0
votes
2answers
9 views

How can I export private key from a certificate chain?

I create a keystore and from that keysore I generate a CSR file and when I receive Signed Certificate from CA, I imported root and intermediate certificates to my keystore and finally my signed ...
1
vote
2answers
38 views

How to build a certifcate chain for ServerHello

I've been trying to put together a certificate chain. I have the private key (privatekey.pem) and CSR (csr.pem) that I submitted to the Certificate Authority/CA. I took the CA's certificate and put ...
0
votes
0answers
16 views

Windows 7 IPsec IKEv2 EAP-TLS error

I have set-up Strongswan on a Ubuntu 14.04 server from the official package repo with IKEv2 and rightauth=eap-tls using our PKI infrastructure. I can connect just fine from Android and Linux but not ...
0
votes
0answers
16 views

OpenSSL, Converting CRT to PEM

I've been trying to use openssl to convert a .crt certificate to a .pem openssl.exe x509 -in server.crt -out openssl.pem -inform der -outform pem After using that command, I get unable to load ...
1
vote
0answers
51 views

How to properly install certificate issued to me?

I tried various ways to install certificate, but it seems it either not being seen by linux or something else is wrong. I got .pfx to be able to connect to another server via vpn (need to use Cisco ...
3
votes
1answer
35 views

Outlook shows certificate security warning in local LAN although certificate is only associated to IIS

I have the following configuration with Exchange Server 2010: I have a self-signed certificate which is associated with all the services (POP, SMTP etc..) except IIS (which is associated with a ...
0
votes
2answers
161 views

Why Firefox alert me about HTTPs “Untrusted” Connection on Positivessl - Comodo certificate?

For my new startUp I got a SSL certificate from Comodo.com. I did all the painful process and finally I was able to implement it on my AWS server (I'm running MEAN Stack). Now when someone visit my ...
0
votes
0answers
94 views

How to install SSL certificate in the Trusted Root Certification Authorities Store?

Apologies in advance, I do not have an IT background and have never done this before, yet I am being asked to figure this out and to do so as soon as possible. Our organization is trying to update ...
0
votes
0answers
17 views

Location of Outlook certificate warning setting

My hosting provider misconfigured their email server using a self-signed certificate that had CA=TRUE set. Only way I was able to retrieve business emails for a few days was to tell Outlook to accept ...
0
votes
1answer
26 views

Not getting prompted for certificate in IE8

I am unable to connect to a local intranet server using IE8. This server issues an unsigned certificate. When using IE8, it returns "Internet Explorer cannot display the webpage" instead of "there ...
1
vote
0answers
33 views

Java keyTool - append primary/secondary intermediate certificates to key store

I have already created a keystore (server.jks in the image) having imported the relevant key-pair. keytool -importkeystore -srckeystore server.p12 -destkeystore server.jks -srcstoretype pkcs12 I ...
2
votes
1answer
22 views

Windows - service account default certificate store

I am writing a web app that connects to external web services. The external web services serve an intermediate certificate signed by Thawte SGC CA - G2. When I setup IIS to run the web app using ...
1
vote
0answers
29 views

Is there a way to quickly disable all root certificates in Windows 7?

I'd like to temporarily disable all trusted root certificates and wondering if there is a quicker way than going through every single one of them, right-click Properties and selecting "Disable all ...
3
votes
2answers
62 views

Is it normal for a hosting service to require that I buy a public IPv4 for using my own $25 certificate?

Self explanatory title, I guess. I'd love to have my website in https only, but they (the web hosting service) claim in the administration that I need to buy a public IPv4 address from them before ...
0
votes
1answer
40 views

Microsoft CA Certificate Request

I am new to MS CA and I have recently installed a MS CA setup on a VM. I used the web service provided "http://test.server.name.tld/certsrv" to request a certificate. I approved my test certificate ...
1
vote
2answers
154 views

s_client not failing on revoked certifcate?

