Questions tagged [trusted-root-certificates]
Trusted root certificates are used by a computer or device for secure communications and file/program authentication.
94
questions
0
votes
0
answers
41
views
edge - why is opendns issuing the certificate for bing.com?
Doesn't microsoft sign their own sites? Did malware install a fake certificate?
0
votes
0
answers
41
views
Select a certificate for authentication always popping up also cuts internet
I have a Windows 11 OS with installed apps such as Office and anti-virus (Kaspersky Premium). Previously, I downloaded Adobe Acrobat (crack) because I just needed to do a one-time activity using ...
- 33
0
votes
1
answer
208
views
Missing Certificate for NVIDIA
Intro
Hello.
Two days ago, I started trying to update my NVIDIA graphics card, on my Windows 11 laptop, but GeForce Experience kept failing to update it (it kept saying "installation failed". So, I ...
- 11
0
votes
0
answers
267
views
How often is CAPI2 on Windows 10 meant to be updating third part root certificates and their properties with event 4109 and 4097?
Looking through my event logs, I came across two that seem very infrequent given their purpose:
4109- successful auto property update of third-party root certificate
4097- successful auto update of ...
- 73
1
vote
1
answer
3k
views
How to add selfsigned certificate to bundle in git-bash?
Attempting to update git on a windows machine in git-bash with git update-git-for-windows fails with a message from curl:
curl: (60) SSL certificate problem: self signed certificate in certificate ...
- 531
0
votes
1
answer
306
views
How to add a root certificate to the truststore used by openssl?
Not sure why, but the system truststore of Ubuntu and the truststore used by openssl are not the same (not mentioning Java truststores here).
I managed to add our root certificate to the system ...
- 521
0
votes
1
answer
1k
views
"Microsoft Root Certificate Authority" is revoked after updating to Windows 10. How do I fix it?
I have a Windows 7 system that I've just updated to Windows 10. After doing so, I found a ton of drivers wouldn't install, and eventually traced the issue to the root certificate "Microsoft Root ...
- 818
0
votes
1
answer
839
views
curl error 77 when non-root user
On RHEL if I run curl as a regular user I get an error:
> curl -Sv https://example.com
* About to connect() to example.com port 443 (#0)
* Trying 93.184.216.34...
* Connected to example.com (93....
- 322
0
votes
0
answers
1k
views
Deleted root certificats reappear automatically
I'm trying to delete root certificates but they reappear automatically.
This is what I do:
I delete the hightlighted certificates (see picture below) in both the current user's certtificate store and ...
- 123
0
votes
0
answers
33
views
How to manually update windows certificates store? [duplicate]
I wanted to connect uTorrent to this tracker : desitorrents.tv , but it seems there is a problem with verifying the website certificate when uTorrent tries to connect to that website ( i guess ...
- 11
0
votes
1
answer
28
views
Remove trust from built app package file once added to windows trusted app
I created package of an app I developed. When running the built app it was blocked by windows. So I checked the Unblock from the properties as show in the below image.
But Now I want to remove it ...
- 11
1
vote
0
answers
705
views
Access HP Switch Web-UI in HTTPS Admin Mode
On my HP 1820 G24 Switch, I set Secure HTTP Configuration (enabled HTTPS Admin Mode). For that, the Switch generated its own SSL certificate.
So far so good.
--
When I try to access the Web-UI in ...
- 195
10
votes
1
answer
18k
views
DST Root CA X3 expiration on Windows7. Which update I need to install? Are there workarounds?
I'm on Windows 7 SP1 and today, September 30, I faced with the expiration of DST Root CA X3 certificate.
The problem (which will probably affect millions of users) is perfectly described here: https://...
- 863
0
votes
1
answer
57
views
How the SSL/TLS CA certificate will update in my device if it is renewed from server maintainer?
How the SSL/TLS CA certificate will update if it renewed from website maintainer.
Actually Rooot CA certificate expiry for 1 or 2 years, after that server maintainer should go to certificate Authority ...
- 1
0
votes
1
answer
5k
views
Chrome still displays website as "not secure" despite Root-Ca being added to trusted certificates?
I have a very simple Apache 2 server which hosts a website. I wanted to add the secure HTTPS protocol and created a certificate chain using this tutorial: https://jamielinux.com/docs/openssl-...
- 13
-1
votes
3
answers
218
views
Who can sign my certificate authority?
I am new to the certificate business and from what I understand if a root certificate is installed in Windows 10, any certificates that are signed by that root, they are automatically trusted.
So this ...
- 99
0
votes
1
answer
303
views
Why are these GlobalSign root certificates different and how to import them from the command line?
