Questions tagged [client-certificate]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
13 views

Renewed RootCA doesn't verify child certs

So i have a self signed rootCA which is expiring soon, so i created a new csr with updated info about the cert and company but im still using the same private key. I create the new rootCA and install ...
2
votes
1answer
25 views

Can I create client certificates from a server certificate that I buy from a certificate authority?

If i buy a certificate from Godaddy or a trusted certificate authority for my website. let's say example.com and i want to issue client certificates so i can validate certificates of clients ...
0
votes
0answers
15 views

DocumentRoot with Client Certificate Authentication

I try to do redirection based on client certificate using the parameter SSL_CLIENT_S_DN_CN so that every client have a different folder path For example, Client A connect to https://www.myserver.com ...
1
vote
1answer
88 views

Intermittent TLS SecureChannelFailure with client certificates

I have an F5 load-balanced API which calls out to external API's, some of which require mutual ("two way" / client) SSL. For months things work fine, but from time-to-time requests (to the external ...
0
votes
0answers
133 views

webEx certificate error

I have been using Webex as a user for last few weeks. During my last session as host Igot following error message "No audio and video because certifcate is revoked or name on the certificate is ...
1
vote
0answers
195 views

How to avoid java Security Information popup?

Problem - Java security information popup appears when applet based application loads in the browser. When I check "Always trust content from the publisher" and click run, the application runs and ...
0
votes
0answers
32 views

Using a machine certificate for SSL client authentication

Assuming a web site enforces SSL client authentication and the client machine (running Windows) is equipped with a certificate which the server accepts for that purpose. The certificate resides in the ...
0
votes
0answers
217 views

Smartcard Client SLL Firefox no selection

I'm trying for days now to setup client ssl with apache and firefox using my hsm smartcard. I generated one certificate for every page I'm trying to set up. The smartcard shows up in firefox and ...
1
vote
0answers
465 views

Certificate Request and the certificate available in store not matching

I am trying to connect to a third party API which have a mutual TLS authentication setup enabled. So I am supposed to install my client certificates inside my key store and send it on TLS handshake ...
4
votes
2answers
197 views

Using SSH pubkey with multiple certificates

I am using an SSH public key to connect to a number of servers. The servers use an SSH CA to manage authorized users. The basic concept is described here: https://www.digitalocean.com/community/...
-1
votes
1answer
172 views

Where can I get a X509 certificate with my email address embedded and nonRepudiation and digitalSignature bits set? [closed]

I would like to buy a X.509 certificate for user authentication not for SSL. The certificate should have my email address in it and should have 2 bits set in KeyUsage extension: nonRepudiation ...
4
votes
0answers
4k views

curl (and openssl) two way authentication always fails

Problem I'm trying to use curl to send a POST request to a web service deployed on tomcat with host and client verification is required (two way authentication) but I always get the response 404 Not ...
1
vote
1answer
1k views

Tracking removal of client certificates

I connect to some remote web services that require a client certificate for authentication. Using certain tools (eg. SOAPUI), I can specify the certificate directly, but when doing quick requests to ...
0
votes
2answers
2k views

Windows 10 doesn't auto connect to network until I login after a restart

I have a Windows 10 laptop that is configured to connect to corporate BYOD (bring your own device) network. First time you connect to open guest network. Then from a web page, you download an ...
3
votes
0answers
1k views

Can't import two p12/pfx client certificates into Chrome or Firefox

I have a website I want to use client authentication certificates with. This is just a personal website for myself and a handful of family/friends, so I created a CA to sign some certificates that I ...
1
vote
0answers
98 views

How to get domain name of laptop

I need to create a certificate signing request to get a certificate from a CA for my laptop: openssl req -subj "/CN=<my common name>" -new -key client-key.pem -out client.csr In order to ...
-1
votes
1answer
271 views

StartSSL Class 1 Client cert missing private key in Keychain Access?

I have been using Class 1 Client Certificates from StartSSL for a while now (in OS X to sign my emails via S/MIME). I went to renew yesterday and I received my new cert. However, I am unsure how to ...
0
votes
1answer
146 views

EAP TLS encryption security

Is there any different between "EAP-TLS under PEAP" and "EAP-TLS only"? Is "EAP-TLS under PEAP" more secure compared to "EAP-TLS only"? As in PEAP, we are not able to see the actual certificate ...
0
votes
2answers
3k views

How do I configure sssd to authenticate against LDAP using client certificates / SASL EXTERNAL

I have a need to configure various Ubuntu Trusty machines using sssd against a 389ds server that expects to be bound to using a binddn selected automatically via a client certificate mapping. I have ...
1
vote
2answers
187 views

apache SSL configuration using trusted certificates

It's my first time I'm dealing with SSL, I'd like to know, if I got this right or not. I create selfsigned Client-Certificates with a self created CA my-own-CA.crt. When I buy a Server-Certificate of ...
5
votes
1answer
9k views

Can Firefox use the Windows certificate store?

