Questions tagged [client-certificate]
The client-certificate tag has no usage guidance.
20
questions with no upvoted or accepted answers
5
votes
1
answer
2k
views
Can't import two p12/pfx client certificates into Chrome or Firefox
I have a website I want to use client authentication certificates with. This is just a personal website for myself and a handful of family/friends, so I created a CA to sign some certificates that I ...
4
votes
0
answers
5k
views
curl (and openssl) two way authentication always fails
Problem
I'm trying to use curl to send a POST request to a web service deployed on tomcat with host and client verification is required (two way authentication) but I always get the response 404 Not ...
4
votes
2
answers
3k
views
Require only specific client certificates in IIS
I am implementing a solution that requires client certificates. I'm using IIS 7.5 and ASP.Net 4 WCF services.
I've set the SSL Settings to Require SSL and require client certificates. Looks good so ...
3
votes
1
answer
3k
views
Safari forces user to select client certificate even if it is optional
This question is loosely related to another one:
IIS7.5 SSL Question, Safari users get a prompt of certificate to select, but since it was asked more than a year ago I thought that there may be some ...
1
vote
0
answers
196
views
Client authentication on Apache server doesn't work
I setup a simple Apache 2 server that uses a secure HTTPS connection. I created my own self-signed Root-CA-certificate and Sub-CA-certificate to create the server certificate and installed that on the ...
1
vote
1
answer
351
views
Intermittent TLS SecureChannelFailure with client certificates
I have an F5 load-balanced API which calls out to external API's, some of which require mutual ("two way" / client) SSL.
For months things work fine, but from time-to-time requests (to the external ...
1
vote
0
answers
893
views
How to avoid java Security Information popup?
Problem - Java security information popup appears when applet based application loads in the browser.
When I check "Always trust content from the publisher" and click run, the application runs and ...
1
vote
0
answers
725
views
Certificate Request and the certificate available in store not matching
I am trying to connect to a third party API which have a mutual TLS authentication setup enabled. So I am supposed to install my client certificates inside my key store and send it on TLS handshake ...
1
vote
1
answer
5k
views
Tracking removal of client certificates
I connect to some remote web services that require a client certificate for authentication. Using certain tools (eg. SOAPUI), I can specify the certificate directly, but when doing quick requests to ...
1
vote
2
answers
6k
views
Windows 10 doesn't auto connect to network until I login after a restart
I have a Windows 10 laptop that is configured to connect to corporate BYOD (bring your own device) network. First time you connect to open guest network. Then from a web page, you download an ...
1
vote
0
answers
113
views
How to get domain name of laptop
I need to create a certificate signing request to get a certificate from a CA for my laptop:
openssl req -subj "/CN=<my common name>" -new -key client-key.pem -out client.csr
In order to ...
1
vote
0
answers
221
views
tomcat6 with crl doesn't load
I have a new tomcat6.0.34 setup I'm configuring on my CentOS 6.3 (64 bit). I've downloaded a series of CRLs for the certificate authorities I am using, converted them from DER to PEM with openssl:
...
0
votes
0
answers
47
views
Client Side Cannot Find Client Cert in TLS Mutual Authentication
This is a windows .NET application. Am working on the client side. Increased SSChannel logging and discovered ... .
Creating a TLS client credential.
The remote server has requested TLS client ...
0
votes
0
answers
103
views
Force Chrome to show certificate selection dialog in Ubuntu
Some sites (e.g,
https://www.sede.fnmt.gob.es/certificados/persona-fisica/verificar-estado/solicitar-verificacion) require the selection of a local certificate. Chrome, once you select one of the ...
0
votes
0
answers
555
views
Is it possible to use SSL client certificate authentication with client programs that do not specifically accommodate them?
I have set up a webserver with several self-hosted apps for my personal use. In order to make sure that I am the only person who can connect to my server, I have generated client authentication ...
0
votes
0
answers
20
views
Renewed RootCA doesn't verify child certs
So i have a self signed rootCA which is expiring soon, so i created a new csr with updated info about the cert and company but im still using the same private key.
I create the new rootCA and install ...
0
votes
0
answers
311
views
Using a machine certificate for SSL client authentication
Assuming a web site enforces SSL client authentication and the client machine (running Windows) is equipped with a certificate which the server accepts for that purpose. The certificate resides in the ...
0
votes
0
answers
331
views
Smartcard Client SLL Firefox no selection
I'm trying for days now to setup client ssl with apache and firefox using my hsm smartcard.
I generated one certificate for every page I'm trying to set up. The smartcard shows up in firefox and ...
0
votes
1
answer
163
views
EAP TLS encryption security
Is there any different between "EAP-TLS under PEAP" and "EAP-TLS only"?
Is "EAP-TLS under PEAP" more secure compared to "EAP-TLS only"? As in PEAP, we are not able to see the actual certificate ...
0
votes
2
answers
5k
views
How do I configure sssd to authenticate against LDAP using client certificates / SASL EXTERNAL
I have a need to configure various Ubuntu Trusty machines using sssd against a 389ds server that expects to be bound to using a binddn selected automatically via a client certificate mapping.
I have ...