Questions tagged [client-certificate]

The tag has no usage guidance.

20 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5 votes
1 answer
2k views

Can't import two p12/pfx client certificates into Chrome or Firefox

I have a website I want to use client authentication certificates with. This is just a personal website for myself and a handful of family/friends, so I created a CA to sign some certificates that I ...
Nertskull's user avatar
  • 151
4 votes
0 answers
5k views

curl (and openssl) two way authentication always fails

Problem I'm trying to use curl to send a POST request to a web service deployed on tomcat with host and client verification is required (two way authentication) but I always get the response 404 Not ...
joker's user avatar
  • 235
4 votes
2 answers
3k views

Require only specific client certificates in IIS

I am implementing a solution that requires client certificates. I'm using IIS 7.5 and ASP.Net 4 WCF services. I've set the SSL Settings to Require SSL and require client certificates. Looks good so ...
Jeremy's user avatar
  • 398
3 votes
1 answer
3k views

Safari forces user to select client certificate even if it is optional

This question is loosely related to another one: IIS7.5 SSL Question, Safari users get a prompt of certificate to select, but since it was asked more than a year ago I thought that there may be some ...
Maciej's user avatar
  • 131
1 vote
0 answers
196 views

Client authentication on Apache server doesn't work

I setup a simple Apache 2 server that uses a secure HTTPS connection. I created my own self-signed Root-CA-certificate and Sub-CA-certificate to create the server certificate and installed that on the ...
ilmu011's user avatar
  • 13
1 vote
1 answer
351 views

Intermittent TLS SecureChannelFailure with client certificates

I have an F5 load-balanced API which calls out to external API's, some of which require mutual ("two way" / client) SSL. For months things work fine, but from time-to-time requests (to the external ...
grae22's user avatar
  • 11
1 vote
0 answers
893 views

How to avoid java Security Information popup?

Problem - Java security information popup appears when applet based application loads in the browser. When I check "Always trust content from the publisher" and click run, the application runs and ...
Nishant's user avatar
  • 123
1 vote
0 answers
725 views

Certificate Request and the certificate available in store not matching

I am trying to connect to a third party API which have a mutual TLS authentication setup enabled. So I am supposed to install my client certificates inside my key store and send it on TLS handshake ...
None's user avatar
  • 155
1 vote
1 answer
5k views

Tracking removal of client certificates

I connect to some remote web services that require a client certificate for authentication. Using certain tools (eg. SOAPUI), I can specify the certificate directly, but when doing quick requests to ...
CJM's user avatar
  • 2,617
1 vote
2 answers
6k views

Windows 10 doesn't auto connect to network until I login after a restart

I have a Windows 10 laptop that is configured to connect to corporate BYOD (bring your own device) network. First time you connect to open guest network. Then from a web page, you download an ...
PC Guy's user avatar
  • 11
1 vote
0 answers
113 views

How to get domain name of laptop

I need to create a certificate signing request to get a certificate from a CA for my laptop: openssl req -subj "/CN=<my common name>" -new -key client-key.pem -out client.csr In order to ...
Kenenbek Arzymatov's user avatar
1 vote
0 answers
221 views

tomcat6 with crl doesn't load

I have a new tomcat6.0.34 setup I'm configuring on my CentOS 6.3 (64 bit). I've downloaded a series of CRLs for the certificate authorities I am using, converted them from DER to PEM with openssl: ...
Frustrated's user avatar
0 votes
0 answers
47 views

Client Side Cannot Find Client Cert in TLS Mutual Authentication

This is a windows .NET application. Am working on the client side. Increased SSChannel logging and discovered ... . Creating a TLS client credential. The remote server has requested TLS client ...
Cobbler Dev's user avatar
0 votes
0 answers
103 views

Force Chrome to show certificate selection dialog in Ubuntu

Some sites (e.g, https://www.sede.fnmt.gob.es/certificados/persona-fisica/verificar-estado/solicitar-verificacion) require the selection of a local certificate. Chrome, once you select one of the ...
Alvaro Maceda's user avatar
0 votes
0 answers
555 views

Is it possible to use SSL client certificate authentication with client programs that do not specifically accommodate them?

I have set up a webserver with several self-hosted apps for my personal use. In order to make sure that I am the only person who can connect to my server, I have generated client authentication ...
Stonecraft's user avatar
0 votes
0 answers
20 views

Renewed RootCA doesn't verify child certs

So i have a self signed rootCA which is expiring soon, so i created a new csr with updated info about the cert and company but im still using the same private key. I create the new rootCA and install ...
Ghaith Haddad's user avatar
0 votes
0 answers
311 views

Using a machine certificate for SSL client authentication

Assuming a web site enforces SSL client authentication and the client machine (running Windows) is equipped with a certificate which the server accepts for that purpose. The certificate resides in the ...
user149408's user avatar
  • 1,100
0 votes
0 answers
331 views

Smartcard Client SLL Firefox no selection

I'm trying for days now to setup client ssl with apache and firefox using my hsm smartcard. I generated one certificate for every page I'm trying to set up. The smartcard shows up in firefox and ...
Stefan's user avatar
  • 13
0 votes
1 answer
163 views

EAP TLS encryption security

Is there any different between "EAP-TLS under PEAP" and "EAP-TLS only"? Is "EAP-TLS under PEAP" more secure compared to "EAP-TLS only"? As in PEAP, we are not able to see the actual certificate ...
Jess's user avatar
  • 143
0 votes
2 answers
5k views

How do I configure sssd to authenticate against LDAP using client certificates / SASL EXTERNAL

I have a need to configure various Ubuntu Trusty machines using sssd against a 389ds server that expects to be bound to using a binddn selected automatically via a client certificate mapping. I have ...
Graham Leggett's user avatar