Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

learn more… | top users | synonyms (1)

4
votes
2answers
1k views

Can I be a root certificate authority for my local network?

This may sound crazy, but can I be the root certificate authority? I mean, I have many computers and smart devices in my home. Remote Desktop warns for the certificate not being trusted, because it ...
5
votes
4answers
11k views

Check expiry date of ssl certificate for multiple remote servers

I can find out the expiry date of ssl certificates using this OpenSSL command: openssl x509 -noout -in <filename> -enddate But if the certificates are scattered on different web servers, how ...
1
vote
1answer
261 views

DNSCrypt not working - server certificate possibly expired

I have been using DNSCrypt for a few days (used this guide to install dominustemporis.com/2014/05/dnscrypt-on-windows-update/) and it has been working fine for a few days. Today I switched on my ...
1
vote
3answers
123 views

OpenSSL 0.9.8zc -> 0.9.8zd “broke” my certificates.

I have a self-signed certificate (and CA) created on a Mac using OpenSSL 0.9.8zc. I use the certificate to secure connection to my svn server. With the latest OS X update, OpenSSL was updated to ...
0
votes
0answers
15 views

radius authentication os x server and client certificate

I configured a Mac mini with OS X v10.10 and OS X Server, and an AirPort Extreme. The Wi-Fi network is WPA2 Enterprise, and the server provides RADIUS authentication service. I want the client ...
0
votes
0answers
16 views

How do I manage trust exceptions in Firefox?

Through the course of using Firefox over the years, I've had to manually trust certificates for a number of HTTPS sites for various reasons. I'm trying to find a way to view the list of these sites, ...
22
votes
6answers
48k views

How to bypass the “secure connection failed” warning in Firefox 33

Since installing Firefox 33 a "Secure Connection Failed" error is no longer bypassable using the "I Understand the Risks" button - it's gone! Is it still somehow possible to ignore certificate ...
3
votes
1answer
66 views

Apache serves an old SSL certificate

I'm hosting a webpage with Apache on a Raspberry Pi (Debian), and can't seem to get the server to issue the current certificate. I generated a self-signed SSL certificate in /home/pi/ssl/ with: ...
0
votes
1answer
129 views

Mumble Server (Murmur) 3rd Party SSL Installation on Ubuntu

I recently purchased a wildcard certificate for my website and would like to also add it to my murmur server but I am having trouble finding out the proper steps to take to do this. The certificate I ...
0
votes
1answer
45 views

Securing Remote Desktop Connections With SSL Certificate From a Trusted Certificate Authority

Currently I'm using a desktop machine running Windows 7 Ultimate x64. Also have configured it to enable remote connections using MS Remote Desktop Services (RDS); however, since the machine issues its ...
0
votes
1answer
124 views

Windows Wi-Fi with 802.1X + EAP-TTLS + EAP-MSCHAPv2 and client certificates

Sooo ... We have the the mandatory requirement that clients who want to join our wireless LAN to present a valid machine certificate issued by our in-house root CA. This is done to prevent from ...
0
votes
0answers
26 views

Java 8 build 45 expired certificate

The Java cert on my old hardware (Dell DS2161-2) IS EXPIRED (last month) and Java is trolling me with "security". I've tried adding it and variations there of to the exception list, but that doesn't ...
4
votes
2answers
2k views

Why is the local certificate store missing in Windows 8.1?

I am trying to import a self-signed certificate into che local certificate store of the Trusted Root CAs on my Windows 8.1 machine, but that store is missing. Importing it into the Trusted Root CAs ...
5
votes
2answers
5k views

Trust SSL certificate to local system account

I have the following need: A windows service needs to connect to a svn repository through https. The service needs also to run as local system account for IO permissions on the machine. Now when the ...
2
votes
5answers
3k views

Certificate not trusted over Win7 to Win7 Remote Desktop connection

I'm experiencing a certificate issue while connecting two Windows 7 machines together via Remote Desktop. I have installed the certificate, but I'm getting a message that says the cert is not trusted. ...
0
votes
1answer
10k views

Identifying program attempting to install certificate on windows

I'm trying to help a friend using Windows (which I'm not an expert on by any means) who's experiencing malware-like behavior: a dialog box is repeatedly popping up reading: You are about to ...
0
votes
2answers
52 views

