Questions tagged [self-signed-certificate]

A self signed certificate is signed with its own private key instead of the private key of a higher or publicly trusted certificate authority (CA).

Filter by
Sorted by
Tagged with
1
vote
1answer
29 views

Powershell self-signed certifcate private key not exportable

Using Powershell, I'm attempting to create a self-signed ssl certificate with a private key that can be exported. I've read and followed various tutorials, however the end result is always that no ...
0
votes
0answers
71 views

I am unable to provide a valid PEM file to HaProxy despite validating the PEM file and installing the self-signed certificate in the correct places

I will post my private key in its entirety because it is an example for development and debugging purposes. This is the process by which I have created my PEM file: https://serversforhackers.com/c/...
0
votes
1answer
236 views

CA with intermediate certificate for vault

I want to setup Private CA for internal services using Vault (HashiCorp). I am generating Root CA & Intermediate CA certificate outside of Vault. Vault will be generating short-lived (30 days) ...
0
votes
1answer
93 views

certbot --apache uses wrong domain name but claims to use the right one

I am running a website with apache on RHEL7 on the domain https://www.ayeaye.at. I am using certbot to obtain a certificate. The webserver works, I get a proper certificate for domain, and certbot ...
0
votes
0answers
72 views

Enable TLS for SMTP in IIS6 on Windows Server 2012 R2

We have a situation where we have been advised to open ports 587 and 465 on our production server in order to receive traffic from Exchange Online to the server. However, we understand that these ...
1
vote
0answers
30 views

Azure VMSS automatic instance repair with LB probe and self signed certificate

I have 2 VMSS in azure with a internal LB infront of them. The LB has a 443 rule, and a probe to execute an https request with a request path pointing to healthcheck endpoint of the deployed ...
0
votes
1answer
794 views

How do I add certificates to Kubernetes to allow images to be pulled from a custom Harbor repository?

I am finding all sorts of walkthroughs on how to add certificates to be used in the pods themselves, but I can't seem to find info on how to setup Kubernetes to allow a self-signed cert for pulling ...
0
votes
0answers
55 views

Why does replacing certificate in WebLogic now require TLS1.2

We replaced a self-signed certificate JKS with a signed certificate in WebLogic 12.2.1.3.0. The C# desktop applications that connect to a service hosted there now fail with "The request was aborted: ...
1
vote
0answers
39 views

Migrating Root Certificate Authority

I got thrown into the middle of a CA migration project. My co-workers are migrating a Root Certificate Authority off a 2008 R2 server and onto a new 2019 server. They have both servers running at the ...
0
votes
0answers
152 views

openssl s_client -connect fails with codes 20 and 21, but OK when -CAfile is specified

I'm setting up a self signed certificate and I've hit a bit of a wall. I'm trying to enable an LDAPS connection that I setup with this gist guide. My problem is that when I test the connection via: ...
0
votes
1answer
2k views

Openssl “Self-signed certificate in certificate chain” when server sends whole certificate chain with the self-signed certificate to the client

I am having the following certificate chain: Self-signed Certificate --> Intermediate --> Client cert, Server cert. I have application for ssl communication and also verify peer setting. I try to ...
0
votes
1answer
339 views

Requirements for certificates to sign PDFs in Adobe Reader?

I'm trying to set up PDF digital signatures using certificates generated by openssl. I have generated a CA certificate, and used that to sign end user certificates, which I archive in PKCS#12 format. ...
0
votes
0answers
37 views

Trusting a Self Signed Certificate on RHEL7

I'm running into an issue where I'm trying to import a self-signed certificate of one of our servers to one of our development boxes. I've tried adding the .cer file from the server to /etc/pki/ca-...
0
votes
2answers
558 views

error when trying to add custom extensions to X509 certificates using openSSL

I am trying to add custom extensions to my self-signed certificate. I tried the following openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -extfile myconfig.cnf -extensions ...
1
vote
1answer
226 views

OpenSSL invalid revocation date / update CRL?

I have an index.txt file where I changed the value of a certificate - whose certificate file I do not have - from V to R to revoke it. The index.txt looks as follows exemplarily: V 220303095424Z ...
1
vote
1answer
1k views

Generate end-entity certificate with OpenSSL for localhost on IIS

I would like to ask how to generate end entity certificate based on my own CA root certificate? I've generated root CA this way: openssl req -x509 -newkey rsa:4096 -sha256 -days 3650 -nodes \ -...
0
votes
1answer
169 views

How to avoid HSTS error by hosts redirect with self-signed certificate? [closed]

I created this records in windows hosts file 127.0.0.1 a.domain.name 127.0.0.1 b.domain.name 127.0.0.1 c.domain.name where 127.0.0.1 - ip of my server [a,b,c].domain.name - domains wich from i ...
1
vote
0answers
669 views

making HTTPS work on LAN with self signed certificate

This is on a local area network (LAN). There is no internet connection. One admin has admin access to both the linux server and windows10 pc's. I have a linux server running third party software to ...
1
vote
0answers
137 views

Unable to Backup or Restore Certificate Authority?

