A public-key certificate states that a specific public key belongs to a specific identity. Use this tag for all questions on certificates and authentication of public keys (not public-key authentication, which is authentication _using_ public-keys). If certificates are not a central issue in your ...

learn more… | top users | synonyms

1
vote
1answer
20 views

Automate to adding certificate for ca-certificate

I try to automate to adding a certificate on an Ubuntu server 14.04 with puppet or a one liner command. I added certificates manually with these commands : mkdir /usr/share/ca-certificates/extra cp ...
1
vote
0answers
12 views

Adding nssdb certificate from an install script

I am trying to write an script (postinst for a .deb package) that will install a secure websockets (wss:) application and a certificate that allows access from the Chrome browser. The developer has ...
0
votes
1answer
21 views

Can I reuse the certificate when setting up OpenVPN over stunnel?

I am setting up an OpenVPN server to run over stunnel following this tutorial. It asks that I create a self-signed certificate for stunnel on the server side. Since I already have one that was ...
2
votes
3answers
50 views

Does a Certificate Authority represent my company or a server?

I am setting up my second OpenVPN server with TLS and so I have a question about CA. Should I create a separate CA for each server or use the same? Why? Both servers will cater to the same network ...
0
votes
0answers
22 views

authorize untrusted certificates

I'm trying to install WordPress on a server running Debian 7.5 and when using: wget http://wordpress.org/latest.tar.gz It says "the certificate of wordpress.org is not trustworthy" and "the ...
1
vote
1answer
666 views

Unable to locally verify the issuer's authority

I am not able to open any https URLs using wget or curl: $ wget https://www.python.org --2015-04-27 17:17:33-- https://www.python.org/ Resolving www.python.org (www.python.org)... 103.245.222.223 ...
2
votes
1answer
94 views

Adding certificates to trusted CA on Fedora

I'm trying to setup anyconnect from Cisco on a Fedora 19 machine. I have received some certificates from the organization running the VPN, but there are several layers between me and their IT people ...
5
votes
1answer
79 views

How to find more details on Invalid Certificates

Setup I am following this blog post to set up ASP.net MVC5 on Linux. When I get to the part that adds the Microsoft certificates, I am warned that they are invalid. For example, this command: ...
0
votes
2answers
56 views

SSL by IP or domain

The server that this is for will operate in a intranet environment... I have Apache working with SSL. I am using a self-signed SSL Certificate created using the steps outlined here: ...
0
votes
0answers
18 views

how to create a certifying entity? create a Public Key Infrastructure (pki)

I know that must process and technologies used to create a linux infrastructure that allows me to have a server to make it certifying entity. For this I need to know what the technological options ...
0
votes
0answers
96 views

How to get certificate type from SSL Certificate of a domain?

Is there any way to get Certificate Type (EV/OV/DV) from the certificate? I tried the following command and get entire certificate at output, but can't find Certificate Type from it. $ openssl ...
0
votes
0answers
50 views

Verifying SSL key and certificate files for a web server

I want my web users to upload their own SSL certificate files for their domains. I have the configuration environment all set up. But unfortunately, if Apache web server finds a broken SSL certificate ...
0
votes
0answers
44 views

Exporting contact certificates in Evolution

I posted this here a couple of days ago, but now think I might have more luck here. Any help at all is greatly appreciated. I have been searching but unable to find a way to export my contact ...
1
vote
0answers
111 views

Creating Self signed certificate for tomcat 6

I am trying to configure self signed certificate for our tomcat server. For that initially I created the keystore certificate file using keytool . The command I tried for this is keytool -genkey ...
3
votes
1answer
5k views

Why openssl s_client verifies a cert against a mismatching CAfile?

