Questions tagged [certificate]
Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a trustworthy way to distribute and determine the correct public key for a given user or machine.
1,393
questions
3
votes
2
answers
5k
views
SSL Certificate and private passphrase
So I have got a weblogic based system which uses 2048-bit key based certificate from Globalsign. The certificate is close to expiring so I got a new certificate from the same vendor (all text which is ...
0
votes
2
answers
767
views
Windows - Converting OpenSSL generated certificates
I'm following a guide on how to enroll your own Secure Boot keys on Linux but my platform that I'm using is Windows and I'm currently stuck trying to convert the OpenSSL generated certificates into a ...
1
vote
1
answer
2k
views
How to import certificate into truststore in Adobe Experience Manager
The peer site that AEM is trying to visit has a self signed certificate.
The question is how to import the self signed certificate into the AEM truststore.
Adobe has an article about this at
https://...
0
votes
1
answer
106
views
Password recovery DriveLock, convert certificate
I am trying to recover a lost password of an encrypted filesystem. Software used is CenterTools DriveLock, some old version, proprietary, no documentation. Similar to VeraCrypt works with encrypted ...
9
votes
1
answer
37k
views
nginx: [warn] "ssl_stapling" ignored, issuer certificate not found for certificate
I ran these two commands separately:
openssl dhparam -dsaparam -out ./certs/dhparam.pem 4096
openssl req -x509 -nodes \
-days 965 -newkey rsa:2048 \
-keyout ./certs/nginx-selfsigned.key -out ./...
2
votes
2
answers
4k
views
Edit Certbot hooks (letsencrypt)
I have a few websites domains handled by Nginx and I am using Letsencrypt (certbot) to manage certificates.
I currently have pre-hooks and post-hooks for every domain :
/etc/init.d/nginx stop
/etc/...
1
vote
1
answer
2k
views
NGINX certificate issue : binding to port 80: Could not bind to IPv4 or IPv6
I have an NGINX webserver and I'm using Certbot (letsencrypt) to renew my websites certificates.
When I try to renew certificates I have this error :
binding to port 80: Could not bind to IPv4 or ...
1
vote
1
answer
1k
views
Custom root CA not trusted by Chrome on MacOS even after insertion into the keychain
I create a root CA and a cert using the following script:
#! /bin/bash
set -e
base_folder="$HOME/.acme-development-certs"
start_dir=$PWD
if test -f "$base_folder/leaf_cert/acme.pem&...
0
votes
0
answers
45
views
Root Router certificate issue
In my work we test some Chinese router and authentication server, to enterprise secure WIFI connection.This device have root certificate, that I need to install in windows mmc, before connecting, and ...
0
votes
0
answers
242
views
Updating PEAP-MS-CHAP v2 certificate to comply to Certificate Transparency
I am a high school student where our school wifi uses PEAP-MS-CHAPv2 based WPA2 Enterprise.
On macOS Mojave, the OS mandates certificate transparency (and terminates all TLS connections that tries to ...
2
votes
2
answers
7k
views
find default java cacerts file
java & keytool install paths:
C:\Users\foobar>where java
C:\Program Files\Java\jdk1.8.0_211\bin\java.exe
C:\Users\foobar>where keytool
C:\Program Files\Java\jdk1.8.0_211\bin\keytool.exe
...
1
vote
1
answer
10k
views
Unable to load Key pair from p12 certificate - OPENSSL error
I try to extract public and private keys from PKCS#12 certificate with openssl and always have the same error, even i just want to see it without output file (with flag -info)
after the certificate ...
0
votes
0
answers
61
views
Only allow a CA certificate to be used for a VPN connection
My company recently added an IKEv2 VPN with a self-signed certificate. They asked us to add a self-issued root certificate to our computers. I use my private computer at work so naturally I am ...
2
votes
0
answers
2k
views
Cannot push docker image to private registry - cert error
I am trying to setup private docker registry. I have installed it on some on premise server and made sure it's available at some domain, for explanation purpose let's assume it's hub.mydomain.com. It ...
0
votes
1
answer
4k
views
How does this ldapsearch command succeed without using the intermediate certificate?
I have an LDAP server (Active Directory domain controller) with a certificate that is signed by an internal intermediary CA and that of course is signed by an internal root CA. I feel like I am ...
0
votes
1
answer
136
views
Nginx server return duplicate intermediate cert when enable both ECC and RSA cert in Nginx
I have configured Nginx to support both ECC and RSA cert in a hybrid mode.
After enabling, used below cmd to get the full chain cert from my server:
openssl s_client -showcerts -connect server:443 -...
0
votes
1
answer
131
views
Windows Server Datacenter 2012 R2 and Certificates
Hi everybody and thank you in advance for your support.
