Questions tagged [certificate]
Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a trustworthy way to distribute and determine the correct public key for a given user or machine.
1,344
questions
0
votes
1
answer
27
views
Is it possible (how) to copy certificates from my desktop to my laptop?
I have a desktop with certificates installed which allow me to sign into Azure DevOps. I do not have those certificates on my laptop, but I want to get them there so that I can also sign into Azure ...
- 141
0
votes
0
answers
66
views
SSH does not allow password authentication
I have SSH access to my server using a certificate.
I have configured a user on the same server that would connect using a password, but using Putty, the server only seems to offer certificate login ...
- 33
0
votes
1
answer
15
views
IIS on 2016 certificate generated by microsoft cetrification autortoity on AD not recognized
I generate on windows 2016 where is IIS server certification request, the server is in Active directory domain. Then in domain i have microsoft certification authority ang in this i gnerate the ...
- 101
1
vote
2
answers
176
views
Is it safe to trust Microsoft Windows certificate that has passed its expiration date
Just recently I installed Windows. First I installed Windows 10 shipped with PC. The next day, after receiving info on startup that the PC is Windows 11 eligible, I've updated it to Windows 11 (Update ...
- 81
0
votes
0
answers
77
views
Export all trusted certificates on Windows from the command line as PEM or DER
I need to export all trusted certificates with certutil from the following stores:
My
Root
Trust
CA
AuthRoot
However I have trouble understanding the documentation and I am not an expert with ...
- 101
0
votes
0
answers
103
views
After loading Root Certs, loaded==false: NSS error code: -8018
Certificates are a very complicated issue. After a lot of tries and victories to run a open source in Linux called FreedomGPT, I received this error related to NSS certificate. More details showed in ...
- 1
1
vote
0
answers
31
views
Ever since changing to Windows 11 we have some workstations that now and then try to connect via smart card, but we don't use smart cards
Ever since changing to Windows 11 we have some workstations that now and then try to connect via smart card, but we don't use smart cards.
The event occurs with the computer's account, not a user's ...
- 11
0
votes
0
answers
14
views
Docker nginx image optional tls option
I need to create a nginx docker image, which can be used to configure optional TLS/SSL certificates.
When no certificate is provided, nginx should work as reverse proxy on port 80 and do its job. If a ...
- 265
2
votes
1
answer
69
views
Verifying the certificate chain with OpenSSL
I require the OpenSSL command to verify the certificate chain. In the certificate, the signature hash is signed by the signer's private key.
Samyak Vora
0
votes
1
answer
56
views
Subversion Edge installing certificate on Windows deployment
I'm trying to get HTTPS to work on a new Collab.net Subversion Edge server deployed on a Windows environment. It currently serves the site in HTTPS but is using the default self-signed cert.
I located ...
- 1
0
votes
0
answers
28
views
Is it possible to create one certificate with a CN based on A DNS and two CNAME records?
I'd like to create one certificate to allow users to connect on the same serveur using 2 different CNAMEs, nginx then, reroutes the stream on different localhost ports according to the FQDN typed in ...
- 1,465
0
votes
0
answers
77
views
How often is CAPI2 on Windows 10 meant to be updating third part root certificates and their properties with event 4109 and 4097?
Looking through my event logs, I came across two that seem very infrequent given their purpose:
4109- successful auto property update of third-party root certificate
4097- successful auto update of ...
- 73
1
vote
1
answer
120
views
Is there any benefit in signing Excel macros using EV certificates?
Some of our software services at work offer downloading Excel files as templates to fill in some data and then reuploading them to our software for import. Since the users in our domain usually are ...
- 61
2
votes
1
answer
121
views
Update CA Certs is Removing All Certs/Symlinks
I am running a Debian 10 system. I am trying to add an additional cert using the standard process: putting the .crt file under "/usr/local/share/ca-certificates" and running "update-ca-...
- 123
0
votes
0
answers
202
views
cert-manager/secret-for-certificate-mapper "msg"="unable to fetch certificate that owns the secret
Cert-manager/secret-for-certificate-mapper "msg"="unable to fetch certificate that owns the secret" "error"="Certificate.cert-manager.io "grafanaps-tls" ...
- 19
4
votes
1
answer
165
views
Change back to old Certificate-Viewer in Chrome
How can I change my Google Chrome/Chromium-based web-browsers to open the old certificate viewer, the one built-in to Microsoft Windows instead of the "new" Chromium one?
Old (goal) Windows ...
- 41
0
votes
0
answers
30
views
How to obtain a certificate request from an existing certificate
I've got a server where a .p12 is on it that has been converted to a .pem (files: certserver.p12, certserver.pem, certserver.pass for the password).