How to solve certificate issue for internal URL in Chrome

When entering the following internal URL (changed a bit for privacy) in Chrome: https://pms/WebClient/CRMclient.aspx I get Chrome's message for a certificate mismatch: This is probably not the ...
5
votes
2answers
14k views

how to get and use certificates with curl

1) Entering the following command curl -k email@mail.com:password https://www.site.com Returns the following error <HTML><HEAD><meta http-equiv="content-type" ...
0
votes
1answer
27 views

Certification Authority migration - cannot install Web Enrollment role

I used this to migrate a certificate authority my root CA from a Win2003 AD server oldserver to a Win2008R2 member server newserver (with different name). After completing this task, I wanted to ...
6
votes
3answers
2k views

Are SSL's default snake oil certificates truly snake oil as opposed to being genuine honest-to-good certificates? [closed]

SSL generates self-signed "snake oil" certificates by default, for example at /etc/ssl/certs/ssl-cert-snakeoil.pem. As per Wikipedia, snake oil is a cryptographic method or product that is considered ...
0
votes
1answer
94 views

Roundcube, php 5.6 and self-signed certificates

I am currently porting one of my servers to another. That server is running Postfix + Dovecot using a self-signed certificate. My web-frontend used to be roundcube. Now is the problem, that the new ...
0
votes
0answers
49 views

Get OS X Chrome to accept self-signed SSL certificate for localhost

I've been trying to get this working all day, and I have a strong feeling that my issue is specific to Yosemite. I'm running OS X 10.10.3 on a retina Macbook Pro. I took instructions from ...
2
votes
3answers
3k views

Creating a signing certificate for Outlook 2010 under Windows 7

I'm trying to create a S/MIME signing certificate for Outlook 2010 under Windows 7. I've gone into Options -> Trust Center (see below) to try and set it up but when I attempt to select the signing ...
0
votes
0answers
11 views

X509 certificate that can only be installed on a particular machine

Is it possible to create a certificate that will not install on a machine other than its intended one? (Using some hardware fingerprint embedded into the cert?) Or alternatively, is there a way to ...
4
votes
2answers
18k views

View / install certificates for local machine store on Windows 7

On Windows 7 (Windows 7 Professional x64), how can I view and install certificates in the local machine store? The certmgr.msc plugin allows me to view certificates installed in the current ...
3
votes
0answers
94 views

Same version of Chrome, two different behavior regarding sha1 deprecation

i'm well aware of the changes made to Chrome 42 and sha1 signed certificates. Here a short reminder : https://blog.filippo.io/the-unofficial-chrome-sha1-faq/ Our client reported this problem and ...
2
votes
1answer
24 views

Why can't I verify this certificate chain?

I have three certificates in a chain: root.pem intermediate.pem john.pem When I examine them using openssl x509 -in [filename] -text -noout they look fine, root.pem looks like it is self-signed ...
0
votes
0answers
28 views

Java app certificate Issue

I have an app called Tata Docomo Get.I downloaded it from the website on my java phone then Its showing no valid certificate.So I downloaded the app on pc I have two files of this app .jar and ...
0
votes
0answers
17 views

Non-domain log forwarding certificate types

I'm trying to set up a source initiated subscription (Log forwarding) where the event source server is not in the same domain as the event collector server. I'm following these steps. It states that ...
0
votes
1answer
17 views

UTF8 and T61 strings, how do I see what my SSL cert uses?

How do I use the openssl x509 tool to see whether or not my strings are T61 or UTF8 encoded in the cert? Is there a better way?
1
vote
3answers
83 views

SSL Root CA certificate is not recognized, although present in the trust store. Why?

Background: Ubuntu Server 14.10 64-bit on aws.amazon.com/ec2 Cheap PositiveSSL server certificate from COMODO 1 server certificate, 2 intermediate CA certificates and 1 Root CA certificate as ZIP ...
0
votes
4answers
3k views

Firefox Certificate Error

I have this annoying problem - every time I get into a site with a security certificate I always see a warning page that the certificate is invalid. I've grown accustomed to just setting an exception ...
0
votes
1answer
121 views

How to generate a P12 file, based on the key and PEM certificate?