On my business domain we have a lot of certificates expired (like the RDS Authentication Certificates) under Certificate Authority.
We spent a ...
0
votes
1
answer
144
views
Word Signature Line: not all certificates from certmgr.msc/Personal/Certificates selectable?
In Microsoft Word you can add a signature line to a document. It is an item inside the document that initially looks like this:
Once you've added that signature line to the document you can double ...
0
votes
0
answers
581
views
How do I install the certificate in firefox?
So I've been trying to get this program working: mitmproxy. The program is a proxy tool to play around with HTTP and HTTPS traffic. For it to work with a browser correctly you need to configure ...
2
votes
1
answer
300
views
Why I cannot verify my own chain of certificate
I have created 3 certificate
root.pem: Self signed root CA
intermediate.pem: An Intermediate CA signed by the root CA
user.pem: A user cert signed by Intermediate CA
I would like to verify the chain ...
1
vote
0
answers
629
views
Letsencrypt installed by Certbot but https for iredadmin still insecure
Successfully installed letsencrypt certificate for two mail server domain on iredMail server.
root@mail:~# certbot certificates
Saving debug log to /var/log/letsencrypt/letsencrypt.log
- - - - - - - ...
1
vote
1
answer
83
views
firefox certificate validation ssl
i'm experimenting with old FFes prior v53. My favorite is 'Light', a lean FF49. Due to out-dated certs i get errors for most https-sites. Sure i can make exceptions for each, but that's unnerving and ...
0
votes
1
answer
411
views
Tomcat 8 SSL server.xml configuration not taken into account
I've Tomcat 8.5.14 installed on a Debian server.
I could create a keystore and a certificate and all is running fine.
BUT :
though a SSL Connector is configured in server.xml (see below) with a ...
0
votes
2
answers
2k
views
Mosquitto MQTT Connection socket error (connect from PLC)
I'm used to connect PLC with mosquitto broker on VPS cloud via 8883 port (secure). But this time, function block always throw 80E4 error (No valid CA found). I have checked all conditions to connect ...
0
votes
1
answer
2k
views
keytool error: java.lang.Exception: Public keys in reply and keystore don't match
This is about how to import a SSL Certificate provided vendor to Tomcat Web Server.
Note: The CSR generated on Network balancer and the certificate is generated based on the provided CSR.
Can ...
0
votes
1
answer
97
views
Convert authenticode to kernel-mode certificate
another new question. I have an Authenticode certificate and a driver. That driver is a kernel-mode driver, so I need to sign it using kernel-mode code signing. But my certificate is normal code ...
0
votes
1
answer
1k
views
Nginx: client certificate authentication works with self-generated but doesn't with an "official"
after hours or research, I finally give up on this issue and need help.
I configured my Nginx server to handle client authentication through certificate, that was simple:
First,
I used this tutorial ...
0
votes
0
answers
307
views
ASP.NET returns always error when configured with SSL/TLS certificate
I've configured ASP.NET Core Web API on IIS and added a Let's Encrypt certificate. I've added that same cert. to two websites ( within the same domain )
One is the API and another is the Angular front-...
1
vote
1
answer
741
views
Identify an SSL certificate uniquely
I want to know how can I find out for sure that a given file is an SSL certificate. Is the file extension is enough to find out that a file is a certificate or not?
1
vote
0
answers
87
views
Configure Kubernetes API server to connect to a separate TLS secured etcd cluster with each member having it's own unique public certificate
I am following Kubernetes the Hard Way without using Google cloud, and instead using container linux and a separate etcd cluster (one that doesn't exist on the control plane's controller nodes where ...
2
votes
1
answer
5k
views
Mac OS X Keychain Certificate "member: VERY_LONG_GUID"
I am seeing untrusted certificate added to keychain, which has naming like "member: LONG_GUID" probably 64 char long GUID. I tried deleting but it's coming back.
I am concerned about it being virus ...
2
votes
0
answers
3k
views
ERR_CERT_AUTHORITY_INVALID on localhost:8080 but NOT on localhost:3000, Why?
I properly (it seems) added a self-signed cert to chromium on ubuntu 18.04.
I am using docker, (laradock ~ php-fpm, nginx, mysql, redis, workspace) and I have added the certificate on nginx to the ...
4
votes
2
answers
7k
views
Self-signed certificate with stunnel on linux
I'm trying to connect to an application over stunnel 5.44 on ubuntu 18.04. I'm using a config from a setup that is working on Windows and MacOS. It seems like the client is rejecting the authorisation ...
