Questions tagged [self-signed-certificate]

The tag has no usage guidance.

44 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3
votes
0answers
776 views

The revocation function was unable to check revocation for the certificate 0x80092012

Please help me to deal with self-signed revocation check I've used makecert.exe to create root and client certificate The problem is that certutil fails to check certificate with error The ...
3
votes
0answers
721 views

Creating SSL certificate signed by a self-signed CA certificate in Jetty

I'm trying to configure a jetty-distribution-9.3.1.v20150714 backend running on Java 1.8.0_45-b14 with a certificate signed by a self-signed CA certificate, for SSL pinning. Following Apple's guide, ...
2
votes
1answer
598 views

RSA/Machine keys broken on new 1809

When deploying an image of 1809, slipstreamed with any updates from January 2019 onward I'm having issue where the permissions are broken on the RSA\MachineKeys located here: C:\ProgramData\Microsoft\...
2
votes
0answers
2k views

OpenSSL self-signed certificates, Windows 10 laptops, and “This certificate has an invalid digital signature” error

I have the following: OpenSSL-generated, Self-signed Internal CA cert OpenSSL-generated Internal-CA signed, wildcard cert This cert protects our internal websites. e.g. "myservice.corp.example.com" ...
2
votes
1answer
430 views

Untrusted publisher for Powershell profile modules after creating, installing, and signing with certificate?

I'm still getting untrusted publisher after creating a self-signed certificate and installing it on a system, when trying to run my Powershell Profile sub modules? Do you want to run software from ...
2
votes
0answers
460 views

sign keytool generated cert/key pairs using easy-rsa openvpn intermediate CA

I am creating root and intermediate CA with easy-rsa using ./build-ca & ./build-inter commands consecutively. Now, I want my root ca as offline and I want my certs/keys signed by intermediate CA. ...
1
vote
0answers
35 views

making HTTPS work on LAN with self signed certificate

This is on a local area network (LAN). There is no internet connection. One admin has admin access to both the linux server and windows10 pc's. I have a linux server running third party software to ...
1
vote
0answers
54 views

Unable to Backup or Restore Certificate Authority?

I migrated Certificate Authority Enterprise from windows server 2012 R2 to Windows Server 2019. Both Server are VMs Here are the steps I took: Baskup CA database, key and registry config of the ...
1
vote
2answers
318 views

Cannot validate certificate hostname without SNI

I am using 2 proxies to intercept the communication between my phone and my server. Here is my topology: phone --> proxy 1 --> proxy 2 --> server proxy1 is listening to port 8080, proxy 2 ...
1
vote
1answer
519 views

cannot trust development https self-signed certificate in ubuntu 18.04.2 LTS

I created a rest api project and I'm tring to access the https endpoint using curl like this: $ dotnet new angular $ curl -I -X GET 'https://localhost:5001/api/SampleData/WeatherForecasts' curl: (60)...
1
vote
0answers
747 views

Self-signed certificate for SSTP VPN server

I'm developing a custom VPN solution that needs to support SSTP for Windows clients. For this, the SSTP specifications (and Windows) require my server to authenticate itself using a certificate during ...
1
vote
0answers
105 views

How to create self-signed certificate to sign Office macros

I need to create a self-signed certificate which I can use to sign different kind of Office macros (for Outlook, Excel etc.). I must be able to use this certificate on all workstations in my domain, ...
1
vote
0answers
464 views

Apache : Wrong hostname is checked when connecting to proxyed sever using SSL

I'm trying to make this setup work : Reverse proxy : SSL enabled and facing the internet using Let's Encrypt certificate (reverse-proxy.com). Target : Site accessed via the reverse proxy with SSL ...
1
vote
1answer
120 views

Reverse DNS and Mailserver and self generated certificates

this is my first question here, so don't kill me if it sounds stupid. I don't know much about server administration, that's why we booked a managed server to host our clients. So far we have been ...
1
vote
1answer
1k views

Signing/Generating SSL Certificates for ElasticSearch (search-guard)

