Questions tagged [self-signed-certificate]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
16
votes
2answers
2k views

Why not validate self signed certificates through DNS-record instead of letsencrypt

I was just wondering. We use a lot of SSL certificates. Nowadays, we almost exclusively use letsencrypt (thanks!). The bottom line of these certificates is, that proof of ownership of the domain name(...
8
votes
3answers
13k views

How can I create self-signed certificate that is stronger than SHA-1?

For development environment, I can create create self-signed certificate in IIS7.5. But that certificate is SHA-1 and recently browsers are complaining about it. When I open FireBug I see following ...
6
votes
1answer
21k views

Why openssl ignore -days for expiration date for self signed certificate?

I have a bash script that generates a self-signed certificate and works perfectly fine: #! /bin/bash # Generate self signed root CA cert openssl req -nodes -x509 -days 358000 -newkey rsa:2048 -...
6
votes
1answer
4k views

nginx: No client certificate CA names sent

I have nginx and want it to verify client certificates. So I bought commercial certificate for server, and non-commercial for clients. Basically I've generated client certificates with easy-rsa ...
5
votes
2answers
19k views

how to create a SSL certificate chain from my own CA?

I use my own CA to create SSL certs for services in my infra. These certs are signed directly by my CA. It comes to me that this is likely a weak strategy, as if the cert was to be compromised, I ...
3
votes
2answers
1k views

How to certify a self-signed imap email server

My task is to retrieve emails from an imaps email server using Java so as a client I need to authenticate the email server using an appropriate certificate. It seems however, that this email server is ...
3
votes
1answer
3k views

Cannot add a self signed certificate in Firefox

I need to set up an IIS webserver that will be accessed by a small, finite number of users. I was considering using a self-signed certificate only, and manually installing it on the user's systems. ...
3
votes
3answers
86 views

Does filling out the Country Name, State etc. matter when creating a self-signed certificate for Postfix?

When I set up Postfix I have to create a cert because the snakeoil cert included with Postfix is there strictly for the purpose of demonstration. I use this command: sudo openssl req -x509 -newkey ...
3
votes
1answer
5k views

Convert cert .cer to .pem via OpenSSL plus using SHA-256

This might be me having done it wrong. I recently used OpenSSL to convert a .cer to .pem using this - openssl x509 -inform der -in certificate.cer -out certificate.pem (And then loaded the .pem onto ...
3
votes
1answer
13k views

How to make wget trust my self signed certificate (without using --no-check-certificate)? [duplicate]

Ubuntu 12.04 OpenSSL 1.0.1 14 Wget 1.13.4 My setup: create our own CA (our_own_ca.crt) generate a certificate which is signed with the above CA (graphite.local.crt) Concatenate that cert and the CA ...
3
votes
0answers
801 views

The revocation function was unable to check revocation for the certificate 0x80092012

Please help me to deal with self-signed revocation check I've used makecert.exe to create root and client certificate The problem is that certutil fails to check certificate with error The ...
3
votes
0answers
729 views

Creating SSL certificate signed by a self-signed CA certificate in Jetty

I'm trying to configure a jetty-distribution-9.3.1.v20150714 backend running on Java 1.8.0_45-b14 with a certificate signed by a self-signed CA certificate, for SSL pinning. Following Apple's guide, ...
2
votes
1answer
178 views

install self signed cert on user computers

I'm currently running a test Sharepoint 2013 server. Not all users are within the internal network. They can bypass the self signed cert warning for Sharepoint easily but the Office Web Apps cert ...
2
votes
2answers
2k views

Revoked certificate still valid

I've recently setup a new domain joined Standalone CA on a Windows 2012 R2 server which is publicly accessible and authenticating fine, however, revoked certificates still appear to be authenticating. ...
2
votes
1answer
617 views

What is the use of SigningCertificate in AWS Cognito

I'm using AWS Cognito for my user authentication. I want to know the actual use of SigningCertificate in AWS cognito? NOTE: We can get the SigningCertificate of AWS Cognito usign this ...
2
votes
2answers
3k views

Issue with generating self-sign certificate with proper SAN field

I am trying to configure Janus Gateway and I am experiencing with an issue with my self-signed certificate, see log below Jan 25 09:50:46 localhost platform: [2018/01/25 09:50:46 EST] [EROR] /api/v4/...
2
votes
3answers
12k views

How do I trust a self signed certificate?

I've generated a self signed certificate using openssl - it's entirely self signed and not signed by a self signed CA. I've imported it successfully into the nss database for use by browsers. I now ...
2
votes
1answer
12k views

How to unassign self-signed cert from SMTP on Exchange 2010?

