6
votes
How to remove Bitdefender root certificate from Firefox/Thunderbird/Chrome
This is a copy/paste from my post on reddit (https://www.reddit.com/r/BitDefender/comments/7bxixp/install_bitdefender_root_certificate_popup/)
How to get rid of Bitdefender Free edition certificate ...
5
votes
Accepted
Debug CA certificates issue - DigiCert GlobalRoot CA
If the message from the Qualys SSL Server Test is that the certificate chain is incomplete, then these systems are misconfigured. When sending a certificate chain, you must send each certificate ...
- 2,111
4
votes
OpenSSL ca fails after password without error message
openssl may be thinking your index.txt file is "corrupt". This same behavior happened to me when I was resetting my file with echo '' > index.txt while scripting some things out. Simply removing ...
- 161
3
votes
Accepted
Remove all certificate authorities from a Firefox profile
Is there a way to remove all CA certificates in Firefox?
Firefox uses Mozilla's NSS libraries for security related features like TLS. NSS has it's own builtin CA store, which is used by Firefox to ...
- 1,416
3
votes
Creating SSH Certificates for SFTP using a CA
CAs sign the public key (producing a certificate). They never see the signee's private key.
Besides that, the workflow seems correct, except for the WinSCP part.
The certificates used by ...
- 376k
3
votes
How to skip "Select Certification Authority" dialog with PowerShell scripting?
I've got this error with this command:
"Certificate Request Processor: The directory name is invalid. 0x8007010b (WIN32/HTTP: 267)"
to make it work I do it like this:
certreq -submit -config ca1....
- 31
2
votes
Small live-cd image with openssl support
Have you looked at Alpine? The standard edition (which which does not include OpenSSL, but allows it to be installed trivially with apk add openssl) is roughly 110MB for 64-bit x86, and the extended ...
- 7,914
2
votes
Accepted
Go Daddy's intermediate CA certificate missing
A server providing a TLS/SSL connection (as in a HTTPS web-server) should send the client all certificates in the chain. That is, the end-entity certificate, all subordinate CAs and optionally (but ...
- 3,480
2
votes
Accepted
GPG beginner: how to decide if I trust sks-keyservers.net
Can we say "of course" as there is - in fact should be - no one else in a higher hierarchy level than a CA?
No, of course not. If that were the only issue, Firefox wouldn't even ask – the certificate ...
- 376k
1
vote
Accepted
Can stunnel use the OS's certifificate store?
Linux has no single "built-in" TLS library like SChannel on Windows, it has several, and as a result it has several "OS certificate stores" too – OpenSSL uses one format (well, two)...
- 376k
1
vote
Adding self-signed certificate into Trusted CA on Chromium for Linux
I'm using Chromium on a Pi with Debian, so similar. I added my local controlled CA server to the Linux OS (/usr/local/share/ca-certificates/ and run update-ca-certificates) and that works great with ...
- 23
1
vote
Paginate results of certutil -view
The easiest way is to pipe Out-Host -Paging. This will let you advance with space bar one page at a time.
certutil -restrict 'Disposition=20' -out 'Binary Certificate' -view | Out-Host -Paging
You can ...
- 2,911
1
vote
Accepted
PKI certs hierarchy
HTTP server must has chain of domain and intermediate as chain of server side certificate.
cat certs/intermediate/certs/domain.cert.pem \
certs/intermediate/certs/intermediate.cert.pem > ...
- 929
1
vote
Wondering about something regarding intermediate certificates and Weechat
Of course, shortly after posting the question, I found the answer. I'm still keeping it here so others can learn from this.
The answer was that the .pem file that I added to weechat did have the two ...
- 141
1
vote
Accepted
How to skip "Select Certification Authority" dialog with PowerShell scripting?
Please try the -config option.
From the CertReq page.
"Processes the operation by using the CA specified in the configuration string, which is CAHostName\CAName. For an https connection, specify the ...
- 331
Only top scored, non community-wiki answers of a minimum length are eligible