Questions tagged [certificate]
Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a trustworthy way to distribute and determine the correct public key for a given user or machine.
1,392
questions
8
votes
2
answers
4k
views
How can I make Pidgin always accept an expired certificate?
My work uses a local XMPP server (Wildfire, now called Openfire). When using the Pidgin client, it always asks me if it should accept the invalid (expired) certificate.
I would like to get Pidgin to ...
8
votes
2
answers
7k
views
NetworkManager-fortivpn - adding 'trusted-cert' to config file
Good day.
I'm trying to use the package that Ubuntu supplies for Fortivpn. So far as I can tell, it's a plugin for NetworkManager which wraps openfortivpn.
The issue I'm having is that I can't seem ...
8
votes
3
answers
58k
views
How to turn off Opera server certificate messages?
While I'm browsing the Internet, Opera always pop out a lots of from these Server certificate expired boxes. Several times it pops out a tons from them and I have to click to Approve on each of them ...
8
votes
1
answer
3k
views
How do I uninstall an application whose installer has a revoked signing certificate
Several years ago I installed an application called Net Limiter on my then Windows 7, since upgraded to Windows 10, machine. Earlier today I attempted to uninstall it while cleaning up applications ...
8
votes
2
answers
30k
views
Bypassing windows update error 0x80096002
I am getting this error when I try to install some .msu files (WMF 3 if it matters).
Now, the error is saying that the certificate is invalid. However, I looked at the certificate (if anyone is ...
8
votes
1
answer
34k
views
OpenVPN AUTH failure, but login data is correct
I installed OpenVPN on both windows 7 and ubuntu 12.10. In both cases I have the same problem. I have a .ovpn file and a .crt file which I need to connect to the vpn. I also have a username/password ...
7
votes
3
answers
17k
views
Using powershell, how do I extract the thumbprint from an SSL Certificate without installing it?
Every example I've found on StackExchange, and other internet forums, etc all tell me how to get the thumbprint from a certificate already installed into a certificate store. Alternatively, the ...
7
votes
2
answers
5k
views
s_client not failing on revoked certifcate?
I'm running Firefox with with the EFF's HTTPS Everywhere. I recently visited Lavabit's site to see if its accepting donations:
The revocation is expected considering the history....
However, I'm not ...
7
votes
3
answers
18k
views
Certificate issue on remote desktop
see the below link:
Certificate issue on remote desktop
I have 2 PCs with Windows 7 Ultimate. Both are in NETHOME, and are connected with a crossover cable.
PC 1: computer name = alfa -> (main PC) , ...
7
votes
1
answer
3k
views
Prevent users from ignoring certificate warnings
Is it possible to prevent users to bypass a certificate warning showed in their browser, and if so, how?
Assuming we have no control on the remote server, and total control on the client computer.
The ...
7
votes
3
answers
5k
views
EFS - Find out what's encrypted
Since a few days when I start Windows Vista i get a Popup from "Encrypting File System" (coming from process efsui.exe) asking me to backup the certificate and key.
I don't know what i did to get ...
7
votes
2
answers
7k
views
What is the criteria on which Chrome shows available certificates for client authentication
When a remote server requires a client certificate for authentication, the browser pops up a dialog to select the certificate from:
it only shows a subset of certificates, I want to know on which ...
7
votes
3
answers
15k
views
SSL Root CA certificate is not recognized, although present in the trust store. Why?
Background:
Ubuntu Server 14.10 64-bit on aws.amazon.com/ec2
Cheap PositiveSSL server certificate from COMODO
1 server certificate, 2 intermediate CA certificates and 1 Root CA certificate as ZIP ...
7
votes
2
answers
11k
views
Prevent Internet Explorer from caching SSL client certificates
I use a particular HTTPS website, but I have two separate client certificates that I use to authenticate (sometimes I use one account, which requires certificate A and sometimes a different one, which ...
7
votes
1
answer
9k
views
How to add a self-signed SSL certificate to Linux (Ubuntu/Alpine) trust store?
Followed what appears to be the standard procedure to add a cert to the Linux trust, and it seems to add the cert:
$ sudo cp foo.crt /usr/local/share/ca-certificates/foo.crt`
$ sudo update-ca-...
7
votes
1
answer
4k
views
How to use backup EFS certificate to decrypt encrypted files?
I have some files that were encrypted on a now extinct Windows 7 system. I made sure to backup my keys, this one is called efs.pfx. Double-clicking it launches the Certificate Import Wizard which ...
