Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [trusted-root-certificates]

Trusted root certificates are used by a computer or device for secure communications and file/program authentication.

-1
votes
2answers
129 views

How do I fix 'the SSL server certificate authority is not trusted' message in browser?

It started a few weeks ago. One of sites gives me a message NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM You attempted to reach some_web_site.org, but the server presented a certificate signed using a ...
1
vote
0answers
80 views

Automate Install of Certification Authorities in Windows 7/8/10, Google Chrome, MS Edge and Firefox

I work as an IT guy for a public federal university in Brazil. Government agencies and institutions have to deal with a lot of outdate applications and a mix of browsers to make them work. For ...
0
votes
0answers
227 views

How can I specify a server certificate for 802.1x PEAP without installing it as a trusted CA?

My workplace has deployed 802.1x authentication for our Ethernet ports. I want to know I'm authenticating against the real RADIUS server and not a rogue server. The usual way to do this is to install ...
0
votes
2answers
5k views

How to make Chrome trust Windows system root CA certificate?

Our corporate machine administrators distribute corporate root CA certificates via Active Directory, but Chrome does not trust system certificates by default. Is there any way to tweak Chrome to trust ...
0
votes
1answer
67 views

New to powershell and my foreach keeps failing. Trying to iterate over a list of cert files but it fails. Probably simple

Problem: When I import a cert individually, outside of a foreach, it prints the thumbprint as needed; however, I need to iterate through a list of .cer files on a fileshare so that I can run them ...
1
vote
1answer
439 views

Install multiple .cer (certificates) from a network directory using powershell, but first check if they are already installed

I am still learning the ways of powershell, and am having difficulties solving a problem. I would like to have the following logic flow: Go out to \fileserver\certs and pull all thumbprints for each ...
0
votes
0answers
66 views

Dropbox failes iwth ValueError: Empty certificate data

I recently had some issues on my Windows 10 system where a number of SSL Certificates were removed. Dropbox now fails to run or re-install with the following error: dropbox: initializing dropbox: ...
0
votes
0answers
379 views

win10 reinstall\restore all default ssl certificates

Virus or software with a bug Delete all / some of the certificates wich come by default with win10 OS. How can I restore the situation easily? I did not find a way to export / import from another ...
0
votes
0answers
26 views

On User Space sign verification for Secure Boot

I have an x86 UEFI enabled machine. this has a certified shim, grub etc. Using secure boot feature and a custom kernel, I created my public/private key pair signed the kernel and updated MOKDB to ...
0
votes
1answer
296 views

Making a ssl connection with only root CA in the trust store

I have a SSL client/server application. My SSL client has only one root certificate authority (lets call it rootCA1) configured in its trust store. However my ssl server produces a certificate that is ...
0
votes
0answers
51 views

Trusting Certificate on iOS

I am working on a proxy implementation for handling traffic from a set of iOS devices. I have full access to the devices to install my proxy's root certificate on the device and add it as trusted, as ...
1
vote
1answer
167 views

How to export apache ssl certificate to windows

I have configured a web server using ubunto and apache. I use it for local testing so I installed self-signed snake-oil certificate. I want to export the snake-oil certificate and add it to my testing ...
0
votes
1answer
175 views

GlobalSign R1 not in default trust on CentOS. Why?

It seems GlobalSign's R1 root certificate is not in the default trust CA in CentOS 7.3. I check the list of Trusted CA's like this: awk -v cmd='openssl x509 -noout -subject' ' /BEGIN/{close(cmd)...
0
votes
0answers
586 views

Website’s security certificate issue with IE on Windows10

On one of my PC, whenever I open a website with HTTPS, it shows the error message "There is a problem with this website’s security certificate." IE 11 on 64Bit Windows 10 Enterprise. I have already ...
0
votes
1answer
68 views

OpenSSL: Verify certificate with CSCA file only works on PEM encoded files

I want to use the verify command on the commandline to verify a certificate using a CSCA file. This is my call with successful result: openssl verify -verbose -CAfile CSCA_Certificate.pem cert.pem ...
0
votes
1answer
654 views

Firefox reports SEC_ERROR_CA_CERT_INVALID after changing web site certificate

I have a server running on my internal network. For SSL support, I have set up an internal CA (using OpenSSL) and issued a certificate for the server. The certificate chain is as follows: Example ...
0
votes
1answer
321 views