I am trying to build my own ElasticSearch cluster and I decided to use an open source plugin called Search Guard. It requires generation of client and host/node certificates. In its demo there is a ...
1
vote
0answers
2k views

makecert.exe incorrectly reports duplicate certificates when using -is flag

I created a self-signed certificate that I then loaded into the Trusted Root Certification Authorities folder. This certificate acts as a trusted root for websites on my workstation. I am using ...
1
vote
0answers
2k views

Squid 3.5.4: ssl bump: error - Error negotiating SSL connection on FD 10: Success (0)

I am trying to install squid 3.5.4 (on docker, running debian 8) and run it in ssl-bump mode. Compilation: ./configure --prefix=/opt/squid --srcdir=. --disable-maintainer-mode \ --disable-dependency-...
1
vote
2answers
7k views

Create a self-signed certificate on Windows Server 2008 R2 with powershell v2.0

I'm trying to create a self-signed certificate using power shell. I have tried using import-module PKI but seems like it's supported on powershell v3.0 onward .Is any other way I could create a self-...
0
votes
0answers
20 views

Create a Self Signed Certificate for WSUS

I am following this as I want to set up SCCM to obtain updates for 3rd party products. Is there a way I can create a self signed certificate for WSUS? The information I can find online is using 3rd ...
0
votes
0answers
15 views

OpenSSL invalid revocation date / update CRL?

I have an index.txt file where I changed the value of a certificate - whose certificate file I do not have - from V to R to revoke it. The index.txt looks as follows exemplarily: V 220303095424Z ...
0
votes
0answers
45 views

how to connect mkr1000 with mosquitto broker while using self signed certificate?

I am having a problem connecting to a mqtt server using self signed certificate. I want to connect my mkr1000 securely to my mosquitto MQTT server on ubuntu. I am generating a CSR on mkr1000 using ...
0
votes
0answers
92 views

Gitlab runner throws ERROR: Failed to parse PEM

I have a self hosted gl instance. One of my runners is installed on a windows machine which gives me some headache. My GL instance uses a self signed certificate. I created a .pem from my cert file ...
0
votes
0answers
32 views

Can't secure my Gitlab with self-signed SSL because browsers don't accept it

I am trying to secure my Gitlab server with self signed certificates and I fail over and over again because the browsers refuse to trust my certificates. What works is Chrome combined with Mac. I ...
0
votes
0answers
29 views

Need some clarifications on CA certificates and the way they work

I'm gonna try to explain my question as clear as I can (Windows Server 2019 with roles: AD DC/DHCP/DNS/VPN RemoteAccess) So for example we create a template for VPN certificate (for IKEv2 and SSTP) ...
0
votes
1answer
71 views

IIS-created self signed certificates (2 servers, same domain)

I have 2 web servers in Azure (prod and test). I have created (temporarily) a self signed certificate (using IIS) on both. One certificate works fine, but the other is causing downloads to fail ...
0
votes
0answers
26 views

How do I tell the difference between a self signed ca I made for myself for signing scripts and ones that were already there?

Basically my question is, how do I know when a certificate I find in my cert:/localmachine/my store is self signed and not already present when I start using a new computer. If you do a Get-ChildItem ...
0
votes
0answers
4k views

x509 certificate not valid for any names when added IP address to openssl.cnf

A self-signed certificate works well while the command used to generate it on a ubuntu machine is: openssl req -x509 -newkey rsa:4096 -keyout private.key -out cert.crt -days 365 -nodes If the ...
0
votes
1answer
133 views

How can I generate a self signed certificate that will not fire a SSL_ERROR_BAD_CERT_DOMAIN?

