Questions tagged [certificate]

Public key certificate - also digital certificate or identity certificate. A document that contains information about a user's or machine's identity, matched up with its public key, and is validated and cryptographically signed by a certificate authority. Certificates are intended to provide a trustworthy way to distribute and determine the correct public key for a given user or machine.

Filter by
Sorted by
Tagged with
0 votes
0 answers
43 views

Why unable to verify local issuer certificate? (https calls for google)

I am using docker desktop to run a simple node:16-alpine through mac. Which I added a ca-certificates, curl and openssl. RUN apk add --no-cache --repository http://dl-cdn.alpinelinux.org/alpine/v3.15/...
user avatar
0 votes
0 answers
19 views

Create a Root CA self-signed certificate using the command line

I have Microsoft Server 2019 offline Root CA I want to renew the Root CA certificate, but I do not want it to be used immediately (as I want to push out the new Root CA certificate to key stores on ...
user avatar
  • 1
0 votes
1 answer
21 views

How do you know if a code signing certificate for a file is ok?

Which things should you look out for, to indicate all looks okay, when viewing a downloaded file's "Digital Signatures" tab in Windows 10? What are the signs there may be an issue with the ...
user avatar
  • 77
0 votes
0 answers
26 views

NameConstraints format for UPN values

I'm in the middle of building a new PKI and we are adding name constraints to our issuing CAs with all the usual suspects like DNS, IP, e-mails, directory names etc. We have a potential smart card ...
user avatar
  • 1
0 votes
1 answer
22 views

Is it possible to grand SSH access (using username and password) to a Centos 7 machine configured with an user using private key to connect?

first of all I am not a system engineer (I am mainly a software developer). I am working on a Centos 7 machine and I have the following doubt. Using MobaxTerm client I can access to this machine via ...
user avatar
  • 6,539
0 votes
0 answers
47 views

Force browser to use local machine certificate store for client certificates

It appears that browsers are only capable of reading local user certificate store for user certificates and not local machine store. See https://jpassing.com/2021/09/27/do-browsers-use-client-...
user avatar
0 votes
1 answer
23 views

Make Chrome trust the Linux system certificate store or select certificates via policies

I need to trust a self-signed certificate on a lot of managed Linux desktops. I have imported them into the trust store of the OS, curl, wget etc. trust them. However browsers like Firefox and Chrome (...
user avatar
0 votes
0 answers
20 views

Check public key certificate

I have create public, private keys and self signed certificate with commands: openssl genrsa -out private-key.pem 3072 openssl rsa -in private-key.pem -pubout -out public-key.pem openssl req -new -...
user avatar
  • 2,049
0 votes
1 answer
34 views

SSL certificate error when trying to access any of my self hosted domains on my home network

I have a home server running Nextcloud and Bitwarden. To host the domains I use SWAG, which uses Let's Encrypt as an auto SSL cert provider. These domains work perfectly outside of my home network. ...
user avatar
1 vote
1 answer
61 views

Strongswan VPN certificate authentication failed

I've installed strongswan vpn on my ubuntu server. Set up certificate authentication. I've set up my android-phone and it works fine. But connection didn't established on the windows machine. I copied ...
user avatar
0 votes
1 answer
39 views

Openssl asks for password and common name but I want to send them as parameter

I'm creating a certificate using this command: openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout localhost.key -out localhost.crt -config localhost.conf with this config: [req] default_bits ...
user avatar
  • 161
1 vote
0 answers
24 views

SSL verification doesn't happen with curl cacert option

This is my understanding of curl --cacert option : We can make curl perform SSL verification against a custom truststore by providing a PEM file path to this option. It is mostly used when we are ...
user avatar
0 votes
0 answers
15 views

How can update the expired CA certificate? [duplicate]

Show the info on DST_Root_CA_X3.pem: cd /etc/ssl/certs sudo openssl x509 --text -in DST_Root_CA_X3.pem Certificate: Data: Version: 3 (0x2) Serial Number: 44:af:b0:80:...
user avatar
  • 53
0 votes
1 answer
27 views

openssl unable to pass -config and -signkey options in the same command

I am attempting to generate a self-signed certificate with my custom config file for openssl. However, the options -config and -signkey are generating errors as below when used in the same command. ...
user avatar
  • 131
0 votes
0 answers
38 views

Unable To Renew Subdomain's SSL Certificate via LetsEncrypt & Certbot

Really appreciate any help with this. I have a DO droplet (running on OpenLiteSpeed Server with Ubunto 20.04) that is hosting the main domain + 2 subdomains. In that droplet, there are 3 separate ...
user avatar
0 votes
1 answer
44 views

