Skip to main content

Questions tagged [self-signed-certificate]

A self signed certificate is signed with its own private key instead of the private key of a higher or publicly trusted certificate authority (CA).

Filter by
Sorted by
Tagged with
-1 votes
0 answers
27 views

Application does not recognize self-signed certificates after server migration using Transwiz on Windows

Problem Description: I am facing an issue while migrating from an old server to a new one within a domain. Users have self-signed certificates, configured to require a password. Following a server ...
Vazgen's user avatar
  • 1
0 votes
0 answers
154 views

Creating Web Secure Proxy in GCP - Certificate Issue

I am trying to configure GCP Secure Web Proxy https://cloud.google.com/secure-web-proxy/docs/overview. The proxy is under IP: 10.10.0.16. Besides that, it has a local DNS Zone proxy.carecode.lan that ...
p.magalhaes's user avatar
0 votes
0 answers
236 views

curl: (60) SSL: unable to obtain common name from peer certificate

I'm trying to create self-signed certificates for my webserver but it's not going well. The title is the error message curl gives me when I run curl --noproxy "*" https://example.com (with ...
Seal_bebbe's user avatar
-1 votes
1 answer
118 views

How to securely access a machine using PowerShell remoting over the Internet?

I have an Azure VM where PowerShell remoting is enabled and WinRM has the HTTPS listener configured to use a self-signed certificate. I can launch some commands on the VM from another machine on the ...
Palec's user avatar
  • 129
1 vote
2 answers
332 views

Certificate chains on server and client

I have OpenSSL Certificate Authority, and I have generated Root certificate (self-signed), Intermediate certificate (signed by Root certificate), Server certificate (signed by Intermediate certificate)...
John's user avatar
  • 115
0 votes
0 answers
246 views

OpenLDAP won't look at CA certificate

I have set up an LDAP server that I would like to connect to from a client machine. Ubuntu is OS of both server and client, TLS is active and since this is a practice project, all my certificates are ...
Seal_bebbe's user avatar
0 votes
1 answer
1k views

Use openssl 3 to create a self-signed certificate just like what "New-SelfSignedCertificate" can

First of all, I did googling about openssl, such as this one, and also tried dozens of time on creating a valid self-signed certificate. But I guess asking on serverfault would be much quicker. My ...
user53815's user avatar
0 votes
1 answer
539 views

How do I login to private Docker Registry with a self signed cert using WSL2 on Windows?

I have a private Docker registry that uses https and a self signed certificate. I have this working on my OSX machine by adding the certificate to The keychain. However, I would not like to connect to ...
Jackie's user avatar
  • 191
1 vote
0 answers
755 views

Entra Id (AAD) certificate based authentication (CBA) client certificate validation failed ("invalid request") error

I'm trying to get CBA to work according to this article: https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-certificate-based-authentication I created a self-signed CA for testing ...
The F's user avatar
  • 11
1 vote
1 answer
733 views

Error: The issuer of this certificate could not be found for AD issued Code Signing Certificate

Problem I've created a certificate through AD certificate services, but it has the error "The issuer of this certificate could not be found." despite the full chain being present in the PFX. ...
JohnLBevan's user avatar
  • 1,344
0 votes
1 answer
260 views

Openstack instance launch with self signed certificate throwing nova api error

trying to build a test environment with openstack:antelope on three nodes; controller, compute and networking. everything seems to be set up fine except i use a self-signed certificate and when i ...
aclaverie's user avatar
0 votes
1 answer
145 views

How to tell sqlsrv extension (php8.1-fpm) to accept self signed certificate?