I migrated Certificate Authority Enterprise from windows server 2012 R2 to Windows Server 2019. Both Server are VMs Here are the steps I took: Baskup CA database, key and registry config of the ...
-1
votes
2answers
3k views

How to add a header to my apache2 server

I have an apache2 web server for testing only (not a production server). It is running on Ubuntu 18.04. I have configured it with TLS. I want to add a header. So I navigated to this file: /etc/...
1
vote
2answers
4k views

openssl keeps creating v1 certificate instead of v3

Hell everyone, so i'm trying to create a self signed certificate for my domain and for some reason openssl keeps creating V1 certificates for my server instead of V3 and that is causing browsers to ...
0
votes
1answer
293 views

How long it takes for the Issued certificates to reach the requester's computer?

Windows server 2019 with CA role, made a certificate template and enabled the option "CA certificate manager approval" in it, then issued it on my CA server. now on a client I went to the personal ...
0
votes
1answer
222 views

IIS-created self signed certificates (2 servers, same domain)

I have 2 web servers in Azure (prod and test). I have created (temporarily) a self signed certificate (using IIS) on both. One certificate works fine, but the other is causing downloads to fail ...
2
votes
1answer
5k views

Self signed ssl I created for localhost cannot be trusted even though I have already imported it to chrome

I am creating https server side that I am using to practice OAuth to Instagram which requires https. I generated a certificate using ssl by running the script from the following link: https://gist....
1
vote
2answers
682 views

Cannot validate certificate hostname without SNI

I am using 2 proxies to intercept the communication between my phone and my server. Here is my topology: phone --> proxy 1 --> proxy 2 --> server proxy1 is listening to port 8080, proxy 2 is ...
1
vote
1answer
848 views

cannot trust development https self-signed certificate in ubuntu 18.04.2 LTS

I created a rest api project and I'm tring to access the https endpoint using curl like this: $ dotnet new angular $ curl -I -X GET 'https://localhost:5001/api/SampleData/WeatherForecasts' curl: (60)...
1
vote
1answer
511 views

Apache 2.4 mutual authentication - AH01797: client denied by server configuration

So I'm trying to set up Apache 2.4 mutual authentication on a virtual host configuration. Given the below environment, what am I missing? Server is: Slackware 14.2 x64, Apache 2.4.39, OpenSSL 1.0.2r ...
2
votes
1answer
794 views

RSA/Machine keys broken on new 1809

When deploying an image of 1809, slipstreamed with any updates from January 2019 onward I'm having issue where the permissions are broken on the RSA\MachineKeys located here: C:\ProgramData\Microsoft\...
3
votes
0answers
8k views

x509 certificate not valid for any names when added IP address to openssl.cnf

A self-signed certificate works well while the command used to generate it on a ubuntu machine is: openssl req -x509 -newkey rsa:4096 -keyout private.key -out cert.crt -days 365 -nodes If the ...
0
votes
1answer
180 views

How can I generate a self signed certificate that will not fire a SSL_ERROR_BAD_CERT_DOMAIN?

I need to generate a self signed certificate for my application and I want to be able to make it valid if a self generated root certificate have been added to the web browser manually. The problem is ...
0
votes
1answer
252 views

Self-Signed Certificate working in OS X but not Windows

Im trying to create a self-signed certificate to use a HTTPS connection to access my internal site (jira.intranet.com). I have successfully followed this article https://security.stackexchange.com/...
0
votes
2answers
4k views

SSL Self-Signed Certificate Vulnerability Keeps Returning

So, I've been dealing with a recurring problem with my workstations self-generating certificates. They're appearing in the "Personal" certificate store. Even after I manually delete them from the ...
1
vote
0answers
912 views

Self-signed certificate for SSTP VPN server

I'm developing a custom VPN solution that needs to support SSTP for Windows clients. For this, the SSTP specifications (and Windows) require my server to authenticate itself using a certificate during ...
16
votes
2answers
38k views

Why openssl ignore -days for expiration date for self signed certificate?

