Questions tagged [trusted-root-certificates]

Trusted root certificates are used by a computer or device for secure communications and file/program authentication.

Filter by
Sorted by
Tagged with
0 votes
1 answer
40 views

curl error 77 when non-root user

On RHEL if I run curl as a regular user I get an error: > curl -Sv https://example.com * About to connect() to example.com port 443 (#0) * Trying 93.184.216.34... * Connected to example.com (93....
user avatar
  • 292
0 votes
0 answers
79 views

Deleted root certificats reappear automatically

I'm trying to delete root certificates but they reappear automatically. This is what I do: I delete the hightlighted certificates (see picture below) in both the current user's certtificate store and ...
user avatar
0 votes
0 answers
21 views

How do you script the install of a trusted CA to chromium-based browser for all users?

I need to set up Brave to trust a few internal CAs for all users on multiple machines. All of the browsers are on Mint Linux 20 and running the Brave PPA so they running a recent version Brave. I'm ...
user avatar
0 votes
0 answers
30 views

How to manually update windows certificates store? [duplicate]

I wanted to connect uTorrent to this tracker : desitorrents.tv , but it seems there is a problem with verifying the website certificate when uTorrent tries to connect to that website ( i guess ...
user avatar
  • 11
0 votes
1 answer
23 views

Remove trust from built app package file once added to windows trusted app

I created package of an app I developed. When running the built app it was blocked by windows. So I checked the Unblock from the properties as show in the below image. But Now I want to remove it ...
user avatar
0 votes
0 answers
55 views

Self signed legacy driver failing to load (Secure Boot Off)

The Problem I'm working on making a legacy driver from Windows 8.1 x64 compatible with Windows 10 x64, which required some tinkering with the driver's files. As such, this invalidated the original ...
user avatar
  • 1
0 votes
0 answers
73 views

Strange error message when signing a file with a certificate

I am authenticating some files to be put in a download area, and I sign them with a purchased certificate, using the SignTool utility (Windows). I also timestamp it, using DigiCert. The file is ...
user avatar
1 vote
0 answers
147 views

Access HP Switch Web-UI in HTTPS Admin Mode

On my HP 1820 G24 Switch, I set Secure HTTP Configuration (enabled HTTPS Admin Mode). For that, the Switch generated its own SSL certificate. So far so good. -- When I try to access the Web-UI in ...
user avatar
  • 191
9 votes
1 answer
14k views

DST Root CA X3 expiration on Windows7. Which update I need to install? Are there workarounds?

I'm on Windows 7 SP1 and today, September 30, I faced with the expiration of DST Root CA X3 certificate. The problem (which will probably affect millions of users) is perfectly described here: https://...
user avatar
  • 833
0 votes
0 answers
36 views

Client certificate invalid because root certificate has been revoked

We face a strange problem where the issuing root-CA certificate of a client certificate appears to be revoked. This is not true (Root CA is Swiss Government Root CA II, serial number ...
user avatar
  • 1
0 votes
1 answer
41 views

How the SSL/TLS CA certificate will update in my device if it is renewed from server maintainer?

How the SSL/TLS CA certificate will update if it renewed from website maintainer. Actually Rooot CA certificate expiry for 1 or 2 years, after that server maintainer should go to certificate Authority ...
user avatar
0 votes
1 answer
1k views

Chrome still displays website as "not secure" despite Root-Ca being added to trusted certificates?

I have a very simple Apache 2 server which hosts a website. I wanted to add the secure HTTPS protocol and created a certificate chain using this tutorial: https://jamielinux.com/docs/openssl-...
user avatar
  • 13
-1 votes
3 answers
78 views

Who can sign my certificate authority?

I am new to the certificate business and from what I understand if a root certificate is installed in Windows 10, any certificates that are signed by that root, they are automatically trusted. So this ...
user avatar
0 votes
1 answer
109 views

Why are these GlobalSign root certificates different and how to import them from the command line?

I'm writing a script that automates adding the latest GlobalSign certificates as found here: https://support.globalsign.com/ca-certificates/root-certificates/globalsign-root-certificates I was able to ...
user avatar
  • 756
0 votes
1 answer
2k views

Import certificate to Trusted Root Authorities for the Current User, with command line

I know how to import certificates to trusted root authorities with certutil certutil -addstore "Root" <cert_path> But for this I need administrator permissions. Though when I double ...
user avatar
0 votes
0 answers
76 views

Windows EAP-TLS verify server identity with incomplete trust

I've got a home network configured with a RADIUS server that only handles EAP-TLS authentication, and I'm attempting to get this scheme to work well on Windows. Everything works great, but in order to ...
user avatar
  • 197
-1 votes
3 answers
446 views

SSL handshake keeps failing even after adding certificates to local truststore Ubuntu VM

When executing wget https://docs.conda.io/projects/conda/en/4.6.0/_downloads/52a95608c49671267e40c689e0bc00ca/conda-cheatsheet.pdf I have this error: --2020-06-03 20:55:06-- https://docs.conda.io/...
user avatar
  • 49
0 votes
1 answer
2k views

Connect with openssl to google server but unable to get local issuer certificate. Why?