Why play.google.com make handshake only with SNI = google.com

Can't open https://play.google.com on my mac (safari and chrome) get ERR_TIMED_OUT, but can open on other laptops. Looks like the server doesn't reply on ClientHello then SNI is same as host. $> ...
user avatar
0 votes
0 answers
28 views

Windows 10 - Mandatory installation of server's certificate on the client computer

There are 2 parts to my question, both related to SSL sites: I want to configure my Windows OS to disallow browsing to any SSL sites whose server authentication certificate is not installed on my ...
user avatar
1 vote
2 answers
127 views

Make Thunderbird request certificate on port 993, not 443

I am trying to create a certificate exception in Thunderbird, for a specific server <servername> (I am specifically asking not to be lectured about how it would be better to have an acceptable ...
user avatar
0 votes
1 answer
28 views

Has the FTP server's certificate been improperly configured if a popular trusted FTP client raises an error that its certificate is unknown?

When a popular FTP client reports an "unknown certificate" error does that mean that the certificate has not been set up properly on the server? Is the FTP client supposed to follow the ...
user avatar
  • 549
-1 votes
1 answer
54 views

How to find the file location of a website's ssl certificate

I am trying to access the SSL certificate for a certain website (textnow.com) but I can't find where it is stored on my computer, even in the certificate manager. Also, when I click on the lock next ...
user avatar
0 votes
0 answers
45 views

Powershell Import-Certificate Access is denied

I'm running WSL Ubuntu on Windows 11 for local web development. However, as the site I'm currently building requires subdomains I used caddy server to deal with local https. However, as the ...
user avatar
0 votes
0 answers
458 views

OpenConnect certificate failed verfication: signer not found

On Arch Linux. School requiring use of a VPN. Installed OpenConnect, running it as openconnect vpn.xyz.edu I get the following output POST https://vpn.xyz.edu/ Attempting to connect to server xxx.xxx....
user avatar
0 votes
1 answer
47 views

Can't retrieve gpg public key from Web Key Directory: Certificate expired

I'm trying to set up a Web Key Directory but both, the Direct and Advanced configuration according to https://wiki.gnupg.org/WKDHosting fail. Testing the setup with gpg -v --auto-key-locate clear,wkd,...
user avatar
0 votes
1 answer
27 views

Are RSA and ECC certificates interchangeable?

Can I use a ECC certificate if a service/software (according to documentation) requires an RSA certificate? Does the software need explicit ECC support?
user avatar
0 votes
0 answers
50 views

Deleted root certificats reappear automatically

I'm trying to delete root certificates but they reappear automatically. This is what I do: I delete the hightlighted certificates (see picture below) in both the current user's certtificate store and ...
user avatar
0 votes
0 answers
51 views

Trust self signed Cert in Chrome macOS 10.15

Two days were spent on following guides but none have solved this problem. This is the scenario. I have apache running on an old 2009 MBP with El Capitan (from now on MBP2009). It is under my local ...
user avatar
  • 1
0 votes
0 answers
106 views

OpenVPN on windows: server.ovpn config will not recognize ca path

I'm trying to configure an OpenVPN server on windows 10. I generated the ca.crt and I tried to add the path to the config file, but no matter what I do or how I write it, it gives me the same error ...
user avatar
0 votes
1 answer
30 views

How do I make apache to use the domain ssl certificate?

I've registered a domain and my hosting provider includes an ssl certificate for me. I've set up the A dns redirection to the IP where I have a linux ubuntu VPS with an Apache server installed on it. ...
user avatar
0 votes
0 answers
23 views

Merged certificate chain not recognized by OpennSSL

I created a certificate chain including : ROOT CA Intermediate CA Server certificate I also veryfied that chain with "openssl verify" and it works (here is the output) $ openssl verify -...
user avatar
0 votes
1 answer
145 views

How to prevent or workaround Sysprep destroying certificate's private key

I have a Windows 10 image which contains a Certificate to be used by the main application. However, after I run a sysprep /generalize on the image, the Certificate's private key appears to be ...
user avatar
  • 225
1 vote
0 answers
39 views

How to use SSL on local non-internet webpages?

For local websites such as localhost which are not connected to the internet I want to use SSL. And as it is not possible to create letsencrypt for sites not connected to the internet, I had to use a ...
user avatar
0 votes
0 answers
23 views

How to update certificates and certificate revocation lists on a Windows 7 box that does not have any networking?