I'm writing a script that automates adding the latest GlobalSign certificates as found here:
https://support.globalsign.com/ca-certificates/root-certificates/globalsign-root-certificates
I was able to ...
- 847
2
votes
1
answer
9k
views
Import certificate to Trusted Root Authorities for the Current User, with command line
I know how to import certificates to trusted root authorities with certutil
certutil -addstore "Root" <cert_path>
But for this I need administrator permissions. Though when I double ...
0
votes
0
answers
219
views
Windows EAP-TLS verify server identity with incomplete trust
I've got a home network configured with a RADIUS server that only handles EAP-TLS authentication, and I'm attempting to get this scheme to work well on Windows. Everything works great, but in order to ...
- 207
0
votes
3
answers
996
views
SSL handshake keeps failing even after adding certificates to local truststore Ubuntu VM
When executing
wget https://docs.conda.io/projects/conda/en/4.6.0/_downloads/52a95608c49671267e40c689e0bc00ca/conda-cheatsheet.pdf
I have this error:
--2020-06-03 20:55:06-- https://docs.conda.io/...
- 59
0
votes
1
answer
3k
views
Connect with openssl to google server but unable to get local issuer certificate. Why?
Trying to connect to imap.google.com:993 with openssl.
1) downloaded CAfile in encoded DER format from https://pki.goog/ . The file called GTS Root R1
2) converted this file into PEM format
...
2
votes
0
answers
98
views
How can I find out how many devices support a given certificate? [closed]
We regularly renew the SSL certificate for our web service. With our most recent certificate renewal, we discovered that some legacy/EOL devices (e.g. running Android KitKat) could not access our ...
- 1,422
0
votes
0
answers
20
views
Renewed RootCA doesn't verify child certs
So i have a self signed rootCA which is expiring soon, so i created a new csr with updated info about the cert and company but im still using the same private key.
I create the new rootCA and install ...
0
votes
1
answer
1k
views
Install certificates on Wyse thin client (Windows 10 IoT)
We have a few Dell Wyse 5070 thin clients in our estate with no central management. They're running a version of Windows 10 IoT and appear to be mostly non-persistent.
Any changes I make to the ...
0
votes
1
answer
358
views
Can I Use My OpenSSL CA to Sign My OpenVPN Certificates?
I'm not sure if it sounds like a stupid question but all the guides I've looked at when it comes to making certificates for OpenVPN all use Easy-RSA.
Some of my servers such as my NAS, and ...
- 59
0
votes
0
answers
517
views
Missing Android trusted certificates
I wanted to setup Burp Suite to use it as a proxy in order to debug an app that I am currently developing. Since I need to use HTTPS too, I followed this guide to install a root trusted CA certificate....
- 1
0
votes
1
answer
507
views
how to solve Kerio Control's Local Authority certificate issue with mobile applications?
I'm using kerio control firewall in our company and as you know it has an option named:"Https decryption". As I want to track all of the data that users browse in the company, I have to turn it on.
I ...
- 3
0
votes
0
answers
45
views
Root Router certificate issue
In my work we test some Chinese router and authentication server, to enterprise secure WIFI connection.This device have root certificate, that I need to install in windows mmc, before connecting, and ...
3
votes
1
answer
18k
views
Can't verify an openssl certificate against a self signed openssl certificate?
I am creating simple two certificates; one is a root certificate and the other one is a server certificate. The latter has the rootcert.pem and rootprivkey.pem assigned to be used in the flags -CA and ...
- 133
1
vote
1
answer
2k
views
How to add an intermediate certificate to existing file trusted.certs?
Can someone please help with the below query?
Is there a way to add an intermediate certificate to the file trusted.certs file at
C:\Windows\Sun\Java\Deployment via command prompt?
The file trusted....
- 123
1
vote
0
answers
186
views
How to add a CA certificate to libsoup?
I'm trying to use a small application a (Xfce Weather plugin) behind a corporate firewall. The firewall intercepts HTTPS connections and changes everything to be signed by their certificates -- to be ...
- 654
0
votes
1
answer
428
views
How do you self sign a macro for Microsoft Office for a non admin user
I am trying to self sign a macro that I wrote for Outlook, and my searches lead to SelfCert.exe
I ran SelfCert.exe and was able to make a self signed certificate, and inside of Outlook I was able to ...
- 101
-1
votes
2
answers
10k
views
How do I fix 'the SSL server certificate authority is not trusted' message in browser?
It started a few weeks ago. One of sites gives me a message
NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM
You attempted to reach some_web_site.org, but the server presented a certificate signed using a ...
- 1,949
1
vote
1
answer
598
views
Automate Install of Certification Authorities in Windows 7/8/10, Google Chrome, MS Edge and Firefox
I work as an IT guy for a public federal university in Brazil. Government agencies and institutions have to deal with a lot of outdate applications and a mix of browsers to make them work.
