Questions tagged [trusted-root-certificates]

Trusted root certificates are used by a computer or device for secure communications and file/program authentication.

Filter by
Sorted by
Tagged with
0
votes
1answer
28 views

Connect with openssl to google server but unable to get local issuer certificate. Why?

Trying to connect to imap.google.com:993 with openssl. 1) downloaded CAfile in encoded DER format from https://pki.goog/ . The file called GTS Root R1 2) converted this file into PEM format ...
2
votes
0answers
43 views

How can I find out how many devices support a given certificate? [closed]

We regularly renew the SSL certificate for our web service. With our most recent certificate renewal, we discovered that some legacy/EOL devices (e.g. running Android KitKat) could not access our ...
0
votes
0answers
14 views

Renewed RootCA doesn't verify child certs

So i have a self signed rootCA which is expiring soon, so i created a new csr with updated info about the cert and company but im still using the same private key. I create the new rootCA and install ...
0
votes
0answers
23 views

Custom Self Signed Cert reverted on unifi cloud key 2?

I'm setting up my homelab and I learned out how to create custom CA and intermediate CAs for various parts of my setup. I have a custom created key and cert chain which I want to use on my cloud key. ...
0
votes
1answer
209 views

Install certificates on Wyse thin client (Windows 10 IoT)

We have a few Dell Wyse 5070 thin clients in our estate with no central management. They're running a version of Windows 10 IoT and appear to be mostly non-persistent. Any changes I make to the ...
0
votes
1answer
43 views

Can I Use My OpenSSL CA to Sign My OpenVPN Certificates?

I'm not sure if it sounds like a stupid question but all the guides I've looked at when it comes to making certificates for OpenVPN all use Easy-RSA. Some of my servers such as my NAS, and ...
0
votes
0answers
151 views

Missing Android trusted certificates

I wanted to setup Burp Suite to use it as a proxy in order to debug an app that I am currently developing. Since I need to use HTTPS too, I followed this guide to install a root trusted CA certificate....
0
votes
1answer
164 views

how to solve Kerio Control's Local Authority certificate issue with mobile applications?

I'm using kerio control firewall in our company and as you know it has an option named:"Https decryption". As I want to track all of the data that users browse in the company, I have to turn it on. I ...
0
votes
0answers
16 views

Can I see who uses root certificates?

Using SigCheck I found that my pc has root certificates that are not in Microsoft "Trust list". Those certificates have all the rights and there is no information about them on the Internet. Before ...
0
votes
0answers
29 views

Root Router certificate issue

In my work we test some Chinese router and authentication server, to enterprise secure WIFI connection.This device have root certificate, that I need to install in windows mmc, before connecting, and ...
0
votes
1answer
3k views

Can't verify an openssl certificate against a self signed openssl certificate?

I am creating simple two certificates; one is a root certificate and the other one is a server certificate. The latter has the rootcert.pem and rootprivkey.pem assigned to be used in the flags -CA and ...
0
votes
1answer
255 views

How to add an intermediate certificate to existing file trusted.certs?

Can someone please help with the below query? Is there a way to add an intermediate certificate to the file trusted.certs file at C:\Windows\Sun\Java\Deployment via command prompt? The file trusted....
1
vote
0answers
71 views

How to add a CA certificate to libsoup?

I'm trying to use a small application a (Xfce Weather plugin) behind a corporate firewall. The firewall intercepts HTTPS connections and changes everything to be signed by their certificates -- to be ...
0
votes
1answer
157 views

How do you self sign a macro for Microsoft Office for a non admin user

I am trying to self sign a macro that I wrote for Outlook, and my searches lead to SelfCert.exe I ran SelfCert.exe and was able to make a self signed certificate, and inside of Outlook I was able to ...
-1
votes
2answers
5k views

How do I fix 'the SSL server certificate authority is not trusted' message in browser?

It started a few weeks ago. One of sites gives me a message NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM You attempted to reach some_web_site.org, but the server presented a certificate signed using a ...
1
vote
1answer
275 views

Automate Install of Certification Authorities in Windows 7/8/10, Google Chrome, MS Edge and Firefox

I work as an IT guy for a public federal university in Brazil. Government agencies and institutions have to deal with a lot of outdate applications and a mix of browsers to make them work. For ...
2
votes
3answers
27k views

How to make Chrome trust Windows system root CA certificate?

