Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

3
votes
2answers
3k views

Why can't I verify this certificate chain?

I have three certificates in a chain: root.pem intermediate.pem john.pem When I examine them using openssl x509 -in [filename] -text -noout they look fine, root.pem looks like it is self-signed (...
0
votes
0answers
124 views

Deadlock when adding untrusted certificate to keychain running MS Remote Desktop Client on Mac OS X 10.10.5

I am experiencing a strange, frustrating, and seemingly nondeterministic issue using the MS RDP client on Mac OS X 10.10.5. Here are the steps to reproduce the issue: Open Microsoft Remote Desktop ...
63
votes
5answers
130k views

How do you add a certificate authority (CA) to Ubuntu?

My work has decided to issue their own certificate authority (CA) to handle different aspects of our work securely without paying for certificates. Cryptographically sign emails Encrypt email ...
-2
votes
1answer
365 views

Install windows store app for all users

I have a Windows Store App project from Visual Studio, and I'd like to install it for all users. I don't need to put it on the app store or anything, I only want to distribute it locally to other ...
0
votes
0answers
71 views

Using .ppk file to ssh from a Mac

I have a .ppk file that I need to use to ssh into a server. I am using OS X Yosemite. I converted it to .pem file using this: puttygen keyfile.ppk -O private-openssh -o keyfile.pem However, when I ...
0
votes
1answer
1k views

OpenSSL Error: Error loading extension section server

The system is Fedora fc21. The objective is to run the examples shown here: “APACHE web server and SSL authentication” The openssl.cnf file has been created and the following command run: openssl ...
0
votes
0answers
56 views

Browser still see old certification after changing to Cloudflare

I have just changed my website to be SSL over Cloudflare. However, for some reason my OSX any browser still see my website with SSL from Github. I'm using Octopress to deploy to Github pages. This ...
0
votes
0answers
63 views

Unable to copy files from old hard drive to new one

Had to format my PC, so I just bought a new and larger SSD drive. I had to move some files from my old HDD, but some files are encrypted. It seems like this doesn't let me copy the files from one ...
6
votes
1answer
167 views

Same version of Chrome, two different behavior regarding sha1 deprecation

i'm well aware of the changes made to Chrome 42 and sha1 signed certificates. Here a short reminder : https://blog.filippo.io/the-unofficial-chrome-sha1-faq/ Our client reported this problem and I'...
0
votes
0answers
10 views

EAP Profile, certificate and AC, why we have to delegate trust to user's appreciation

I'm wondering about user trust appreciation in AC in EAP profile authentication process. Take a computer, and try to connect to an 802.1x network with EAP. When the 802.1x client contact your radius ...
-1
votes
1answer
152 views

Windows 7 crashed - how to recover private keys from certificate store?

long story short - something got screwed with my boot loader, then drivers gave me blue screen etc - after 2 days of googling I decided to stop and just reinstall the windows (keeping the image of old ...
0
votes
1answer
42 views

How to untrust proxy or antivirus certificate and/or certificate authority?

I have antivirus inspecting my web traffic including HTTPs. In this question we discovered, that it installed it's self certificates or certificate authority (not sure about terminology). Now I wish ...
0
votes
0answers
79 views

Shrewsoft ver 2.2.2 client: unable to verify remote peer certificate

I have Shrew Soft VPN Client 2.2.2 running on two Windows 7 test systems. (road-warrior config). I’m trying to establish a VPN tunnel between a Windows 7 system and a Red Hat Enterprise Linux 7 (RHEL) ...
0
votes
0answers
63 views

SSL decrypting with Charles debugger

Situation I am using Charles Web Debugging proxy to analyze traffic and manipulate files. When I enable SSL Proxying for a certain web server, this server refuse me a connection with this error: ...
0
votes
1answer
15 views

SelfSLL, Microsoft Management Console, Certificate Not Displaying

I am currently attempting to create a self-signed certificate with the SelfSSL.exe tool from Microsoft's IIS 6.0 Resource Toolkit (I have the metabase compatability enabled); however, when creating ...
4
votes
1answer
3k views

OpenVPN server certificate configuration instructions for DD-WRT router do not match user interface

I'm setting up the OpenVPN server daemon on a Buffalo N600 router which came stock with DD-WRT v.24 SP2. I'm following the instructions at VPN (The Easy Way) V24+ to set up the server side of things ...
1
vote
4answers
11k views

Why 'This Connection is Untrusted' for practically every site on Mozilla Firefox?

