Questions tagged [certificate]

Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a trustworthy way to distribute and determine the correct public key for a given user or machine.

Filter by
Sorted by
Tagged with
3 votes
2 answers
5k views

SSL Certificate and private passphrase

So I have got a weblogic based system which uses 2048-bit key based certificate from Globalsign. The certificate is close to expiring so I got a new certificate from the same vendor (all text which is ...
Sid's user avatar
  • 41
0 votes
2 answers
767 views

Windows - Converting OpenSSL generated certificates

I'm following a guide on how to enroll your own Secure Boot keys on Linux but my platform that I'm using is Windows and I'm currently stuck trying to convert the OpenSSL generated certificates into a ...
Nubcake's user avatar
  • 111
1 vote
1 answer
2k views

How to import certificate into truststore in Adobe Experience Manager

The peer site that AEM is trying to visit has a self signed certificate. The question is how to import the self signed certificate into the AEM truststore. Adobe has an article about this at https://...
Donald Zhao's user avatar
0 votes
1 answer
106 views

Password recovery DriveLock, convert certificate

I am trying to recover a lost password of an encrypted filesystem. Software used is CenterTools DriveLock, some old version, proprietary, no documentation. Similar to VeraCrypt works with encrypted ...
Friedrich's user avatar
9 votes
1 answer
37k views

nginx: [warn] "ssl_stapling" ignored, issuer certificate not found for certificate

I ran these two commands separately: openssl dhparam -dsaparam -out ./certs/dhparam.pem 4096 openssl req -x509 -nodes \ -days 965 -newkey rsa:2048 \ -keyout ./certs/nginx-selfsigned.key -out ./...
MrCholo's user avatar
2 votes
2 answers
4k views

Edit Certbot hooks (letsencrypt)

I have a few websites domains handled by Nginx and I am using Letsencrypt (certbot) to manage certificates. I currently have pre-hooks and post-hooks for every domain : /etc/init.d/nginx stop /etc/...
Antoine's user avatar
  • 35
1 vote
1 answer
2k views

NGINX certificate issue : binding to port 80: Could not bind to IPv4 or IPv6

I have an NGINX webserver and I'm using Certbot (letsencrypt) to renew my websites certificates. When I try to renew certificates I have this error : binding to port 80: Could not bind to IPv4 or ...
Antoine's user avatar
  • 35
1 vote
1 answer
1k views

Custom root CA not trusted by Chrome on MacOS even after insertion into the keychain

I create a root CA and a cert using the following script: #! /bin/bash set -e base_folder="$HOME/.acme-development-certs" start_dir=$PWD if test -f "$base_folder/leaf_cert/acme.pem&...
Sami's user avatar
  • 111
0 votes
0 answers
45 views

Root Router certificate issue

In my work we test some Chinese router and authentication server, to enterprise secure WIFI connection.This device have root certificate, that I need to install in windows mmc, before connecting, and ...
Alex Vartanov's user avatar
0 votes
0 answers
242 views

Updating PEAP-MS-CHAP v2 certificate to comply to Certificate Transparency

I am a high school student where our school wifi uses PEAP-MS-CHAPv2 based WPA2 Enterprise. On macOS Mojave, the OS mandates certificate transparency (and terminates all TLS connections that tries to ...
user avatar
2 votes
2 answers
7k views

find default java cacerts file

java & keytool install paths: C:\Users\foobar>where java C:\Program Files\Java\jdk1.8.0_211\bin\java.exe C:\Users\foobar>where keytool C:\Program Files\Java\jdk1.8.0_211\bin\keytool.exe ...
TLMstack's user avatar
1 vote
1 answer
10k views

Unable to load Key pair from p12 certificate - OPENSSL error

I try to extract public and private keys from PKCS#12 certificate with openssl and always have the same error, even i just want to see it without output file (with flag -info) after the certificate ...
Alex Vartanov's user avatar
0 votes
0 answers
61 views

