Questions tagged [certificate-authority]
The certificate-authority tag has no usage guidance.
41
questions
0
votes
0
answers
683
views
Windows in-built RDP client can't disable revocation check?
The server is a Linux PC running XRDP. It is in my home network. I am the only user. I had created a CA and added it to Windows' "Location Computer/Trusted CA". In XRDP.ini, I have set the ...
- 3,662
0
votes
0
answers
132
views
What is the most efficient way to get new executables whitelisted at the big antivirus companies?
The problem explained
We developed an application (see https://embeetle.com). To avoid false positives, all our executables and dll's are code-signed with an Extended Verification Code Signing ...
- 160
0
votes
1
answer
343
views
Installing an internal website certificate in a domain controller?
The context is a Windows domain. My end goal here is to have an internal website (Website server is domain-joined) show as "trusted" when I visit it from my domain workstation.
Currently (in ...
- 377
0
votes
1
answer
291
views
Why is it better to configure ACME client to trust private CA root certificate than to add the certificate to the CA store?
I am creating a self-hosted CA for my internal home network as a hobby project and to learn something new. I'm using Smallstep's open-source step-ca and step CLI.
After creating the CA, the next step ...
- 115
0
votes
1
answer
133
views
Can stunnel use the OS's certifificate store?
I'm using stunnel in "client" mode to enable my non-SSL client to connect to an SSL server (it's using FIX protocol).
My set up works fine if I disable verification but then of course I'm ...
- 103
0
votes
0
answers
836
views
Certificate authority (CA) in Ubuntu 21.10 is installed but it does not work
I've installed certificates before within Windows and Ubuntu [server] and it works normally, but today I tried to install certificates on Ubuntu Desktop 21.10 over RDP + AD user, and it does not work ...
- 101
2
votes
1
answer
5k
views
Adding self-signed certificate into Trusted CA on Chromium for Linux
I am unable to install a self-signed CA certificate in Chromium and have it accept the TLS connection.
Your connection is not private
Attackers might be trying to steal your information from XXX (for ...
- 391
0
votes
1
answer
394
views
How to stop certreq from showing dialog box for choosing Certification Authority?
I am submitting a new Certificate Signing Request to the Root CA using the command
certreq -submit ".\certsignrequest.req"
but the dialog box to choose the Certification Authority keeps ...
1
vote
0
answers
3k
views
Unable to load CA private key when creating the intermediate pair
Following the tutorial at LINK to create the root pair and intermediate pair.
Creating the root pair works fine, but when I try to create the intermediate pair using:
openssl ca -config openssl.cnf -...
- 11
0
votes
0
answers
82
views
Verify a digital signed document by fetching public key from local CA at the time of verification
Is it possible for a user (say A) to verify a digitally signed (by user B) document without having public key of user B in local system and fetching key from the server (local CA) at the time of ...
- 11
0
votes
0
answers
2k
views
Debugging HTTP 403 Forbidden when using cURL for mutual authentication SSL (mTLS)
I'm a beginner in security but I am trying to send a request to a server through mutual authentication.
I was given
CA pem file
client cert pem file
private key pem file
Right now, I'm trying to ...
RedFlipBull
-1
votes
1
answer
264
views
TLS inspection with proxy
How can I install a proxy in my network to be able decrypt any traffic that passes through my network? I own all devices, and if there is a need I can provide the private keys and certificates for the ...
ArmSec247
0
votes
1
answer
631
views
SFTP File to Server Without Local User Access
Need to allow outside OpenSSH client to SFTP file to Reflection Secure IT Server without the need for local user's PKI.
In the past, I had a server with a local user account.
The client gave me his ...
Raymond Kelly
0
votes
1
answer
418
views
Debug CA certificates issue - DigiCert GlobalRoot CA
There is something wrong, with the way, my Linux machine checks the certificate chain, and I'm unable to debug it
Two hosts, that are currently affected, where i've tested the issue
repo.fortinet.com ...
- 154
0
votes
1
answer
434
views
Trying to revoke locally-generated certificate : No local CA error
For some automated tests on my project, I need to revoke a certificate which has been generated locally by makecert.exe.
First, I generate a signer certificate and associated CRL using the following ...
0
votes
2
answers
499
views
Can a X.509 Certificate be signed by two CAs with the same key?
I have set up a private CA to sign local certificates. In the CA certificate is a, let's say, typo that I want to fix in future versions of the CA but I want to keep the already issued certificates ...
- 1
0
votes
0
answers
43
views
OV code signing certificate provider without personal address on certificate?
Which CA can provide me with personal (OV) code signing certificate that will not include my address? Some include only city but not everyone lives in a big city to feel comfortable with that. ...
- 183
2
votes
1
answer
499
views
Paginate results of certutil -view
I'm using the following command to get a list of issued certificates in a Windows Server machine with Active Directory Certificate Services (ADCS) installed.
certutil -restrict 'Disposition=20' -out '...
- 661
1
vote
1
answer
1k
views
Windows : How to create a self-signed root certificate and a self-signed certificate signed with a self-signed root certificate
How to create a self-signed root certificate and a self-signed certificate signed with a self-signed root certificate.
I tried New-SelfSignedCertificate command to create a self-signed certificate but ...
- 39
2
votes
0
answers
2k
views
Self-signed SSL Certificate for Nginx not working with Chrome
I've generated a Self-signed SSL Certificate and Authority for my localhost nginx dev environment and imported the Certificate Authority in both Firefox and Chrome.
- Firefox: works perfectly, the ...
- 121
1
vote
3
answers
710
views
How can I work around the expired Sectigo certificate on my old mobile device?