For ...
- 259
16
votes
3
answers
56k
views
How to make Chrome trust Windows system root CA certificate?
Our corporate machine administrators distribute corporate root CA certificates via Active Directory, but Chrome does not trust system certificates by default. Is there any way to tweak Chrome to trust ...
- 736
0
votes
1
answer
317
views
New to powershell and my foreach keeps failing. Trying to iterate over a list of cert files but it fails. Probably simple
Problem:
When I import a cert individually, outside of a foreach, it prints the thumbprint as needed; however, I need to iterate through a list of .cer files on a fileshare so that I can run them ...
- 151
1
vote
1
answer
2k
views
Install multiple .cer (certificates) from a network directory using powershell, but first check if they are already installed
I am still learning the ways of powershell, and am having difficulties solving a problem.
I would like to have the following logic flow:
Go out to \fileserver\certs and pull all thumbprints for each ...
- 151
1
vote
1
answer
1k
views
Making a ssl connection with only root CA in the trust store
I have a SSL client/server application.
My SSL client has only one root certificate authority (lets call it rootCA1) configured in its trust store.
However my ssl server produces a certificate that is ...
- 107
1
vote
1
answer
684
views
How to export apache ssl certificate to windows
I have configured a web server using ubunto and apache. I use it for local testing so I installed self-signed snake-oil certificate. I want to export the snake-oil certificate and add it to my testing ...
- 133
1
vote
1
answer
698
views
GlobalSign R1 not in default trust on CentOS. Why?
It seems GlobalSign's R1 root certificate is not in the default trust CA in CentOS 7.3.
I check the list of Trusted CA's like this:
awk -v cmd='openssl x509 -noout -subject' '
/BEGIN/{close(cmd)...
- 195
0
votes
0
answers
883
views
Website’s security certificate issue with IE on Windows10
On one of my PC, whenever I open a website with HTTPS, it shows the error message "There is a problem with this website’s security certificate."
IE 11 on 64Bit Windows 10 Enterprise.
I have already ...
- 85
0
votes
1
answer
261
views
OpenSSL: Verify certificate with CSCA file only works on PEM encoded files
I want to use the verify command on the commandline to verify a certificate using a CSCA file. This is my call with successful result:
openssl verify -verbose -CAfile CSCA_Certificate.pem cert.pem
...
- 454
1
vote
1
answer
3k
views
Firefox reports SEC_ERROR_CA_CERT_INVALID after changing web site certificate
I have a server running on my internal network. For SSL support, I have set up an internal CA (using OpenSSL) and issued a certificate for the server. The certificate chain is as follows:
Example ...
- 1,050
0
votes
1
answer
441
views
Secure connection failed using Firefox, Win7 and Eset Smart Security
I have problems connecting to https websites with Firefox. I am not sure what causes the problem. Usually I got secure connection failed, SEC_ERROR_UNKNOWN_ISSUER and similar messages even by a simple ...
- 1,115
0
votes
2
answers
909
views
SSL Error - Cannot Browse an HTTPS Address
In one of my computers I can not browse https://www.stackoverflow.com and both chrome and IE show SSL error page to me, while on the other computer I can successfully browse the site.
The strange ...
- 103
10
votes
3
answers
38k
views
Can't make Chrome to trust my certificate
I am serving web pages inside LAN with my own certificate, signed by my own CA. Chrome warns connection is not trusted with the following details:
I am trying to add inthemoon-ca to Trusted Root ...
- 12.5k
4
votes
3
answers
9k
views
How to import a root certificate into a Synology server?
I am looking for a way to import a root certificate in a Synology server (the certificate comes from a ssl intercepting proxy).
I have copied the certificate to
/usr/share/ca-certificates/<...
- 441
1
vote
0
answers
4k
views
Trust root or leaf certificate in 802.1x setup?
I am setting up 802.1x via wired or wireless (WPA2 Enterprise) connections in our office, backed by a OneLogin RADIUS server. The certificate is not self-signed, so it's not clear to me whether it's ...
- 157
2
votes
1
answer
147
views
How is Avast auto-inserting a signature into my browser based email?
I recently upgraded Avast and I just noticed it is inserting signatures into my webmail. i.e. in a browser, i type an email, see my regular signature, but when the email goes out, it appends it's own ...
- 1,053
0
votes
1
answer
7k
views
SSL: Can't convert DER to PEM
I'm working with ssl certificates and trying to convert myCA.cer to myCA.pem...
$ openssl x509 -in myCA.crt -inform der -outform pem -out myCA.cer.pem
unable to load certificate
65927:error:0D0680A8:...
- 2,097