Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [certificate]

Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a ...

0
votes
1answer
17 views

Verify return code: 21 (unable to verify the first certificate)

I have a self-signed certification, I'm using it locally for my API. As you can see in the screenshot is working fine using Docker and Apache for the server side. The problem is when I tried to use ...
0
votes
0answers
7 views

Securing a specific file inside a sysvol folder or securely accessing it from a logon script

So I have a standard Windows logon PS script launched from a GPO at boot time, let's call it foo.ps1. But foo.ps1 needs to read a password from somewhere else (separate file, called bar.dat). This ...
0
votes
1answer
24 views

Do I need to purchase a Positive SSL while buying a domain?

I am new to creating and hosting websites and want to clear a few things about buying domain names and SSL certificates. I created my website using Hugo Academic and now I want to deploy it. In their ...
1
vote
1answer
15 views

Self-signing SSL certificate to secure web traffic on ClearOS on LINUX

I am very much a beginner when it comes to SSL certificate for securing website traffic. I am currently running a Linux version of ClearOS web server. Everything works as it should, but now I want to ...
1
vote
1answer
57 views
+50

“Grant or deny this application permission to use this key” message

I am using AnyConnect software on Windows 7 OS. I got new client certificate to import with dedicated import password. And when I start AnyConnect I get message "Grant or deny this application ...
0
votes
0answers
18 views

Strange certification verification error on https://go.microsoft.com/

I am currently re-installing my Visual Studio 2017. But the installer alerts my that it cannot download package from https://go.microsoft.com/fwlink/?linkid=94001. And then I try to access this url ...
3
votes
3answers
133 views

Remove all certificate authorities from a Firefox profile

Objective is to trust only certain certificates stored on the hard disk for that certain profile. Thus no certificate authorities are needed. Tried without success: Delete all CAs using Certificate ...
0
votes
0answers
41 views

Outlook 2016 Pro Plus Digital Signature issue

in my organization there are 50 clients, circa (Windows 10). On 8-10 of these, there's a single mail account configured with IMAP in Outlook 2016. From 15/10/2018 some emails from inbox automatically ...
0
votes
1answer
25 views

Can't upload to VMWare vCenter 6.7 datastore due to certificate, OSX

Using HTML5 webclient in updated Chrome and Firefox. Using vCenter 6.7 with self signed certificate. When trying to upload a file, it gives the error unsupported due to untrusted certificate. How ...
-1
votes
1answer
31 views

Distribution of Code Signing certificate - best practices? [closed]

Distribution of Code Signing certificate - best practices? Note: I'm an absolute newbie when it comes to code signing and software certificates. I've tried to search and read about how to solve our ...
2
votes
0answers
38 views

What is the best way to set up an OCSP responder (pkicreate, OpenSSL, other)?

I set up a root and intermediate CAs with OpenSSL and started issuing server certificates. For MS RDP (RemoteApp) it required OCSP, so I also set up an OCSP responder with OpenSSL. Testing with ...
0
votes
1answer
34 views

Creating SSH Certificates for SFTP using a CA

I'm a bit confused regarding the order of things to make this happen. This is what I had in mind: 1 - Generate CA public and private key. 2 - Use CA Public Key with SFTP server (TrustedUserCAKeys). ...
0
votes
1answer
25 views

PKI certs hierarchy

I follow https://jamielinux.com/docs/openssl-certificate-authority/index.html and after create root and intermediate ca the chain file dosnt have hierarchy like other ca. Here's the sample of ...
14
votes
2answers
2k views

Self-signed wildcard certificate

I've got pihole set up at home, so I want to be able to handle requests for any website with my own server, to show a "this site has been blocked" page. I'm attempting to do this by creating a self-...
1
vote
1answer
71 views

Why is it not possible to bypass SEC_ERROR_EXPIRED_CERTIFICATE on serveral browsers?

I have tried to open https://utox.io which has right now the following error: SEC_ERROR_EXPIRED_CERTIFICATE (FireFox) NET::ERR_CERT_DATE_INVALID (Chrome) DLG_FLAGS_SEC_CERT_DATE_INVALID (Internet ...
0
votes
2answers
25 views

Given self signed CRT and KEY files, can I install these into a Windows Active Directory intranet setup for all machines to pick up?

