Questions tagged [self-signed-certificate]
A self signed certificate is signed with its own private key instead of the private key of a higher or publicly trusted certificate authority (CA).
133
questions
0
votes
0
answers
34
views
Docker installed from snap fails to receive remote network traffic
I have an API hosted on a docker image which worked in the past, but which now is failing to work except on the host machine. I can successfully run queries using either localhost or the machine's ...
- 99
1
vote
0
answers
308
views
Access of K8s service within WSL2 + Docker Desktop from Linux machine over HTTPS
I've setup an authentication service in a Kubernetes cluster which lives in a Docker Desktop + WSL2 environment on a Windows 11 Pro machine.
It can be reached e.g. via CURL & PostMan requests from ...
- 111
0
votes
1
answer
39
views
NetApp ONTAP certificate expiry_time format
I want to configure an expiration period of 5 years for a root CA certificate on NetApp ONTAP via its API.
The expiry_time is documented like this:
expiry_time
Certificate expiration time. Can be ...
- 556
1
vote
1
answer
66
views
Adding Chained CA certificate on /etc/ssl/certinfo.ldif file
I have been created following files for my LDAP server using certtool.
1.root.pem
2.ldap_crt.pem
3.ldap_key.pem
Above created files has been configured in the /etc/ssl/certinfo.ldif file like ...
- 11
2
votes
2
answers
252
views
create a self-signed certificate for a subdomain, the main domain does not belong to me
I have my internet box provider who offers me a free subdomain to connect to my network, ex: xxxxx.provider.com
I have generated a self-signed certificate for the subdomain foo.provider.com
I tried to ...
0
votes
0
answers
130
views
SETTING UP A SSTP VPN SERVER (cannot establish the connection)
Today I wanted to do some labs of SSTP Windows Server VPN.
What I have done so far, it’s to build a Windows server 2019 as a Domain Controller and as a Certificate Authority.
From my CA I have created ...
0
votes
0
answers
117
views
SSL Certificate Not Being Recognized On Mozilla Firefox (MAMP Server)
I’m currently using an SSL certificate on a MAMP server that I made myself via OpenSSL. I’m running the MAMP server on an Apple Mac that’s running Monterey 12.4. I have no problems running the website ...
- 1
0
votes
0
answers
209
views
Is it possible to generate a new self-signed certificate from an existing private key with powershell?
New-SelfSignedCertificate -ExistingKey "c:\cts_privkey.pem" -Container localhost -Provider "Microsoft Enhanced RSA and AES cryptographic Provider" -DnsName "example.com" -...
- 101
1
vote
1
answer
219
views
Securing Apache Solr on an Apache TLS / SSL server
I have a SSL-only website hosted on a CentOS 7, Apache httpd based server. SSL certification is via a Let's Encrypt certificate. The domain has a HTTP Strict Transport Security (HSTS) policy.
I am ...
- 111
0
votes
1
answer
947
views
Nginx not listening on 443 port (default nginx site)
Problem:
The https://192.168.0.4/ page is not loading and returns (on firefox):
Secure Connection Failed
An error occurred during a connection to 192.168.0.4. PR_END_OF_FILE_ERROR
The page you are ...
0
votes
0
answers
558
views
How to setup dovecot to accept client certificates signed with a private CA when the server certificate is signed by a public CA
I have been running a postfix/dovecot mail server with no issue for several years using SSL/TLS and Let's Encrypt issued server certificates:
/etc/dovecot/conf.d/10-ssl.conf
ssl = required
# Bundle ...
0
votes
1
answer
233
views
How to create self-signed SSL cert on intranet server using IIS Manager : logged in as Admin but getting "access denied" error when saving the cert
I need to create a self-signed SSL certificate on an intranet server that is running IIS. I'm logged in remotely to the server as admin and am opening IIS Manager as admin, and choosing Server ...
- 173
-1
votes
1
answer
114
views
IIS HTTPS sites
I have ASP systems and APIs hosted on IIS, some of these sites need to bind with HTTPS. In order to bind them, I use a Self-Signed Certificate. The issue is that Browser considers it as untrusted and ...
1
vote
0
answers
590
views
How to handle offline LAN self-signed SSL certificates?
I want to provide a git repo with tutorials and examples of WebRTC applications, for people who are just starting to learn and don't have any grasp at all on the technology involved. These tutorials ...
- 111
-1
votes
1
answer
234
views
How to have good SSL/TLS certificates without proxying through cloudflare?
I currently have a site hosted on my local raspberry pi, and I have my domain registered through cloudflare. I would also like to be able to use PiVPN to access the contents of the VPS when I am away ...
- 99
0
votes
1
answer
60
views
Deprecation of OrganizationalUnit in Subject of TLS Certificates
Recently we got a mail from our certificate provider that they are removing the OU field from Subject of new/renewed certificates after 1st September.