7
votes
3
answers
10k
views
Certificates signed by multiple CAs
Is it possible to have a OpenSSL Certificate signed by multiple CAs?
Background: We have a CA to issue certificates mainly for our machine-to-machine communications. Now we need to make some services ...
7
votes
1
answer
21k
views
Where do I find the certificate file so I can add a program to "Trusted Publishers" in the certmgr?
I have three programs that startup automatically with Windows 7.
They are:
Webroot SecureAnywhere
Soluto Anti-Frustration Software
everything.exe
Each of these programs bring up a blue UAC dialog ...
7
votes
2
answers
5k
views
Outlook 2016: Multiple accounts, certificates only for one
This question has ben asked before but yet never answered.
I have set up my Outlook 2016 with three different Mail accounts:
[email protected] (commertial, office365)
[email protected] (personal, ...
7
votes
2
answers
26k
views
How to export certificate in pfx format?
I am running Windows 10. I have install a certificate to my computer. I see that in my MMC. But when I try to export a pfx file for that certificate. That option is disable.
I was able to ...
7
votes
1
answer
10k
views
How to install a self-signed certificate in chromium under Debian
I have a web server that uses https protocol. I want to create a self signed certificate so I did the following:
Issued this command:
openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout ...
7
votes
3
answers
5k
views
Windows 8 EFS: How to tell windows to use "this" certificate for EFS encryption?
On Windows 8, I turned on EFS and encrypted some files/folders. During this process, it created a self signed certificate and used that one for encryption. However, I have a specific certificate that ...
7
votes
1
answer
17k
views
Expired web/SSL certificate error on only one computer
I have a strange problem with one website's SSL certificate that only affects one computer Windows 7 operating system. The site works fine on other Win 7 computers with no error, pulling valid ...
7
votes
3
answers
9k
views
Mutt will not let me save an SSL certificate
I have just set up Mutt to connect to my firm's IMAP and SMTP server. Everything works; but when I launch mutt, I get a warning about the certificate, and am given the option to:
(r)eject, accept (o)...
7
votes
0
answers
5k
views
Edge "security certificate is not secure" since bash installation
Description
I am running Windows 10 Insider - Build 14316. I managed to reproduce the issue by reverting the update and try it again to see exactly when the problem occurs.
So, I activated Ubuntu On ...
6
votes
1
answer
44k
views
(SSL)How to convert .der file to .cer file?
I followed How To: DER vs CRT vs CER vs PEM Certificates and How to Convert Them, wanting to understand how to set up SSL, but I cannot find a good reference for it.
On my server, I have paid ...
6
votes
1
answer
46k
views
Decrypt PEM containing key and certificate
I have a .pem file which contains both my certificate and encrypted private key, ie:
Bag Attributes
....
-----BEGIN CERTIFICATE-----
....
-----END CERTIFICATE-----
Bag Attributes
....
-----BEGIN ...
6
votes
2
answers
8k
views
Trusted Root certificates regularly disappear on Windows 7
I've installed several self-signed certificates on my Windows 7 Ultimate x64 machine for development purposes. One was installed into Trusted Root CAs and 2 were installed into My Certificates and ...
6
votes
5
answers
5k
views
Certificate: export from Firefox, import to Windows store
I made the fatal mistake of importing a personal certificate to Firefox which is of course not supported by government institutions even though they say it is.
I'd now like to transfer that ...
6
votes
2
answers
35k
views
Windows 7 Certificate Manager Snap-In without access to MMC
In support of a remote end user, I need to walk them through adding a trusted root certificate to their computer's "Computer Account".
This is no big deal, except this user is running Windows 7 Home ...
6
votes
6
answers
16k
views
SSL certificate verification failure in Chrome, Heartbleed bug?
For some reasons I'm running into SSL problems since a few days.
When trying to clone a git repository for example I receive the following error message:
fatal: unable to access 'https://someuser@...
6
votes
3
answers
4k
views
How to restrict the usage flags for primary key-pairs in OpenPGP certificates?
More than one time I read recommendations to use the primary key-pair in my OpenPGP certificate only to sign sub-key-pairs and not for general daily use (even to keep the private key stored on a non-...
6
votes
3
answers
1k
views
How to match a private key with a provided certificate?
Someone gave me a certificate and a couple of private/public keys, and said, "tell me which private key matches the certificate." How do I do that?
The certificate is in PKCS #7 format and starts ...
