Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

3
votes
0answers
2k views

OpenVPN server certificate configuration instructions for DD-WRT router do not match user interface

I'm setting up the OpenVPN server daemon on a Buffalo N600 router which came stock with DD-WRT v.24 SP2. I'm following the instructions at VPN (The Easy Way) V24+ to set up the server side of things ...
3
votes
0answers
3k views

OpenVPN AUTH failure, but login data is correct

I installed OpenVPN on both windows 7 and ubuntu 12.10. In both cases I have the same problem. I have a .ovpn file and a .crt file which I need to connect to the vpn. I also have a username/password ...
2
votes
0answers
71 views

How can I sign an MS Word macro with a digital certificate from the local machine certificate store?

I am trying to find out how I can digitally sign a Microsoft Word macro using a valid 3rd party CA issued VBA code-signing certificate that is installed into the machine rather than the user ...
2
votes
0answers
173 views

Change Windows 7 RDP host certificate expiration date

My Windows 7 desktop computer uses a self-signed certificate to identify its RDP host. So to prevent a man-in-the-middle attack, I have to manually verify the thumbprint the first time my RDP client ...
2
votes
0answers
148 views

Bogus Chrome Installer?

Just a few days ago I tried to download Chrome (using IE 11) to a new Windows 7 system. I examined the certificate for the Chrome installer (clicking on the highlighted Google Inc. next to ...
2
votes
0answers
656 views

Chrome ignores some imported certificates

On Windows 7 with Chrome 30. I have a few websites running on localhost over SSL. Visiting them always displays the standard "The site's security certificate is not trusted!" message from Chrome. I ...
2
votes
0answers
282 views

Setup Ubuntu L2TP VPN server and authenticate users with certificates

I am trying to setup an L2TP server on my Ubuntu VPS and use certificates to authenticate users rather than a password. The reason behind this choice is that I don't want to have plain text passwords ...
2
votes
0answers
3k views

Disable SSL hostname check in Chrome

How I disable SSL certificate error when CN does not match DNS name in Chrome? In IE, this is done by Tools -> Internet Options -> Advanced (tab) -> Scroll down to section "Security" -> checkbox: ...
1
vote
0answers
22 views

What is causing warning on a certificate's basicConstraints?

I created a self signed server certificate using OpenSSL's req -x509 command and a CONF file. The CONF file is shown below. When I examine the certificate using Microsoft certificate viewer, its ...
1
vote
0answers
57 views

Windows (partially) claims I have a private key for a foreign certificate

We have a MS Word document template with vba code produced and signed by an external firm. When I view the details of the signing certificate from within Word vba developer tools, it shows up with ...
1
vote
0answers
139 views

Convert whole .pem Certificate to hexadecimal

I want to convert a whole pem-Certificate in hexadecimal. I tried it with: openssl x509 -modulus -noout < cert.pem| sed s/Modulus=/0x/ I'n not sure about it, if this is the right way to do. Am I? ...
1
vote
0answers
78 views

(Chrome on) Windows 8 complains certificate not yet valid

Chrome on Windows 8 complains that a server certificate is not yet valid. Chrome on Linux does not complain though, and Firefox on the same Windows 8 machine does not complain either. The certificate ...
1
vote
0answers
46 views

How can I verify on download that a site's SSL cert is for a host I trust?

Generally I want to be able to make an HTTPS connection to a site, and while negotiating the SSL check that: The cert is in every way valid for the host listed on the cert (unexpired, signed by ...
1
vote
0answers
131 views

Java keyTool - append primary/secondary intermediate certificates to key store

I have already created a keystore (server.jks in the image) having imported the relevant key-pair. keytool -importkeystore -srckeystore server.p12 -destkeystore server.jks -srcstoretype pkcs12 I ...
1
vote
0answers
46 views

Is there a way to quickly disable all root certificates in Windows 7?

I'd like to temporarily disable all trusted root certificates and wondering if there is a quicker way than going through every single one of them, right-click Properties and selecting "Disable all ...
1
vote
0answers
49 views

Microsoft Digital Signature Expiration in Active Directory

We have a large number of users on our network that need to sign forms digitally from time to time with Microsoft digital signatures that are set up to expire each year. Some of our users however are ...
1
vote
0answers
45 views

How to include all dns records and IP address of a server in automatic certificate enrollment of Microsoft AD CS?

