The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
0answers
11 views

Add cacert certificates to kopete

ca-cert was recently removed from the ca-certificates bundle, and I would like to readd it, at least to kopete so I don't get the invalid certificate warnings because one of the jabber servers I ...
1
vote
0answers
36 views

How to make local system CA certificates known to Firefox?

Recently, the CAcert root certificates have been removed from Debian (more precisely, from the ca-certificates package). Since I want to keep them, I backed up the directory ...
2
votes
1answer
23 views

Chrome certificate

How do I add trusted certificates for google-chrome through command line ? For firefox, I can use certutil binary. For google-chrome which binary or what steps are required ?
0
votes
1answer
21 views

Extend validity time of APACHE certificate

I have in /etc/httpd/ssl subdir two files: apache.crt and apache.key. How can I extend time of validity of APACHE http server, without creating new certificate and without necessity of interaction ...
3
votes
0answers
71 views

Installing the JMeter CA certificate for HTTPS recording

I got stuck in between while installing the JMeter CA certificate for HTTPS recording in the Firefox browser. I have followed the steps and successfully been able to generate the ...
1
vote
1answer
51 views

Installed root certificate authority doesn't appear to be working?

OS : archlinux Openssl dir : /etc/ssl I just installed a root certificates authority. The xxx.pem and yyy.0 file exists in the /etc/ssl/certs folder. Then I verify the vimeo.com:443 via bash: $ ...
2
votes
1answer
136 views

stunnel - how to setup stunnel to handle ssl and attach http with it?

I am running Google App Engine which is a http web server with some redirecting and other real-time stuff. But it does not have SSL to include so its unable to make HTTPS. Therefore, i was trying ...
2
votes
1answer
53 views

How it is decided which certificate of a Certificate Authority will be used in a system certificate chain [closed]

I am looking for PKI (Public Key Infrastructure) knowledge and particularly at OS's built-in certificate chain list. Of course on Windows the company decides which certificate will be built-in, but ...
3
votes
1answer
81 views

How do I change the Java Security level?

We've got an ancient (internal use only) self-signed app that refuses to run now with the changes to the JRE. Working on getting a code signing certificate and rebuilding it, but that's horribly slow ...
1
vote
2answers
121 views

HTTPS Redirecting to Subdomain

I have a subdomain at https://mail.example.com with a valid certificate. However, if someone were to accidentally type in https://example.com to the address bar, the certificate for the mail server is ...
4
votes
1answer
201 views

adding SSL certificate for Github only (not all certificates from ca-certificates package)

I get the following error when accessing Github over HTTPS: error: server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none This is because I don't have any ...
1
vote
1answer
146 views

How can I add an x509 certificates bundle (ca-bundle.crt) to NSS database (~./pki/nssdb)

I'm currently using RedHat Enterprise 6. Git had issues cloning Github repos using HTTPS. After some investigation (e.g. enabling GIT_CURL_VERBOSE and GIT_TRACE) the problem was narrowed to a ...
2
votes
0answers
72 views

SSH + Certificate Authority server?

Is it possible to setup SSH (via pam for instance) to check the public key of the connecting client against a CA server? I've tried with gnupg (via gpg-agent --daemon --enable-ssh-support) and also ...
5
votes
2answers
175 views

How to get server's ssl certificate in a human readable form?

For example, I want to find out when the certificate for encrypted.google.com expires (i.e. Not After date), and what other domains may use it for authentication (Subject Alternative Names).
1
vote
1answer
86 views

Apache fails to start after changing cert and key

The problem appeared after I changed https certificate and key. sudo /etc/init.d/httpd restart shows this: Stopping httpd: [FAILED] Starting httpd: [FAILED] Apache's error_log: [Tue Dec 03 ...
1
vote
2answers
345 views

Get common name (CN) from SSL certificate?

I have a SSL CRT file in PEM format. Is there a way that I can extract the common name (CN) from the certificate from the command line?
3
votes
2answers
50 views

generating CSR correctly

When generating a CRS for private purposes (non-comercial) which of the fields are mandatory? Country Name (2 letter code) [US]: US State or Province Name (full name) []: Texas Locality Name ...
3
votes
0answers
57 views

Creating a signed subordinate CA for client certificates

I have a root self-signed CA which I've created for myself. With this CA (we'll call it country), I've created a server certificate and key for my webserver, nginx. I now would like to create a ...
0
votes
1answer
264 views

How do I deal with a certificate based transparent proxy in Arch Linux?

I have setup an Arch Linux VM at work, and my company uses a transparent (cut-through) proxy with a self-signed certificate and requires authentication. Whenever I try to install any packages through ...
0
votes
0answers
651 views

'Git clone' times out with 443 error message

git clone -v https://github.com/me/myproj Cloning into 'myproj'... <minutes pass> error: Failed connect to github.com:443; Operation now in progress while accessing ...
2
votes
2answers
207 views

Dovecot POP3S & IMAPS SSL Certificate that works for all user domains

This may be a really stupid question, but I can't seem to put my head around it. I have a mail server I'm trying to setup to service 6 domains. I will have multiple mail users accessing the server via ...
3
votes
3answers
73 views

Appending a pem to another

I found a blog that helped me relay postfix through smtp.gmail.com with SASL authentication. One of the steps was: cat /etc/ssl/certs/Thawte_Premium_Server_CA.pem | \ sudo tee -a ...
3
votes
1answer
134 views

How to generate just a key with openssl

I run this command to generate a CSR and a new key with openssl: openssl req -new -nodes -days 9000 -config /etc/ssl/openssl.cnf -out /etc/ssl/certs/mycompany.com.csr -keyout ...
0
votes
1answer
84 views

stream a certificate to stdout to download it in php

Related Questions : when downloading certficate binary data , result is invalid certificate Download binary stream data from browser using PHP with web service “ downloaded file is corrupted ” ...
2
votes
1answer
2k views

How do I install a system-wide SSL certificate on openSUSE?