I now got a request to make a new certificate-...
- 395
0
votes
1
answer
211
views
How to add trusted ca in manjaro?
It should be a pretty simple but i cant do it. What i tried:
cp pets.crt /etc/ca-certificates/trust-source/anchors/
sudo trust extract-compat
sudo update-ca-trust extract
openssl verify pets.crt
I on ...
- 1
0
votes
0
answers
43
views
Code signing certificates
We recently launched a software application built using electron where the app does check a firebase database upon launch of the app and for some reason, it was triggering the Norton Antivirus ...
0
votes
0
answers
91
views
Can we use the same Hyper-V Shieled VM certificate to create more Shielded VMs on a different host?
I had 2 shielded VMs on my Windows 11 prior to clean installing it. I had backed up the 2 certificates for signing and encryption. after importing them, I can access my 2 shielded VMs, no problem, but ...
user1752038
1
vote
0
answers
29
views
Why is chrome trusting an expired certficiate
So, the opposite problem of most folk.
I have a server with an expired certificate. Chrome is connecting to the server and it is saying 'certificate is valid' even though it expired on January 18th, ...
- 11
1
vote
0
answers
80
views
How to convert PKCS12 keys in a way that MD5 isn't used?
I received a PFX file from a company in order to use their VPN. For openfortivpn I needed two PEM files to pass with --user-cert=cert.pem --user-key=key.pem, so I used openssl pkcs12 -in REDACTED.pfx -...
- 145
1
vote
0
answers
56
views
Using OpenSSH config file with -addext and -subj parameters
I'm trying to create a bash script to manage a PKI. I want to use OpenSSL conf file to specify some parameters for the generated and signed certs using my CA.
I specified default parameters as below:
...
- 11
0
votes
1
answer
87
views
Certbot on ubuntu 22.10
I'm new to running my own server so go easy on me please!
I think I messed up - went through the digital ocean droplet set up and didn't select the LTS version of ubuntu, so I'm on 22.10. Left certs ...
- 103
0
votes
1
answer
164
views
Chrome saying certificate is not valid even though it's marked as trusted
I'm running on MacOS Ventura 13.1, Chrome version 109. I remember I downloaded the relevant certificates months ago and it used to work fine, but - and I'm not sure it was after I upgraded the OS, I ...
1
vote
0
answers
139
views
How test test PWA on locally hosted webserver using physical Android device?
I have a test webserver hosted locally (127.0.0.1), hosted with https (port 443).
(The webserver is hosted in Virtualbox, but I don't know if that matters).
The site is hosted using a *.[mySite].com (...
- 111
4
votes
1
answer
549
views
How to create ECDSA keypair based on OpenSSL config file?
When generating CSRs based on RSA key-pairs I'm using the OpenSSL req command for convenience:
openssl req -new -noenc -config 'server.cert.conf' -keyout 'private/server.key.pem' -out 'server.csr.pem'
...
- 55
0
votes
0
answers
56
views
ssh tunnel w/pem files, error found: No credentials were supplied
I reach a node via ssh in two steps. This is:
[carbajgu@fedora ~]$ ssh -i ./key.pem adouser@10.30.147.53
Activate the web console with: systemctl enable --now cockpit.socket
Last login: Sat Jan 7 00:...
0
votes
0
answers
289
views
Windows in-built RDP client can't disable revocation check?
The server is a Linux PC running XRDP. It is in my home network. I am the only user. I had created a CA and added it to Windows' "Location Computer/Trusted CA". In XRDP.ini, I have set the ...
- 3,550
1
vote
0
answers
154
views
How to download a specific CA (certificate authority) which a website is using and add it to linux?
I need to connect to a URL from Linux terminal but seemingly Ubuntu doesn't have the https certificate to connect to them. I open the website in my browser whit no problem. Is clicking on the lock ...
- 11
0
votes
0
answers
49
views
Chrome warn me about expired ssl certificate although it has been renewed
Chrome warn me about expired ssl certificate although it has been renewed. I am sure that certificates are valid. It does not make any sense.
How is possible sometimes the same web page uses expired ...
- 307
0
votes
0
answers
161
views
Fix your connection is not private (ERR_CERT_AUTHORITY_INVALID error) on chrome
I have been getting the ERR_CERT_AUTHORITY_INVALID error on chrome for some websites. It doesn't happen with every single website but happens on a majority of them.
Here are a few things I have ...
1
vote
1
answer
79
views
getting an expired ssl certificate when browsing using a different IP
Recently my office having an issue on remotes site,
their ip are getting an expired ssl certificates when browsing this website
help.cambridgeinternational.org.
If your are successful to browse to ...