This started a couple of months ago and pops up for just about every site, including Google, Macy's, DSW, Outlook.com, etc. These are all regularly visited sites so there should be no problem. There ...
0
votes
1answer
59 views

secure boot - runs fine with .cer - fails with .crt certificate

I have Asus X200MA notebook with Windows 8.1 64bit. I have setup shellx64.efi to run under secure boot. File is signed with my own key (created using openssl) and it runs fine when .cer format ...
0
votes
1answer
271 views

How can I be my own Certificate Authority (CA) and generate ssh keys for my client computers

I have seen a lot of tutorials about how you can be your own Certificate Authority (CA). The tutorials that I have seen are on how to generate ssl keys not ssh keys so I was wondering how do I ...
0
votes
0answers
154 views

How can I allow use of the Certificate Store on Windows 7?

How can I allow use of the Certificate Store on Windows 7, IIS v. 7.5, debugging in VS2013? The top answer to this question first falls apart for me when I can't specify "allow private key to be ...
1
vote
2answers
934 views

Import self-signed certificate with private key on Windows from command prompt

Using inetmgr, I made a pfx file containing the public and private keys for a certificate. Now I'm trying to install the pfx into another machine from the command prompt with certutil -p <password&...
1
vote
1answer
149 views

Is there a way to make Chrome assume a domain's certificate is valid (in other words, skip validating its certificate)?

Is there a way to make Chrome on Windows avoid validating the certificate for a domain such as (www.foo.com): Basically I want to avoid getting this warning message for that site every time I start ...
1
vote
1answer
2k views

How do I remove security certificate exceptions from Google Chrome?

I am a developer and have created a certificate for my application. The first time I access it Chrome states that the certificate is not recognized and suggests to leave the website. There is however ...
2
votes
1answer
1k views

CA certificate expired on openvpn

I have a problem with CA certificate on openvpn, it has expired and clients cannot connect. I tried to create a new certificate with the ca.key, but it did not work. Here is the command I used to ...
6
votes
6answers
15k views

SSL certificate verification failure in Chrome, Heartbleed bug?

For some reasons I'm running into SSL problems since a few days. When trying to clone a git repository for example I receive the following error message: fatal: unable to access 'https://someuser@...
3
votes
3answers
2k views

Certificates signed by multiple CAs

Is it possible to have a OpenSSL Certificate signed by multiple CAs? Background: We have a CA to issue certificates mainly for our machine-to-machine communications. Now we need to make some services ...
1
vote
1answer
104 views

Same SSL Cert on 2 Servers, 1 Passes & Other Doesn't

I run a few small sites, and last year installed SSL certificates on each of them. Last week a visitor contacted me with a question about my SSL certificate, which prompted me to run a couple of SSL ...
2
votes
3answers
1k views

SSL Root CA certificate is not recognized, although present in the trust store. Why?

Background: Ubuntu Server 14.10 64-bit on aws.amazon.com/ec2 Cheap PositiveSSL server certificate from COMODO 1 server certificate, 2 intermediate CA certificates and 1 Root CA certificate as ZIP ...
1
vote
0answers
115 views

Bypass the certificate warning pages in Chrome for a specific URL

I manage an Aruba access point virtual controller cluster and when I visit the local management URL by IP (no DNS involved) over the local network using Chrome I get these two warning pages that I ...
0
votes
1answer
73 views

How to bulk extract personal certificates on Windows?

We are upgrading computers to Win7 and I've found a computer with 300+ personal certificates and we need to save all of them. Is there a way to bulk export them?
0
votes
0answers
370 views

Install self-signed SSL certificate correctly (for use in Node.js)

I've been trying to create a self-signed certificate, use it in a simple Node.js server, and install it into the system to the system trusted. However, something is not working, the 'SSL certificate ...
0
votes
2answers
732 views

Restrict export of private keys in the Windows certificate store using a password

In the Windows certificate store, I am looking for a way (if it is possible) to store a public/private pair and keep the private exportable, BUT restrict the export to only those that know a password. ...
0
votes
0answers
67 views

Changing strong protection passwords of private key in the Windows certificate store

When importing a x509 certificate with a private key into the Windows certificat store, there is an option to set a password for that key (It is called “strong protection” in the Certificate Import ...
1
vote
1answer
2k views

What is causing a Java certificate confirmation for javadl-esd-secure.oracle.com to show?

