Questions tagged [self-signed-certificate]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
35 views

Generate end-entity certificate with OpenSSL for localhost on IIS

I would like to ask how to generate end entity certificate based on my own CA root certificate? I've generated root CA this way: openssl req -x509 -newkey rsa:4096 -sha256 -days 3650 -nodes \ -...
0
votes
0answers
16 views

Create a Self Signed Certificate for WSUS

I am following this as I want to set up SCCM to obtain updates for 3rd party products. Is there a way I can create a self signed certificate for WSUS? The information I can find online is using 3rd ...
0
votes
0answers
14 views

OpenSSL invalid revocation date / update CRL?

I have an index.txt file where I changed the value of a certificate - whose certificate file I do not have - from V to R to revoke it. The index.txt looks as follows exemplarily: V 220303095424Z ...
0
votes
1answer
25 views

How to avoid HSTS error by hosts redirect with self-signed certificate? [closed]

I created this records in windows hosts file 127.0.0.1 a.domain.name 127.0.0.1 b.domain.name 127.0.0.1 c.domain.name where 127.0.0.1 - ip of my server [a,b,c].domain.name - domains wich from i ...
0
votes
1answer
2k views

WildFly with client certifactes: javax.net.ssl.SSLException: Received fatal alert: unknown_ca

I'm trying to install a wildfly9 server with client certificate authorization. To do that I have: On the Client: Create a self signed certificate: keytool -genkey -keystore client.keystore -validity ...
2
votes
1answer
594 views

RSA/Machine keys broken on new 1809

When deploying an image of 1809, slipstreamed with any updates from January 2019 onward I'm having issue where the permissions are broken on the RSA\MachineKeys located here: C:\ProgramData\Microsoft\...
1
vote
1answer
503 views

cannot trust development https self-signed certificate in ubuntu 18.04.2 LTS

I created a rest api project and I'm tring to access the https endpoint using curl like this: $ dotnet new angular $ curl -I -X GET 'https://localhost:5001/api/SampleData/WeatherForecasts' curl: (60)...
0
votes
0answers
43 views

how to connect mkr1000 with mosquitto broker while using self signed certificate?

I am having a problem connecting to a mqtt server using self signed certificate. I want to connect my mkr1000 securely to my mosquitto MQTT server on ubuntu. I am generating a CSR on mkr1000 using ...
1
vote
2answers
7k views

Create a self-signed certificate on Windows Server 2008 R2 with powershell v2.0

I'm trying to create a self-signed certificate using power shell. I have tried using import-module PKI but seems like it's supported on powershell v3.0 onward .Is any other way I could create a self-...
0
votes
1answer
1k views

Client Certificate Authentication and Windows Authentication on IIS

I have a https service hosted in IIS 10 which previously was using windows authentication, and was working good. Now, we need to implement Client Certificate Authentication. Currently i have enabled ...
1
vote
1answer
1k views

Signing/Generating SSL Certificates for ElasticSearch (search-guard)

I am trying to build my own ElasticSearch cluster and I decided to use an open source plugin called Search Guard. It requires generation of client and host/node certificates. In its demo there is a ...
0
votes
0answers
81 views

Gitlab runner throws ERROR: Failed to parse PEM

I have a self hosted gl instance. One of my runners is installed on a windows machine which gives me some headache. My GL instance uses a self signed certificate. I created a .pem from my cert file ...
1
vote
0answers
33 views

making HTTPS work on LAN with self signed certificate

This is on a local area network (LAN). There is no internet connection. One admin has admin access to both the linux server and windows10 pc's. I have a linux server running third party software to ...
1
vote
0answers
52 views

Unable to Backup or Restore Certificate Authority?

I migrated Certificate Authority Enterprise from windows server 2012 R2 to Windows Server 2019. Both Server are VMs Here are the steps I took: Baskup CA database, key and registry config of the ...
0
votes
0answers
31 views

Can't secure my Gitlab with self-signed SSL because browsers don't accept it

I am trying to secure my Gitlab server with self signed certificates and I fail over and over again because the browsers refuse to trust my certificates. What works is Chrome combined with Mac. I ...
-1
votes
2answers
127 views

How to add a header to my apache2 server

I have an apache2 web server for testing only (not a production server). It is running on Ubuntu 18.04. I have configured it with TLS. I want to add a header. So I navigated to this file: /etc/...
0
votes
1answer
647 views

openssl keeps creating v1 certificate instead of v3

Hell everyone, so i'm trying to create a self signed certificate for my domain and for some reason openssl keeps creating V1 certificates for my server instead of V3 and that is causing browsers to ...
0
votes
1answer
64 views

How long it takes for the Issued certificates to reach the requester's computer?