I'm running Firefox with with the EFF's HTTPS Everywhere. I recently visited Lavabit's site to see if its accepting donations: The revocation is expected considering the history.... However, I'm ...
0
votes
0answers
31 views

export certificate with private key

I would like to backup my startcom certificate on this machine but I need to also export the private key with it, the problem is in the certificate manager the option also export private key is greyed ...
0
votes
0answers
25 views

Exchange 2010 Certificate Renewal

I am still learning how to configure Exchange 2010, so I hope that you can help me on some topics. The certificate for mail.xxxxxx.com has expired. The previous IT guy had OWA set up on the server, ...
4
votes
2answers
353 views

How do I distinguish between these two certificate situations?

Situation 1 (safe): Website was vulnerable to heartbleed and using a certificate not valid before 2012-10-21 Website upgraded to an unvulnerable version of OpenSSL Website re-keyed and got a their ...
3
votes
1answer
3k views

Does Heartbleed Bug in OpenSSL affect ALL SSL certs

Does the Heartbleed Bug in OpenSSL affect ALL SSL certs, regardless of where I purchased or if I self-cert? For example, if I bought an SSL certificate from GoDaddy and set this up on my server ...
3
votes
3answers
4k views

SSL certificate verification failure in Chrome, Heartbleed bug?

For some reasons I'm running into SSL problems since a few days. When trying to clone a git repository for example I receive the following error message: fatal: unable to access ...
0
votes
0answers
107 views

Blocking a trusted certificate in Google Chrome

Is it possible to somehow block a certain certificate that is currently trusted by my browser? The reason is the recently discovered Heartbleed-attack which I also found out to affect my netbanking ...
0
votes
1answer
98 views

OpenSSL CA keyUsage extension

I want to set up a chain of certificates, with a self signed 'root' CA at the top that signs sub CAs, which can then sign client and server certificates. When setting up openssl.cnf, I noticed a ...
0
votes
1answer
93 views

Verifying Certificate using Mac Terminal

In Mac Terminal, we can use the command security to do many things related to certificates. I'm trying to know how to verify a certificate using this command. I wrote security verify-cert [.pem ...
0
votes
0answers
77 views

Invalid SSL certificates after system restore on Windows 7

I just recovered my Windows 7 system after a crash using startup repair. It seems Windows has restored to a previous point. The problem was HDD related after some software uninstaller started creating ...
1
vote
1answer
29 views

Is there a program to check the list of root CAs in Firefox?

Motivated by this and this question, I'd like to ask if there is a way to check if additional certificates have been maliciously added to the list of root CAs of Firefox. Possible ways could be: an ...
1
vote
1answer
128 views

Is it safe to add an untrusted certificate to Trusted Root Certification Authorities?

Before I access the internet at work I have to sign-on to their system. The sign-on page is ipass.swu.ac.th. Unfortunately the security certificate they use appears as not trusted (in Chrome). I have ...
0
votes
0answers
60 views

SSL failure on Auzre web farm with shared configuration and centralized certificates

[Sorry if this question is a bit long, there's lot of extra info in case it is relavent] Overview I'm having a problem with SSL on a 4 VM's load balanced farm in Azure. If the HTTPS request goes to ...
0
votes
1answer
47 views

How to update CRL automatically?

I have the following issue: I have a self-signed CA (certificate authority) mainly for persoanl use (mail encryption and signing, ...). I created several ceertificates and the CRLs (which are empty ...
0
votes
1answer
626 views

pip and SSL certificate errors

I am trying to install a library via pip. I have a problem with SSL certificate, even when using the --cert. Trying this on windows (pip version 1.5.4,python version 2.7.6): pip --cert ...
0
votes
0answers
22 views

My self signed certificates do not have organisation

I use the command openssl s_client -connect myServer.myCompany.be:2500 -showcerts > myServer.pem # it also works if you remove all but the base64 encoded key # and its surrounding comments If I ...
7
votes
1answer
126 views

What Trusted Root Certification Authorities should I trust?

After two recent Slashdot articles (#1 #2) about questionable Root Certificates installed on machines, I decided to take a closer look at what I have installed on my machines. (I use current versions ...
0
votes
1answer
40 views

What details would you view in a certificate to check if it is trustworthy?