1
vote
0
answers
358
views
Windows Event Viewer ID for when certificate is installed
Is there any where in Windows Event Viewer that can show when a new certificate is installed on user or machine certificate stores?
All I found is this:
https://social.technet.microsoft.com/wiki/...
user1752038
0
votes
0
answers
24
views
Having a certificate authority on a dedicated hardware like SBC
I configured an OpenVPN server on Digital Ocean according to their guide. As the guide mentioned, having an OpenVPN server and a certificate authority on the same machine is a major security risk, so ...
- 1
0
votes
0
answers
280
views
Difficulties using smart card login on Windows 10 joined machine with Azure AD
I got trouble signing in on Windows login using the virtual smart card as login.
The login works perfectly on the web, so CertAuth is correctly configured. I got the following machines for tests:
...
- 101
1
vote
1
answer
110
views
Windows automatically downloads CA certificate on school network but not Linux?
When I try to connect to my school's WiFi network through my personal Windows machine, a prompt opens up to enter my ID number and password, which allows me to connect to the network. When I try to ...
- 11
0
votes
0
answers
166
views
Unable to run squid: Requiring client certificates
I installed squid and setup the squid.conf file as follow:
http_access allow localhost
visible_hostname = localhost
forwarded_for on
cache_peer 127.0.0.1 parent 8080 0 no-query default
http_access ...
- 1
0
votes
1
answer
74
views
Use powershell ssh client with custom CA bundle
I need to use a windows 10 machine with powershell's ssh client to connect to a number of linux machines.
Authentication is done with user and password, no public key being sent ATM.
But I'm behind a ...
- 101
0
votes
0
answers
649
views
Why Opera browser gets NET::ERR_CERT_INVALID error for a website with self-signed certificate and does not allow to get in?
Test link: https://self-signed.badssl.com/
So, it says:
Your connection is not private Attackers might be trying to steal your
information from self-signed.badssl.com (for example, passwords,
...
- 199
1
vote
1
answer
64
views
Why no SSL certificate trust store at the user level?
Most OSes have a global trust store (e.g., /usr/local/share/ca-certificates. However, this method requires root to modify, and affects all users.
Most applications have a way to trust certificates at ...
- 215
1
vote
2
answers
322
views
How to get the eduroam network settings right on Linux? With that CA certificate, and without the installer from the eduroam website?
Tried to follow an eduroam guide on a university site. That you can download the public installer from http://www.eduroam.org/, choose the university, and that is all. For Linux, this was a Python ...
- 1,705
4
votes
2
answers
4k
views
Chrome 107 - marks self-signed certificate Not Secure despite cert is installed
I'm running create-react-app with self-signed HTTPS certificate locally.
The certificate is installed in User's Trusted Root CA
Despite that Chrome still marks the website as Not Secure what for ...
- 143
0
votes
1
answer
907
views
How can I view the TLS 1.2 and 1.3 certificates in Wireshark?
I'm testing a new proxy and monitoring the connection using Wireshark, but I'm not seeing any certificate at all. my goal is to find out exactly what sensitive and identifiable data is leaving my ...
user285140
0
votes
1
answer
13
views
What Certificate Store do you place certs in to be spread across the Domain
Good Morning guys,
As the title mentions, I have a collection of .p7b files for Root, Intermediate, and untrusted certificates. I just don't know what store (or does it have to be group policy) to ...
- 101
0
votes
1
answer
81
views
NET ERR CERT COMMON NAME INVALID on subdomain, Let's Encrypt
I'm working on new website and use HTTPS. From my personal desktop computer and iPhone everything is working fine, but my friend from another country experiencing the following issue:
NET ERR CERT ...
- 163
0
votes
0
answers
27
views
Is there a way to install certificates to LocalMachine store without logging into windows?
As a part of some dev work I was doing, I was trying to identify and document only the essential certificates required to run an app locally. Since I had a bunch of certs in my LocalMachine store, I ...
- 148
0
votes
2
answers
31
views
How to differentiate between certificates issued by the same CA
I have a certificate which is signed by an external Certificate Authority (CA). If I understand correctly that Certificate Authority can also sign other certificates that I'm not aware of. My question ...
0
votes
1
answer
552
views
"Microsoft Root Certificate Authority" is revoked after updating to Windows 10. How do I fix it?
I have a Windows 7 system that I've just updated to Windows 10. After doing so, I found a ton of drivers wouldn't install, and eventually traced the issue to the root certificate "Microsoft Root ...
- 748
0
votes
0
answers
83
views
show all certificates in a "Select a certificate" window
My situation
I've configured Tomcat to prompt to select a certificate, however in that prompt window I can see only one certificate to select
--------------------------------------
| https://www....