Only allow a CA certificate to be used for a VPN connection

My company recently added an IKEv2 VPN with a self-signed certificate. They asked us to add a self-issued root certificate to our computers. I use my private computer at work so naturally I am ...
Krzaku's user avatar
  • 29
2 votes
0 answers
2k views

Cannot push docker image to private registry - cert error

I am trying to setup private docker registry. I have installed it on some on premise server and made sure it's available at some domain, for explanation purpose let's assume it's hub.mydomain.com. It ...
Tomasz Kapłoński's user avatar
0 votes
1 answer
4k views

How does this ldapsearch command succeed without using the intermediate certificate?

I have an LDAP server (Active Directory domain controller) with a certificate that is signed by an internal intermediary CA and that of course is signed by an internal root CA. I feel like I am ...
Bobby Burgess's user avatar
0 votes
1 answer
136 views

Nginx server return duplicate intermediate cert when enable both ECC and RSA cert in Nginx

I have configured Nginx to support both ECC and RSA cert in a hybrid mode. After enabling, used below cmd to get the full chain cert from my server: openssl s_client -showcerts -connect server:443 -...
adiggo's user avatar
  • 101
0 votes
1 answer
131 views

Windows Server Datacenter 2012 R2 and Certificates

Hi everybody and thank you in advance for your support. On my business domain we have a lot of certificates expired (like the RDS Authentication Certificates) under Certificate Authority. We spent a ...
Joe's user avatar
  • 1
0 votes
1 answer
144 views

Word Signature Line: not all certificates from certmgr.msc/Personal/Certificates selectable?

In Microsoft Word you can add a signature line to a document. It is an item inside the document that initially looks like this: Once you've added that signature line to the document you can double ...
Robert's user avatar
  • 139
0 votes
0 answers
581 views

How do I install the certificate in firefox?

So I've been trying to get this program working: mitmproxy. The program is a proxy tool to play around with HTTP and HTTPS traffic. For it to work with a browser correctly you need to configure ...
aoeu's user avatar
  • 1
2 votes
1 answer
300 views

Why I cannot verify my own chain of certificate

I have created 3 certificate root.pem: Self signed root CA intermediate.pem: An Intermediate CA signed by the root CA user.pem: A user cert signed by Intermediate CA I would like to verify the chain ...
Marco's user avatar
  • 141
1 vote
0 answers
629 views

Letsencrypt installed by Certbot but https for iredadmin still insecure

Successfully installed letsencrypt certificate for two mail server domain on iredMail server. root@mail:~# certbot certificates Saving debug log to /var/log/letsencrypt/letsencrypt.log - - - - - - - ...
Arthuri-bibleArthur's user avatar
1 vote
1 answer
83 views

firefox certificate validation ssl

i'm experimenting with old FFes prior v53. My favorite is 'Light', a lean FF49. Due to out-dated certs i get errors for most https-sites. Sure i can make exceptions for each, but that's unnerving and ...
Jens's user avatar
  • 11
0 votes
1 answer
411 views

Tomcat 8 SSL server.xml configuration not taken into account

I've Tomcat 8.5.14 installed on a Debian server. I could create a keystore and a certificate and all is running fine. BUT : though a SSL Connector is configured in server.xml (see below) with a ...
bendeg's user avatar
  • 101
0 votes
2 answers
2k views

Mosquitto MQTT Connection socket error (connect from PLC)

I'm used to connect PLC with mosquitto broker on VPS cloud via 8883 port (secure). But this time, function block always throw 80E4 error (No valid CA found). I have checked all conditions to connect ...
Lotha's user avatar
  • 1
0 votes
1 answer
2k views

keytool error: java.lang.Exception: Public keys in reply and keystore don't match

This is about how to import a SSL Certificate provided vendor to Tomcat Web Server. Note: The CSR generated on Network balancer and the certificate is generated based on the provided CSR. Can ...
Venkat's user avatar
  • 101
0 votes
1 answer
97 views

