Questions tagged [certificate]
Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a trustworthy way to distribute and determine the correct public key for a given user or machine.
99
questions
51
votes
2
answers
131k
views
OpenSSL CA keyUsage extension
I want to set up a chain of certificates, with a self signed 'root' CA at the top that signs sub CAs, which can then sign client and server certificates. When setting up openssl.cnf, I noticed a ...
12
votes
5
answers
8k
views
If Mac code signing is tampered with, what might fail?
What annoyances or real problems may occur when the digital signature of a Mac application is broken?
Applications on a Mac can be digitally signed. When the signature is somehow broken, I know a few ...
288
votes
8
answers
851k
views
How do you add a certificate authority (CA) to Ubuntu?
My work has decided to issue their own certificate authority (CA) to handle different aspects of our work securely without paying for certificates.
Cryptographically sign emails
Encrypt email ...
2
votes
4
answers
3k
views
NET::ERR_CERT_DATE_INVALID and certificate is not expired
When I try to access my website using https I receive the below error. This error only occurs from my computer regardless which browser I am using to access the home page. When I try to access the ...
237
votes
9
answers
913k
views
How do I disable the warning Chrome gives if a security certificate is not trusted?
I want to know if it's possible to disable the warning you get in Chrome when you try to go to some HTTPS site that doesn't have a trusted certificate.
I have a few sites in my bookmarks that use ...
80
votes
7
answers
348k
views
How to bypass the "secure connection failed" warning in Firefox 33
Since installing Firefox 33 a "Secure Connection Failed" error is no longer bypassable using the
"I Understand the Risks" button - it's gone!
Is it still somehow possible to ignore certificate errors?...
15
votes
8
answers
200k
views
Continually getting https certificate errors on all browsers
I recently switched to a new laptop running Windows 7. For some reason I am constantly getting certificate errors when hitting sites where I really shouldn't be getting them - twitter, picasa, google ...
7
votes
1
answer
4k
views
How to use backup EFS certificate to decrypt encrypted files?
I have some files that were encrypted on a now extinct Windows 7 system. I made sure to backup my keys, this one is called efs.pfx. Double-clicking it launches the Certificate Import Wizard which ...
436
votes
9
answers
950k
views
How to save a remote server SSL certificate locally as a file
I need to download an SSL certificate of a remote server (not HTTPS, but the SSL handshake should be the same as Google Chrome / IE / wget and curl all give certificate check fail errors) and add the ...
129
votes
8
answers
794k
views
How do I deal with NET:ERR_CERT_AUTHORITY_INVALID in Chrome?
My work place intercepts SSL connections, looks at their contents, and then passes the data to and from my machine and remote hosts - a kind of man-in-the-middle attack. This is not uncommon in ...
36
votes
1
answer
121k
views
How to make Firefox ignore all SSL certification errors?
I'm on a private network with a lot of restrictions and monitorings. Every HTTPS connection results in SSL certification errors (maybe those people use "man-in-the-middle" approach to decrypt the ...
-1
votes
3
answers
1k
views
Is there a license / royalty free DRM available for protecting and distributing content? [closed]
Is there a license / royalty free DRM available for protecting and distributing video content?
73
votes
5
answers
191k
views
Add permanent SSL certificate exception in Chrome (Linux)
I have a problem with a website that has an SSL certificate which doesn't correspond to the website domain. Chrome gives me a warning for this website (and rightly so), which I have to ignore manually....
14
votes
7
answers
35k
views
Firefox: This connection is untrusted + Behind corporate firewall
I've seen some similar issues strewn throughout Google's results about this, but none seem to be corporate-specific.
I continually get the 'This connection is untrusted' screen every time I attempt ...
2
votes
2
answers
4k
views
Can I disable certificate error/warning in Firefox/Chrome/Internet Explorer?
Exactly as the title says; I don't mind which browser, I just want to type "https://........" and see the page normally without any certificate error, knowing that I might risk myself by allowing an ...
2
votes
3
answers
4k
views
How do add a certificate from a self-signed server to trusted certificates in Chrome?
I have a dedicated server with a wiki and want to secure it so nobody can read my articles by sniffing my pages.
I do not want to pay for a valid certificate so I created a self-signed certificate. ...