I have a PEM certificate that I just downloaded from a webserver. I want to install it system-wide so I can curl the server without it complaining about a missing certificate. I tried putting the ...
7
votes
3answers
1k views

Where does Chrome gets its list of certificate authorities from?

On Fedora, I'm talking about the list displayed when you go to settings > manage certificates > authorities tab. I've read that it should be in the NSS shared DB, but this command returns an empty ...
1
vote
0answers
200 views

ngircd / xchat SSL issues

I'm trying to setup a ngircd IRC server on Fedora 18 (which was installed using yum), but I'm having some SSL issues. I can connect to the server locally and remotely if I choose to "accept invalid ...
0
votes
0answers
62 views

Missing configuration in Apache to achive mutual SSL authentcaion

After implementing a Mutual Certificate Authentication with OpenSSL and Apache Web Server on CentOS platform, I tried this scenario (see this diagram): ---------- ...
0
votes
0answers
88 views

How to determine the sequence of ordering certificates by browser?

I did a Mutual Certificate Authentication implementation with OpenSSL and Apache Web Server on CentOS platform. To simple explanation see this diagram: ---------- | ...
0
votes
1answer
372 views

Certificate extensions in generating and signing certificartes using openssl

References: SSL Configurations for Intermediate certificate How to add my own created certificate authority to system trusted repositories Why I can't find a page which tell me what's the kind of ...
0
votes
1answer
109 views

LPIC-1 for non-professional experienced user

I am interested in trying out the LPIC-1 certification however I am slightly worried that I may not have the needed professional experience to pass. I am still studying hard and running a lab with a ...
1
vote
0answers
184 views

How to add my own created certificate authority to system trusted repositories

I was told that I can add my created CA to trusted repositories/authorities in my system instead of adding it from browser and configuring in in ssl.conf. Yet I can't find anything similar on the ...
2
votes
0answers
121 views

SSL Configurations for Intermediate certificate

I had implement a mutual certificate authentication and it worked successfully for following steps : create root ca (self-signed) create server certificate and sign it with ca private key create ...
3
votes
1answer
235 views

Configuring Apache to Require a Client Certificate

I want to implement mutual authentication (two - way ) with apache web server. References : 1.Failed to sign CSR with the CA root key 2.Firefox error message when adding client certificate ...
3
votes
1answer
505 views

Firefox error message when adding client certificate signed by CA

I'm getting this message when I'm trying to add a certificate to Firefox's "your certificate tab". I generated and signed it before by a server which also is a CA. Failed to decode the file. ...
0
votes
1answer
55 views

Where to put generated certicate for user [duplicate]

I was following this tutorial and I want to implement mutual authentication between server and client, where server and CA (certificate authority) is the same thing. I reached the last step and I ...
1
vote
1answer
352 views

Failed to sign CSR with the CA root key

I'm trying to implement Mutual Certificate Authentication , I have to be the CA and server at the same time , generate certificates and sign them for users. and I'm following this tutorial which is a ...
2
votes
1answer
143 views

Configure SSL Mutual (Two-way) Authentication

I was asked to do it "Configure SSL Mutual (Two-way) Authentication" and I don't know where to start or how to test it . server and many clients . they can access code on server only if they have a ...
3
votes
2answers
2k views

How to make ldapsearch working on SLES over tls using certificate?

We need to connect our php script to LDAP over tls using a certificate. LDAP connection works nicely without tls. More details here ...
2
votes
1answer
726 views

`openssl`: Subject Alternative Name

I wrote this bit of code to get the Common Name of the subject field in the SSL certificate for a given domain: $ echo -e "GET / HTTP/1.1\nEOT" | openssl s_client -connect google.com:443 2>&1 ...
2
votes
1answer
147 views

Why can't gnutls contact this site?

Why can't gnutls contact the site in question, even though wget gets the page just fine? $ gnutls-cli https://site.com/login.php --insecure --print-cert < /dev/null > cert WARNING: ...
0
votes
1answer
148 views

How to use linux tools to verify a site's authenticity

When I go to certain websites where it's important for me to know that I'm connected securely, certain browsers will say that the site failed the authenticity check. Firefox won't say anything, but ...
1
vote
1answer
622 views

How can I update certificates on my system to fix wget's error: “Unable to establish SSL connection.”?

Sometimes I notice that I am unable to connect via SSL with curl and wget to websites that have certificates that should be valid. One example might be https://squareup.com/ which has a Verisign ...
3
votes
1answer
668 views

How can I add a certificate to Mercurial?

I use Arch Linux, when I want to clone a project from bitbucket with mercurial I get this error: warning: bitbucket.org certificate with fingerprint 24:...:3b not verified (check hostfingerprints ...
2
votes
2answers
162 views

What should I teach in my Linux class? [closed]

I'm teaching a basic Unix class using Ubuntu. We've already covered basic Unix stuff such as: bash shell scripting file and directory permissions filesystem hierarchy common commands I would like ...
1
vote
0answers
211 views

How to obtain X.509 certificate on solaris based server?

I have a Solaris based T5220 server. I'd like to install an x.509 certificate. What is the procedure to install this certificat? Does that procedure differs from one server to another? i.e. is it ...