In my company there are a lot of servers which users remotely login to them to do their duties. We have enabled computer certificate auto enrollment for them to assure secure connection. But because ...
1
vote
0answers
182 views

Backup EFS encryption key generated, but no encrypted files? Track what caused the key creation

In I started getting a weird message "Encrypting file system - Back up your file encryption key" a user experiences a prompt that I also experienced yesterday for the first time. Now the ...
1
vote
0answers
271 views

S/MIME email Public Certificate?

Is there a way to create a public certificate for a S/MIME email certificate? I would like to share the public key on my website so people can send me encrypted emails. However I can only find ...
1
vote
0answers
104 views

SSL certificate for CNAME record

I have the CNAME record images.bob.com, which points to the images.susan.co.uk (images.bob.com. 1800 IN CNAME images.susan.co.uk.). I would like to ask for issuing SSL certificate for the ...
1
vote
0answers
517 views

Unable to continue after certificate error i IE

I am on a closed HP ILO network, and I am trying to access the web interface (https) of a HP c7000 Onboard Administrator (though I do not believe this is an issue specific to the equipment) through ...
1
vote
0answers
60 views

can UAC prevent reading a certficate?

Weird question with, hopefully, a short answer. I have this application running on windows 7 that calls a webservice through a .NET DLL. To be able to do that it needs to read some certificates, ...
1
vote
0answers
42 views

How to only accept certificates issued by user-specified CA per domain?

Question Is it possible in Chromium or Firefox to only accept SSL certificates issued by a user-specified CA for a specific domain? Background When you have set up your own certificate authority ...
1
vote
0answers
110 views

Windows Event Forwarding between two computer out of a domain

I've got two computers and I want to set up event forwarding between them. Source computer is out of a domain, another is in some Domain. I tried to configure source initiated event subscrption but it ...
1
vote
0answers
109 views

Mac: Certificate expiration date is not consistent

In the Expires column of the Keychain Access application I can see the expiration date of certificates. Strangely these dates do not match the actual expiration. See below for an example. This ...
1
vote
0answers
657 views

Certificates in Iceweasel

I'm trying to make a backup of a certificate which is imported to iceweasel. So i#m following the steps Edit->Prereferences->Advanced->Encryption->View Certificates. Then I choose my certificate, and ...
1
vote
0answers
769 views

Revocation information not available for certificate?

I'm trying to download SQL Server 2008 R2 Enterprise Edition from MSDNAA on my Windows 7 laptop. When I attempted to start the download, I was shown the following prompt: Revocation Information ...
1
vote
0answers
458 views

Preventing Internet Explorer from “remembering” an old SSL certificate

A website I'm using has switched recently from a GoDaddy SSL certifcate to a StartCom certificate, which works fine in most cases. The original GoDaddy certificate expired last year. However, in ...
1
vote
0answers
212 views

Can I install a localized certificate authority in Windows XP?

We are a division of a much larger organization and this organization uses Novell domain authentication. The entire division uses Windows XP. We'd like to implement digital signing of our Office ...
1
vote
0answers
194 views

Creating Certificate and KeyValue

I'm quite new to the whole certificate-thing so I hope you can help me out. I need to create a self-signed X509Certificate2 certificate and a get the dependent KeyValue for my project. What is the ...
1
vote
0answers
728 views

IE8 and certificate issues following Service Pack 1 install on Windows 7

When trying to open Internet Explorer 8 under a different user account, I get the following error: There is a problem with this website's security certificate. I found this post which describes ...
1
vote
0answers
1k views

How to I make a Windows certificate exportable?

I'm looking for a tool or solution that would allow me make a certificate that is marked as non-exportable to be exportable. I am aware about Jailbreak tool but because the tool does not fully ...
0
votes
0answers
8 views

Keytool without root access and leiningen

My traffic goes through proxy which replaces SSL certificate. This causes problems when accessing the maven/leiningen packages through HTTPS. I tried to install the cert in my keytool but that ...
0
votes
0answers
27 views

expired certificates and chrome

Yesterday I've visited a website for the first time, but now Chrome raises an error when I connect to this website. The error is: the connection is not private - ERR_CERT_DATE_INVALID So I tried to ...
0
votes
0answers
14 views

How to get the organization name from a .p12 certificate?