As you may know, a CA certificate issued by Sectigo expired recently. This is affecting certain mobile apps and possibly websites, rendering them unable to connect to required network resources.
This ...
- 268
0
votes
1
answer
1k
views
SSH JumpServer with ProxyJump and Signed SSH Keys by a Certificate Authority
I want to achieve the following:
Connect from a Public SSH Server to a Private SSH Server via a Tunnel
Ideally, this is done comfortably via the "ProxyJump" option for the SSH client
I have the ...
0
votes
0
answers
78
views
How to retrieve a server certificate by just knowing the root CA
I have a client application in production which make a TLS connexion to a server.
This server will get certified by a new CA in a short future (soon Amazon TrustStore service previously it was ...
- 119
0
votes
1
answer
201
views
Does removing/re-installing my browser will remove old certificate store?
I suspect that there is a malicious certificate added in my browser's certificate store. I mean Certificate Authority certificate.
How can I remove it in Chrome and Firefox?
If I remove my current ...
- 1
3
votes
1
answer
276
views
GPG beginner: how to decide if I trust sks-keyservers.net
I am reading the GPG pre-pre-tutorial at https://riseup.net/de/security/message-security/openpgp/best-practices .
Upon clicking on a link to a .pem file at sks-keyservers.net in Firefox, a window ...
- 143
0
votes
1
answer
680
views
How to generate trusted SSL certificate for secure MQTT?
I am a beginner with information security and everything about SSL just goes over my head.
Currently I'm trying to get an IoT device(ESP32) to connect to an MQTT broker, broker.losant.com:8883 in ...
- 312
0
votes
1
answer
112
views
Windows Server Datacenter 2012 R2 and Certificates
Hi everybody and thank you in advance for your support.
On my business domain we have a lot of certificates expired (like the RDS Authentication Certificates) under Certificate Authority.
We spent a ...
- 1
0
votes
0
answers
1k
views
Unable to load crlnumber when creating CRL with OpenSSL
I am trying to create a CRL with my own private CA with OpenSSL. I have to work on a Windows machine from the binary. I give the command:
$openssl ca -gencrl -config root-ca.conf -out root-ca.crl
...
6
votes
2
answers
9k
views
Remove all certificate authorities from a Firefox profile
Objective is to trust only certain certificates stored on the hard disk for that certain profile. Thus no certificate authorities are needed.
Tried without success:
Delete all CAs using Certificate ...
- 101
2
votes
0
answers
2k
views
What is the best way to set up an OCSP responder (pkicreate, OpenSSL, other)?
I set up a root and intermediate CAs with OpenSSL and started issuing server certificates. For MS RDP (RemoteApp) it required OCSP, so I also set up an OCSP responder with OpenSSL. Testing with ...
- 342
2
votes
1
answer
8k
views
Creating SSH Certificates for SFTP using a CA
I'm a bit confused regarding the order of things to make this happen.
This is what I had in mind:
1 - Generate CA public and private key.
2 - Use CA Public Key with SFTP server (TrustedUserCAKeys).
...
- 161
1
vote
1
answer
201
views
PKI certs hierarchy
I follow https://jamielinux.com/docs/openssl-certificate-authority/index.html and after create root and intermediate ca the chain file dosnt have hierarchy like other ca.
Here's the sample of ...
0
votes
1
answer
157
views
Wondering about something regarding intermediate certificates and Weechat
I have a private server at home that runs a node.js instance and weechat. I also have my own domain, which I registered at EuroDNS, as well as an AlphaSSL certificate, also from EuroDNS.
Both Weechat'...
- 151
5
votes
1
answer
3k
views
OpenSSL ca fails after password without error message
I am trying to use a Root CA to sign a CSR for an Intermediate certificate and OpenSSL asks for my password and then after that nothing happens. No error message and no certificates are made. The ...
- 181
0
votes
0
answers
5k
views
SSL - Nginx http proxy status 400 "400 Bad Request"
I have implemented a set of Restful APIs using Scala. Now, I am in the situation of securing the APIs using SSL. So I have created the Self Signed Certificate using openssl. I followed all the steps ...
- 101
1
vote
0
answers
9k
views
certificate verify failed - Open VPN
When establishing open vpn connection, i am facing error "TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed"
SSL ...
- 111
12
votes
1
answer
22k
views
How to remove Bitdefender root certificate from Firefox/Thunderbird/Chrome
I'm using "Bitdefender Antivirus Free Edition 1.0.9.54" on my Windows 10 home PC
Antimalware Engine 7.73769
During the last days I got a popup which asked me to shutdown Firefox/Thunderbird/Chrome in ...
- 241
0
votes
1
answer
5k
views
How to create a Windows localhost certificate based on a local CA?
In my attempts to understand how TLS certificates work on Windows, I haven't found a simple and comprehensive guide, but I've accomplished some necessary steps.
First, I succeeded in downloading the ...
- 234
2
votes
2
answers
3k
views
How to skip "Select Certification Authority" dialog with PowerShell scripting?
I am issuing X.509 certificates using a PowerShell (4.0) script. Besides other lines here are the lines related to this issue:
certreq -new "$INFPath" "$CSRPath"
certreq -submit "$CSRPath" "$CERPath"
...
- 426
1
vote
2
answers
324
views
Small live-cd image with openssl support [closed]
I'm looking for a Linux live-cd image with openssl installed.
I do not want a graphical interface and the image must be as small as possible (< 500MB).
The purpose is to build a certificate ...
- 341
0
votes
1
answer
5k
views
Go Daddy's intermediate CA certificate missing
An unaffected PC (Windows 10 Pro connected to AD DS domain)
Affected PCs (Windows 10 Pro standalones)
What could cause intermediate but not root CA certificates to be missing?
I've ...
- 1,091