Convert authenticode to kernel-mode certificate

another new question. I have an Authenticode certificate and a driver. That driver is a kernel-mode driver, so I need to sign it using kernel-mode code signing. But my certificate is normal code ...
Wolf20482's user avatar
  • 139
0 votes
1 answer
1k views

Nginx: client certificate authentication works with self-generated but doesn't with an "official"

after hours or research, I finally give up on this issue and need help. I configured my Nginx server to handle client authentication through certificate, that was simple: First, I used this tutorial ...
Akidd's user avatar
  • 11
0 votes
0 answers
307 views

ASP.NET returns always error when configured with SSL/TLS certificate

I've configured ASP.NET Core Web API on IIS and added a Let's Encrypt certificate. I've added that same cert. to two websites ( within the same domain ) One is the API and another is the Angular front-...
LuisMorais's user avatar
1 vote
1 answer
741 views

Identify an SSL certificate uniquely

I want to know how can I find out for sure that a given file is an SSL certificate. Is the file extension is enough to find out that a file is a certificate or not?
mamadou's user avatar
  • 31
1 vote
0 answers
87 views

Configure Kubernetes API server to connect to a separate TLS secured etcd cluster with each member having it's own unique public certificate

I am following Kubernetes the Hard Way without using Google cloud, and instead using container linux and a separate etcd cluster (one that doesn't exist on the control plane's controller nodes where ...
Amish's user avatar
  • 33
2 votes
1 answer
5k views

Mac OS X Keychain Certificate "member: VERY_LONG_GUID"

I am seeing untrusted certificate added to keychain, which has naming like "member: LONG_GUID" probably 64 char long GUID. I tried deleting but it's coming back. I am concerned about it being virus ...
k-thorat's user avatar
  • 123
2 votes
0 answers
3k views

ERR_CERT_AUTHORITY_INVALID on localhost:8080 but NOT on localhost:3000, Why?

I properly (it seems) added a self-signed cert to chromium on ubuntu 18.04. I am using docker, (laradock ~ php-fpm, nginx, mysql, redis, workspace) and I have added the certificate on nginx to the ...
EffectiX's user avatar
  • 131
4 votes
2 answers
7k views

Self-signed certificate with stunnel on linux

I'm trying to connect to an application over stunnel 5.44 on ubuntu 18.04. I'm using a config from a setup that is working on Windows and MacOS. It seems like the client is rejecting the authorisation ...
kerzane's user avatar
  • 141
1 vote
1 answer
2k views

Let's Encrypt renew failing

I'm trying to renew my website certificate with Let's Encrypt and Apache2. But it returns me that error: sudo certbot --apache renew Saving debug log to /var/log/letsencrypt/letsencrypt.log - - - - -...
axsor's user avatar
  • 113
1 vote
0 answers
411 views

openvpn profile for connecting to palo alto

I'm trying to make an openvpn profile to connect to palo alto vpn. I know they have globalprotect for client side to connect, but it requires license. Plus, it is my understanding that openvpn ...
ikel's user avatar
  • 155
7 votes
1 answer
9k views

How to add a self-signed SSL certificate to Linux (Ubuntu/Alpine) trust store?

Followed what appears to be the standard procedure to add a cert to the Linux trust, and it seems to add the cert: $ sudo cp foo.crt /usr/local/share/ca-certificates/foo.crt` $ sudo update-ca-...
user11416578's user avatar
0 votes
1 answer
291 views

Two set of certificates test well by openssl ,but one succeeds to config ssl,the other fails

I use ssl on rabbitmq 3.7.11 and erlang 21.3 .At the same time,i use One-way authentication the certificates only exist in rabbitmq.when i use the same app client(python2.7.5) to connect rabbitmq,one ...
user10313671's user avatar
1 vote
1 answer
257 views

Using a personal certificate to authenticate in an Apache reverse proxy

We have a Jira server that uses a personal certificate for authentication followed by a standard user/password authentication. This personal certificate is typically installed the Windows certificate ...
t3knoid's user avatar
  • 11
2 votes
0 answers
162 views

How can I get Thunderbird to trust a _non_ self-signed certificate for which I don't have the issuing CA?

