Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

Questions tagged [certificate]

Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

0
votes
0answers
25 views

SSL3_READ_BYTES:sslv3 alert handshake failure / alert number 40

Using OpenSSL 1.0.2p on MacOS openssl s_client -connect XXX.XXX.com:443 -CAfile server.pem -debug Results in 140735528117192:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake ...
0
votes
0answers
6 views

How to auto renew OpenVPN client certificates using easyRSA

I have embedded devices that are located in different cites and connected to my OpenVPN server. I initialize my devices before deploying them and put the certificate/key pair through local network. ...
0
votes
1answer
19 views

Wondering about something regarding intermediate certificates and Weechat

I have a private server at home that runs a node.js instance and weechat. I also have my own domain, which I registered at EuroDNS, as well as an AlphaSSL certificate, also from EuroDNS. Both Weechat'...
0
votes
1answer
19 views

Can .pem certificates have an encrypted certificate and an encrypted RSA key?

Can .pem certificate file have an encrypted certificate and an encrypted private key? e.g. Bag Attributes -----BEGIN ENCRYPTED CERTIFICATE----- -----END ENCRYPTED CERTIFICATE----- -----BEGIN ...
-1
votes
0answers
7 views

Ubuntu problems (dual boot) - Firefox (managing certificates, typing text), browser

I've installed Ubuntu alongside with Windows 10 in my work. I've tried to add certificates (needed in work) to Firefox browser. Unfortunately, when I choose certificate in settings (.pfx file) nothing ...
0
votes
0answers
25 views

How to use PIV smartcards (YubiKey 4) to sign application binaries?

I am about to start using my YubiKey 4 (RSA 2048 bit key) for signing application binaries. There a quite a few tutorials about how to setup this. It seems that most tutorials based on the original ...
0
votes
0answers
41 views

Invisible vmware certificate makes troubles accessing sites using HSTS

When I try to make a search in Firefox or Chrome using Google (or in fact use any Google service) then google server displays nagging overlay "A privacy reminder from Google" requesting acceptance of ...
0
votes
0answers
19 views

SSL PHP and curl

good day, thanks for read my post. We have a problem with my website with ssl certificates... We have Debian 9, PHP 7 and Apache 2.4.25... And when we run a script php with curl process we receive in ...
1
vote
2answers
68 views

SSL Certificate: Displays correctly for some and not others

Is it possible anyone can check out this site: https://www.goweryarns.co.uk/ For me and 80% of my customers, it works, fine. Yet for some 20% they see this error: NET:: ERR_CERT_COMMON_NAME_INVALID ...
1
vote
0answers
64 views

Prevent losing a digital Signature when a document is saved?

The question What is an effective work-around to prevent a Digital Signature dropping from a file when it's saved? Or, What would be an efficient way to replicate saving data to a Macro Enabled MS ...
0
votes
0answers
15 views

Installing Lets Encrypt Certificates on ubuntu 16.4/Nginx and iRedMal

I am having trouble with site mailtest.example.com, ubuntu 16.4 installed fresh, in hosts hostname is set to mailtest.example.cm, iRedmail installed with nginx, DNS pointed to IP address and it ...
1
vote
1answer
17 views

Chrome how to forget proceeding when connection is not private

Using Chrome 67 on Ubuntu 18.10 when accessing a site with an incorrect certificate Chrome prompts a warning about the connection not being private, as expected, and allows you the option to proceed. ...
2
votes
1answer
310 views

pip cannot fetch URL because of an error with the SSL certificate

All of a sudden pip, Python's package manager, could no longer install new modules. The problem is fetching the URL and the cause seems to be the SSL certificate. I sort of understand what this means, ...
0
votes
0answers
114 views

Vagrant: SSL verification error behind corporate proxy

My company uses a proxy. I am using a Windows 10 notebook, 64 bit. Vagrant version 2.1.1. When trying to install a Vagrant plugin, e.g. vagrant plugin install vagrant-proxyconf I see the following ...
0
votes
0answers
45 views

Importing personal certificate for signed/encrypted emails does not work

I want to send encrypted emails with Outlook 2016 and I'm running Windows 10 Pro. I created a personal certificate by Comodo. When I try to import the user.crt into my personal certificate store, it ...
0
votes
1answer
38 views

Chrome cert not importing

I have a cert with SAN that I want to use for my localhost projects so I can stop getting warnings from Chrome. When I go to Settings => Advanced => Manage Certs => Personal => Import, I can import ...
0
votes
0answers
28 views

Running unsigned cross-compiled apps on Windows 10

I'm normally Linux developer and started experimenting with cross-compilation for Windows. Good training example is to try to cross compile Bitcoin Core project. My build finished probably ...
0
votes
0answers
19 views

Is there a way for me to get Firefox to recognize these smart card non-root certificates?