Our corporate machine administrators distribute corporate root CA certificates via Active Directory, but Chrome does not trust system certificates by default. Is there any way to tweak Chrome to trust ...
0
votes
1answer
122 views

New to powershell and my foreach keeps failing. Trying to iterate over a list of cert files but it fails. Probably simple

Problem: When I import a cert individually, outside of a foreach, it prints the thumbprint as needed; however, I need to iterate through a list of .cer files on a fileshare so that I can run them ...
1
vote
1answer
1k views

Install multiple .cer (certificates) from a network directory using powershell, but first check if they are already installed

I am still learning the ways of powershell, and am having difficulties solving a problem. I would like to have the following logic flow: Go out to \fileserver\certs and pull all thumbprints for each ...
1
vote
1answer
601 views

Making a ssl connection with only root CA in the trust store

I have a SSL client/server application. My SSL client has only one root certificate authority (lets call it rootCA1) configured in its trust store. However my ssl server produces a certificate that is ...
0
votes
0answers
117 views

Trusting Certificate on iOS

I am working on a proxy implementation for handling traffic from a set of iOS devices. I have full access to the devices to install my proxy's root certificate on the device and add it as trusted, as ...
1
vote
1answer
331 views

How to export apache ssl certificate to windows

I have configured a web server using ubunto and apache. I use it for local testing so I installed self-signed snake-oil certificate. I want to export the snake-oil certificate and add it to my testing ...
1
vote
1answer
478 views

GlobalSign R1 not in default trust on CentOS. Why?

It seems GlobalSign's R1 root certificate is not in the default trust CA in CentOS 7.3. I check the list of Trusted CA's like this: awk -v cmd='openssl x509 -noout -subject' ' /BEGIN/{close(cmd)...
0
votes
0answers
850 views

Website’s security certificate issue with IE on Windows10

On one of my PC, whenever I open a website with HTTPS, it shows the error message "There is a problem with this website’s security certificate." IE 11 on 64Bit Windows 10 Enterprise. I have already ...
0
votes
1answer
155 views

OpenSSL: Verify certificate with CSCA file only works on PEM encoded files

I want to use the verify command on the commandline to verify a certificate using a CSCA file. This is my call with successful result: openssl verify -verbose -CAfile CSCA_Certificate.pem cert.pem ...
0
votes
1answer
1k views

Firefox reports SEC_ERROR_CA_CERT_INVALID after changing web site certificate

I have a server running on my internal network. For SSL support, I have set up an internal CA (using OpenSSL) and issued a certificate for the server. The certificate chain is as follows: Example ...
0
votes
1answer
386 views

Secure connection failed using Firefox, Win7 and Eset Smart Security

I have problems connecting to https websites with Firefox. I am not sure what causes the problem. Usually I got secure connection failed, SEC_ERROR_UNKNOWN_ISSUER and similar messages even by a simple ...
0
votes
2answers
738 views

SSL Error - Cannot Browse an HTTPS Address

In one of my computers I can not browse https://www.stackoverflow.com and both chrome and IE show SSL error page to me, while on the other computer I can successfully browse the site. The strange ...
6
votes
3answers
33k views

Can't make Chrome to trust my certificate

I am serving web pages inside LAN with my own certificate, signed by my own CA. Chrome warns connection is not trusted with the following details: I am trying to add inthemoon-ca to Trusted Root ...
2
votes
1answer
3k views

Import root certificate in Synology

I am looking for a way to import a root certificate in a synology server (the certificate comes from a ssl intercepting proxy). I have copied the certificate to /usr/share/ca-certificates/<...
1
vote
0answers
3k views

Trust root or leaf certificate in 802.1x setup?

I am setting up 802.1x via wired or wireless (WPA2 Enterprise) connections in our office, backed by a OneLogin RADIUS server. The certificate is not self-signed, so it's not clear to me whether it's ...
2
votes
1answer
129 views

How is Avast auto-inserting a signature into my browser based email?

