Questions tagged [client-certificate]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
37 views

Azure App Service - 403 Not prompting for Client certificate

Continued from Stackoverflow: https://stackoverflow.com/posts/71568493 Http 2.0 is enabled, but no additional info available about the issue in diagnostics From Stack: We have an app service running ...
user avatar
  • 1
1 vote
1 answer
3k views

RDP with client authentication via a certificate or a key file

I'm planning to set up secure WAN-accessible RDP to my personal computer (Windows 10, not Windows Server, since it's just a workstation). The plan is: Forward the RDP and Wake-on-LAN ports to my ...
user avatar
  • 115
0 votes
0 answers
36 views

Client certificate invalid because root certificate has been revoked

We face a strange problem where the issuing root-CA certificate of a client certificate appears to be revoked. This is not true (Root CA is Swiss Government Root CA II, serial number ...
user avatar
  • 1
1 vote
0 answers
67 views

Client authentication on Apache server doesn't work

I setup a simple Apache 2 server that uses a secure HTTPS connection. I created my own self-signed Root-CA-certificate and Sub-CA-certificate to create the server certificate and installed that on the ...
user avatar
  • 13
0 votes
1 answer
87 views

Can't install client certificate on different device?

I setup a simple Apache 2 server and enabled a secure SSL connection. I used my own self-signed Root-CA-Certificate to create a Sub-CA and used that one to create the server certificate that is ...
user avatar
  • 13
0 votes
0 answers
61 views

Is it possible to use SSL client certificate authentication with client programs that do not specifically accommodate them?

I have set up a webserver with several self-hosted apps for my personal use. In order to make sure that I am the only person who can connect to my server, I have generated client authentication ...
user avatar
5 votes
2 answers
2k views

Enroll user's certificates for another user on the same machine

If I'm logged in as a normal user, how can I download/enroll user's certificates for another user (on the same machine)? This can be done using runas command but can't figure out exactly.
user avatar
  • 61
1 vote
1 answer
1k views

How to install a client certificate for a service account

I'm building an application that needs to access a third-party webservice, for which I have a client certificate. This works if I run the application from my own account, but eventually, the ...
user avatar
  • 2,459
0 votes
2 answers
4k views

Imported certificates go to other people windows 10

Edit: 27/04/2020 We came to the conclusion that the certificate stopped working as it does not work anymore on the old system either. So we keep working on "corrupted" certificates that may never ...
user avatar
  • 126
0 votes
0 answers
17 views

Renewed RootCA doesn't verify child certs

So i have a self signed rootCA which is expiring soon, so i created a new csr with updated info about the cert and company but im still using the same private key. I create the new rootCA and install ...
user avatar
2 votes
1 answer
447 views

Can I create client certificates from a server certificate that I buy from a certificate authority?

If i buy a certificate from Godaddy or a trusted certificate authority for my website. let's say example.com and i want to issue client certificates so i can validate certificates of clients ...
user avatar
1 vote
1 answer
252 views

Intermittent TLS SecureChannelFailure with client certificates

I have an F5 load-balanced API which calls out to external API's, some of which require mutual ("two way" / client) SSL. For months things work fine, but from time-to-time requests (to the external ...
user avatar
  • 11
1 vote
0 answers
746 views

How to avoid java Security Information popup?

Problem - Java security information popup appears when applet based application loads in the browser. When I check "Always trust content from the publisher" and click run, the application runs and ...
user avatar
  • 113
0 votes
0 answers
122 views

Using a machine certificate for SSL client authentication

Assuming a web site enforces SSL client authentication and the client machine (running Windows) is equipped with a certificate which the server accepts for that purpose. The certificate resides in the ...
user avatar
0 votes
0 answers
291 views

Smartcard Client SLL Firefox no selection

I'm trying for days now to setup client ssl with apache and firefox using my hsm smartcard. I generated one certificate for every page I'm trying to set up. The smartcard shows up in firefox and ...
user avatar
  • 13
1 vote
0 answers
556 views

