIS webserver that will be accessed by a small, finite number of users. I was considering using a self-signed certificate only, and manually installing it on the user's systems. ...
user avatar
  • 193
1 vote
0 answers
150 views

How to create self-signed certificate to sign Office macros

I need to create a self-signed certificate which I can use to sign different kind of Office macros (for Outlook, Excel etc.). I must be able to use this certificate on all workstations in my domain, ...
user avatar
  • 767