304
votes
15
answers
373k
views
Too many authentication failures for *username*
I have a hostgator account with ssh access enabled. When trying to upload the generated .pub key file with this command:
rsync -av -e "ssh -p2222" /home/user/.ssh/key.pub [email protected]:.ssh/...
188
votes
6
answers
363k
views
How do I view the contents of a PFX file on Windows?
I have a PFX certificate file on my machine and I'd like to view the details before importing it. (The import utility doesn't actually tell you what the certificate is!).
How do I view the details ...
89
votes
10
answers
251k
views
How to create my own certificate chain?
I would like to set up my own OCSP Responder for testing purposes, and this requires me to have a Root certificate with a few certificates generated from it.
I've managed to create a self-signed ...
55
votes
4
answers
234k
views
How can I get a list of installed certificates on Windows?
I know I have some certificates installed on my Windows 7 machine. How can I see what they are, the nicknames they are known by, and browse detailed information (such as issuer and available ...
50
votes
4
answers
175k
views
How to configure Chrome to ignore SSL warning on specific URLs?
I guess there no need to introduce the "Privacy error" page in Chrome that appears whenever one uses SSL to access an uncertified website that has no signed certificate (red "X" on ...
47
votes
4
answers
15k
views
Firefox "Untrusted Connection" warnings when visiting reputable HTTPS sites when using child's account
When using Firefox on Windows, I see an "Untrusted Connection" warning when visiting any HTTPS site, including very reputable ones such as https://www.google.com and https://search.yahoo.com. The ...
43
votes
4
answers
155k
views
how to use curl to verify if a site's certificate has been revoked?
To check if the certificate for google.com has been revoked, I tried the following command:
curl https://www.google.com --cacert GeoTrust_Global_CA.pem --crlfile gtglobal.pem -v
, but I got the ...
39
votes
3
answers
185k
views
View / install certificates for local machine store on Windows 7
On Windows 7 (Windows 7 Professional x64), how can I view and install certificates in the local machine store?
The certmgr.msc plugin allows me to view certificates installed in the current ...
38
votes
4
answers
118k
views
How can I export a certificate from MMC as a PFX file?
I'm in the process of trying to change the KeySpec property of a code signing certificate from Comodo by following this guide. The guide mentions importing your certificate file into MMC and then ...
35
votes
2
answers
103k
views
What are the Windows system certificate stores?
When adding certificates, stls, ctls and crls to the system, I can choose the certificate store.
I have found only references to the "my" and "root" stores so far.
Are there any other?
30
votes
2
answers
112k
views
Windows 7 will not install a root certificate
I have a web service that uses a self-signed certificate, so I need to install the certificate as a Trusted Root so that I can avoid all the security errors that having a self-signed certificate ...
29
votes
2
answers
102k
views
Remote Desktop Connection - How to get the certificate prompt back?
I just tried remoting to my work PC from home and got the "identity cannot be verified" prompt like the one below. I marked the "Don't ask me again for connections to this computer" box, and then ...
29
votes
1
answer
134k
views
Where are digital certificates physically stored on a Mac OS X machine?
Can someone tell me and maybe link to literature which describes it, where are the digital certificates storage location on Mac OS X? I know I could access the certificates with the “Keychain” ...
28
votes
2
answers
116k
views
Import certificates using command line on Windows
I need to import a certificate file to Trusted Root Certification Authorities store, to get rid of an SSL warning when visiting my local website. The way I currently do it is lengthy: use Google ...
27
votes
3
answers
20k
views
How can I check if a domain uses DNSSEC?
DNSSEC has been deployed on some topdomains now. But how could I see if a site/domain is using DNSSEC? Is it shown in the browser? or is there any windows or linux command to see it? or a tool for it?
26
votes
2
answers
8k
views
What is the superfish SSL certificate and where did it originate
I recently bought a new laptop, every https:// connection I do to any site regardless of browser chain back to a root certificate issued by "superfish, inc". I have had a dig around but I can't seem ...
24
votes
3
answers
53k
views
How to provide a verified server certificate for Remote Desktop (RDP) connections to Windows 10
We have a Windows 10 Pro machine at our office which has an open port to the internet for incoming remote desktop connections (a ‘host’). It is well protected by complex password and limited number of ...
19
votes
1
answer
50k
views
Let's encrypt + certbot: where is the private key
I've been using openssl to create key and certificate for my website.
Which works fine, but leads to complaints from the browser.