I'm looking into setting up the Zulip chat server on a local Active Directory intranet. The chat server requires an SSL certificate which I'm able to generate CRT and KEY files from OpenSSL. However ...
0
votes
1answer
43 views

From PFX and CRT to Pub and Private key in DER format

So I read that this command openssl x509 -pubkey -outform der -in 1.crt > 1_pubkey.der Should give me the public key in der format, but it says than the > is an unknown parameter.. Then I tried ...
0
votes
0answers
23 views

Windows 10 Mail with Exchange, Active Directory, and Internal Certificates

I have a Server 2012 R2 (functional) domain, with Exchange 2013. I also have an internal Certificate Authority that all of my client computers trust (certificate added to the Trusted Root Publishers ...
0
votes
0answers
37 views

SSTP client stopped working with certificate expired error

I have an SSTP VPN server set up on Windows Server 2008. I was connecting with my Windows 7 PC to it, by simply creating a new VPN connection where I type in VPN server's DNS name, and my VPN ...
0
votes
1answer
39 views

Security, recovery etc of Letsencrypt certificates

I'm looking for a description how to property secure, backup, restore etc Letsencrypt certificates, and how to recover if a server containing such certificates was hacked. Does such a description ...
0
votes
2answers
137 views

Why does Chrome say “Your connection to this site is not secure” even if the certificate is valid?

My site has a valid certificate, but Chrome marks it as insecure. I tried my site using Brave and Firefox, and both mark it as secure. I also ran this online test, and everything looks fine: https:/...
2
votes
1answer
67 views

ASN1 Structure Procuration Syntax

I want to add the Procuration Extension to my Certificate. Therefor i use the Tool XCA, which uses OpenSSL conf to create the certificates. This is the ASN1 structure: ProcurationSyntax ::= SEQUENCE ...
0
votes
0answers
23 views

Java web start application fails with “nNable to find Certificate in Default Keystore”

I'm attempting to access the IPMI management interface on a older server. It's from around 2010, and there are no updates for the IPMI available. If you're not aware, IPMI is a remote management ...
0
votes
0answers
38 views

Unable to use SSL certificate for my domain

I use sslforfree.com to generate SSL certificate. I set www.example.com and example.com and generate certificate. I set certificate on cPanel. After that I see following error message and domain is ...
2
votes
0answers
50 views

Windows 7 still shows certificate as valid after deleting from cert store

I am toying around with self-signed certificates for TLS (closed network). I temporarily added one to my Trusted Root Certification Authorities store on Windows 7, and then verified that it showed as ...
0
votes
0answers
86 views

Download Self Signed Cert in Chrome 69 OS X 10.13

I'm trying to download a self signed cert in chrome so I can trust it in Keychain Access so it stops annoying me. But all the guides that say how to do it don't work. Some say to just click on it ...
0
votes
0answers
52 views

Signing Apple Wallet Pass OpenSSL

I'm trying to create a pass signing server to dynamically create Apple Wallet passes using OpenSSL and standard pass templates provided by Apple but I can't seem to get the pass to show up using the ...
2
votes
1answer
246 views

Trust self signed Cert in Chrome macOS 10.13

I'm trying to always trust a self signed certificate but I'm having issues. For one, when I try to drag the certificate to a folder or desktop, it just doesn't do anything. I can do the same from ...
0
votes
0answers
29 views

Creating Activesync profiles with client certificate for IOS

back in good old days there was the iPhone configuration utility by Apple for Mac OS and Windows (!!) and I was able to create the profiles I needed. Then Apple decided that they will no longer ...
0
votes
1answer
41 views

Missing User Certificates Folder

I'm encountering a strange issue on a couple of machines under my control. They appear to be missing a critical folder in the User Certificates manager. This is how the Personal folder should look ...
0
votes
1answer
22 views

Newly added web wildcard certificate shows as expired

I have a web wildcard certificate on our web server that runs on IIS 7.5 using Windows 2008 R2. The CMS is Drupal Acquia 7. The certificate expired last month, so we imported the new .PFX file ...
2
votes
0answers
163 views

Convert RSA Private CRT Key to key file

Using the command openssl rsa -in Alice.key -text -inform PEM -noout, it is possible to view a RSA private key's data. My question is that if I have a list of all of the properties (modulus, public ...
1
vote
1answer
93 views

Firefox ESR loads old certificates after updating from 52 to 60

After Firefox ESR 52 was updated to 60, I've been unable to access my online bank. According to the bank's phone support, I've suddenly started using an old, supposedly still valid but revoked ...
1
vote
2answers
27 views

Can I find out what process is generating certificate error popups?