I would like to generate a P12 file from the key and the PEM version of an iPhone developer certificate. Is there a GUI based tool available for Windows XP?
5
votes
4answers
16k views

Import Java Trusted Certificate to JRE

I need to install a certificate from a Java app to a lot of people. I want to use a one click program or batch file to import it as a Trusted Certificate(in Control Panel->Security->Certificate). Then ...
0
votes
1answer
66 views

Thunderbird Certificate Alert keep popping up

I'm having the issue in the title since months now and is driving me crazy. I keep getting this warning: which translates to Add Security Exception You are going to modify the way ...
1
vote
0answers
32 views

Outlook not updating certificate

Outlook is refusing to send an encrypted email to a recipient whose certificate recently expired. The recipient sent a signed email and I exported the certificate to a ".cer" file then updated their ...
3
votes
2answers
1k views

Outlook 2013, multiple email accounts and encrypted email: Only last S/MIME settings used

I have multiple email accounts properly setup in Outlook 2013 (can send/receive fine otherwise). Lets say they are: user1@domain1.com user2@domain2.com user3@domain3.com All belong to me and I have ...
19
votes
2answers
4k views

Apple's Mail showing “the identity of smtp.gmail.com cannot be verified”

When trying to send email using Gmail in OS X Mail, I get: The identity of "smtp.gmail.com" cannot be verified. The certificate for this server is invalid. You might be connecting to a server ...
0
votes
0answers
20 views

converting 'cacert.crt' file to pks 12

This is the third or so in a chain of questions to implement ssl certificates. To date the public and private keys are created in the server and are operational, however the browsers do not recognize ...
0
votes
0answers
82 views

OpenSSL Error: Error loading extension section server

The system is Fedora fc21. The objective is to run the examples shown here: “APACHE web server and SSL authentication” The openssl.cnf file has been created and the following command run: openssl ...
0
votes
0answers
80 views

Can AVG 2015's Online Shield be used Chrome (and not give NET::ERR_CERT_DATE_INVALID)?

I am using AVG 2015. If I enable Online Shield, websites that use some of Google's API's (including StackExchange sites) become unavailable and start displaying a NET::ERR_CERT_DATE_INVALID error ...
1
vote
2answers
19 views

Signed application fails to launch

On a particular Windows Vista PC, all programs signed with a particular certificate fail to launch from explorer, when it verifies the publisher. Only for a second or two, the hour glass is visible, ...
0
votes
0answers
35 views

How to recover Windows 7's encrytion certificate (EFS) from formatted partitions?

I am a home user of Windows 7 ultimate. I am just a local admin for my computer. A standalone system. I am quite noob about computers. I formatted, Windows 7 installed(size 200gb) partition of 1tb ...
0
votes
0answers
33 views

Endless Loop going to self signed https site in Chrome only?

A client I am working for has a site running under SSL using a self signed certificate. When I navigate to the site in Chrome, I get the Err_Cert_Authority_Invalid error. I click Advanced and the ...
0
votes
0answers
14 views

Keytool without root access and leiningen

My traffic goes through proxy which replaces SSL certificate. This causes problems when accessing the maven/leiningen packages through HTTPS. I tried to install the cert in my keytool but that ...
1
vote
0answers
95 views

What is causing warning on a certificate's basicConstraints?

I created a self signed server certificate using OpenSSL's req -x509 command and a CONF file. The CONF file is shown below. When I examine the certificate using Microsoft certificate viewer, its ...
0
votes
0answers
44 views

expired certificates and chrome

Yesterday I've visited a website for the first time, but now Chrome raises an error when I connect to this website. The error is: the connection is not private - ERR_CERT_DATE_INVALID So I tried to ...
0
votes
0answers
112 views

Is there a way to get Mac OS X 10.10 with Java 8 to allow an application with expired certificate to be installed?

I’m trying to install AtlasStyler on a Mac OS X 10.10 box with Java 8 (update 25) installed. Trying to run the installer (Version 1.9 201403170926) ends in following deny alert: Saying that the ...
0
votes
1answer
126 views

Firefox stopped working with our app after 36.0.1

We have a web application that works on all browsers and firefox before 36.0.1 Have done all the typical things, clearing cache, reinstalling ff, etc. Multiple different machine from different ...
0
votes
1answer
191 views

How to fix chrome certificate issues after removing Fiddler root cert

I don't know very much about certificates, and I don't want to break anything trying to resolve this - so asking for some suggestions. At some point agreed to let Fiddler install an HTTPS certificate ...