I have a question need help: What details would you view in a certificate to check if it is a trustworthy website?
1
vote
1answer
124 views

Chrome still shows red cross “https://” even with valid certificate

This happens on one of my users Mac laptop running ML or Mavericks. When she accesses https://www.somewebsite.com using either Chrome or Safari, she always got the warning related to the certificate ...
0
votes
2answers
121 views

Install SSL certificate from an untrusted website into the Certificates snap-in using IE

How can I install a certificate from an untrusted website into the Certificates snap-in (certmgr.msc) of Windows? I know how to do this with Firefox by exporting to a file and then importing it, ...
1
vote
0answers
142 views

How to develop a Chrome extension that overrides SSL certificate error for self-signed certificate?

The process of adding a self signed certificate to the list of trusted certificates in Chrome is manual and tedious. I frequently access a trusted website that uses a self-signed certificate. As I am ...
1
vote
2answers
105 views

Can I sign code with a website SSL certificate?

I have an SSL certificate installed and working on my web server. On another project I need to sign some code. Can I use the website SSL certificate to sign code, or is a code-signing certificate ...
5
votes
2answers
680 views

Prevent Internet Explorer from caching SSL client certificates

I use a particular HTTPS website, but I have to separate client certificates that I use to authenticate (sometimes I use one account, which requires certificate A and sometimes a different one, which ...
4
votes
2answers
401 views

Are SSL's default snake oil certificates truly snake oil as opposed to being genuine honest-to-good certificates?

SSL generates self-signed "snake oil" certificates by default, for example at /etc/ssl/certs/ssl-cert-snakeoil.pem. As per Wikipedia, snake oil is a cryptographic method or product that is considered ...
0
votes
1answer
46 views

Can an SSL cert (not self-signed) be used to create another SSL cert for another host in the same domain?

I have a regular SSL certificate issued by Network Solutions for a given host, say "host A". Can I create another SSL cert for the wiki host that has the host A cert in its trust path and therefore ...
1
vote
1answer
779 views

List installed personal certificates in command line

I use a few secure websites that require me to install a PFX certificate to access them. I have multiple computers I do this from, and I need a quick way of determining which ones in which I still ...
1
vote
1answer
1k views

Every website is showing untrusted certificate warning on all browsers

I'm on windows 7. Every website is showing untrusted security warning. I tried every browser that I have. I tried using https. This is extremely odd, it never happened before, well it could happen ...
1
vote
0answers
61 views

SSL certificate for CNAME record

I have the CNAME record images.bob.com, which points to the images.susan.co.uk (images.bob.com. 1800 IN CNAME images.susan.co.uk.). I would like to ask for issuing SSL certificate for the ...
0
votes
0answers
85 views

Fedora Linux 18 - puppet 3.1.1 Certificate issue - unprintable or non-ASCII

I have searched all over the Puppet errata documentation and I've tried regenerating the certs, reinstalling, deleting and regenerating the certificates. When I try to connect to the Puppet ...
0
votes
0answers
139 views

How to dump the Subject Alternative Name (SAN) from an SSL certificate file

I know that I can dump the entire information from a PEM certificate file with this command: openssl x509 -in certfile -noout -text And I've already found another direct parameter to show me only ...
0
votes
0answers
423 views

How to make Firefox remember a self signed certificate is trusted

I'm using some private server with a self-signed certificate for https connections. Firefox 25.0 warns me about the certificate being untrusted every time. For some reason, I can't make it remember ...
2
votes
1answer
71 views

Fedora 8: rubygems.org certificate validation failure. How to install GeoTrust CA?

Trying to get a gem: $gem install puppet ERROR: Could not find a valid gem 'puppet' (>= 0), here is why: Unable to download data from https://rubygems.org/ - SSL_connect returned=1 ...
0
votes
0answers
208 views

How can I add a centralised CA SSL certificate repository to a QNAP NAS Linux build?

I would like to install a centralised CA SSL certificate repository to my QNAP NAS Linux build (TS-209II Pro, firmware version 3.3.2 build 0918T). Currently all HTTPS requests fail, as the CAs can ...
4
votes
1answer
3k views

Can I get around using “pip install --cert”?

Trying to figure out if there is a way that I can avoid using the --cert flag to pip when I am installing packages at work. There is some issue with the proxy that only allows me to download the ...
1
vote
0answers
255 views

Chrome ignores some imported certificates

On Windows 7 with Chrome 30. I have a few websites running on localhost over SSL. Visiting them always displays the standard "The site's security certificate is not trusted!" message from Chrome. I ...