How can I get Firefox to use the Windows certificate store to look for client certificates? Use case: Web authentication with a client certificate that is stored in the Windows certificate store and ...
0
votes
1answer
2k views

IIS SSL Settings - Require client certificates and self-signed certificates

I am having a little challenge understanding digital certificates and ssl. In IIS SSL Settings for my website I am setting my website to require client certificates. I am using a self-signed ...
0
votes
1answer
154 views

Firefox Smartcard Certificate Import error

I recently bought myself a Smartcard-HSM (which is of importance here because it doesn't allow export or import of private keys). Now I've used the "famous" XCA application to create a small CA on ...
5
votes
1answer
12k views

found a bunch of DO_NOT_TRUST_FiddlerRoot personal certificates installed on my system

I was looking at my personal certificates in Google Chrome and found a bunch of DO_NOT_TRUST_FiddlerRoot certs there. I don't know how these got there. Should I be concerned?
2
votes
1answer
3k views

Mac OS X Yosemite and Client SSL Certificates

Ever since I upgraded from Mavericks to Yosemite, my SSL Client Certificates have stopped working in certain places. They still work in web browsers and in wget, but they have stopped working in curl ...
1
vote
1answer
4k views

Can't S/MIME sign using OpenSSL even if “verify” suceeds

I have a client certificate in Chrome, that I used for logging into StartSSL. I exported it using pk12util to certfile.p12. Now I want to use it for signing with S/MIME. I converted the p12 file to ...
2
votes
1answer
65 views

User name for an existing SSH certificate?

On a Jenkins server, there are two pairs SSH private and public keys in the ~/.ssh/ directory which apparently are both used to authenticate with the same external server. However, I don't know which ...
1
vote
1answer
10k views

Firefox, “Secure Connection Failed” and client certificate

I have a client certificate for Satrtcom. I'm trying to authenticate to their service, but I'm receiving a "Secure Connection Failed" error with error code ssl_error_handshake_failure_alert: The ...
3
votes
2answers
1k views

Require only specific client certificates in IIS

I am implementing a solution that requires client certificates. I'm using IIS 7.5 and ASP.Net 4 WCF services. I've set the SSL Settings to Require SSL and require client certificates. Looks good so ...
126
votes
3answers
164k views

How do I view the contents of a PFX file on Windows?

I have a PFX certificate file on my machine and I'd like to view the details before importing it. (The import utility doesn't actually tell you what the certificate is!). How do I view the details ...
1
vote
1answer
1k views

IE - Personal Certificates - where does it read it from?

If I go to Internet Explorer Options -> Content Tab -> Certificates Button -> Personal Tab, I see a list of certificates there - where does IE read from? Several of these certificates are different ...
3
votes
1answer
2k views

Safari forces user to select client certificate even if it is optional

This question is loosely related to another one: IIS7.5 SSL Question, Safari users get a prompt of certificate to select, but since it was asked more than a year ago I thought that there may be some ...
1
vote
0answers
199 views

tomcat6 with crl doesn't load

I have a new tomcat6.0.34 setup I'm configuring on my CentOS 6.3 (64 bit). I've downloaded a series of CRLs for the certificate authorities I am using, converted them from DER to PEM with openssl: ...
0
votes
1answer
2k views

FTPS client certificate authentication

I'm installing FTPS server on debian with certificate-based authentication. I've set up ProFTPd and configured it to use TLS and a certificate (for testing purposed I use a self-signed one). Now I'd ...
0
votes
2answers
6k views

How to export User cert with private key in PKCS12 format

I'm running Win2008R2, and have installed an Enterprise CA. I can create user certs, but no matter what I do, I cannot export the private key. I'm using the un-touched User certificate template, and ...
0
votes
1answer
160 views

E-mail certificate issue

I guess I'm just a compete idiot and can't overcome simple problems, shame shame shame. However, I am trying to put a simple scenario together: box A (Windows 7) and box B (Windows 8 inside a virtual ...
2
votes
1answer
4k views

Curl won't prompt me for a certificate password

I'm trying to use CURL to test simple HTTPS connections to servers that require a client certificate. I've specified the certificate type in my .curlrc file with cert = /path/to/Cert.p12 and told it ...