I am trying to yield a certificate verification error with openssl s_client like this: $ openssl s_client -crlf -verify 9 \ -CAfile /etc/ssl/certs/TURKTRUST_Certificate_Services_Provider_Root_1.pem ...
3
votes
1answer
2k views

FreeBSD 10 root certificate store

Is on a default FreeBSD 10 no root certificate store? When I install one by hand it is in /usr/local/share/certs/ca-root-nss.crt, which I symlink to /etc/ssl/cert.pem and thats the main places I ...
1
vote
1answer
138 views

Parse expirydate from openssl command

Was about to ask how to check the date of SSL certificates automatically but then figured it out, so below you can find my answer too.
4
votes
1answer
176 views

certificate errors trying to create a virtualenv on old Ubuntu

On an old Ubuntu 8.04 (cannot upgrade yet) I need to create a Python virtualenv, install some packages and then my software. I do get certificate errors: Could not fetch URL ...
7
votes
3answers
1k views

Open signed PDFs in Linux

We have some PDF files which are secured by a .pfx certificate. On Windows we can use Adobe Reader to read these PDF files (with previously imported certificate). I've googled for a long time but I ...
4
votes
1answer
76 views

How to configure kmail2 to use client certificates for POP3 and IMAP access

I would like to run a POP3 server with TLS transport security such that a client must authenticate with a client certificate. (This shields the server from brute force password guessing attacks.) How ...
4
votes
3answers
2k views

specify certificate of CA in Dovecot

In Postfix, I have specified my private key, my certificate, and the certificate of my CA smtpd_tls_CAfile = /etc/ssl/cacert.pem smtpd_tls_key_file = /etc/ssl/server.key smtpd_tls_cert_file = ...
3
votes
1answer
226 views

Add a single key to to CA certificates from an automated script

I'm doing some automation for a local machine in Vagrant using Puppet. I need to add a CA certificate to the trusted list in Ubuntu Trusty 14.04 LTS. I simply add the file to the right place: file ...
3
votes
1answer
2k views

Verifying a SSL certificate's fingerprint?

I'm toying around with a Puppet agent and a Puppet master and I've noticed that the Puppet cert utility provides a fingerprint for my agent's public key as it has requested to be signed: $ puppet ...
1
vote
1answer
178 views

SSL no certificate

I'm trying to make a bash script who will check the SSL status of my web site client and return the error. But for every IP, wget https://$ip:$port gives me the following error: ERROR: The ...
0
votes
1answer
416 views

Generating server and client certificates with multiple hostnames

When starting up my Puppet Master for the first time, it automatically generates its own server certificate, which is awesome. My server's hostname is kungfumaster and the Puppet Master generates a ...
1
vote
1answer
446 views

Wget or curl a self-signed certificate from server

From my browser, I can browse to a machine in my companies local intranet and (after marking the certificate as trusted) export that certificate to a file. I'm trying to automate this process into a ...
3
votes
1answer
766 views

Linux equivalent of “Trusted Root Certification Authorities” on Windows?

Where I live we have a corporate firewall which is configured to need a certificate installed on the computers in the house for it to be able to scan for vulnerabilities in secure connections. Without ...
1
vote
3answers
6k views

Obtain .cer file from .pem file

I have generated RSA private key using below command: openssl genrsa -out privkey.pem 2048 And created a self signed certificate using below command: openssl req -new -x509 -key privkey.pem -out ...
1
vote
1answer
2k views

How to remove SSL certificate?

I've been asked to remove certificates from some of our servers, but I don't know anything about httpd configuration. If I have one server where if I do this /usr/sbin/httpd -t -DDUMP_CERTS ...
1
vote
1answer
2k views

Linux openssl CN/Hostname verification against SSL certificate

How does an Enterprise Linux system with openssl 1.0.1+ verify that the CN=hostname value in the cert matches the server it resides on? Does it use a plain old reverse DNS lookup on the IP address of ...
1
vote
0answers
67 views

Add cacert certificates to kopete

ca-cert was recently removed from the ca-certificates bundle, and I would like to readd it, at least to kopete so I don't get the invalid certificate warnings because one of the jabber servers I ...
3
votes
1answer
1k views

How to make local system CA certificates known to Firefox?