This is related to decision made by Certificate ...
2
votes
1
answer
906
views
How does load balancer verify self-signed certificates from the server
In my application, I have multiple instances of the server running behind a load balancer.
Usually, SSL offloading takes place at the load-balancer in the case of AWS Application Load Balancers, and ...
- 21
1
vote
0
answers
379
views
Kubernetes: using an intermediate CA which certificate is signed by a self-signed root CA certificate
Does anyone use own certificate chains for Kubernetes clusters?
There's an issue with such kind of setup, and I would be grateful for any ideas on how to solve it.
Let's assume we have a Root CA which ...
- 577
2
votes
0
answers
1k
views
How to make squid proxy to accept self-signed certificate?
I have an use-case were I have to accept self-signed certificate in Squid.
The endpoints are Kubernetes clusters using self-signed certificates. The clusters will be recreated on demand with different ...
- 121
2
votes
1
answer
2k
views
Replace Self Signed RDP Cert with CA Signed Cert
A few servers are getting picked up by security scans with the following message:
The following certificate was at the top of the certificate chain sent by the remote host, but it is signed by an ...
- 668
1
vote
1
answer
4k
views
Squid! FATAL: No valid signing certificate configured for HTTPS_port
I've been struggling with Squid 4.13 on Ubuntu 20.04 for about a week now.
My latest (and hopefully last) problem is this:
FATAL: No valid signing certificate configured for HTTPS_port
and this is ...
- 266
2
votes
0
answers
46
views
Which clients support self-signed certificates with DANE?
We've been considering to make more use of DANE as a decentralised authority for our certificates.
Especially with S/MIME.
However, the key obstacle is... how widely are DANE treated as an authority ...
0
votes
1
answer
347
views
Using hostname only instead of FQDN in certificate
Can a localhost's name be used on a self signed certificate and used internally for the applications running on the same localhost?
I am just trying to test my applications with certificates.
Forgive ...
- 139
0
votes
1
answer
143
views
self signed certificate vs a certificat authority with email
I use a self signed certificate with my mail server. I use dovecot and postfix startTLS. I also have a DKIM setup for digital signatures and everything is working. However, when sending mail to ...
- 119
0
votes
1
answer
739
views
Certificates explanation for VPN Server Edgerouter + IPSec/IKEv2 + Active Directory Certification Authority
I’m trying to setup a IPSec/IKEv2 VPN Server for roadwarriors on my EdgeRouter 6P which has Linux Strongswan 5.6.3 on board, with Active Directory CA as TRUSTED ROOT CA and Microsoft NPS as Radius for ...
- 1
0
votes
1
answer
328
views
Does DANE allow for trustable self-signed certificates?
DANE has 4 modes of operation indexed 0-3 with mode 3 i.e. Domain issued certificate allowing for self-signed certificates. Can this mode be used in a trustable manner? and if so does that mean that ...
- 111
3
votes
1
answer
4k
views
Powershell self-signed certifcate private key not exportable
Using Powershell, I'm attempting to create a self-signed ssl certificate with a private key that can be exported. I've read and followed various tutorials, however the end result is always that no ...
0
votes
1
answer
2k
views
I am unable to provide a valid PEM file to HaProxy despite validating the PEM file and installing the self-signed certificate in the correct places
I will post my private key in its entirety because it is an example for development and debugging purposes.
This is the process by which I have created my PEM file:
https://serversforhackers.com/c/...
- 111
1
vote
1
answer
2k
views
CA with intermediate certificate for vault
I want to setup Private CA for internal services using Vault (HashiCorp). I am generating Root CA & Intermediate CA certificate outside of Vault. Vault will be generating short-lived (30 days) ...
- 119
0
votes
1
answer
1k
views
certbot --apache uses wrong domain name but claims to use the right one
I am running a website with apache on RHEL7 on the domain https://www.ayeaye.at. I am using certbot to obtain a certificate.
The webserver works, I get a proper certificate for domain, and certbot ...
1
vote
0
answers
77
views
Azure VMSS automatic instance repair with LB probe and self signed certificate
I have 2 VMSS in azure with a internal LB infront of them. The LB has a 443 rule, and a probe to execute an https request with a request path pointing to healthcheck endpoint of the deployed ...
- 111
3
votes
2
answers
7k
views
How do I add certificates to Kubernetes to allow images to be pulled from a custom Harbor repository?
I am finding all sorts of walkthroughs on how to add certificates to be used in the pods themselves, but I can't seem to find info on how to setup Kubernetes to allow a self-signed cert for pulling ...
- 323
0
votes
0
answers
125
views
Why does replacing certificate in WebLogic now require TLS1.2
We replaced a self-signed certificate JKS with a signed certificate in WebLogic 12.2.1.3.0.