I have a bash script that generates a self-signed certificate and works perfectly fine: #! /bin/bash # Generate self signed root CA cert openssl req -nodes -x509 -days 358000 -newkey rsa:2048 -...
4
votes
1answer
4k views

Cannot add a self signed certificate in Firefox

I need to set up an IIS webserver that will be accessed by a small, finite number of users. I was considering using a self-signed certificate only, and manually installing it on the user's systems. ...
1
vote
0answers
125 views

How to create self-signed certificate to sign Office macros

I need to create a self-signed certificate which I can use to sign different kind of Office macros (for Outlook, Excel etc.). I must be able to use this certificate on all workstations in my domain, ...
2
votes
1answer
1k views

What is the use of SigningCertificate in AWS Cognito

I'm using AWS Cognito for my user authentication. I want to know the actual use of SigningCertificate in AWS cognito? NOTE: We can get the SigningCertificate of AWS Cognito usign this ...
0
votes
1answer
2k views

Configuring Imported Self Signed SSL Certificate to SQL Server Express

I've created a self-signed certificate and configured with SQL Server Express. The encryption works fine on my PC. When I export the certificate to another PC I can import fine and can see the ...
3
votes
3answers
143 views

Does filling out the Country Name, State etc. matter when creating a self-signed certificate for Postfix?

When I set up Postfix I have to create a cert because the snakeoil cert included with Postfix is there strictly for the purpose of demonstration. I use this command: sudo openssl req -x509 -newkey ...
1
vote
0answers
1k views

Node.js HTTPS error (SSL_ERROR_NO_CYPHER_OVERLAP) - no common encryption algorithm(s)

I have seen other similar questions but non addresses my problem. I have generated my TLS (openSSL) Self-Signed certificate, but seems not working on my NodeJS server. Instructions to generate SSL ...
17
votes
2answers
3k views

Why not validate self signed certificates through DNS-record instead of letsencrypt

I was just wondering. We use a lot of SSL certificates. Nowadays, we almost exclusively use letsencrypt (thanks!). The bottom line of these certificates is, that proof of ownership of the domain name(...
0
votes
1answer
1k views

Self signed certificate is still trusted after revocation

I have create Root CA and Server Certificate following didierstevens blog. My browsers still trusts the certificate even after revoking the server certificate. I was getting certificate revoked error ...
1
vote
2answers
3k views

Unable to access a server with a self-signed SSL certificate from some devices

I'm struggling to connect to an SSL site (self-signed certificate) that seems to work from other computers/internet connections. I've tried accessing the site using wget: wget https://example.com --...
0
votes
1answer
303 views

Cannot create SSL Engine: The target principle name is incorrect, SSL and SAP HANA

I'm getting the following error when attempting to connect to a tenant database in a multi-tenant SAP HANA Server running on SUSE Linux: I can connect via SSL to the system database of the HANA ...
2
votes
2answers
4k views

Issue with generating self-sign certificate with proper SAN field

I am trying to configure Janus Gateway and I am experiencing with an issue with my self-signed certificate, see log below Jan 25 09:50:46 localhost platform: [2018/01/25 09:50:46 EST] [EROR] /api/v4/...
0
votes
1answer
33 views

Will an IIS SelfSSL certificate still be valid when the signing server is replaced?

Will my 10 year valid self-signed certificate, that is using a common name not resembling any hostname, still be valid/trusted by others in the AD, after the signing server is replaced in maybe a few ...
0
votes
0answers
2k views

AWS API Gateway: self-signed cert for backend HTTP endpoint integration

I have a simple AWS API gateway endpoint. It accepts an https GET request, this is passed to a back-end https API via an integraiton request, and returns simple JSON. This works great when we hit ...
0
votes
1answer
2k views

Client Certificate Authentication and Windows Authentication on IIS

I have a https service hosted in IIS 10 which previously was using windows authentication, and was working good. Now, we need to implement Client Certificate Authentication. Currently i have enabled ...
0
votes
1answer
30 views

Certificate Error since Migrating to new Exchange 2007 Server

I just finished moving mailboxes last night to a second Exchange 2007 server I built (moving from physical to virtual). Clients are pointed to the new server. Getting ready to remove the old server ...
1
vote
0answers
548 views

Apache : Wrong hostname is checked when connecting to proxyed sever using SSL

I'm trying to make this setup work : Reverse proxy : SSL enabled and facing the internet using Let's Encrypt certificate (reverse-proxy.com). Target : Site accessed via the reverse proxy with SSL ...