A public-key certificate states that a specific public key belongs to a specific identity. Use this tag for all questions on certificates and authentication of public keys (not public-key authentication, which is authentication _using_ public-keys). If certificates are not a central issue in your ...

learn more… | top users | synonyms

0
votes
0answers
9 views

How do I install Bazel on Ubuntu 16?

I'm unable to download the certificate to add bazel repo to my ubuntu 16 machine: url https://storage.googleapis.com/bazel-apt/doc/apt-key.pub.gpg | sudo apt-key add - % Total % Received % Xferd ...
0
votes
0answers
15 views

how to load an LDAP client cert RHEL7 authconfig-tui

I have a RHEL7 machine that needs to be configured as an LDAP client (user/auth, using authconfig-tui). When finishing authconfig-tui, it says, just copy the cert to /etc/openldap/cacerts, which I ...
0
votes
1answer
32 views

How to Make self-signed SSL .key/.crt for Localhost?

I did with a password and with the following fields sudo openssl req -x509 -days 365 -newkey rsa:2048 -keyout /etc/ssl/apache.key \ -out /etc/ssl/apache.crt Fields Country: FI State: Pirkanmaa ...
0
votes
0answers
15 views

cURL and Iceweasel disagree about TLS certificate validity, despite same CA

On Debian Jessie 8.4 GNU/Linux, I am experiencing a certificate validation inconsistency between Iceweasel (Debian's derivative of Firefox) and cURL in relation to the URL https://profile.mensa.org.uk/...
18
votes
3answers
760 views

Untrusting an intermediate CA in Linux?

From this blog. Intermediate CAs are certificates signed by a root CA that can sign arbitrary certificates for any websites. They are just as powerful as root CAs, but there's no full list of ...
2
votes
1answer
66 views

SSL Certificate Problem: unable to get local issuer certificate

I am having small initramfs with static busybox into it. The sole purpose of this initramfs is to download/upload files to the HTTPS server. I have the proper certificate and credentials to do so. ...
0
votes
0answers
45 views

sudo update-ca-certificates always add new cert

When I run sudo update-ca-certificates on debian 8 it is always add one new cert. it is normal behavior? What's can be wrong? ar@work:/tmp$ sudo update-ca-certificates Updating certificates in /etc/...
1
vote
1answer
27 views

Error signing certificate

I am trying to create and sign a certificate for Email services. Using this. Everything went well until i reached : sudo openssl ca -in server.csr -config /etc/ssl/openssl.cnf After entering the ...
1
vote
0answers
25 views

Puppet Agent certificate issue

When iam trying to connect to master server from client this is what iam getting:- puppet agent -t Error: Could not request certificate: Error 400 on SERVER: The environment must be purely ...
0
votes
0answers
17 views

wpa_supplicant: 802.1X certificate check

So, I'm trying to connect to a 802.1X secured WLAN with EAP-TTLS which uses multiple RADIUS servers. I don't trust the root CA or the intermediate CAs much. I do trust the local CA signing the RADIUS ...
0
votes
0answers
27 views

haproxy serving wrong SSL certificate for a subdomain

I have a Server that runs haproxy to redirect incoming traffic to the correct process based on the subdomain. haproxy is configured to use different SSL certificates depending on the subdomain. The ...
2
votes
1answer
144 views

Unable to use a self-signed certif. on localhost

I created a self-signed certificate for localhost for testing as follows: openssl genrsa -out key.pem 2048 openssl req -new -key key.pem -out certificate.csr openssl x509 -req -in certificate.csr -...
3
votes
1answer
37 views

How can I cryptographically verify a sabayon.iso? Are there any certificates?

I've downloaded and installed sabayon, but all I can find to verify that iso image is an md5sum that can only be downloaded from the same insecure mirrors. md5 checksums are not cryptographically ...
1
vote
1answer
23 views

Can I reduce the privileges level on mono's certificate machine store?

I am running NUnit tests on Ubuntu via mono. They require the certmgr tool to install certificates and keys that the tests utilize. The user cert/key I can install fine, but the tests fall over if the ...
2
votes
1answer
41 views

Does linux verify server certificate against crl by default?