The C# desktop applications that connect to a service hosted there now fail with "The request was aborted: ...
1
vote
0
answers
93
views
Migrating Root Certificate Authority
I got thrown into the middle of a CA migration project. My co-workers are migrating a Root Certificate Authority off a 2008 R2 server and onto a new 2019 server. They have both servers running at the ...
- 11
0
votes
1
answer
6k
views
Openssl "Self-signed certificate in certificate chain" when server sends whole certificate chain with the self-signed certificate to the client
I am having the following certificate chain:
Self-signed Certificate --> Intermediate --> Client cert, Server cert. I have application for ssl communication and also verify peer setting. I try to ...
0
votes
1
answer
1k
views
Requirements for certificates to sign PDFs in Adobe Reader?
I'm trying to set up PDF digital signatures using certificates generated by openssl. I have generated a CA certificate, and used that to sign end user certificates, which I archive in PKCS#12 format. ...
0
votes
0
answers
100
views
Trusting a Self Signed Certificate on RHEL7
I'm running into an issue where I'm trying to import a self-signed certificate of one of our servers to one of our development boxes.
I've tried adding the .cer file from the server to /etc/pki/ca-...
- 1
0
votes
2
answers
5k
views
error when trying to add custom extensions to X509 certificates using openSSL
I am trying to add custom extensions to my self-signed certificate.
I tried the following
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -extfile myconfig.cnf -extensions ...
- 163
1
vote
1
answer
859
views
OpenSSL invalid revocation date / update CRL?
I have an index.txt file where I changed the value of a certificate - whose certificate file I do not have - from V to R to revoke it.
The index.txt looks as follows exemplarily:
V 220303095424Z ...
- 111
2
votes
1
answer
4k
views
Generate end-entity certificate with OpenSSL for localhost on IIS
I would like to ask how to generate end entity certificate based on my own CA root certificate?
I've generated root CA this way:
openssl req -x509 -newkey rsa:4096 -sha256 -days 3650 -nodes \
-...
- 31
0
votes
1
answer
1k
views
How to avoid HSTS error by hosts redirect with self-signed certificate? [closed]
I created this records in windows hosts file
127.0.0.1 a.domain.name
127.0.0.1 b.domain.name
127.0.0.1 c.domain.name
where
127.0.0.1 - ip of my server
[a,b,c].domain.name - domains wich from i ...
1
vote
0
answers
1k
views
making HTTPS work on LAN with self signed certificate
This is on a local area network (LAN). There is no internet connection. One admin has admin access to both the linux server and windows10 pc's.
I have a linux server running third party software to ...
- 805
1
vote
1
answer
595
views
Unable to Backup or Restore Certificate Authority?
I migrated Certificate Authority Enterprise from windows server 2012 R2 to Windows Server 2019. Both Server are VMs
Here are the steps I took:
Baskup CA database, key and registry config of the ...
- 111
1
vote
2
answers
10k
views
How to add a header to my apache2 server
I have an apache2 web server for testing only (not a production server). It is running on Ubuntu 18.04. I have configured it with TLS. I want to add a header. So I navigated to this file:
/etc/...
- 25
4
votes
3
answers
13k
views
openssl keeps creating v1 certificate instead of v3
Hell everyone,
so i'm trying to create a self signed certificate for my domain and for some reason openssl keeps creating V1 certificates for my server instead of V3 and that is causing browsers to ...
1
vote
1
answer
889
views
How long it takes for the Issued certificates to reach the requester's computer?
Windows server 2019 with CA role, made a certificate template and enabled the option "CA certificate manager approval" in it, then issued it on my CA server. now on a client I went to the personal ...
user299093
0
votes
1
answer
553
views
IIS-created self signed certificates (2 servers, same domain)
I have 2 web servers in Azure (prod and test).
I have created (temporarily) a self signed certificate (using IIS) on both.
One certificate works fine, but the other is causing downloads to fail ...
- 137
8
votes
1
answer
15k
views
Self signed ssl I created for localhost cannot be trusted even though I have already imported it to chrome
I am creating https server side that I am using to practice OAuth to Instagram which requires https.
I generated a certificate using ssl by running the script from the following link: https://gist....
- 81
1
vote
2
answers
1k
views
Cannot validate certificate hostname without SNI
I am using 2 proxies to intercept the communication between my phone and my server. Here is my topology:
phone --> proxy 1 --> proxy 2 --> server
proxy1 is listening to port 8080, proxy 2 is ...
- 111
2
votes
1
answer
2k
views
cannot trust development https self-signed certificate in ubuntu 18.04.2 LTS
I created a rest api project and I'm tring to access the https endpoint using curl like this:
$ dotnet new angular
$ curl -I -X GET 'https://localhost:5001/api/SampleData/WeatherForecasts'
curl: (60)...
- 1,121