For a Windows 7 Home Premium box that does not have internet or network (LAN/WAN) access, how can one update the machine's list of valid and revoked security certificates? A non-connected device (no ...
user avatar
0 votes
2 answers
55 views

Validate if a certificate is installed and trusted on osx through terminal

I can validate if a certificate exists in keychain by using the command security find-certificate -c "Certificate Name" -a But I am trying to see the trust settings of a particular ...
user avatar
  • 101
0 votes
1 answer
52 views

Receiving incorrect TLS certificate from website

This is a strange issue that (so far) is specific only to plex.tv website. I am seeing this same problem from various devices on my network. Ultimately, simply trying to access https://plex.tv in my ...
user avatar
0 votes
1 answer
96 views

Good practice to access WebDAV over SSL on a local network

I have a relatively simple scenario, where a WebDAV server runs over HTTPS, in a local network. For a test run (and it could end up being the final solution as well) I'm running as server sftpgo on a ...
user avatar
1 vote
0 answers
653 views

self signed certificate throwing "RSA_padding_check_PKCS1_type_1:invalid padding" error

My domain uses a self signed certificate created like this: $ ISSUER="/C=EN/L=City/O=ORG" $ SUBJECT="/C=EN/L=City/O=ORG/CN=myserver.com" $ SAN="DNS:myserver.com" $ ...
user avatar
  • 111
2 votes
0 answers
29 views

InspIRCd ssl connection fails with Cloudflare certificate

I am trying to implement SSL into my IRC server, I have downloaded and installed the certificate, key, and ca-bundle from Cloudflare. And I can connect successfully without SSL but when I do try to ...
user avatar
0 votes
1 answer
40 views

What is the public key in a web server certificate for?

Since a certificate needs to be checked by the OS certificates or in case of Firefox against a browser certificate, I have trouble understanding why a web server certificate consists also of a public ...
user avatar
  • 193
0 votes
1 answer
42 views

What happens after a website certificate is sent to the browser?

The client receives a webserver certificate, that contains a public key "ABC" and identification "DAVID" of the website owner. Then i am not sure what happens. The browser has to ...
user avatar
  • 193
0 votes
0 answers
203 views

Certificate authority (CA) in Ubuntu 21.10 is installed but it does not work

I've installed certificates before within Windows and Ubuntu [server] and it works normally, but today I tried to install certificates on Ubuntu Desktop 21.10 over RDP + AD user, and it does not work ...
user avatar
0 votes
1 answer
58 views

Chrome 96 - How to tell if a website is using an EV SSL certificate?

When using Chrome 96, how do I tell if an SSL certificate is an EV SSL certificate? Here's what Chrome does display:
user avatar
  • 299
1 vote
0 answers
4k views

Why this error tryng to cURL an API? OpenSSL SSL_connect: Connection reset by peer in connection to

I am going crazy with the following problem. Some times ago I was able to retrieve data from some API using the following cURL command involving the use of an SSL certificate, but now I am obtaining ...
user avatar
  • 6,539
0 votes
0 answers
62 views

Windows: select default certificate for Enterprise Wifi connection

When you have more than 1 Client Authentication certificate in your user certificate store, Windows will prompt on (appropriately configured) wireless connection to allow you to select desired ...
user avatar
0 votes
0 answers
39 views

Why is GPO causing User Software Installation to fail?

I have an MSI that I'm trying to install via GPO User Configuration Software Installation. The EXE within it is signed with a Code Signing certificate which is issued by our Active Directory ...
user avatar
0 votes
1 answer
49 views

How to delete cacert by .cer file?

Because of work, I import a cacert.cer file as a trusted root cert, now I want to delete it. The problem is I don't know anything about it, how do I delete it? From win +R -> certmgr.msc I can ...
user avatar
  • 835
1 vote
1 answer
75 views

Difference between certificate of a website and a SAML certificate?

A browser certificate is a signed document and with the public key of the CA, my user agent is able to validate it. In the metadata file of SAML, there is also a certificate, but it just seems to be ...
user avatar
  • 193
0 votes
0 answers
52 views

Self signed legacy driver failing to load (Secure Boot Off)

The Problem I'm working on making a legacy driver from Windows 8.1 x64 compatible with Windows 10 x64, which required some tinkering with the driver's files. As such, this invalidated the original ...
user avatar
  • 1
0 votes
1 answer
58 views

How to stop certreq from showing dialog box for choosing Certification Authority?

I am submitting a new Certificate Signing Request to the Root CA using the command certreq -submit ".\certsignrequest.req" but the dialog box to choose the Certification Authority keeps ...
user avatar
0 votes
1 answer
164 views

Is it possible to add system wide client certificates on Linux? (OpenSSL)

Is it possible to add a system wide client certificates on Linux so that all applications that use OpenSSL (or something equivalent) will automatically use them? The only solution I found was to add ...
user avatar
  • 103
1 vote
2 answers
298 views

How to automatically compare current windows root certificate store against latest root certificates?

I do have a provider that complains the trusted root certificates on our several windows server systems (2008, 2012, 2016, 2019) are outdated. I was not able to prove the opposite. For sure "Turn ...
user avatar

1
2 3 4 5
26