We have a GoDaddy wildcard certificate that we have installed into Exchange 2010 and is successfully used on IIS connections for OWA. We have assigned this certificate to the SMTP Service as well as ...
2
votes
1answer
621 views

RSA/Machine keys broken on new 1809

When deploying an image of 1809, slipstreamed with any updates from January 2019 onward I'm having issue where the permissions are broken on the RSA\MachineKeys located here: C:\ProgramData\Microsoft\...
2
votes
0answers
2k views

OpenSSL self-signed certificates, Windows 10 laptops, and “This certificate has an invalid digital signature” error

I have the following: OpenSSL-generated, Self-signed Internal CA cert OpenSSL-generated Internal-CA signed, wildcard cert This cert protects our internal websites. e.g. "myservice.corp.example.com" ...
2
votes
1answer
437 views

Untrusted publisher for Powershell profile modules after creating, installing, and signing with certificate?

I'm still getting untrusted publisher after creating a self-signed certificate and installing it on a system, when trying to run my Powershell Profile sub modules? Do you want to run software from ...
2
votes
0answers
470 views

sign keytool generated cert/key pairs using easy-rsa openvpn intermediate CA

I am creating root and intermediate CA with easy-rsa using ./build-ca & ./build-inter commands consecutively. Now, I want my root ca as offline and I want my certs/keys signed by intermediate CA. ...
1
vote
2answers
11k views

Powershell New-SelfSignedCertificate missing -NotBefore in Windows 2012r2

My 2008 powershell script is not working correctly in 2012r2. The command New-SelfSignedCertificate -DnsName test.testdomain.com -NotBefore [datetime]::now.AddYears(10) comes back with: New-...
1
vote
1answer
120 views

Why am I getting URL mismatches on my wildcard self signed certificate?

I'm trying to set up a self signed wildcard certificate for use by Apache, normally this is pretty straightforward I just set a subjectalternate name with the root domain and specify *.dcrdev.com in ...
1
vote
2answers
664 views

Re-create SSL cert from key

So I have my own CA for self-signing SSL certs, but I lost my root certificate. I have a few dependent certs that list the subject info of my root cert. I have my CA's private key and the password to ...
1
vote
1answer
989 views

openssl keeps creating v1 certificate instead of v3

Hell everyone, so i'm trying to create a self signed certificate for my domain and for some reason openssl keeps creating V1 certificates for my server instead of V3 and that is causing browsers to ...
1
vote
1answer
636 views

Which certificate store do I put a third party self-signed SSL certificate to have authentication working without extra security risks?

I'm trying to setup client certificate authentication in an ASP.NET MVC3 application running in IIS 8. The client (Good Third Party) uses a self-signed SSL certificate to authenticate himself and my ...
1
vote
1answer
287 views

Signing Powershell scripts that are included in another script?

Do I need to sign every Powershell script (external .ps1 file) that I include in my Powershell profile? If so, can I sign it with the same certificate (or is that a worst practice)? And just to be ...
1
vote
1answer
678 views

How can I trust my self signed root CA on Fedora?

I've generated a root CA certificate and key on my fedora system, using the following command: openssl req -new -x509 -extensions v3_ca -keyout \ /etc/pki/CA/private/cakey.pem -out /etc/pki/CA/cacert....
1
vote
2answers
2k views

Unable to access a server with a self-signed SSL certificate from some devices

I'm struggling to connect to an SSL site (self-signed certificate) that seems to work from other computers/internet connections. I've tried accessing the site using wget: wget https://example.com --...
1
vote
1answer
4k views

Self Signed Root Certificate with SAN in child

I am trying to implement a better set of self signed certificates at my company. What I want is this: All certificates are signed by one root certificate, so developers can trust just this root ...
1
vote
1answer
31 views

OpenSSL invalid revocation date / update CRL?

I have an index.txt file where I changed the value of a certificate - whose certificate file I do not have - from V to R to revoke it. The index.txt looks as follows exemplarily: V 220303095424Z ...
1
vote
0answers
62 views

making HTTPS work on LAN with self signed certificate

This is on a local area network (LAN). There is no internet connection. One admin has admin access to both the linux server and windows10 pc's. I have a linux server running third party software to ...
1
vote
0answers
71 views

Unable to Backup or Restore Certificate Authority?