I am currently encountering a problem on a Moodle server which uses an external MS SQL DB for its authentication and enrollments. During connection, an error occurs related to a self-signed ...
Gbl's user avatar
  • 5
0 votes
1 answer
241 views

Configure OpenVPN with existing certificate

I want to configure OpenVPN with available certificates, without using easy-rsa. I use openssl to generate private.key and csr.csr. Then I use opensource CA EJBCA to authenticate csr and create a ...
Patrick's user avatar
0 votes
0 answers
36 views

self signed for a site accessible through VPN

I'd like to know if what I'm doing is right or is there another way to do this? I have this site that is accessible through VPN and i'd like the end users not to see the "not secured" ...
Reefo Relaxo's user avatar
0 votes
1 answer
317 views

self signed certificate for a site that can only be access through VPN

I read a lot of articles about self signed certificates and I'm not exactly sure if I'm getting near to what I want to actually achieve. I'm trying to implement a self signed certificate so that the ...
Reefo Relaxo's user avatar
0 votes
1 answer
892 views

DST Root CA X3 (Self-signed) - has expired in certificate chain used by Let's Encrypt (Apache/Windows)

Is it safe to remove a self-signed root certificate from the chain; and what, if any, are the consequences of doing that? And how would I go about doing this on a Windows setup? The instructions under ...
MeSo2's user avatar
  • 274
0 votes
0 answers
701 views

.p12 certificate not working on mac (Ventura 13.4.1) but works on windows

I generated ssl certificates for (Nifi Registry https://nifi.apache.org/registry.html) I installed them in Windows.. it worked and i get a prompt to select certificate when i open the website https:// ...
santhosh's user avatar
  • 103
2 votes
0 answers
663 views

Access of K8s service within WSL2 + Docker Desktop from Linux machine over HTTPS

I've setup an authentication service in a Kubernetes cluster which lives in a Docker Desktop + WSL2 environment on a Windows 11 Pro machine. It can be reached e.g. via CURL & PostMan requests from ...
ShadowGames's user avatar
0 votes
1 answer
93 views

NetApp ONTAP certificate expiry_time format

I want to configure an expiration period of 5 years for a root CA certificate on NetApp ONTAP via its API. The expiry_time is documented like this: expiry_time Certificate expiration time. Can be ...
stackprotector's user avatar
1 vote
1 answer
232 views

Adding Chained CA certificate on /etc/ssl/certinfo.ldif file

I have been created following files for my LDAP server using certtool. 1.root.pem 2.ldap_crt.pem 3.ldap_key.pem Above created files has been configured in the /etc/ssl/certinfo.ldif file like ...
ram ajay's user avatar
2 votes
2 answers
1k views

create a self-signed certificate for a subdomain, the main domain does not belong to me

I have my internet box provider who offers me a free subdomain to connect to my network, ex: xxxxx.provider.com I have generated a self-signed certificate for the subdomain foo.provider.com I tried to ...
Pascal de Sélys's user avatar
1 vote
1 answer
351 views

Securing Apache Solr on an Apache TLS / SSL server

I have a SSL-only website hosted on a CentOS 7, Apache httpd based server. SSL certification is via a Let's Encrypt certificate. The domain has a HTTP Strict Transport Security (HSTS) policy. I am ...
Victoria Stuart's user avatar
0 votes
1 answer
2k views

Nginx not listening on 443 port (default nginx site)

Problem: The https://192.168.0.4/ page is not loading and returns (on firefox): Secure Connection Failed An error occurred during a connection to 192.168.0.4. PR_END_OF_FILE_ERROR The page you are ...
Szymon Starzyński's user avatar
0 votes
0 answers
999 views

How to setup dovecot to accept client certificates signed with a private CA when the server certificate is signed by a public CA

I have been running a postfix/dovecot mail server with no issue for several years using SSL/TLS and Let's Encrypt issued server certificates: /etc/dovecot/conf.d/10-ssl.conf ssl = required # Bundle ...
jean-christophe manciot's user avatar
0 votes
1 answer
488 views

How to create self-signed SSL cert on intranet server using IIS Manager : logged in as Admin but getting "access denied" error when saving the cert

I need to create a self-signed SSL certificate on an intranet server that is running IIS. I'm logged in remotely to the server as admin and am opening IIS Manager as admin, and choosing Server ...
Tim's user avatar
  • 213
-1 votes
1 answer
220 views

IIS HTTPS sites

I have ASP systems and APIs hosted on IIS, some of these sites need to bind with HTTPS. In order to bind them, I use a Self-Signed Certificate. The issue is that Browser considers it as untrusted and ...
adel sameer's user avatar
1 vote
0 answers
1k views

How to handle offline LAN self-signed SSL certificates?