Secure connection failed using Firefox, Win7 and Eset Smart Security

I have problems connecting to https websites with Firefox. I am not sure what causes the problem. Usually I got secure connection failed, SEC_ERROR_UNKNOWN_ISSUER and similar messages even by a simple ...
0
votes
2answers
429 views

SSL Error - Cannot Browse an HTTPS Address

In one of my computers I can not browse https://www.stackoverflow.com and both chrome and IE show SSL error page to me, while on the other computer I can successfully browse the site. The strange ...
4
votes
3answers
22k views

Can't make Chrome to trust my certificate

I am serving web pages inside LAN with my own certificate, signed by my own CA. Chrome warns connection is not trusted with the following details: I am trying to add inthemoon-ca to Trusted Root ...
1
vote
1answer
1k views

Import root certificate in Synology

I am looking for a way to import a root certificate in a synology server (the certificate comes from a ssl intercepting proxy). I have copied the certificate to /usr/share/ca-certificates/<...
1
vote
0answers
3k views

Trust root or leaf certificate in 802.1x setup?

I am setting up 802.1x via wired or wireless (WPA2 Enterprise) connections in our office, backed by a OneLogin RADIUS server. The certificate is not self-signed, so it's not clear to me whether it's ...
2
votes
1answer
113 views

How is Avast auto-inserting a signature into my browser based email?

I recently upgraded Avast and I just noticed it is inserting signatures into my webmail. i.e. in a browser, i type an email, see my regular signature, but when the email goes out, it appends it's own ...
0
votes
1answer
970 views

SSL: Can't convert DER to PEM

I'm working with ssl certificates and trying to convert myCA.cer to myCA.pem... $ openssl x509 -in myCA.crt -inform der -outform pem -out myCA.cer.pem unable to load certificate 65927:error:0D0680A8:...
4
votes
2answers
111 views

Could merely visiting a web site push a root CA as trusted onto my PC?

This is a follow-up question to this other question, which is about Google decision to start distrusting a specific Symantec Root CA certificate. Microsoft on another hand has not made (yet) any ...
2
votes
1answer
4k views

VeriSign Universal Root Certification Authority missing

I'm attempting to visit https://www.duluthtrading.com/, and I'm receiving an untrusted certificate error on Windows 7. This happens in both IE and Chrome (as both use the Windows certificate store). ...
1
vote
2answers
6k views

Firefox developer edition insecure connection all the time

Just installed FDE at my work, but i get the following message when trying to visit youtube.com, google.com and sites: Your connection is not secure The owner of www.youtube.com has configured ...
1
vote
1answer
1k views

Find and delete duplicate root certificates

We are in a disconnected domain and have just implemented updated root certificates via group policy. I have found now though, that there are a number of duplicated root certificates in the users ...
11
votes
1answer
40k views

Where are digital certificates physically stored on a Mac OS X machine?

Can someone tell me and maybe link to literature which describes it, where are the digital certificates storage location on Mac OS X? I know I could access the certificates with the “Keychain” ...
1
vote
0answers
980 views

How do you export the root trust certificate for a site, in Chrome on OS X?

I visit some site in Chrome, and get the lock icon; clicking it, then "Connection", then "Certificate Information" brings up a dialog with several certs listed, the first of which is the root of trust ...
2
votes
0answers
1k views

Using Fiddler to sniff HTTPS requests of any process (Proxifier)

As far as I understand Fiddler, it simply listens on localhost:8888 and changes the windows proxy settings to exactly that. So that every application that connects using that proxy sends the data ...
0
votes
0answers
81 views

What is the use of validating certificate in Adobe Reader

I've received a PDF which is digitally signed and they provided a guideline to validate the signature. I have done those steps, the signature shows as valid. I saved it as a copy and sent it back to ...
2
votes
0answers
28 views

How to instruct SVN print its CA list?

This is related to What does Subversion use for its CA list?. I want to have SVN tell me the CAs its using. svn help does not appear to discuss it (but I may have missed it, since its not obvious in ...
0
votes
1answer
4k views

Windows 8.1 certificate problems: IE can't open google

I'm on Win8.1 and it appears I'm having problems with certificates. Date/Time is ok (and updates at microsoft)! I removed AVG 2015 (which I installed this week, and the problems started). Symptoms: ...
0
votes
1answer
3k views

How is a trusted root certificate appearing in my trusted roots list?