My company uses active directory to manage all of their users, and all access to the internal network as well as the internet requires smart card authentication. With IE and Chrome this works fine, ...
0
votes
0answers
91 views

This digital signature is invalid and cannot be trusted. The macros will be disabled

I am using MS Excel containing macro at customer place for some automation in excel. When the customer opens excel containing macro with the valid EV digital signature (Also tried with previously ...
0
votes
0answers
41 views

Unable to get updated SSL certificate for a single website on OSX

I'm unable to get a new SSL certificate for a website a use for work, on a specific OSX machine. On other computers I get the certificate which is valid and not expired, on my laptop with OSX High ...
1
vote
0answers
50 views

Client authentication with certificate, certificate order list or default certificate

For developing purposes, I've several certificates in my current user's personal store. So when I have to authenticate with a certificate, ie. on my VPN client, Windows propose me to chose in my ...
0
votes
1answer
205 views

Your connection is not private github.com NET::ERR_CERT_INVALID + DigiCert High Assurance EV Root CA certificate is valid

I know this has been discussed elsewhere but none of the solutions worked... When accessing github.com since yesterday I got Your connection is not private github.com NET::ERR_CERT_INVALID When ...
0
votes
1answer
67 views

local server with Let's Encrypt SSL certificate

I'm running a Confluence server in my local domain that I want to access from the outside using OpenVPN. Since I want to use the Confluence app, I need to enable SSL and use a cert which is stored ...
0
votes
0answers
67 views

Removing certificate and re-running update-ca-certificates leaves lingering symlinks

I have removed a (root) certicate, and re-run update-ca-certificates: $ sudo rm /usr/local/share/ca-certificates/mine.root-ca.crt ls -l /usr/local/share/ca-certificates/ total 4 -rw-r--r-- 1 root ...
1
vote
0answers
39 views

OpenSSL ca fails after password without error message

I am trying to use a Root CA to sign a CSR for an Intermediate certificate and OpenSSL asks for my password and then after that nothing happens. No error message and no certificates are made. The ...
0
votes
0answers
85 views

Updates failing trust validation on Windows 10

Windows Update is giving me this error: We couldn't install updates because there's a problem with the date and time information on your device. Make sure your date, time, and time zone settings ...
1
vote
1answer
38 views

Make OS-X Mail to choose a certain certificate for S/MIME signature

I have been using Apple Mail and S/MIME for quite a while now. While I have been starting with a commercial certificate, I now decided to switch to a certificate from a dedicated CA (recognized by all ...
0
votes
0answers
135 views

Domain Administrator unable to decrypt files with EFS recovery certificate

I have some files on the drive of a domain controller running Windows Server 2008 R2 which are encrypted via EFS. The user that originally encrypted the files no longer exists. When I look at the ...
0
votes
0answers
81 views

Common Access Card (CAC) not working on RHEL 7 with Firefox 59.0.3

I have a Common Access Card and I'd like to use my CAC on my notebook with RHEL 7.4 and FireFox 59.0.3 installed. I did a yum install on pcsc-lite, pcsc-lite-ccid, pcsc-lite-ccid, and pcsc-tools. ...
0
votes
1answer
54 views

Atlassian Stash SSL certificate renewal issue

So we have a self-hosted version of Atlassian BitBucket running on Ubuntu server which holds the code repository. We use a SSL certificate from DigiCert . Every year we renew the certificate which has ...
1
vote
1answer
81 views

How can I circumvent HSTS on an intranet subdomain?

So, I have control over a small webserver that controls a subdomain of an intranet domain; the domain has HSTS turned on, so I can't connect to my subdomain via HTTP; I also can't use self-signed ...
0
votes
0answers
9 views

Cannot export wildcard SSL from IIS

I'm in the middle of setting up a new Wildcard SSL to my site and in the last step of exporting the certificate to .pfx in IIS - Server Certificates the export button is now showing up as on every ...
0
votes
0answers
23 views

Discover where Thunderbird is trying to load the server certificate

I renewed my Lets Encrypt certificate on my server and restarted postfix and courier. But still my Thunderbird doesn't load the new certificate. The dialogue, that the certificate is expired still ...
5
votes
3answers
68 views

How to match a private key with a provided certificate?