Trying to connect to imap.google.com:993 with openssl. 1) downloaded CAfile in encoded DER format from https://pki.goog/ . The file called GTS Root R1 2) converted this file into PEM format ...
user avatar
2 votes
0 answers
58 views

How can I find out how many devices support a given certificate? [closed]

We regularly renew the SSL certificate for our web service. With our most recent certificate renewal, we discovered that some legacy/EOL devices (e.g. running Android KitKat) could not access our ...
user avatar
  • 1,310
0 votes
0 answers
17 views

Renewed RootCA doesn't verify child certs

So i have a self signed rootCA which is expiring soon, so i created a new csr with updated info about the cert and company but im still using the same private key. I create the new rootCA and install ...
user avatar
0 votes
1 answer
650 views

Install certificates on Wyse thin client (Windows 10 IoT)

We have a few Dell Wyse 5070 thin clients in our estate with no central management. They're running a version of Windows 10 IoT and appear to be mostly non-persistent. Any changes I make to the ...
user avatar
0 votes
1 answer
203 views

Can I Use My OpenSSL CA to Sign My OpenVPN Certificates?

I'm not sure if it sounds like a stupid question but all the guides I've looked at when it comes to making certificates for OpenVPN all use Easy-RSA. Some of my servers such as my NAS, and ...
user avatar
0 votes
0 answers
351 views

Missing Android trusted certificates

I wanted to setup Burp Suite to use it as a proxy in order to debug an app that I am currently developing. Since I need to use HTTPS too, I followed this guide to install a root trusted CA certificate....
user avatar
0 votes
1 answer
350 views

how to solve Kerio Control's Local Authority certificate issue with mobile applications?

I'm using kerio control firewall in our company and as you know it has an option named:"Https decryption". As I want to track all of the data that users browse in the company, I have to turn it on. I ...
user avatar
  • 3
0 votes
0 answers
42 views

Root Router certificate issue

In my work we test some Chinese router and authentication server, to enterprise secure WIFI connection.This device have root certificate, that I need to install in windows mmc, before connecting, and ...
user avatar
2 votes
1 answer
12k views

Can't verify an openssl certificate against a self signed openssl certificate?

I am creating simple two certificates; one is a root certificate and the other one is a server certificate. The latter has the rootcert.pem and rootprivkey.pem assigned to be used in the flags -CA and ...
user avatar
  • 123
0 votes
1 answer
1k views

How to add an intermediate certificate to existing file trusted.certs?

Can someone please help with the below query? Is there a way to add an intermediate certificate to the file trusted.certs file at C:\Windows\Sun\Java\Deployment via command prompt? The file trusted....
user avatar
  • 113
1 vote
0 answers
132 views

How to add a CA certificate to libsoup?

I'm trying to use a small application a (Xfce Weather plugin) behind a corporate firewall. The firewall intercepts HTTPS connections and changes everything to be signed by their certificates -- to be ...
user avatar
0 votes
1 answer
267 views

How do you self sign a macro for Microsoft Office for a non admin user

I am trying to self sign a macro that I wrote for Outlook, and my searches lead to SelfCert.exe I ran SelfCert.exe and was able to make a self signed certificate, and inside of Outlook I was able to ...
user avatar
-1 votes
2 answers
8k views

How do I fix 'the SSL server certificate authority is not trusted' message in browser?

It started a few weeks ago. One of sites gives me a message NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM You attempted to reach some_web_site.org, but the server presented a certificate signed using a ...
user avatar
  • 1,939
1 vote
1 answer
499 views

Automate Install of Certification Authorities in Windows 7/8/10, Google Chrome, MS Edge and Firefox

I work as an IT guy for a public federal university in Brazil. Government agencies and institutions have to deal with a lot of outdate applications and a mix of browsers to make them work. For ...
user avatar
  • 239
10 votes
3 answers
47k views

How to make Chrome trust Windows system root CA certificate?

