Questions tagged [certificate-authority]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
41 views

Why is it better to configure ACME client to trust private CA root certificate than to add the certificate to the CA store?

I am creating a self-hosted CA for my internal home network as a hobby project and to learn something new. I'm using Smallstep's open-source step-ca and step CLI. After creating the CA, the next step ...
user avatar
  • 115
0 votes
1 answer
20 views

Can stunnel use the OS's certifificate store?

I'm using stunnel in "client" mode to enable my non-SSL client to connect to an SSL server (it's using FIX protocol). My set up works fine if I disable verification but then of course I'm ...
user avatar
0 votes
0 answers
26 views

How to update certificates and certificate revocation lists on a Windows 7 box that does not have any networking?

For a Windows 7 Home Premium box that does not have internet or network (LAN/WAN) access, how can one update the machine's list of valid and revoked security certificates? A non-connected device (no ...
user avatar
0 votes
0 answers
267 views

Certificate authority (CA) in Ubuntu 21.10 is installed but it does not work

I've installed certificates before within Windows and Ubuntu [server] and it works normally, but today I tried to install certificates on Ubuntu Desktop 21.10 over RDP + AD user, and it does not work ...
user avatar
0 votes
1 answer
1k views

Adding self-signed certificate into Trusted CA on Chromium for Linux

I am unable to install a self-signed CA certificate in Chromium and have it accept the TLS connection. Your connection is not private Attackers might be trying to steal your information from XXX (for ...
user avatar
0 votes
1 answer
75 views

How to stop certreq from showing dialog box for choosing Certification Authority?

I am submitting a new Certificate Signing Request to the Root CA using the command certreq -submit ".\certsignrequest.req" but the dialog box to choose the Certification Authority keeps ...
user avatar
0 votes
0 answers
492 views

Unable to load CA private key when creating the intermediate pair

Following the tutorial at LINK to create the root pair and intermediate pair. Creating the root pair works fine, but when I try to create the intermediate pair using: openssl ca -config openssl.cnf -...
user avatar
  • 1
0 votes
0 answers
33 views

Verify a digital signed document by fetching public key from local CA at the time of verification

Is it possible for a user (say A) to verify a digitally signed (by user B) document without having public key of user B in local system and fetching key from the server (local CA) at the time of ...
user avatar
  • 11
0 votes
0 answers
766 views

Debugging HTTP 403 Forbidden when using cURL for mutual authentication SSL (mTLS)

I'm a beginner in security but I am trying to send a request to a server through mutual authentication. I was given CA pem file client cert pem file private key pem file Right now, I'm trying to ...
user avatar
-1 votes
1 answer
85 views

TLS inspection with proxy

How can I install a proxy in my network to be able decrypt any traffic that passes through my network? I own all devices, and if there is a need I can provide the private keys and certificates for the ...
user avatar
0 votes
1 answer
167 views

SFTP File to Server Without Local User Access

Need to allow outside OpenSSH client to SFTP file to Reflection Secure IT Server without the need for local user's PKI. In the past, I had a server with a local user account. The client gave me his ...
user avatar
0 votes
1 answer
151 views

Debug CA certificates issue - DigiCert GlobalRoot CA

There is something wrong, with the way, my Linux machine checks the certificate chain, and I'm unable to debug it Two hosts, that are currently affected, where i've tested the issue repo.fortinet.com ...
user avatar
0 votes
1 answer
123 views

Trying to revoke locally-generated certificate : No local CA error

For some automated tests on my project, I need to revoke a certificate which has been generated locally by makecert.exe. First, I generate a signer certificate and associated CRL using the following ...
user avatar
0 votes
2 answers
83 views

Can a X.509 Certificate be signed by two CAs with the same key?

I have set up a private CA to sign local certificates. In the CA certificate is a, let's say, typo that I want to fix in future versions of the CA but I want to keep the already issued certificates ...
user avatar
  • 1
0 votes
0 answers
31 views

OV code signing certificate provider without personal address on certificate?

Which CA can provide me with personal (OV) code signing certificate that will not include my address? Some include only city but not everyone lives in a big city to feel comfortable with that. ...
user avatar
  • 183
2 votes
1 answer
142 views

Paginate results of certutil -view

I'm using the following command to get a list of issued certificates in a Windows Server machine with Active Directory Certificate Services (ADCS) installed. certutil -restrict 'Disposition=20' -out '...
user avatar
  • 661
0 votes
1 answer
93 views

Windows : How to create a self-signed root certificate and a self-signed certificate signed with a self-signed root certificate

How to create a self-signed root certificate and a self-signed certificate signed with a self-signed root certificate. I tried New-SelfSignedCertificate command to create a self-signed certificate but ...
user avatar
  • 9
2 votes
0 answers
1k views

Self-signed SSL Certificate for Nginx not working with Chrome

I've generated a Self-signed SSL Certificate and Authority for my localhost nginx dev environment and imported the Certificate Authority in both Firefox and Chrome. - Firefox: works perfectly, the ...
user avatar
1 vote
3 answers
394 views

How can I work around the expired Sectigo certificate on my old mobile device?