Someone gave me a certificate and a couple of private/public keys, and said, "tell me which private key matches the certificate." How do I do that? The certificate is in PKCS #7 format and starts ...
0
votes
0answers
47 views

TLS1.2 via SChannel: Server providing certificates instead of issuers

During the TLS1.2 handshake I obtain from the server a list of trusted certificates. I assume, these should be the issuers that the server trusts. OpenSSL calles them Acceptable client certificate CA ...
1
vote
0answers
39 views

Why is Google requesting a certificate?

I am having an issue on Safari (Have not specifically tested other browsers but never had the problem on accessing same site). When I visit some of my classes on Google Classroom (classroom.google.com)...
1
vote
1answer
160 views

“Your Connection is not private” - PC can’t go to any HTTPS sites on Chrome and Firefox

At my workplace, one of the computer has problems accessing “https://” websites. It only occurs to this machine and with web browsers Chrome and Firefox; Internet Explorer works with almost no problem ...
0
votes
0answers
125 views

windows 7 - cert revoked error in IE or chrome, but it's not

I have a server that runs a web based database application. The server uses SSL, I have a godaddy certificate, it's fine. I can go to the site, use the app, no problem. I also have a test server ...
0
votes
0answers
58 views

Permanent accept of java certificate is not woring on windows 10

Usually when starting a signed Java Application - no matter if starting inside a browser as applet or via JNLP/JavaWebStart – there is a warning prompt notifying if to run the application. On ...
-1
votes
1answer
146 views

Programmatically getting an executable's Certificate Details

It is possible to somehow programmatically export a file's digital certificate's subject if the certificate itself is not installed on the workstation but is only used to sign that specific file? I ...
0
votes
0answers
105 views

How to execute a exe on linux using wine with many arguments (openssl x590AT)

I need to execute this command in a linux server, i command line using wine: sudo wine /var/myfolder/openssl.exe x509AT -days 355 -AA /var/myfolder/cert/certificate.crt -AAkey /var/myfolder/cert/...
2
votes
1answer
360 views

ERR_CERT_COMMON_NAME_INVALID with wildcard certificate with Apache

I'm new to managing SSL certificates so my problem might be simple to resolve. I'm trying to add my wildcard SSL certificate to my website hosted on a container running Apache on Azure Container ...
1
vote
1answer
372 views

minispy - Windows cannot verify the digital signature for this file

I have built the Microsoft sample minispy minifilter with no issue. I made sure that since I am using 64-bit, I have also compiled in x64 on my Visual Studio. Tried both Debug and Release. Hence in ...
1
vote
0answers
214 views

Cant login to Developer Apple account - connection not secure

When I want to login to developer.apple.com on Safari I have error that Safari can't establish secure connection to https://idmsa.apple.com/IDMSWebAuth/login?appIdKey..... I could do that before ...
1
vote
1answer
584 views

Error: ca-certificates is broken or not fully installed

I was trying to install self-signed SSL certificate with sudo dpkg-reconfigure ca-certificates command but before it could finish, my computer was reset due to power failure. Now when I run sudo ...
1
vote
1answer
175 views

Install multiple .cer (certificates) from a network directory using powershell, but first check if they are already installed

I am still learning the ways of powershell, and am having difficulties solving a problem. I would like to have the following logic flow: Go out to \fileserver\certs and pull all thumbprints for each ...
2
votes
0answers
590 views

Curl NSS error -12190 - Error in TLS handshake

I am getting below error while trying to download a package from a URL through putty: Proxy replied OK to CONNECT request Initializing NSS with certpath: sql:/etc/pki/nssdb CAfile: /etc/pki/...
1
vote
1answer
214 views

Decrypt PEM containing key and certificate

I have a .pem file which contains both my certificate and encrypted private key, ie: Bag Attributes .... -----BEGIN CERTIFICATE----- .... -----END CERTIFICATE----- Bag Attributes .... -----BEGIN ...
0
votes
1answer
3k views

Chrome shows site as “Not Secure” (Cert Invalid), but certificate is correct

I have a self-generated CA, and a generated certificate. The certificate is valid: » openssl verify -verbose -x509_strict -CAfile rootCA.pem mysite.bundle.crt mysite.bundle.crt: OK The root CA is ...
0
votes
1answer
32 views

Certificate missing SAN section

My certificate request has SAN: » openssl req -in csr/example.com.csr -noout -text Certificate Request: Data: Version: 0 (0x0) Subject: CN=example.com, O=Something, C=XX, ST=YYY, ...