I migrated Certificate Authority Enterprise from windows server 2012 R2 to Windows Server 2019. Both Server are VMs Here are the steps I took: Baskup CA database, key and registry config of the ...
1
vote
1answer
2k views

Self signed ssl I created for localhost cannot be trusted even though I have already imported it to chrome

I am creating https server side that I am using to practice OAuth to Instagram which requires https. I generated a certificate using ssl by running the script from the following link: https://gist....
1
vote
2answers
360 views

Cannot validate certificate hostname without SNI

I am using 2 proxies to intercept the communication between my phone and my server. Here is my topology: phone --> proxy 1 --> proxy 2 --> server proxy1 is listening to port 8080, proxy 2 ...
1
vote
1answer
552 views

cannot trust development https self-signed certificate in ubuntu 18.04.2 LTS

I created a rest api project and I'm tring to access the https endpoint using curl like this: $ dotnet new angular $ curl -I -X GET 'https://localhost:5001/api/SampleData/WeatherForecasts' curl: (60)...
1
vote
1answer
258 views

Apache 2.4 mutual authentication - AH01797: client denied by server configuration

So I'm trying to set up Apache 2.4 mutual authentication on a virtual host configuration. Given the below environment, what am I missing? Server is: Slackware 14.2 x64, Apache 2.4.39, OpenSSL 1.0.2r ...
1
vote
0answers
805 views

Self-signed certificate for SSTP VPN server

I'm developing a custom VPN solution that needs to support SSTP for Windows clients. For this, the SSTP specifications (and Windows) require my server to authenticate itself using a certificate during ...
1
vote
0answers
109 views

How to create self-signed certificate to sign Office macros

I need to create a self-signed certificate which I can use to sign different kind of Office macros (for Outlook, Excel etc.). I must be able to use this certificate on all workstations in my domain, ...
1
vote
0answers
471 views

Apache : Wrong hostname is checked when connecting to proxyed sever using SSL

I'm trying to make this setup work : Reverse proxy : SSL enabled and facing the internet using Let's Encrypt certificate (reverse-proxy.com). Target : Site accessed via the reverse proxy with SSL ...
1
vote
1answer
121 views

Reverse DNS and Mailserver and self generated certificates

this is my first question here, so don't kill me if it sounds stupid. I don't know much about server administration, that's why we booked a managed server to host our clients. So far we have been ...
1
vote
0answers
12 views

Nginx ssl port 433 not open/listening (refused to connect) [duplicate]

I'm running nginx 1.6.2 on Linux and using CloudFlare origin certificates for HTTPS, I have installed the certificate and key in (for example) /path/to/certs and run chown 600 root on the directory ...
1
vote
1answer
1k views

Signing/Generating SSL Certificates for ElasticSearch (search-guard)

I am trying to build my own ElasticSearch cluster and I decided to use an open source plugin called Search Guard. It requires generation of client and host/node certificates. In its demo there is a ...
1
vote
0answers
20 views

Is it possible to use subjectAltName with one word domains? [duplicate]

I'm running my own CA. My new cert's desired CSR has CN papaya. I'm looking to add some local domain structure with subjectAltName, but browsers are rejecting the added domains. This is my openssl....
1
vote
0answers
2k views

makecert.exe incorrectly reports duplicate certificates when using -is flag

I created a self-signed certificate that I then loaded into the Trusted Root Certification Authorities folder. This certificate acts as a trusted root for websites on my workstation. I am using ...
1
vote
0answers
2k views

Squid 3.5.4: ssl bump: error - Error negotiating SSL connection on FD 10: Success (0)

I am trying to install squid 3.5.4 (on docker, running debian 8) and run it in ssl-bump mode. Compilation: ./configure --prefix=/opt/squid --srcdir=. --disable-maintainer-mode \ --disable-dependency-...
1
vote
2answers
7k views

Create a self-signed certificate on Windows Server 2008 R2 with powershell v2.0

I'm trying to create a self-signed certificate using power shell. I have tried using import-module PKI but seems like it's supported on powershell v3.0 onward .Is any other way I could create a self-...
0
votes
3answers
815 views

Is there a way to completely suppress SSL-related warnings at the OS level on Windows or at the browser level for any major browser?

I understand why SSL warnings are needed and why users, even experienced ones, should be prevented from easily ignoring them. I also understand that in general, the "white list" or trusted ...
0
votes
1answer
220 views

What's wrong with my self-signed certificate? [closed]

I want to create a self-sign certificate on a Windows Server 2012 R2, just to test and try it. I have no error on my certificate information but when I browse to http://localhost, I see the browser ...