Let assume that I have a Linux based server running apache or tomcat with a web server certificate created by a trusted authority. The certificate has embedded distribution point of the crl. The ...
1
vote
0answers
17 views

Rebuild pki directory and associated changes

Let me preface this with, "I am not looking for a free lunch." I royally screwed up my cert storage recently and during my attempt to repair I made things worse. I am looking for a thorough ...
2
votes
1answer
49 views

How can I sign as CA a multi domain certificate

I have set myself up as a Certicate Authority so I can sign certificates I need for development. I have imported my CA certificate in my browsers so certificates I sign are accepted without question ...
1
vote
0answers
10 views

Thunderbird SMIME certificate not imported automatically

I created own CA to sign SMIME certs for email encoding. Next I generated several certificates for particular users. Below script for generating such certs: openssl genrsa -des3 -out humble_coder.key ...
1
vote
1answer
73 views

Encrypting a p12 certificate

I'm trying to following this documentation (see section Create a Code Signing Certificate) in oder to encrypt a p12 file but I always receive the same warning. unknown option 'Cert.p12' Am I ...
0
votes
0answers
206 views

Changing the port letsencrypt tries to connect on

So, one of my servers is behind NAT, and since there is already a publicly accessible apache server going on my LAN, I decided to access it from the outside with different ports, and remap them to the ...
3
votes
1answer
35 views

What are the drawbacks of using policy_any in openssl.cnf?

As given in this document, we may use policy_any to ignore most of the fields of subject in certificate request. There must be some drawbacks of ignoring such fields, would it may lead to some ...
1
vote
0answers
45 views

How do I get a certificate on a server from a certificate authority server using an OpenSSL request?

How do I get a successful request for a certificate from one Linux server to a Linux server that is a certificate authority? I'm using Centos 7 on both servers on the network. I'm using an OpenSSL ...
1
vote
1answer
474 views

Install root SSL certificate

I created root certificates, and server certificate, signed with root. How can I install my root certificate, to remove warning about untrusted connection? update, dpkg-reconfigure don't work. I'm ...
0
votes
0answers
463 views

certificate error while Adding Hosts in Icinga monitoring tool

I am getting certificate error while Adding Hosts in Icinga ! I am very new to it so not able to figure out the error but I have received proper keys and certificates from client ! sh -x /tmp/icinga-...
1
vote
1answer
38 views

About openwrt dnscrypt

I am self hosted a dnscrypt server, using dnscrypt-server-docker (https://github.com/jedisct1/dnscrypt-server-docker) And i test it on my mac os x, it's work fine $ sudo dnscrypt-proxy \ ...
2
votes
1answer
654 views

Do I Need to Restart Nginx if I Renew My Security Certificate(s)?

So I'm setting up an nginx server with SSL enabled with a server definition something like: server { listen :80; listen [::]:80; server_name example.org; root /foo/bar; ssl on; ...
0
votes
1answer
31 views

Import certificates on tomcat

I have some difficulty to import our *.domain.com cert. I have the following files "<something>.crt" "<something>.csr" and "<something>.key". So what i need is to import this ...
0
votes
3answers
26 views

Verify SSL for local computers

I have a small business network and for this network, one computer is DHCP-, DNS- and web server. It uses local domains like machinary.ao or resources.ao I'd like to use ssl. Computers and network ...
0
votes
1answer
44 views

SSL Problem, Where should I insert the certificate.crt?

I'm using startSSL. I've got a private key.key, a certificate.crt and a decrypted key.key for private key.key. What should I do with this files and where should I upload them? How can I get https for ...
6
votes
2answers
2k views

script to check if SSL certificate is valid

I have several SSL certificates, and I would like to be notified, when a certificate has expired. My idea is to create a cronjob, which executes a simple command every day. I know that the openssl ...
1
vote
1answer
226 views

Dogtag CA after installation

After Dogtag 10 installation(step by step by https://www.youtube.com/watch?v=C3eElJAz7lU) when I open Admin (https://localhost.localdomain:8443/ca/agent/ca/) I get following error Problem ...
0
votes
0answers
13 views

Certificate type

I am downloading certificate from given URL as: echo -n | openssl s_client -showcerts -connect url > certificate.ext Now, how do I find out, the saved certificate.ext file is actually of which ...
2
votes
0answers
229 views

Unable to delete Root CA (UNIX: operation not permitted)

I am trying to delete a root certificate authority from my Mac OS machine. When I try this from the 'Keychainaccess' program it asks for my password and then shows 'ecKeychainItemDelete: UNIX[...
0
votes
0answers
99 views

fetchmail: Missing trust anchor certificate:

I try to setup fetchmail on mac for checkdomain.de and created a certificate .pem file in the cert directory of ssl by copying certificate from running this command: openssl s_client -connect host58....
0
votes
4answers
311 views

How can I find where the Location of SSL key file is?