Windows server 2019 with CA role, made a certificate template and enabled the option "CA certificate manager approval" in it, then issued it on my CA server. now on a client I went to the personal ...
0
votes
0answers
29 views

Need some clarifications on CA certificates and the way they work

I'm gonna try to explain my question as clear as I can (Windows Server 2019 with roles: AD DC/DHCP/DNS/VPN RemoteAccess) So for example we create a template for VPN certificate (for IKEv2 and SSTP) ...
0
votes
1answer
66 views

IIS-created self signed certificates (2 servers, same domain)

I have 2 web servers in Azure (prod and test). I have created (temporarily) a self signed certificate (using IIS) on both. One certificate works fine, but the other is causing downloads to fail ...
1
vote
1answer
1k views

Self signed ssl I created for localhost cannot be trusted even though I have already imported it to chrome

I am creating https server side that I am using to practice OAuth to Instagram which requires https. I generated a certificate using ssl by running the script from the following link: https://gist....
1
vote
2answers
311 views

Cannot validate certificate hostname without SNI

I am using 2 proxies to intercept the communication between my phone and my server. Here is my topology: phone --> proxy 1 --> proxy 2 --> server proxy1 is listening to port 8080, proxy 2 ...
0
votes
2answers
1k views

How could I prevent NetExtender Cli to asking certificate confirmation?

Our company is using self-signed SonicWall for firewall facility. And remote clients needs to be connect to internal network through VPN via NetExtender client. Some of the clients are using Linux OS ...
1
vote
1answer
225 views

Apache 2.4 mutual authentication - AH01797: client denied by server configuration

So I'm trying to set up Apache 2.4 mutual authentication on a virtual host configuration. Given the below environment, what am I missing? Server is: Slackware 14.2 x64, Apache 2.4.39, OpenSSL 1.0.2r ...
0
votes
0answers
26 views

How do I tell the difference between a self signed ca I made for myself for signing scripts and ones that were already there?

Basically my question is, how do I know when a certificate I find in my cert:/localmachine/my store is self signed and not already present when I start using a new computer. If you do a Get-ChildItem ...
0
votes
0answers
4k views

x509 certificate not valid for any names when added IP address to openssl.cnf

A self-signed certificate works well while the command used to generate it on a ubuntu machine is: openssl req -x509 -newkey rsa:4096 -keyout private.key -out cert.crt -days 365 -nodes If the ...
0
votes
1answer
130 views

How can I generate a self signed certificate that will not fire a SSL_ERROR_BAD_CERT_DOMAIN?

I need to generate a self signed certificate for my application and I want to be able to make it valid if a self generated root certificate have been added to the web browser manually. The problem is ...
0
votes
1answer
222 views

Self-Signed Certificate working in OS X but not Windows

Im trying to create a self-signed certificate to use a HTTPS connection to access my internal site (jira.intranet.com). I have successfully followed this article https://security.stackexchange.com/...
0
votes
2answers
2k views

SSL Self-Signed Certificate Vulnerability Keeps Returning

So, I've been dealing with a recurring problem with my workstations self-generating certificates. They're appearing in the "Personal" certificate store. Even after I manually delete them from the ...
1
vote
0answers
737 views

Self-signed certificate for SSTP VPN server

I'm developing a custom VPN solution that needs to support SSTP for Windows clients. For this, the SSTP specifications (and Windows) require my server to authenticate itself using a certificate during ...
6
votes
1answer
18k views

Why openssl ignore -days for expiration date for self signed certificate?

I have a bash script that generates a self-signed certificate and works perfectly fine: #! /bin/bash # Generate self signed root CA cert openssl req -nodes -x509 -days 358000 -newkey rsa:2048 -...
3
votes
1answer
2k views

Cannot add a self signed certificate in Firefox

I need to set up an IIS webserver that will be accessed by a small, finite number of users. I was considering using a self-signed certificate only, and manually installing it on the user's systems. ...
2
votes
1answer
524 views

What is the use of SigningCertificate in AWS Cognito

I'm using AWS Cognito for my user authentication. I want to know the actual use of SigningCertificate in AWS cognito? NOTE: We can get the SigningCertificate of AWS Cognito usign this ...
1
vote
0answers
105 views