For the second time I've come into work recently to find hundreds (I can't be sure how many) certificate error popups. So many that the popup's shadow is black (See the screenshot). This time it's ...
0
votes
1answer
69 views

Creating a .pfx or PKCS#12 file from PFX or other external

Reading the fine manual, I can copy and/or export all the required credentials to another Windows machine for import after exporting: Figure 1: Exporting the Encrypting File System key Right-...
-1
votes
1answer
23 views

Set windows 10 certificate import wizard as default when opening files

I used nexus personal as default to open .p12 files. I want to reverse this and open this filetype with the certificate import wizard. This is the default option when opening (doubleclicking) a ...
1
vote
0answers
83 views

Automate Install of Certification Authorities in Windows 7/8/10, Google Chrome, MS Edge and Firefox

I work as an IT guy for a public federal university in Brazil. Government agencies and institutions have to deal with a lot of outdate applications and a mix of browsers to make them work. For ...
0
votes
1answer
29 views

Import CERT in Google Chrome fails in Windows

I can import a certificate in Google Chrome (Version 68.0.3440.106 (Official Build) (64-bit)), in Linux (Mint Tara, Ubuntu based), but doing the same in Google Chrome Version 68.0.3440.106 (...
1
vote
0answers
22 views

Make macOS Mail.app to attach full certificate chain to mail

When I'm sending S/MIME mails from Microsoft Outlook, it attaches the full certificate chain to the out-going mail so that recipients can verify the signing key (similar to how TLS works). However, ...
0
votes
0answers
18 views

Transport header security header (HSTS) is not working with Internet Explorer 11

We are using a self-signed certificate in our application & want to use HSTS header for added security. We access our application using ip or hostname. I found that for HSTS to work, - no ...
1
vote
1answer
592 views

Certificate validation failure while using cisco anyconnect with pfx certificates

I have installed cisco anyconnect secure mobile client 4.2.01022 (+all required packages). Then added .pfx certificates to gnone2-key storage. Then I launched cisco anyconnect secure mobile client ...
0
votes
1answer
29 views

cacerts java on fedora 28

Minecraft fails to join a server because of (The Auth servers are down) Except they are not. It's becasue it doesn't have the certificate. But on other linux distros I don't need to get the ...
0
votes
0answers
508 views

SSL3_READ_BYTES:sslv3 alert handshake failure / alert number 40

Using OpenSSL 1.0.2p on MacOS openssl s_client -connect XXX.XXX.com:443 -CAfile server.pem -debug Results in 140735528117192:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake ...
0
votes
0answers
89 views

How to auto renew OpenVPN client certificates using easyRSA

I have embedded devices that are located in different cites and connected to my OpenVPN server. I initialize my devices before deploying them and put the certificate/key pair through local network. ...
0
votes
1answer
33 views

Wondering about something regarding intermediate certificates and Weechat

I have a private server at home that runs a node.js instance and weechat. I also have my own domain, which I registered at EuroDNS, as well as an AlphaSSL certificate, also from EuroDNS. Both Weechat'...
0
votes
1answer
46 views

Can .pem certificates have an encrypted certificate and an encrypted RSA key?

Can .pem certificate file have an encrypted certificate and an encrypted private key? e.g. Bag Attributes -----BEGIN ENCRYPTED CERTIFICATE----- -----END ENCRYPTED CERTIFICATE----- -----BEGIN ...
0
votes
0answers
54 views

How to use PIV smartcards (YubiKey 4) to sign application binaries?

I am about to start using my YubiKey 4 (RSA 2048 bit key) for signing application binaries. There a quite a few tutorials about how to setup this. It seems that most tutorials based on the original ...
0
votes
0answers
89 views

Invisible vmware certificate makes troubles accessing sites using HSTS

When I try to make a search in Firefox or Chrome using Google (or in fact use any Google service) then google server displays nagging overlay "A privacy reminder from Google" requesting acceptance of ...
0
votes
0answers
92 views

SSL PHP and curl

good day, thanks for read my post. We have a problem with my website with ssl certificates... We have Debian 9, PHP 7 and Apache 2.4.25... And when we run a script php with curl process we receive in ...
1
vote
2answers
105 views

SSL Certificate: Displays correctly for some and not others

Is it possible anyone can check out this site: https://www.goweryarns.co.uk/ For me and 80% of my customers, it works, fine. Yet for some 20% they see this error: NET:: ERR_CERT_COMMON_NAME_INVALID ...