I want to provide a git repo with tutorials and examples of WebRTC applications, for people who are just starting to learn and don't have any grasp at all on the technology involved. These tutorials ...
j1elo's user avatar
  • 111
-1 votes
1 answer
328 views

How to have good SSL/TLS certificates without proxying through cloudflare?

I currently have a site hosted on my local raspberry pi, and I have my domain registered through cloudflare. I would also like to be able to use PiVPN to access the contents of the VPS when I am away ...
Craig's user avatar
  • 99
0 votes
1 answer
129 views

Deprecation of OrganizationalUnit in Subject of TLS Certificates

Recently we got a mail from our certificate provider that they are removing the OU field from Subject of new/renewed certificates after 1st September. This is related to decision made by Certificate ...
Abhishek Jayaram's user avatar
2 votes
1 answer
2k views

How does load balancer verify self-signed certificates from the server

In my application, I have multiple instances of the server running behind a load balancer. Usually, SSL offloading takes place at the load-balancer in the case of AWS Application Load Balancers, and ...
Cyborg7459's user avatar
1 vote
0 answers
757 views

Kubernetes: using an intermediate CA which certificate is signed by a self-signed root CA certificate

Does anyone use own certificate chains for Kubernetes clusters? There's an issue with such kind of setup, and I would be grateful for any ideas on how to solve it. Let's assume we have a Root CA which ...
Volodymyr Melnyk's user avatar
0 votes
0 answers
3k views

How to make squid proxy to accept self-signed certificate?

I have an use-case were I have to accept self-signed certificate in Squid. The endpoints are Kubernetes clusters using self-signed certificates. The clusters will be recreated on demand with different ...
Zioalex's user avatar
  • 127
2 votes
1 answer
4k views

Replace Self Signed RDP Cert with CA Signed Cert

A few servers are getting picked up by security scans with the following message: The following certificate was at the top of the certificate chain sent by the remote host, but it is signed by an ...
jrd1989's user avatar
  • 688
1 vote
1 answer
7k views

Squid! FATAL: No valid signing certificate configured for HTTPS_port

I've been struggling with Squid 4.13 on Ubuntu 20.04 for about a week now. My latest (and hopefully last) problem is this: FATAL: No valid signing certificate configured for HTTPS_port and this is ...
JoBe's user avatar
  • 276
2 votes
0 answers
89 views

Which clients support self-signed certificates with DANE?

We've been considering to make more use of DANE as a decentralised authority for our certificates. Especially with S/MIME. However, the key obstacle is... how widely are DANE treated as an authority ...
Haneef Ibn Ahmad's user avatar
0 votes
1 answer
678 views

Using hostname only instead of FQDN in certificate

Can a localhost's name be used on a self signed certificate and used internally for the applications running on the same localhost? I am just trying to test my applications with certificates. Forgive ...
rooni's user avatar
  • 139
0 votes
1 answer
296 views

self signed certificate vs a certificat authority with email

I use a self signed certificate with my mail server. I use dovecot and postfix startTLS. I also have a DKIM setup for digital signatures and everything is working. However, when sending mail to ...
gstlouis's user avatar
  • 119
0 votes
1 answer
1k views

Certificates explanation for VPN Server Edgerouter + IPSec/IKEv2 + Active Directory Certification Authority

I’m trying to setup a IPSec/IKEv2 VPN Server for roadwarriors on my EdgeRouter 6P which has Linux Strongswan 5.6.3 on board, with Active Directory CA as TRUSTED ROOT CA and Microsoft NPS as Radius for ...
eric_'s user avatar
  • 1
0 votes
1 answer
488 views

Does DANE allow for trustable self-signed certificates?