Our corporate machine administrators distribute corporate root CA certificates via Active Directory, but Chrome does not trust system certificates by default. Is there any way to tweak Chrome to trust ...
user avatar
0 votes
1 answer
243 views

New to powershell and my foreach keeps failing. Trying to iterate over a list of cert files but it fails. Probably simple

Problem: When I import a cert individually, outside of a foreach, it prints the thumbprint as needed; however, I need to iterate through a list of .cer files on a fileshare so that I can run them ...
user avatar
  • 151
1 vote
1 answer
1k views

Install multiple .cer (certificates) from a network directory using powershell, but first check if they are already installed

I am still learning the ways of powershell, and am having difficulties solving a problem. I would like to have the following logic flow: Go out to \fileserver\certs and pull all thumbprints for each ...
user avatar
  • 151
1 vote
1 answer
1k views

Making a ssl connection with only root CA in the trust store

I have a SSL client/server application. My SSL client has only one root certificate authority (lets call it rootCA1) configured in its trust store. However my ssl server produces a certificate that is ...
user avatar
1 vote
1 answer
539 views

How to export apache ssl certificate to windows

I have configured a web server using ubunto and apache. I use it for local testing so I installed self-signed snake-oil certificate. I want to export the snake-oil certificate and add it to my testing ...
user avatar
1 vote
1 answer
598 views

GlobalSign R1 not in default trust on CentOS. Why?

It seems GlobalSign's R1 root certificate is not in the default trust CA in CentOS 7.3. I check the list of Trusted CA's like this: awk -v cmd='openssl x509 -noout -subject' ' /BEGIN/{close(cmd)...
user avatar
0 votes
0 answers
874 views

Website’s security certificate issue with IE on Windows10

On one of my PC, whenever I open a website with HTTPS, it shows the error message "There is a problem with this website’s security certificate." IE 11 on 64Bit Windows 10 Enterprise. I have already ...
user avatar
  • 85
0 votes
1 answer
203 views

OpenSSL: Verify certificate with CSCA file only works on PEM encoded files

I want to use the verify command on the commandline to verify a certificate using a CSCA file. This is my call with successful result: openssl verify -verbose -CAfile CSCA_Certificate.pem cert.pem ...
user avatar
  • 454
0 votes
1 answer
2k views

Firefox reports SEC_ERROR_CA_CERT_INVALID after changing web site certificate

I have a server running on my internal network. For SSL support, I have set up an internal CA (using OpenSSL) and issued a certificate for the server. The certificate chain is as follows: Example ...
user avatar
0 votes
1 answer
415 views

Secure connection failed using Firefox, Win7 and Eset Smart Security

I have problems connecting to https websites with Firefox. I am not sure what causes the problem. Usually I got secure connection failed, SEC_ERROR_UNKNOWN_ISSUER and similar messages even by a simple ...
user avatar
  • 1,050
0 votes
2 answers
835 views

SSL Error - Cannot Browse an HTTPS Address

In one of my computers I can not browse https://www.stackoverflow.com and both chrome and IE show SSL error page to me, while on the other computer I can successfully browse the site. The strange ...
user avatar
7 votes
3 answers
36k views

Can't make Chrome to trust my certificate

I am serving web pages inside LAN with my own certificate, signed by my own CA. Chrome warns connection is not trusted with the following details: I am trying to add inthemoon-ca to Trusted Root ...
user avatar
  • 11.3k
4 votes
1 answer
6k views

Import root certificate in Synology

I am looking for a way to import a root certificate in a synology server (the certificate comes from a ssl intercepting proxy). I have copied the certificate to /usr/share/ca-certificates/<...
user avatar
  • 431
1 vote
0 answers
4k views

Trust root or leaf certificate in 802.1x setup?

I am setting up 802.1x via wired or wireless (WPA2 Enterprise) connections in our office, backed by a OneLogin RADIUS server. The certificate is not self-signed, so it's not clear to me whether it's ...
user avatar
  • 157
2 votes
1 answer
137 views

How is Avast auto-inserting a signature into my browser based email?

I recently upgraded Avast and I just noticed it is inserting signatures into my webmail. i.e. in a browser, i type an email, see my regular signature, but when the email goes out, it appends it's own ...
user avatar
  • 963
0 votes
1 answer
3k views

SSL: Can't convert DER to PEM

I'm working with ssl certificates and trying to convert myCA.cer to myCA.pem... $ openssl x509 -in myCA.crt -inform der -outform pem -out myCA.cer.pem unable to load certificate 65927:error:0D0680A8:...
user avatar
  • 1,998
4 votes
2 answers
180 views

Could merely visiting a web site push a root CA as trusted onto my PC?

This is a follow-up question to this other question, which is about Google decision to start distrusting a specific Symantec Root CA certificate. Microsoft on another hand has not made (yet) any ...
user avatar
2 votes
1 answer
7k views

VeriSign Universal Root Certification Authority missing

I'm attempting to visit https://www.duluthtrading.com/, and I'm receiving an untrusted certificate error on Windows 7. This happens in both IE and Chrome (as both use the Windows certificate store). ...
user avatar
1 vote
2 answers
6k views

Firefox developer edition insecure connection all the time

Just installed FDE at my work, but I get the following message when trying to visit youtube.com, google.com and sites: Your connection is not secure The owner of www.youtube.com has ...
user avatar