I need to generate a self signed certificate for my application and I want to be able to make it valid if a self generated root certificate have been added to the web browser manually. The problem is ...
0
votes
1answer
224 views

Self-Signed Certificate working in OS X but not Windows

Im trying to create a self-signed certificate to use a HTTPS connection to access my internal site (jira.intranet.com). I have successfully followed this article https://security.stackexchange.com/...
0
votes
0answers
857 views

Node.js HTTPS error (SSL_ERROR_NO_CYPHER_OVERLAP) - no common encryption algorithm(s)

I have seen other similar questions but non addresses my problem. I have generated my TLS (openSSL) Self-Signed certificate, but seems not working on my NodeJS server. Instructions to generate SSL ...
0
votes
1answer
663 views

Self signed certificate is still trusted after revocation

I have create Root CA and Server Certificate following didierstevens blog. My browsers still trusts the certificate even after revoking the server certificate. I was getting certificate revoked error ...
0
votes
1answer
31 views

Will an IIS SelfSSL certificate still be valid when the signing server is replaced?

Will my 10 year valid self-signed certificate, that is using a common name not resembling any hostname, still be valid/trusted by others in the AD, after the signing server is replaced in maybe a few ...
0
votes
0answers
1k views

How to generate client certificate for OpenVPN when you only have server.p12 and dh2048.pem?

I have a server with openvpn up and running, there are only two files specified in the server configuration: dh /etc/openvpn/dh2048.pem pkcs12 /etc/openvpn/server.p12 I can read these files. I need ...
0
votes
0answers
1k views

AWS API Gateway: self-signed cert for backend HTTP endpoint integration

I have a simple AWS API gateway endpoint. It accepts an https GET request, this is passed to a back-end https API via an integraiton request, and returns simple JSON. This works great when we hit ...
0
votes
1answer
1k views

Client Certificate Authentication and Windows Authentication on IIS

I have a https service hosted in IIS 10 which previously was using windows authentication, and was working good. Now, we need to implement Client Certificate Authentication. Currently i have enabled ...
0
votes
1answer
361 views

Is it possible to have full SSL security on localhost services?

I've been reading a lot about SSL certificate as of late and trying to get my localhost services to have SSL certificates to avoid warnings and whatnot. These services are 100% local, their ports are ...
0
votes
0answers
547 views

Cannot connect to a site with a self-signed certificate

So we've just set up a site with IIS 8.0, that is normally accesible via port 80 and no certificate requirement. we've created a self signed certificate we've set up site bindings through port 443 ...
0
votes
1answer
375 views

Not able to get https response from nginx server after installing self signed certificate

Getting no response from server when connecting with https:// Http is running fine I have installed self signed certificate and configured properly without errors. I am running nginx with php-fpm. I ...
0
votes
1answer
2k views

WildFly with client certifactes: javax.net.ssl.SSLException: Received fatal alert: unknown_ca

I'm trying to install a wildfly9 server with client certificate authorization. To do that I have: On the Client: Create a self signed certificate: keytool -genkey -keystore client.keystore -validity ...
0
votes
1answer
326 views

Self-signed SSL certificate to match multiple subdomains

I have a bunch of sites served through nginx with SSL with self-signed certificates, each of which is on a subdomain, e.g.: https://app1.example.com https://app2.example.com My user base is small ...
0
votes
0answers
315 views

Self Signed Certificate for RDP over Internet - Why Not?

I was recently informed on SF that using a self-signed certificate for RDP over a public interface is not recommended. In this particular scenario, I'd like to understand more about why. The ...
0
votes
1answer
75 views

Jboss SSL connection persistent

I have a Client code relying on Jboss 5.1 which uses self signed certificates for connecting to credit card servers over HTTPS. Certificate expired on 03-13-2015 9:55 AM and it got replaced the ...
0
votes
2answers
469 views

Chef certification check fail “cookbook upload” despite success “knife ssl check”

I had placed crt key from "Distributor", and then checked and successed. But "knife cookbook upload" failed. Chef Server Hostname : "Distributor" Cent OS 7 chef-server-core-12.4.1-1.el7.x86_64 ...
-2
votes
1answer
265 views

Installing self-signed certificate on tomcat

down vote favorite The question: I have an application running under tomcat which calls another application under the same tomcat via a gateways which has a self signed SSL certificate installed. When ...