Recently, the CAcert root certificates have been removed from Debian (more precisely, from the ca-certificates package). Since I want to keep them, I backed up the directory ...
4
votes
1answer
1k views

Chrome certificate

How do I add trusted certificates for google-chrome at the command line? For Firefox, I can use certutil binary. For google-chrome, which binary or what steps are required?
0
votes
1answer
64 views

Extend validity time of APACHE certificate

I have in /etc/httpd/ssl subdir two files: apache.crt and apache.key. How can I extend time of validity of APACHE http server, without creating new certificate and without necessity of interaction ...
3
votes
0answers
5k views

Installing the JMeter CA certificate for HTTPS recording

I got stuck in between while installing the JMeter CA certificate for HTTPS recording in the Firefox browser. I have followed the steps and successfully been able to generate the ...
1
vote
1answer
1k views

Installed root certificate authority doesn't appear to be working?

OS : archlinux Openssl dir : /etc/ssl I just installed a root certificates authority. The xxx.pem and yyy.0 file exists in the /etc/ssl/certs folder. Then I verify the vimeo.com:443 via bash: $ ...
2
votes
1answer
2k views

stunnel - how to setup stunnel to handle ssl and attach http with it?

I am running Google App Engine which is a http web server with some redirecting and other real-time stuff. But it does not have SSL to include so its unable to make HTTPS. Therefore, i was trying ...
2
votes
1answer
61 views

How it is decided which certificate of a Certificate Authority will be used in a system certificate chain [closed]

I am looking for PKI (Public Key Infrastructure) knowledge and particularly at OS's built-in certificate chain list. Of course on Windows the company decides which certificate will be built-in, but ...
3
votes
1answer
541 views

How do I change the Java Security level?

We've got an ancient (internal use only) self-signed app that refuses to run now with the changes to the JRE. Working on getting a code signing certificate and rebuilding it, but that's horribly slow ...
1
vote
2answers
499 views

HTTPS Redirecting to Subdomain

I have a subdomain at https://mail.example.com with a valid certificate. However, if someone were to accidentally type in https://example.com to the address bar, the certificate for the mail server is ...
8
votes
2answers
10k views

adding SSL certificate for Github only (not all certificates from ca-certificates package)

I get the following error when accessing Github over HTTPS: error: server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none This is because I don't have any ...
1
vote
1answer
1k views

How can I add an x509 certificates bundle (ca-bundle.crt) to NSS database (~./pki/nssdb)

I'm currently using RedHat Enterprise 6. Git had issues cloning Github repos using HTTPS. After some investigation (e.g. enabling GIT_CURL_VERBOSE and GIT_TRACE) the problem was narrowed to a ...
2
votes
0answers
128 views

SSH + Certificate Authority server?

Is it possible to setup SSH (via pam for instance) to check the public key of the connecting client against a CA server? I've tried with gnupg (via gpg-agent --daemon --enable-ssh-support) and also ...
5
votes
2answers
1k views

How to get server's ssl certificate in a human readable form?

For example, I want to find out when the certificate for encrypted.google.com expires (i.e. Not After date), and what other domains may use it for authentication (Subject Alternative Names).
0
votes
1answer
2k views

Apache fails to start after changing cert and key

The problem appeared after I changed https certificate and key. sudo /etc/init.d/httpd restart shows this: Stopping httpd: [FAILED] Starting httpd: [FAILED] Apache's error_log: [Tue Dec 03 ...
5
votes
2answers
8k views

Get common name (CN) from SSL certificate?

I have a SSL CRT file in PEM format. Is there a way that I can extract the common name (CN) from the certificate from the command line?
2
votes
2answers
76 views

generating CSR correctly

When generating a CRS for private purposes (non-comercial) which of the fields are mandatory? Country Name (2 letter code) [US]: US State or Province Name (full name) []: Texas Locality Name ...
3
votes
0answers
188 views

Creating a signed subordinate CA for client certificates

I have a root self-signed CA which I've created for myself. With this CA (we'll call it country), I've created a server certificate and key for my webserver, nginx. I now would like to create a ...
1
vote
1answer
1k views

How do I deal with a certificate based transparent proxy in Arch Linux?

I have setup an Arch Linux VM at work, and my company uses a transparent (cut-through) proxy with a self-signed certificate and requires authentication. Whenever I try to install any packages through ...
0
votes
0answers
3k views

'Git clone' times out with 443 error message

git clone -v https://github.com/me/myproj Cloning into 'myproj'... <minutes pass> error: Failed connect to github.com:443; Operation now in progress while accessing ...