How to create self-signed certificate to sign Office macros

I need to create a self-signed certificate which I can use to sign different kind of Office macros (for Outlook, Excel etc.). I must be able to use this certificate on all workstations in my domain, ...
0
votes
2answers
3k views

Creating Self Signed Certificates with New-SelfSignedCertificate

I used to create self signed certificates using makecert like so makecert.exe -iv fooCA.pvk -ic fooCA.cer -n "CN=Username" -pe -sv username.pvk -a sha1 -len 2048 -...
0
votes
1answer
1k views

Configuring Imported Self Signed SSL Certificate to SQL Server Express

I've created a self-signed certificate and configured with SQL Server Express. The encryption works fine on my PC. When I export the certificate to another PC I can import fine and can see the ...
0
votes
1answer
122 views

65536bit long certificate self-signing using openssl fails

I created my privatekey & certificate request using openssl req -new -newkey rsa:65536 > server.cert.csr. This took some minutes and produced 2 files. Then I decrypted my private key using ...
3
votes
3answers
82 views

Does filling out the Country Name, State etc. matter when creating a self-signed certificate for Postfix?

When I set up Postfix I have to create a cert because the snakeoil cert included with Postfix is there strictly for the purpose of demonstration. I use this command: sudo openssl req -x509 -newkey ...
0
votes
0answers
850 views

Node.js HTTPS error (SSL_ERROR_NO_CYPHER_OVERLAP) - no common encryption algorithm(s)

I have seen other similar questions but non addresses my problem. I have generated my TLS (openSSL) Self-Signed certificate, but seems not working on my NodeJS server. Instructions to generate SSL ...
16
votes
2answers
2k views

Why not validate self signed certificates through DNS-record instead of letsencrypt

I was just wondering. We use a lot of SSL certificates. Nowadays, we almost exclusively use letsencrypt (thanks!). The bottom line of these certificates is, that proof of ownership of the domain name(...
0
votes
1answer
652 views

Self signed certificate is still trusted after revocation

I have create Root CA and Server Certificate following didierstevens blog. My browsers still trusts the certificate even after revoking the server certificate. I was getting certificate revoked error ...
1
vote
2answers
2k views

Unable to access a server with a self-signed SSL certificate from some devices

I'm struggling to connect to an SSL site (self-signed certificate) that seems to work from other computers/internet connections. I've tried accessing the site using wget: wget https://example.com --...
0
votes
1answer
233 views

Cannot create SSL Engine: The target principle name is incorrect, SSL and SAP HANA

I'm getting the following error when attempting to connect to a tenant database in a multi-tenant SAP HANA Server running on SUSE Linux: I can connect via SSL to the system database of the HANA ...
2
votes
2answers
3k views

Issue with generating self-sign certificate with proper SAN field

I am trying to configure Janus Gateway and I am experiencing with an issue with my self-signed certificate, see log below Jan 25 09:50:46 localhost platform: [2018/01/25 09:50:46 EST] [EROR] /api/v4/...
0
votes
1answer
30 views

Will an IIS SelfSSL certificate still be valid when the signing server is replaced?

Will my 10 year valid self-signed certificate, that is using a common name not resembling any hostname, still be valid/trusted by others in the AD, after the signing server is replaced in maybe a few ...
0
votes
0answers
1k views

How to generate client certificate for OpenVPN when you only have server.p12 and dh2048.pem?

I have a server with openvpn up and running, there are only two files specified in the server configuration: dh /etc/openvpn/dh2048.pem pkcs12 /etc/openvpn/server.p12 I can read these files. I need ...
0
votes
0answers
1k views

AWS API Gateway: self-signed cert for backend HTTP endpoint integration

I have a simple AWS API gateway endpoint. It accepts an https GET request, this is passed to a back-end https API via an integraiton request, and returns simple JSON. This works great when we hit ...
0
votes
1answer
27 views

Certificate Error since Migrating to new Exchange 2007 Server

I just finished moving mailboxes last night to a second Exchange 2007 server I built (moving from physical to virtual). Clients are pointed to the new server. Getting ready to remove the old server ...
1
vote
0answers
461 views

Apache : Wrong hostname is checked when connecting to proxyed sever using SSL

I'm trying to make this setup work : Reverse proxy : SSL enabled and facing the internet using Let's Encrypt certificate (reverse-proxy.com). Target : Site accessed via the reverse proxy with SSL ...
3
votes
0answers
773 views

The revocation function was unable to check revocation for the certificate 0x80092012

Please help me to deal with self-signed revocation check I've used makecert.exe to create root and client certificate The problem is that certutil fails to check certificate with error The ...