I have a .p12 certificate and I need to find out the organization name of it. How to do that? (I'm using Windows 8.1)
0
votes
0answers
23 views

OpenVPN: SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

Im trying to use vpn to connect two internal networks using virtual machines. I have a virtual machine "gateway" and a virtual machine "client", and I want to connect to my gateway from client using ...
0
votes
0answers
17 views

Unable to authenticate with Client cert in TLS1.0

I have my own application running in Windows machine (server). I am using a browser as a client to do operations. I have multiple users connecting to the server using client certificates as the ...
0
votes
0answers
14 views

Mac OS X Ad-Hoc Network Certificate

I was wondering if on a Mac with the built in "Create Network" feature, to make the client (which will always be an iOS device) accept a .cer file before joining the network. I know some professional ...
0
votes
0answers
54 views

How to use .pfx in certificate store in CURL for Windows 7

I want to use cURL to access a remote server, and I need to identify myself using a private key or the remote server gives a 401 "Unauthorized". I'm on Windows 7 (work machine, not my choice) and my ...
0
votes
0answers
56 views

nginx http to https proxy with self-signed certificate

I have an nginx proxy to redirect http requests with a specified port to another https url. Here is my configuration so far: server { listen 59848; location / { resolver 8.8.8.8; ...
0
votes
0answers
12 views

How do I import a pfk file into MS Outlook 2010?

What specific steps can I take to successfully import a .pfk file into MS Outlook 2010 and then use it to successfully send encrypted/signed messages/attachments to the email address associated with ...
0
votes
0answers
140 views

Some clients get 'Certificate-based authentication failed' error on a cert, w/ all browsers

I'm hosting multiple SSL sites on multiple Ubuntu / LAMP servers. The servers have quite standard setup, eg. no client certificate configuration is in place. The vast majority of users are fine, but ...
0
votes
0answers
10 views

Mounting with davfs2: Certificate verification error: signed using insecure algorithm

If I try to mount a webdav share with davfs2, I get this error: LANG=C mount /home/user/owncloud /sbin/mount.davfs: Mounting failed. Certificate verification error: signed using insecure algorithm ...
0
votes
0answers
118 views

Self signed certificate, https and vpn

I have access to an SBS 2011 server that has a self signed certificate. In my computer (win 7 pro) that is outside the domain, I have imported the root certificate and the leaf certificate into ...
0
votes
0answers
40 views

Validate a PADES document with expired certificate

I have a problem. I have a PDF that has been signed with a certificate, and then it has been put a timestamp with a TSA. I want to validate this document, but now, the certificate which it was used ...
0
votes
0answers
38 views

Pure-FTPD certificate not being used

I am using Pure-FTPD from the epel repository on CentOS 6. Now I have configured to enable TLS which works fine however for some reason it wont make use of the certificate file I have placed in ...
0
votes
0answers
22 views

Windows Certificate Authority - root offline, intermediate online?

Simple enough question... Can I have the Windows Root CA offline and a non-domain member, but the intermediate CA online and a domain member (thereby getting the advantages of an AD integrated CA?) ...
0
votes
0answers
13 views

Cisco VPN client imports certificates just fine, won't show them in configuration management

I've been fighting with a vpn client for a while trying to connect to a network. I've managed to download a .cer file from the host, which is supposed to be used for certficate authentication. It ...
0
votes
0answers
50 views

What Registry entry used to disable Java's “Signed code certification revocation check”?

We have successfully disabled Java updates for all users of a computer via a registry solution found on this site. How can we now do the same thing for enabling the "Do not check (not recommended)" ...
0
votes
0answers
18 views

Java Applet cannot find certificates in Mozilla but instead fetchs Windows/ie cert storage

We have migrated to Free Software on office. We often have to use some government web services that include applets to sign documents with our own personal certificates. Problem is, sometimes some of ...