1
vote
1
answer
2k
views
Let's Encrypt renew failing
I'm trying to renew my website certificate with Let's Encrypt and Apache2. But it returns me that error:
sudo certbot --apache renew
Saving debug log to /var/log/letsencrypt/letsencrypt.log
- - - - -...
1
vote
0
answers
411
views
openvpn profile for connecting to palo alto
I'm trying to make an openvpn profile to connect to palo alto vpn. I know they have globalprotect for client side to connect, but it requires license. Plus, it is my understanding that openvpn ...
7
votes
1
answer
9k
views
How to add a self-signed SSL certificate to Linux (Ubuntu/Alpine) trust store?
Followed what appears to be the standard procedure to add a cert to the Linux trust, and it seems to add the cert:
$ sudo cp foo.crt /usr/local/share/ca-certificates/foo.crt`
$ sudo update-ca-...
0
votes
1
answer
291
views
Two set of certificates test well by openssl ,but one succeeds to config ssl,the other fails
I use ssl on rabbitmq 3.7.11 and erlang 21.3 .At the same time,i use One-way authentication the certificates only exist in rabbitmq.when i use the same app client(python2.7.5) to connect rabbitmq,one ...
1
vote
1
answer
257
views
Using a personal certificate to authenticate in an Apache reverse proxy
We have a Jira server that uses a personal certificate for authentication followed by a standard user/password authentication. This personal certificate is typically installed the Windows certificate ...
2
votes
0
answers
162
views
How can I get Thunderbird to trust a _non_ self-signed certificate for which I don't have the issuing CA?
A contact is trying to establish encrypted and signed communication with me using S/MIME. She has a certificate from her organization, which was issued from a non-public CA. It is not a self-signed ...
1
vote
1
answer
811
views
Can I safely delete the /System/Library/Keychains/SystemRootCertificates.keychain?
I'd like to delete: /System/Library/Keychains/SystemRootCertificates.keychain
Is that safe?
1
vote
0
answers
2k
views
Is there an easy way to update all certificates on a non-networked Windows 7 PC?
I have a Windows 7 PC that is not permitted to connected to the internet, as it contains some sensitive data. Due to the lack of connection, it isn't receiving any Windows updates either.
I am ...
3
votes
1
answer
20k
views
Can't verify an openssl certificate against a self signed openssl certificate?
I am creating simple two certificates; one is a root certificate and the other one is a server certificate. The latter has the rootcert.pem and rootprivkey.pem assigned to be used in the flags -CA and ...
0
votes
0
answers
367
views
How should I deal with the prompt to choose network authentification certificate in Windows 10 Security center?
I am a windows 10 user.
Every time I start my browser(edge DEV), the following dialogue box pops up. Sorry that it is Chinese. Let me translate it. On the top reads "windows security center". The ...
8
votes
2
answers
7k
views
NetworkManager-fortivpn - adding 'trusted-cert' to config file
Good day.
I'm trying to use the package that Ubuntu supplies for Fortivpn. So far as I can tell, it's a plugin for NetworkManager which wraps openfortivpn.
The issue I'm having is that I can't seem ...
1
vote
1
answer
6k
views
not able to install packages in pycharm on windows 10, getting SSL failed to verify error
I am trying to install a HL7 apy package in pycharm using following steps.
File-->Settings-->Project Interpreter-->click + sign-->search package-->Install package. There after getting ...
2
votes
1
answer
4k
views
Configure Postfix mail server to send emails to Gmail
I am running a Postfix mail server on an Apache web server on Ubuntu 18.04.
Problem:
I am able to send emails to my work email address, but I am unable to send them to my Gmail account. They do not ...
0
votes
2
answers
1k
views
Old Linksys router is configured for SSL only but the certificate is not valid
I have an old Linksys E3000 router that is configured to allow only HTTPS connections to its administration, but the certificate simply doesn't work on Chrome, Edge, or Firefox.
I can view the ...
9
votes
2
answers
7k
views
How to view SSL Certificates in Thunderbird?
I would like to see the certificates of my outgoing and incoming servers in thunderbird for each of my accounts. How would I do that ? The certificate manager doesn't seem to be of any help and doesn'...
1
vote
1
answer
97
views
How do I set up DNS, AWS S3, AWS Cloudfront, and AWS Certificate Manager to secure multiple sites
I am trying to secure multiple static AWS S3 websites delivered via AWS Cloudfront CDN with one certificate.
This AWS article says I should be able to do this, but it's not working.
One is a web-app,...
0
votes
1
answer
294
views
How to upload data in ElasticSearch(TLS secured via search Guard) using Excelastic
I have ElasticSearch v6.2.4 installed. It worked perfectly fine but recently because of security reasons I installed Search Guard plugin which provide TLS and authentication features to ElasticSearch ...