6
votes
2
answers
9k
views
ssh using certificates -- can you rename id_rsa file?
When using certificate authentication with ssh, the instructions I have found indicate you should create a key-pair as id_rsa.pub && id_rsa. The public key is then sent to the remote system ...
6
votes
2
answers
15k
views
Install a PKCS#12 Certificate into firefox from the command line
I am trying to use certutil to add a client certificate to the firefox db:
The purpose of this certificate is to authenticate with a server - the server asks for credentials, this certificate contains ...
6
votes
2
answers
8k
views
Firefox Refuses IIS Express Certificate with error "SEC_ERROR_INADEQUATE_KEY_USAGE"
I have IIS Express running a .Net Core web application.
Chrome is able to browse the HTTPS version fine, and until recently so was Firefox. Suddenly I'm getting this error:
Secure Connection ...
6
votes
2
answers
13k
views
Outlook shows certificate security warning in local LAN although certificate is only associated to IIS
I have the following configuration with Exchange Server 2010:
I have a self-signed certificate which is associated with all the services (POP, SMTP etc..) except IIS (which is associated with a ...
6
votes
2
answers
10k
views
Remove all certificate authorities from a Firefox profile
Objective is to trust only certain certificates stored on the hard disk for that certain profile. Thus no certificate authorities are needed.
Tried without success:
Delete all CAs using Certificate ...
6
votes
1
answer
4k
views
Where to get root SSL certificates for Opera 12.17?
Approximately six months ago several web sites began to lose their styles gradually and finally some of them entirely stopped working in Opera although they work in other browsers. All this seemed to ...
6
votes
2
answers
10k
views
Make Chrome trust the Linux system certificate store or select certificates via policies
I need to trust a self-signed certificate on a lot of managed Linux desktops.
I have imported them into the trust store of the OS, curl, wget etc. trust them.
However browsers like Firefox and Chrome (...
6
votes
1
answer
2k
views
How to create private security certificates that behave like official ones?
I'm trying to get a valid secured environment for HTTP communication to behave like normal ones. I'm doing this for a restricted group of users.
There is a hardware server running a web service (nginx)...
6
votes
2
answers
3k
views
Checking suspicious (root CA) certificates
I was just looking at my certificate store and saw a bunch of root CAs that look kind of suspicious; specifically numerous ones that:
have ALL CAPS text
use foreign languages/text
have extremely long ...
6
votes
4
answers
40k
views
Import Java Trusted Certificate to JRE
I need to install a certificate from a Java app to a lot of people. I want to use a one click program or batch file to import it as a Trusted Certificate(in Control Panel->Security->Certificate). Then ...
6
votes
1
answer
282
views
Same version of Chrome, two different behavior regarding sha1 deprecation
i'm well aware of the changes made to Chrome 42 and sha1 signed certificates.
Here a short reminder : https://blog.filippo.io/the-unofficial-chrome-sha1-faq/
Our client reported this problem and I'...
6
votes
0
answers
4k
views
Linux: Sign PDF using a certificate stored in a smart card with a time-stamped signature [closed]
In Linux, I am looking for a way to sign a PDF file using a certificate stored in a smart card similar to the feature offered by adobe acrobat reader (Tools->Certificates->Digitally Sign). The latter ...
6
votes
0
answers
1k
views
Can I make "Always trust software from" unchecked by default?
While installing an application, I received a prompt to install a driver which had a checked checkbox next to the text "Always trust software from [company]":
Since there have been instances of ...
5
votes
2
answers
3k
views
Why do I get DONE after AUTH LOGIN command to SMTP Server?
I am trying to connect to my server SMTP on Windows 2012 R2 server on which is installed a RapidSSL 256 bit certificate. I need to test if the SMTP server can send email to one of our customers which ...
5
votes
2
answers
5k
views
Why does https://gmail.com/ produce no SSL error while using a bad certificate?
It looks like https://gmail.com uses an SSL certificate which is for the hostname mail.google.com. As the SSL certificate hostname does not match the browser URL, why does this work? I should get a ...
5
votes
2
answers
16k
views
How to use the certificates on a smart card without the physical card?
I recently extracted the certificates from my smart card and imported them into Firefox.
However, when I tried logging in to several smart-card-enabled websites, I received an error message (Error ...
5
votes
5
answers
48k
views
Certificate error with Internet Explorer 9
one of my coworkers installed IE9 on their computer. They are now having trouble accessing some websites that once worked(and still work) in other browsers.
One example is this page: https://secure....