A contact is trying to establish encrypted and signed communication with me using S/MIME. She has a certificate from her organization, which was issued from a non-public CA. It is not a self-signed ...
Ed McMan's user avatar
  • 510
1 vote
1 answer
811 views

Can I safely delete the /System/Library/Keychains/SystemRootCertificates.keychain?

I'd like to delete: /System/Library/Keychains/SystemRootCertificates.keychain Is that safe?
dbanas's user avatar
  • 111
1 vote
0 answers
2k views

Is there an easy way to update all certificates on a non-networked Windows 7 PC?

I have a Windows 7 PC that is not permitted to connected to the internet, as it contains some sensitive data. Due to the lack of connection, it isn't receiving any Windows updates either. I am ...
cuckoo's user avatar
  • 111
3 votes
1 answer
20k views

Can't verify an openssl certificate against a self signed openssl certificate?

I am creating simple two certificates; one is a root certificate and the other one is a server certificate. The latter has the rootcert.pem and rootprivkey.pem assigned to be used in the flags -CA and ...
Badr's user avatar
  • 133
0 votes
0 answers
367 views

How should I deal with the prompt to choose network authentification certificate in Windows 10 Security center?

I am a windows 10 user. Every time I start my browser(edge DEV), the following dialogue box pops up. Sorry that it is Chinese. Let me translate it. On the top reads "windows security center". The ...
Holding Arthur's user avatar
8 votes
2 answers
7k views

NetworkManager-fortivpn - adding 'trusted-cert' to config file

Good day. I'm trying to use the package that Ubuntu supplies for Fortivpn. So far as I can tell, it's a plugin for NetworkManager which wraps openfortivpn. The issue I'm having is that I can't seem ...
LukeStoneHm's user avatar
1 vote
1 answer
6k views

not able to install packages in pycharm on windows 10, getting SSL failed to verify error

I am trying to install a HL7 apy package in pycharm using following steps. File-->Settings-->Project Interpreter-->click + sign-->search package-->Install package. There after getting ...
Watch N Talk's user avatar
2 votes
1 answer
4k views

Configure Postfix mail server to send emails to Gmail

I am running a Postfix mail server on an Apache web server on Ubuntu 18.04. Problem: I am able to send emails to my work email address, but I am unable to send them to my Gmail account. They do not ...
Moritz's user avatar
  • 121
0 votes
2 answers
1k views

Old Linksys router is configured for SSL only but the certificate is not valid

I have an old Linksys E3000 router that is configured to allow only HTTPS connections to its administration, but the certificate simply doesn't work on Chrome, Edge, or Firefox. I can view the ...
Nobody Home's user avatar
9 votes
2 answers
7k views

How to view SSL Certificates in Thunderbird?

I would like to see the certificates of my outgoing and incoming servers in thunderbird for each of my accounts. How would I do that ? The certificate manager doesn't seem to be of any help and doesn'...
ychaouche's user avatar
  • 461
1 vote
1 answer
97 views

How do I set up DNS, AWS S3, AWS Cloudfront, and AWS Certificate Manager to secure multiple sites

I am trying to secure multiple static AWS S3 websites delivered via AWS Cloudfront CDN with one certificate. This AWS article says I should be able to do this, but it's not working. One is a web-app,...
LWSChad's user avatar
  • 111
0 votes
1 answer
294 views

How to upload data in ElasticSearch(TLS secured via search Guard) using Excelastic

I have ElasticSearch v6.2.4 installed. It worked perfectly fine but recently because of security reasons I installed Search Guard plugin which provide TLS and authentication features to ElasticSearch ...
jatin grover's user avatar

1
8 9
10
11 12
28