Now I would like to move to Let's Encrypt to get a proper certificate....
17
votes
2
answers
59k
views
OSX wants to make changes. Type an administrator's name and password... Won't go away
I recently needed to add some SSL certificates to my Mac (OSX 10.10.5) in order connect to a remote service. The certificates are needed for 2 factor authentication.
I have full Admin rights in OSX. ...
11
votes
2
answers
27k
views
How to always allow insecure connection for a certain url in chrome?
For internal usage, we have a system using a self-signed insecure SSL certificate, making Chrome warn me on each session:
Your connection is not private
Attackers might be trying to steal your ...
11
votes
1
answer
16k
views
Chrome and Firefox, ignore certificate errors
My workplace is full of internal web sites that doesn't have valid SSL certificates. Almost with every update of Chrome or Firefox, these browsers make increasingly difficult to ignore these errors (...
11
votes
5
answers
28k
views
Save certificate to use with lftp
How can I save a certificate for use with lftp?
The certificate in question is not accepted by lftp when downloaded from the server. I tried
openssl s_client -connect {HOSTNAME}:21 -showcerts
...
11
votes
4
answers
23k
views
Firefox doesn't ask me for a certificate when visiting a site that needs one
I use Firefox 44.0.2 on a Linux Xubuntu system. I'm trying to access a company website that requires a certificate.
I can confirm I have the correct certificate in Preferences->Advanced->Certificates-...
11
votes
2
answers
53k
views
Where does Firefox store cerificates and how to delete one?
The root cause of my problem is not known to me, whatever it is, I experience frequent DNS failures. When it happens I cannot browse to my Gmail inbox. I use two DNS settings. One is the public DNS ...
10
votes
1
answer
18k
views
Tortoise SVN Error Validating Server Certificate
I just updated the certificate on one of my sites due to the old one expiring. The new certificate verifies fine in Internet Explorer 9, Chrome, and Firefox 4 - but when trying to browse/check out the ...
9
votes
4
answers
55k
views
How to install a CA key (self signed SSL) on ubuntu? [duplicate]
I have a bunch of machines that need to fetch https: off a server (or collection of servers). I'm operating a CA and self-signing the certificates on the server(s).
The client machines are running ...
9
votes
3
answers
9k
views
When multiple Encrypting File System certificates are installed, which one is used for encryption?
To encrypt a file or folder in Windows, you basically go to its Properties and check Encrypt contents to secure data. Windows will use the certificate for Encrypting File System (EFS) that is ...
8
votes
3
answers
58k
views
How to turn off Opera server certificate messages?
While I'm browsing the Internet, Opera always pop out a lots of from these Server certificate expired boxes. Several times it pops out a tons from them and I have to click to Approve on each of them ...
8
votes
2
answers
28k
views
Trust SSL certificate to local system account
I have the following need:
A windows service needs to connect to a svn repository through https. The service needs also to run as local system account for IO permissions on the machine.
Now when the ...
7
votes
3
answers
15k
views
SSL Root CA certificate is not recognized, although present in the trust store. Why?
Background:
Ubuntu Server 14.10 64-bit on aws.amazon.com/ec2
Cheap PositiveSSL server certificate from COMODO
1 server certificate, 2 intermediate CA certificates and 1 Root CA certificate as ZIP ...
7
votes
1
answer
17k
views
Expired web/SSL certificate error on only one computer
I have a strange problem with one website's SSL certificate that only affects one computer Windows 7 operating system. The site works fine on other Win 7 computers with no error, pulling valid ...
7
votes
1
answer
21k
views
Where do I find the certificate file so I can add a program to "Trusted Publishers" in the certmgr?
I have three programs that startup automatically with Windows 7.
They are:
Webroot SecureAnywhere
Soluto Anti-Frustration Software
everything.exe
Each of these programs bring up a blue UAC dialog ...
7
votes
3
answers
5k
views
EFS - Find out what's encrypted
Since a few days when I start Windows Vista i get a Popup from "Encrypting File System" (coming from process efsui.exe) asking me to backup the certificate and key.
I don't know what i did to get ...
7
votes
3
answers
5k
views
Windows 8 EFS: How to tell windows to use "this" certificate for EFS encryption?
On Windows 8, I turned on EFS and encrypted some files/folders. During this process, it created a self signed certificate and used that one for encryption. However, I have a specific certificate that ...