For the last 3 days I occasionally get this window in front of me: Do you want to Continue? The web site's certificate has been verified. Website: https://javadl-esd-secure.oracle.com:...
1
vote
1answer
4k views

Certificate errors don't offer the option to “continue to website (not recommended)”

I'm using IE9 and trying to access a trusted page with an security certificate not from a trusted authority. I know I can permanently add the certificate once I access the page. The trouble is, ...
0
votes
0answers
41 views

Firefox Developer Edition refuses all certificates for all sites

All of a sudden yesterday, Firefox Developer Edition on my Windows 7 Professional laptop appeared to get "reset" almost as if it had been re-installed from scratch. All my bookmarks disappeared. ...
1
vote
1answer
60 views

What's the difference between certificate and credentials?

What's the difference between digital certificate (e.g. .pem or .der files) and credentials (e.g. .pfx files)?
0
votes
0answers
17 views

Multiple Public Certificates Issued to the Same Name

I have a setup where there are two systems that expose a web service. The URLs are load balanced by a virtual IP that just does a TCP health check and routes a request to either of the two systems. ...
0
votes
0answers
52 views

Cannot Create a User in ipa server for remote login

I had created a new IPA IdM server in centos 7 using script install-ipa-server. The installation was successful. Post installation i was not able to create a user using ipa user-add user it asks for ...
0
votes
0answers
34 views

How do I specify a CA certificate and/or client certificate to the links web browser

I have a need to use a local web browser for diagnostics to verify a secure website endpoint within a datacentre. This endpoint is TLS enabled and protected with a client certificate, both of which ...
2
votes
3answers
6k views

Creating a signing certificate for Outlook 2010 under Windows 7

I'm trying to create a S/MIME signing certificate for Outlook 2010 under Windows 7. I've gone into Options -> Trust Center (see below) to try and set it up but when I attempt to select the signing ...
-1
votes
1answer
102 views

cacert.pem location [closed]

Where can I find the 'cacert.pem' in Linux? I need it for ssl configuration.
0
votes
0answers
108 views

Certificate authentication over socks/ssh

My workplace has the requirement that to browse any internal site the browser has to present a valid certificate. My desktop at work has such a valid certificate. I would like to tunnel to the desktop ...
3
votes
1answer
263 views

How to use backup EFS certificate to decrypt encrypted files?

I have some files that were encrypted on a now extinct Windows 7 system. I made sure to backup my keys, this one is called efs.pfx. Double-clicking it launches the Certificate Import Wizard which ...
2
votes
1answer
367 views

Does a certificate authority (CA) have to be online constantly?

Does a CA has to be online all the time in order for the whole system to work? For example, if I go to a secure webpage that uses a certificate signed by a CA, I receive a public key along with the ...
0
votes
1answer
35 views

Where to find signing certificates in Thunderbird?

I have recently installed a Linux version besides Windows on my laptop. I am now copying over important programs and settings. I used to sign messages in Thunderbird with a certificate in Windows. I ...
0
votes
0answers
172 views

Chrome is not accepting my IIS self-signed certificate

I'm developing on my local machine with a self-signed certificate in IIS. Everytime I open Chrome and go to my site, initially I get an error 'Your connection is not private'. I then have to click '...
11
votes
8answers
29k views

Firefox: This connection is untrusted + Behind corporate firewall

I've seen some similar issues strewn throughout Google's results about this, but none seem to be corporate-specific. I continually get the 'This connection is untrusted' screen every time I attempt ...
0
votes
1answer
579 views

Pure-FTPD certificate not being used

I am using Pure-FTPD from the epel repository on CentOS 6. Now I have configured to enable TLS which works fine however for some reason it wont make use of the certificate file I have placed in /etc/...
0
votes
1answer
181 views

Where does Firefox get the HSTS information from?

I have a local server serving HTTPS using a self-signed certificate. It does not serve http. The certificate is issued with cn=host1.subdomain1.domain1. The server is reachable under name host2, too. ...