Certificate Request and the certificate available in store not matching

I am trying to connect to a third party API which have a mutual TLS authentication setup enabled. So I am supposed to install my client certificates inside my key store and send it on TLS handshake ...
user avatar
  • 155
4 votes
2 answers
673 views

Using SSH pubkey with multiple certificates

I am using an SSH public key to connect to a number of servers. The servers use an SSH CA to manage authorized users. The basic concept is described here: https://www.digitalocean.com/community/...
user avatar
  • 433
-1 votes
1 answer
261 views

Where can I get a X509 certificate with my email address embedded and nonRepudiation and digitalSignature bits set? [closed]

I would like to buy a X.509 certificate for user authentication not for SSL. The certificate should have my email address in it and should have 2 bits set in KeyUsage extension: nonRepudiation ...
user avatar
4 votes
0 answers
5k views

curl (and openssl) two way authentication always fails

Problem I'm trying to use curl to send a POST request to a web service deployed on tomcat with host and client verification is required (two way authentication) but I always get the response 404 Not ...
user avatar
  • 235
1 vote
1 answer
4k views

Tracking removal of client certificates

I connect to some remote web services that require a client certificate for authentication. Using certain tools (eg. SOAPUI), I can specify the certificate directly, but when doing quick requests to ...
user avatar
  • 2,617
0 votes
2 answers
4k views

Windows 10 doesn't auto connect to network until I login after a restart

I have a Windows 10 laptop that is configured to connect to corporate BYOD (bring your own device) network. First time you connect to open guest network. Then from a web page, you download an ...
user avatar
  • 1
4 votes
0 answers
2k views

Can't import two p12/pfx client certificates into Chrome or Firefox

I have a website I want to use client authentication certificates with. This is just a personal website for myself and a handful of family/friends, so I created a CA to sign some certificates that I ...
user avatar
  • 141
1 vote
0 answers
105 views

How to get domain name of laptop

I need to create a certificate signing request to get a certificate from a CA for my laptop: openssl req -subj "/CN=<my common name>" -new -key client-key.pem -out client.csr In order to ...
user avatar
-1 votes
1 answer
286 views

StartSSL Class 1 Client cert missing private key in Keychain Access?

I have been using Class 1 Client Certificates from StartSSL for a while now (in OS X to sign my emails via S/MIME). I went to renew yesterday and I received my new cert. However, I am unsure how to ...
user avatar
  • 507
0 votes
1 answer
151 views

EAP TLS encryption security

Is there any different between "EAP-TLS under PEAP" and "EAP-TLS only"? Is "EAP-TLS under PEAP" more secure compared to "EAP-TLS only"? As in PEAP, we are not able to see the actual certificate ...
user avatar
  • 113
0 votes
2 answers
3k views

How do I configure sssd to authenticate against LDAP using client certificates / SASL EXTERNAL

I have a need to configure various Ubuntu Trusty machines using sssd against a 389ds server that expects to be bound to using a binddn selected automatically via a client certificate mapping. I have ...
user avatar
1 vote
2 answers
310 views

apache SSL configuration using trusted certificates

It's my first time I'm dealing with SSL, I'd like to know, if I got this right or not. I create selfsigned Client-Certificates with a self created CA my-own-CA.crt. When I buy a Server-Certificate of ...
user avatar
  • 183
6 votes
2 answers
11k views

Can Firefox use the Windows certificate store?

How can I get Firefox to use the Windows certificate store to look for client certificates? Use case: Web authentication with a client certificate that is stored in the Windows certificate store and ...
user avatar
0 votes
1 answer
2k views

IIS SSL Settings - Require client certificates and self-signed certificates

I am having a little challenge understanding digital certificates and ssl. In IIS SSL Settings for my website I am setting my website to require client certificates. I am using a self-signed ...
user avatar
  • 419
0 votes
1 answer
163 views