I inherited a RedHat server and I'm trying to find the SSL key file that was used to generate the self signed cert so I can make a CSR. From what poking around I've done, I can't find it in any of ...
0
votes
1answer
267 views

Offlineimap unknown SSL protocol error

I am using offlineimap to fetch mail from several IMAP servers. This used to work but today offlineimap has been unable to fetch mail, producing the following errors: *** Processing account example ...
1
vote
1answer
156 views

Automate to adding certificate for ca-certificate

I try to automate to adding a certificate on an Ubuntu server 14.04 with puppet or a one liner command. I added certificates manually with these commands : mkdir /usr/share/ca-certificates/extra cp ...
2
votes
0answers
126 views

Adding nssdb certificate from an install script

I am trying to write an script (postinst for a .deb package) that will install a secure websockets (wss:) application and a certificate that allows access from the Chrome browser. The developer has ...
0
votes
1answer
112 views

Can I reuse the certificate when setting up OpenVPN over stunnel?

I am setting up an OpenVPN server to run over stunnel following this tutorial. It asks that I create a self-signed certificate for stunnel on the server side. Since I already have one that was ...
2
votes
3answers
79 views

Does a Certificate Authority represent my company or a server?

I am setting up my second OpenVPN server with TLS and so I have a question about CA. Should I create a separate CA for each server or use the same? Why? Both servers will cater to the same network ...
3
votes
1answer
9k views

Unable to locally verify the issuer's authority

I am not able to open any https URLs using wget or curl: $ wget https://www.python.org --2015-04-27 17:17:33-- https://www.python.org/ Resolving www.python.org (www.python.org)... 103.245.222.223 ...
2
votes
1answer
1k views

Adding certificates to trusted CA on Fedora

I'm trying to setup anyconnect from Cisco on a Fedora 19 machine. I have received some certificates from the organization running the VPN, but there are several layers between me and their IT people ...
5
votes
1answer
389 views

How to find more details on Invalid Certificates

Setup I am following this blog post to set up ASP.net MVC5 on Linux. When I get to the part that adds the Microsoft certificates, I am warned that they are invalid. For example, this command: ...
0
votes
2answers
111 views

SSL by IP or domain

The server that this is for will operate in a intranet environment... I have Apache working with SSL. I am using a self-signed SSL Certificate created using the steps outlined here: http://httpd....
2
votes
0answers
310 views

How to get certificate type from SSL Certificate of a domain?

Is there any way to get Certificate Type (EV/OV/DV) from the certificate? I tried the following command and get entire certificate at output, but can't find Certificate Type from it. $ openssl ...
0
votes
0answers
76 views

Exporting contact certificates in Evolution

I posted this here a couple of days ago, but now think I might have more luck here. Any help at all is greatly appreciated. I have been searching but unable to find a way to export my contact ...
1
vote
1answer
45 views

Confusion regarding generating self signed certificate for application portal developed using liferay

We have a Application Portal developed using Liferay bundled with tomcat. There are two application servers running liferay and we use httpd as a front-end which forwards requests to application ...
1
vote
0answers
249 views

Creating Self signed certificate for tomcat 6

I am trying to configure self signed certificate for our tomcat server. For that initially I created the keystore certificate file using keytool . The command I tried for this is keytool -genkey -...
4
votes
1answer
9k views

Why openssl s_client verifies a cert against a mismatching CAfile?

I am trying to yield a certificate verification error with openssl s_client like this: $ openssl s_client -crlf -verify 9 \ -CAfile /etc/ssl/certs/TURKTRUST_Certificate_Services_Provider_Root_1.pem ...
6
votes
1answer
4k views

FreeBSD 10 root certificate store

Is on a default FreeBSD 10 no root certificate store? When I install one by hand it is in /usr/local/share/certs/ca-root-nss.crt, which I symlink to /etc/ssl/cert.pem and thats the main places I ...