As you may know, a CA certificate issued by Sectigo expired recently. This is affecting certain mobile apps and possibly websites, rendering them unable to connect to required network resources. This ...
user avatar
  • 258
0 votes
1 answer
548 views

SSH JumpServer with ProxyJump and Signed SSH Keys by a Certificate Authority

I want to achieve the following: Connect from a Public SSH Server to a Private SSH Server via a Tunnel Ideally, this is done comfortably via the "ProxyJump" option for the SSH client I have the ...
user avatar
0 votes
0 answers
64 views

How to retrieve a server certificate by just knowing the root CA

I have a client application in production which make a TLS connexion to a server. This server will get certified by a new CA in a short future (soon Amazon TrustStore service previously it was ...
user avatar
0 votes
1 answer
63 views

Does removing/re-installing my browser will remove old certificate store?

I suspect that there is a malicious certificate added in my browser's certificate store. I mean Certificate Authority certificate. How can I remove it in Chrome and Firefox? If I remove my current ...
user avatar
  • 1
3 votes
1 answer
228 views

GPG beginner: how to decide if I trust sks-keyservers.net

I am reading the GPG pre-pre-tutorial at https://riseup.net/de/security/message-security/openpgp/best-practices . Upon clicking on a link to a .pem file at sks-keyservers.net in Firefox, a window ...
user avatar
0 votes
1 answer
583 views

How to generate trusted SSL certificate for secure MQTT?

I am a beginner with information security and everything about SSL just goes over my head. Currently I'm trying to get an IoT device(ESP32) to connect to an MQTT broker, broker.losant.com:8883 in ...
user avatar
0 votes
1 answer
51 views

Windows Server Datacenter 2012 R2 and Certificates

Hi everybody and thank you in advance for your support. On my business domain we have a lot of certificates expired (like the RDS Authentication Certificates) under Certificate Authority. We spent a ...
user avatar
  • 1
0 votes
0 answers
859 views

Unable to load crlnumber when creating CRL with OpenSSL

I am trying to create a CRL with my own private CA with OpenSSL. I have to work on a Windows machine from the binary. I give the command: $openssl ca -gencrl -config root-ca.conf -out root-ca.crl ...
user avatar
5 votes
2 answers
6k views

Remove all certificate authorities from a Firefox profile

Objective is to trust only certain certificates stored on the hard disk for that certain profile. Thus no certificate authorities are needed. Tried without success: Delete all CAs using Certificate ...
user avatar
2 votes
0 answers
2k views

What is the best way to set up an OCSP responder (pkicreate, OpenSSL, other)?

I set up a root and intermediate CAs with OpenSSL and started issuing server certificates. For MS RDP (RemoteApp) it required OCSP, so I also set up an OCSP responder with OpenSSL. Testing with ...
user avatar
2 votes
1 answer
5k views

Creating SSH Certificates for SFTP using a CA

I'm a bit confused regarding the order of things to make this happen. This is what I had in mind: 1 - Generate CA public and private key. 2 - Use CA Public Key with SFTP server (TrustedUserCAKeys). ...
user avatar
  • 161
1 vote
1 answer
89 views

PKI certs hierarchy

I follow https://jamielinux.com/docs/openssl-certificate-authority/index.html and after create root and intermediate ca the chain file dosnt have hierarchy like other ca. Here's the sample of ...
user avatar
  • 929
0 votes
1 answer
125 views

Wondering about something regarding intermediate certificates and Weechat

I have a private server at home that runs a node.js instance and weechat. I also have my own domain, which I registered at EuroDNS, as well as an AlphaSSL certificate, also from EuroDNS. Both Weechat'...
user avatar
  • 141
4 votes
1 answer
2k views

OpenSSL ca fails after password without error message

I am trying to use a Root CA to sign a CSR for an Intermediate certificate and OpenSSL asks for my password and then after that nothing happens. No error message and no certificates are made. The ...
user avatar
  • 151
0 votes
0 answers
5k views

SSL - Nginx http proxy status 400 "400 Bad Request"

I have implemented a set of Restful APIs using Scala. Now, I am in the situation of securing the APIs using SSL. So I have created the Self Signed Certificate using openssl. I followed all the steps ...
user avatar
  • 101
1 vote
0 answers
8k views

certificate verify failed - Open VPN

When establishing open vpn connection, i am facing error "TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed" SSL ...
user avatar
  • 111
11 votes
1 answer
20k views

How to remove Bitdefender root certificate from Firefox/Thunderbird/Chrome

I'm using "Bitdefender Antivirus Free Edition 1.0.9.54" on my Windows 10 home PC Antimalware Engine 7.73769 During the last days I got a popup which asked me to shutdown Firefox/Thunderbird/Chrome in ...
user avatar
0 votes
1 answer
5k views

How to create a Windows localhost certificate based on a local CA?

In my attempts to understand how TLS certificates work on Windows, I haven't found a simple and comprehensive guide, but I've accomplished some necessary steps. First, I succeeded in downloading the ...
user avatar
2 votes
2 answers
2k views

How to skip "Select Certification Authority" dialog with PowerShell scripting?

I am issuing X.509 certificates using a PowerShell (4.0) script. Besides other lines here are the lines related to this issue: certreq -new "$INFPath" "$CSRPath" certreq -submit "$CSRPath" "$CERPath" ...
user avatar
  • 416
1 vote
2 answers
294 views

Small live-cd image with openssl support [closed]

I'm looking for a Linux live-cd image with openssl installed. I do not want a graphical interface and the image must be as small as possible (< 500MB). The purpose is to build a certificate ...
user avatar
  • 301
0 votes
1 answer
4k views

Go Daddy's intermediate CA certificate missing

An unaffected PC (Windows 10 Pro connected to AD DS domain)   Affected PCs (Windows 10 Pro standalones)   What could cause intermediate but not root CA certificates to be missing? I've ...
user avatar