Google is in the process of removing CNNIC as a trusted root. I wanted to make sure i don't have them in my certificate store anyway. So i check certmgr.msc, and look for them. They are neither in my:...
5
votes
2answers
13k views

Why is the local certificate store missing in Windows 8.1?

I am trying to import a self-signed certificate into the local certificate store of the Trusted Root CAs on my Windows 8.1 machine, but that store is missing. Importing it into the Trusted Root CAs ...
0
votes
1answer
94 views

Adding cert to trusted certs

I'm trying to access a web service from a certain website. Since this is a service I can't just click somewhere "go to this site anyway". I just get an endpoint exception in my code. I downloaded ...
0
votes
0answers
167 views

Windows keeps restoring DigitCert root certificates

I issued a SSL certificate trought DigiCert which we know is globally recognized and its Trusted Roots should be by default in Windows installations. However on one of my client's machine there was ...
2
votes
1answer
634 views

How do I get firefox to use the windows CA cache

How can I import the windows CA (Certificate Authority) cache/list into firefox or get firefox to use it?
0
votes
1answer
49 views

Where should I save a root certificate in Windows 7?

I think I have uninstalled a programme in error and now get certificate errors whenever I try to visit a website (such as google) on the laptop. I have researched and it appears I need to download a ...
0
votes
2answers
734 views

Root certificate authority works windows/linux but not mac osx - (malformed)

I have created a self-signed root certificate authority which if I install onto windows, linux, or even using the certificate store in firefox (windows/linux/macosx) will work perfectly with my ...
0
votes
1answer
333 views

How to install a certificate automatically

I would like to know how to generate a certificate and make it to be imported automatically to all main browser (chrome, firefox, ie etc...). Should I upload this certificate to a public CA or ...
1
vote
0answers
117 views

Is there a way to quickly disable all root certificates in Windows 7?

I'd like to temporarily disable all trusted root certificates and wondering if there is a quicker way than going through every single one of them, right-click Properties and selecting "Disable all ...
0
votes
1answer
249 views

How to install a DER binary encoded, GOST R 34.10-2001 root certificate (.crt) on Mac?

I would like to install this certificate on my Mac running OSX 10.9.1. I've downloaded it, but when I double click, keychain is opened and that is it. Can not install it with command line also: ...
3
votes
1answer
4k views

Incorrect Authority Key Identifier on openssl end cert

I'm getting interesting results when signing an end-server certificate using an intermediate CA using openssl. I have a Root CA which looks like this: Serial Number: 14296918985177649921 (...
0
votes
1answer
341 views

SBS2008 Remoteapp certificate not trusted, tried everything

I imported the SBS2008 server certificate to the client from where I want to connect. This worked, and I have added it to the trust root map. However the error still appears saying that the ...
25
votes
3answers
107k views

View / install certificates for local machine store on Windows 7

On Windows 7 (Windows 7 Professional x64), how can I view and install certificates in the local machine store? The certmgr.msc plugin allows me to view certificates installed in the current ...
5
votes
3answers
8k views

Deploy root certificate to Firefox on Mac OS X

I want to know how to deploy a root certificates for the Firefox on Mac OS X. I've found some solutions to do it on Windows and it works like a charm. Now I want to do the same on Mac OS X. we have ...
0
votes
1answer
169 views

Should I let JungleDisk replace my /Library/Preferences/cacert.pem?

About a week ago JungleDisk Desktop backup started warning it couldn't upload a "database" file (that it uses for speed), and was falling back to a regular upload, which succeeds. Example message: ...
66
votes
12answers
49k views

Why won't OS X trust GitHub's SSL certificate?

When I go to any github.com page in Chrome, I get a big ugly error: You attempted to reach github.com, but the server presented a certificate issued by an entity that is not trusted by your ...
0
votes
1answer
259 views

Unrecognized root certificatication authority found

I was looking at the certificates on my local PC (Win 7 64-bit) and found one in the "trusted root certification authorities" section that has the same "Issued To" and "Issued By" names (as do most of ...