Firefox Smartcard Certificate Import error

I recently bought myself a Smartcard-HSM (which is of importance here because it doesn't allow export or import of private keys). Now I've used the "famous" XCA application to create a small CA on ...
user avatar
  • 203
9 votes
1 answer
20k views

found a bunch of DO_NOT_TRUST_FiddlerRoot personal certificates installed on my system

I was looking at my personal certificates in Google Chrome and found a bunch of DO_NOT_TRUST_FiddlerRoot certs there. I don't know how these got there. Should I be concerned?
user avatar
  • 5,980
2 votes
1 answer
3k views

Mac OS X Yosemite and Client SSL Certificates

Ever since I upgraded from Mavericks to Yosemite, my SSL Client Certificates have stopped working in certain places. They still work in web browsers and in wget, but they have stopped working in curl ...
user avatar
1 vote
1 answer
4k views

Can't S/MIME sign using OpenSSL even if "verify" suceeds

I have a client certificate in Chrome, that I used for logging into StartSSL. I exported it using pk12util to certfile.p12. Now I want to use it for signing with S/MIME. I converted the p12 file to ...
user avatar
2 votes
1 answer
68 views

User name for an existing SSH certificate?

On a Jenkins server, there are two pairs SSH private and public keys in the ~/.ssh/ directory which apparently are both used to authenticate with the same external server. However, I don't know which ...
user avatar
  • 626
1 vote
1 answer
12k views

Firefox, "Secure Connection Failed" and client certificate

I have a client certificate for Satrtcom. I'm trying to authenticate to their service, but I'm receiving a "Secure Connection Failed" error with error code ssl_error_handshake_failure_alert: The ...
user avatar
  • 11.2k
4 votes
2 answers
3k views

Require only specific client certificates in IIS

I am implementing a solution that requires client certificates. I'm using IIS 7.5 and ASP.Net 4 WCF services. I've set the SSL Settings to Require SSL and require client certificates. Looks good so ...
user avatar
  • 398
171 votes
4 answers
272k views

How do I view the contents of a PFX file on Windows?

I have a PFX certificate file on my machine and I'd like to view the details before importing it. (The import utility doesn't actually tell you what the certificate is!). How do I view the details ...
user avatar
  • 4,751
1 vote
1 answer
2k views

IE - Personal Certificates - where does it read it from?

If I go to Internet Explorer Options -> Content Tab -> Certificates Button -> Personal Tab, I see a list of certificates there - where does IE read from? Several of these certificates are different ...
user avatar
  • 457
3 votes
1 answer
3k views

Safari forces user to select client certificate even if it is optional

This question is loosely related to another one: IIS7.5 SSL Question, Safari users get a prompt of certificate to select, but since it was asked more than a year ago I thought that there may be some ...
user avatar
  • 131
1 vote
0 answers
214 views

tomcat6 with crl doesn't load

I have a new tomcat6.0.34 setup I'm configuring on my CentOS 6.3 (64 bit). I've downloaded a series of CRLs for the certificate authorities I am using, converted them from DER to PEM with openssl: ...
user avatar
0 votes
1 answer
2k views

FTPS client certificate authentication

I'm installing FTPS server on debian with certificate-based authentication. I've set up ProFTPd and configured it to use TLS and a certificate (for testing purposed I use a self-signed one). Now I'd ...
user avatar
  • 685
0 votes
2 answers
6k views

How to export User cert with private key in PKCS12 format

I'm running Win2008R2, and have installed an Enterprise CA. I can create user certs, but no matter what I do, I cannot export the private key. I'm using the un-touched User certificate template, and ...
user avatar
  • 105
0 votes
1 answer
162 views

E-mail certificate issue

I guess I'm just a compete idiot and can't overcome simple problems, shame shame shame. However, I am trying to put a simple scenario together: box A (Windows 7) and box B (Windows 8 inside a virtual ...
user avatar
  • 359
3 votes
1 answer
5k views

Curl won't prompt me for a certificate password

I'm trying to use CURL to test simple HTTPS connections to servers that require a client certificate. I've specified the certificate type in my .curlrc file with cert = /path/to/Cert.p12 and told it ...
user avatar
  • 1,458