The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
23 views

Microsoft PKI + Samba AD

Have you ever tried to build Samba as Active directory domain controller in order to install Active Directory Certificate Services? The purpose is to have an enterprise ca with samba ad instead of ...
1
vote
0answers
48 views

What is causing warning on a certificate's basicConstraints?

I created a self signed server certificate using OpenSSL's req -x509 command and a CONF file. The CONF file is shown below. When I examine the certificate using Microsoft certificate viewer, its ...
0
votes
1answer
25 views

What is FireFox's Device Manager used for?

In FireFox, there is a Device Manager (Options->Advanced->Certificates->Security Devices) that allows you to import middle-ware for cryptographic tokens (as far as can tell). Can someone tell me ...
0
votes
0answers
217 views

How to properly install SCR3500 card reader on mac - Mac OS X 10.6.8?

I am trying to login into some secured site and I am required to use SCR3500 card reader. I found and installed some drivers - http://support.identive-group.com/download_scm/download_scm.php?lang=en. ...
0
votes
0answers
26 views

Is it possible to combine my S/MIME public signing and encryption certificates into one certificate?

My company provides me with S/MIME certificates, but for some reason choose to issue separate certificates for signing and encrypting. Therefore, when I sign a message, the recipients aren't able to ...
0
votes
0answers
19 views

PKIX Extended Key Usage or Policy for Client Access to Wifi?

Does PKIX have an extended key usage or policy for Wifi access that can be set in a client certificate? Or is it limited to clientAuth or ipsecUser?
1
vote
0answers
4k views

Firefox, “Secure Connection Failed” and client certificate

I have a client certificate for Satrtcom. I'm trying to authenticate to their service, but I'm receiving a "Secure Connection Failed" error with error code ssl_error_handshake_failure_alert: The ...
0
votes
1answer
3k views

openssl pkcs12 keeps removing the PEM passphrase from keystore's entry?

OpenSSL 1.0.1e 11 Feb 2013 Generating a self-signed certificate: openssl req -x509 -newkey rsa:1024 -keyout key.pem -out cert.pem -days 365 During the process a PEM passphrase is ...
0
votes
1answer
1k views

Windows certificate manager restore private key somehow

This is may sounds very strange but let me explain a situation: I was using my PKI Private Key installed at Windows Certificate Storage I get token, so I decided to load them to token and delete them ...
2
votes
1answer
91 views

What does renewing a certificate really mean?

Often one hears about "renewing an SSL certificate" or "renewing an X.509 certificate", but I wonder what this actually means. Usually, step #1 of the renewal process is "generate a new CSR". Doesn't ...
2
votes
0answers
69 views

How can I allow a user to connect to my OpenVPN by knowing their public key?

Given the public key of a remote user, I would like to run OpenVPN and allow that user to connect to my network. I only need to be connected to one remote machine at a time. The options outlined in ...
4
votes
2answers
2k views

Need a solution to verifying expired digital signatures

I use digital signatures for signing my invoices (required by law for digital invoicing in my country). The problem is, my local authority issues signing certificates that are only valid for a year ...
1
vote
2answers
775 views

How can I find my machine's Private\Public Key? [closed]

Are they kept in the form of a file? If so, is it accessible for me manually or is it used transparently only whenever there is a PKI handshake (please correct me if I am misusing the terminology)? ...
1
vote
1answer
154 views

PKI Intermediate Certificate Trust

Lets say we have a business owned internal CA. Its certificate is trusted by one of the Trusted Roots that is present in all browsers. With that CA, we issue a bunch of certificates for servers in ...
1
vote
4answers
3k views

CAC not working; Chrome gives “error 107”

One of my employees recently got a CAC card and a USB reader. The reader works fine, and I can see the certificates if I open IE9 and go to Options > Content > Certificates > Personal. When I go to ...
3
votes
2answers
640 views

How can I change the PKI certificate I'm using in Firefox?

I have a dozen or so PKI certificates installed on my computer that I use for testing a web app. They represent the "users" Andy Tester, Billy Tester, Cindy Tester, &c. Fairly frequently, I need ...