I recently upgraded Avast and I just noticed it is inserting signatures into my webmail. i.e. in a browser, i type an email, see my regular signature, but when the email goes out, it appends it's own ...
0
votes
1answer
2k views

SSL: Can't convert DER to PEM

I'm working with ssl certificates and trying to convert myCA.cer to myCA.pem... $ openssl x509 -in myCA.crt -inform der -outform pem -out myCA.cer.pem unable to load certificate 65927:error:0D0680A8:...
4
votes
2answers
139 views

Could merely visiting a web site push a root CA as trusted onto my PC?

This is a follow-up question to this other question, which is about Google decision to start distrusting a specific Symantec Root CA certificate. Microsoft on another hand has not made (yet) any ...
2
votes
1answer
5k views

VeriSign Universal Root Certification Authority missing

I'm attempting to visit https://www.duluthtrading.com/, and I'm receiving an untrusted certificate error on Windows 7. This happens in both IE and Chrome (as both use the Windows certificate store). ...
1
vote
2answers
6k views

Firefox developer edition insecure connection all the time

Just installed FDE at my work, but I get the following message when trying to visit youtube.com, google.com and sites: Your connection is not secure The owner of www.youtube.com has ...
1
vote
1answer
2k views

Find and delete duplicate root certificates

We are in a disconnected domain and have just implemented updated root certificates via group policy. I have found now though, that there are a number of duplicated root certificates in the users ...
15
votes
1answer
65k views

Where are digital certificates physically stored on a Mac OS X machine?

Can someone tell me and maybe link to literature which describes it, where are the digital certificates storage location on Mac OS X? I know I could access the certificates with the “Keychain” ...
1
vote
0answers
1k views

How do you export the root trust certificate for a site, in Chrome on OS X?

I visit some site in Chrome, and get the lock icon; clicking it, then "Connection", then "Certificate Information" brings up a dialog with several certs listed, the first of which is the root of trust ...
3
votes
0answers
2k views

Using Fiddler to sniff HTTPS requests of any process (Proxifier)

As far as I understand Fiddler, it simply listens on localhost:8888 and changes the windows proxy settings to exactly that. So that every application that connects using that proxy sends the data ...
0
votes
0answers
84 views

What is the use of validating certificate in Adobe Reader

I've received a PDF which is digitally signed and they provided a guideline to validate the signature. I have done those steps, the signature shows as valid. I saved it as a copy and sent it back to ...
2
votes
0answers
34 views

How to instruct SVN print its CA list?

This is related to What does Subversion use for its CA list?. I want to have SVN tell me the CAs its using. svn help does not appear to discuss it (but I may have missed it, since its not obvious in ...
0
votes
1answer
4k views

Windows 8.1 certificate problems: IE can't open google

I'm on Win8.1 and it appears I'm having problems with certificates. Date/Time is ok (and updates at microsoft)! I removed AVG 2015 (which I installed this week, and the problems started). Symptoms: ...
0
votes
1answer
3k views

How is a trusted root certificate appearing in my trusted roots list?

Google is in the process of removing CNNIC as a trusted root. I wanted to make sure i don't have them in my certificate store anyway. So i check certmgr.msc, and look for them. They are neither in my:...
5
votes
2answers
15k views

Why is the local certificate store missing in Windows 8.1?

I am trying to import a self-signed certificate into the local certificate store of the Trusted Root CAs on my Windows 8.1 machine, but that store is missing. Importing it into the Trusted Root CAs ...
0
votes
1answer
128 views

Adding cert to trusted certs

I'm trying to access a web service from a certain website. Since this is a service I can't just click somewhere "go to this site anyway". I just get an endpoint exception in my code. I downloaded ...
0
votes
0answers
195 views

Windows keeps restoring DigitCert root certificates

I issued a SSL certificate trought DigiCert which we know is globally recognized and its Trusted Roots should be by default in Windows installations. However on one of my client's machine there was ...
2
votes
1answer
652 views

How do I get firefox to use the windows CA cache

How can I import the windows CA (Certificate Authority) cache/list into firefox or get firefox to use it?
0
votes
1answer
60 views

Where should I save a root certificate in Windows 7?

I think I have uninstalled a programme in error and now get certificate errors whenever I try to visit a website (such as google) on the laptop. I have researched and it appears I need to download a ...
0
votes
2answers
1k views

Root certificate authority works windows/linux but not mac osx - (malformed)

I have created a self-signed root certificate authority which if I install onto windows, linux, or even using the certificate store in firefox (windows/linux/macosx) will work perfectly with my ...