DANE has 4 modes of operation indexed 0-3 with mode 3 i.e. Domain issued certificate allowing for self-signed certificates. Can this mode be used in a trustable manner? and if so does that mean that ...
MShakeG's user avatar
  • 111
3 votes
1 answer
7k views

Powershell self-signed certifcate private key not exportable

Using Powershell, I'm attempting to create a self-signed ssl certificate with a private key that can be exported. I've read and followed various tutorials, however the end result is always that no ...
Ryan DiFrancesco's user avatar
0 votes
1 answer
3k views

I am unable to provide a valid PEM file to HaProxy despite validating the PEM file and installing the self-signed certificate in the correct places

I will post my private key in its entirety because it is an example for development and debugging purposes. This is the process by which I have created my PEM file: https://serversforhackers.com/c/...
Anthony O's user avatar
  • 111
1 vote
1 answer
3k views

CA with intermediate certificate for vault

I want to setup Private CA for internal services using Vault (HashiCorp). I am generating Root CA & Intermediate CA certificate outside of Vault. Vault will be generating short-lived (30 days) ...
rp346's user avatar
  • 91
0 votes
1 answer
2k views

certbot --apache uses wrong domain name but claims to use the right one

I am running a website with apache on RHEL7 on the domain https://www.ayeaye.at. I am using certbot to obtain a certificate. The webserver works, I get a proper certificate for domain, and certbot ...
farbenrausch's user avatar
1 vote
0 answers
108 views

Azure VMSS automatic instance repair with LB probe and self signed certificate

I have 2 VMSS in azure with a internal LB infront of them. The LB has a 443 rule, and a probe to execute an https request with a request path pointing to healthcheck endpoint of the deployed ...
tranceporter's user avatar
4 votes
2 answers
13k views

How do I add certificates to Kubernetes to allow images to be pulled from a custom Harbor repository?

I am finding all sorts of walkthroughs on how to add certificates to be used in the pods themselves, but I can't seem to find info on how to setup Kubernetes to allow a self-signed cert for pulling ...
CodeChimp's user avatar
  • 343
0 votes
0 answers
146 views

Why does replacing certificate in WebLogic now require TLS1.2

We replaced a self-signed certificate JKS with a signed certificate in WebLogic 12.2.1.3.0. The C# desktop applications that connect to a service hosted there now fail with "The request was aborted: ...
Jamie Mellway's user avatar
1 vote
0 answers
137 views

Migrating Root Certificate Authority

I got thrown into the middle of a CA migration project. My co-workers are migrating a Root Certificate Authority off a 2008 R2 server and onto a new 2019 server. They have both servers running at the ...
EXPchange's user avatar
0 votes
1 answer
8k views

Openssl "Self-signed certificate in certificate chain" when server sends whole certificate chain with the self-signed certificate to the client

I am having the following certificate chain: Self-signed Certificate --> Intermediate --> Client cert, Server cert. I have application for ssl communication and also verify peer setting. I try to ...
ananetworking's user avatar
0 votes
1 answer
1k views

Requirements for certificates to sign PDFs in Adobe Reader?

I'm trying to set up PDF digital signatures using certificates generated by openssl. I have generated a CA certificate, and used that to sign end user certificates, which I archive in PKCS#12 format. ...
Andrew Roos's user avatar
0 votes
0 answers
139 views

Trusting a Self Signed Certificate on RHEL7

I'm running into an issue where I'm trying to import a self-signed certificate of one of our servers to one of our development boxes. I've tried adding the .cer file from the server to /etc/pki/ca-...
KMoberg's user avatar