6 votes

How to remove Bitdefender root certificate from Firefox/Thunderbird/Chrome

This is a copy/paste from my post on reddit (https://www.reddit.com/r/BitDefender/comments/7bxixp/install_bitdefender_root_certificate_popup/) How to get rid of Bitdefender Free edition certificate ...
user avatar
5 votes
Accepted

Debug CA certificates issue - DigiCert GlobalRoot CA

If the message from the Qualys SSL Server Test is that the certificate chain is incomplete, then these systems are misconfigured. When sending a certificate chain, you must send each certificate ...
user avatar
  • 2,111
4 votes

OpenSSL ca fails after password without error message

openssl may be thinking your index.txt file is "corrupt". This same behavior happened to me when I was resetting my file with echo '' > index.txt while scripting some things out. Simply removing ...
user avatar
  • 161
3 votes
Accepted

Remove all certificate authorities from a Firefox profile

Is there a way to remove all CA certificates in Firefox? Firefox uses Mozilla's NSS libraries for security related features like TLS. NSS has it's own builtin CA store, which is used by Firefox to ...
user avatar
  • 1,416
3 votes

Creating SSH Certificates for SFTP using a CA

CAs sign the public key (producing a certificate). They never see the signee's private key. Besides that, the workflow seems correct, except for the WinSCP part. The certificates used by ...
user avatar
  • 376k
3 votes

How to skip "Select Certification Authority" dialog with PowerShell scripting?

I've got this error with this command: "Certificate Request Processor: The directory name is invalid. 0x8007010b (WIN32/HTTP: 267)" to make it work I do it like this: certreq -submit -config ca1....
user avatar
2 votes

Small live-cd image with openssl support

Have you looked at Alpine? The standard edition (which which does not include OpenSSL, but allows it to be installed trivially with apk add openssl) is roughly 110MB for 64-bit x86, and the extended ...
user avatar
2 votes
Accepted

Go Daddy's intermediate CA certificate missing

A server providing a TLS/SSL connection (as in a HTTPS web-server) should send the client all certificates in the chain. That is, the end-entity certificate, all subordinate CAs and optionally (but ...
user avatar
  • 3,480
2 votes
Accepted

GPG beginner: how to decide if I trust sks-keyservers.net

Can we say "of course" as there is - in fact should be - no one else in a higher hierarchy level than a CA? No, of course not. If that were the only issue, Firefox wouldn't even ask – the certificate ...
user avatar
  • 376k
1 vote
Accepted

Can stunnel use the OS's certifificate store?

Linux has no single "built-in" TLS library like SChannel on Windows, it has several, and as a result it has several "OS certificate stores" too – OpenSSL uses one format (well, two)...
user avatar
  • 376k
1 vote

Adding self-signed certificate into Trusted CA on Chromium for Linux

I'm using Chromium on a Pi with Debian, so similar. I added my local controlled CA server to the Linux OS (/usr/local/share/ca-certificates/ and run update-ca-certificates) and that works great with ...
user avatar
1 vote

Paginate results of certutil -view

The easiest way is to pipe Out-Host -Paging. This will let you advance with space bar one page at a time. certutil -restrict 'Disposition=20' -out 'Binary Certificate' -view | Out-Host -Paging You can ...
user avatar
  • 2,911
1 vote
Accepted

PKI certs hierarchy

HTTP server must has chain of domain and intermediate as chain of server side certificate. cat certs/intermediate/certs/domain.cert.pem \ certs/intermediate/certs/intermediate.cert.pem > ...
user avatar
  • 929
1 vote

Wondering about something regarding intermediate certificates and Weechat

Of course, shortly after posting the question, I found the answer. I'm still keeping it here so others can learn from this. The answer was that the .pem file that I added to weechat did have the two ...
user avatar
  • 141
1 vote
Accepted

How to skip "Select Certification Authority" dialog with PowerShell scripting?

Please try the -config option. From the CertReq page. "Processes the operation by using the CA specified in the configuration string, which is CAHostName\CAName. For an https connection, specify the ...
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible