A public-key certificate states that a specific public key belongs to a specific identity. Use this tag for all questions on certificates and authentication of public keys (not public-key authentication, which is authentication _using_ public-keys). If certificates are not a central issue in your ...

learn more… | top users | synonyms

0
votes
0answers
17 views

sudo update-ca-certificates always add new cert

When I run sudo update-ca-certificates on debian 8 it is always add one new cert. it is normal behavior? What's can be wrong? ar@work:/tmp$ sudo update-ca-certificates Updating certificates in ...
1
vote
1answer
26 views

Error signing certificate

I am trying to create and sign a certificate for Email services. Using this. Everything went well until i reached : sudo openssl ca -in server.csr -config /etc/ssl/openssl.cnf After entering the ...
0
votes
0answers
10 views

Puppet Agent certificate issue

When iam trying to connect to master server from client this is what iam getting:- puppet agent -t Error: Could not request certificate: Error 400 on SERVER: The environment must be purely ...
0
votes
0answers
5 views

wpa_supplicant: 802.1X certificate check

So, I'm trying to connect to a 802.1X secured WLAN with EAP-TTLS which uses multiple RADIUS servers. I don't trust the root CA or the intermediate CAs much. I do trust the local CA signing the RADIUS ...
0
votes
0answers
17 views

haproxy serving wrong SSL certificate for a subdomain

I have a Server that runs haproxy to redirect incoming traffic to the correct process based on the subdomain. haproxy is configured to use different SSL certificates depending on the subdomain. The ...
2
votes
1answer
89 views

Unable to use a self-signed certif. on localhost

I created a self-signed certificate for localhost for testing as follows: openssl genrsa -out key.pem 2048 openssl req -new -key key.pem -out certificate.csr openssl x509 -req -in certificate.csr ...
3
votes
1answer
35 views

How can I cryptographically verify a sabayon.iso? Are there any certificates?

I've downloaded and installed sabayon, but all I can find to verify that iso image is an md5sum that can only be downloaded from the same insecure mirrors. md5 checksums are not cryptographically ...
1
vote
1answer
20 views

Can I reduce the privileges level on mono's certificate machine store?

I am running NUnit tests on Ubuntu via mono. They require the certmgr tool to install certificates and keys that the tests utilize. The user cert/key I can install fine, but the tests fall over if the ...
2
votes
1answer
37 views

Does linux verify server certificate against crl by default?

Let assume that I have a Linux based server running apache or tomcat with a web server certificate created by a trusted authority. The certificate has embedded distribution point of the crl. The ...
1
vote
0answers
16 views

Rebuild pki directory and associated changes

Let me preface this with, "I am not looking for a free lunch." I royally screwed up my cert storage recently and during my attempt to repair I made things worse. I am looking for a thorough ...
2
votes
1answer
47 views

How can I sign as CA a multi domain certificate

I have set myself up as a Certicate Authority so I can sign certificates I need for development. I have imported my CA certificate in my browsers so certificates I sign are accepted without question ...
0
votes
0answers
7 views

Thunderbird SMIME certificate not imported automatically

I created own CA to sign SMIME certs for email encoding. Next I generated several certificates for particular users. Below script for generating such certs: openssl genrsa -des3 -out humble_coder.key ...
1
vote
1answer
51 views

Encrypting a p12 certificate

I'm trying to following this documentation (see section Create a Code Signing Certificate) in oder to encrypt a p12 file but I always receive the same warning. unknown option 'Cert.p12' Am I ...
0
votes
0answers
148 views

Changing the port letsencrypt tries to connect on

So, one of my servers is behind NAT, and since there is already a publicly accessible apache server going on my LAN, I decided to access it from the outside with different ports, and remap them to the ...
3
votes
1answer
33 views

What are the drawbacks of using policy_any in openssl.cnf?

As given in this document, we may use policy_any to ignore most of the fields of subject in certificate request. There must be some drawbacks of ignoring such fields, would it may lead to some ...
1
vote
0answers
39 views

How do I get a certificate on a server from a certificate authority server using an OpenSSL request?

How do I get a successful request for a certificate from one Linux server to a Linux server that is a certificate authority? I'm using Centos 7 on both servers on the network. I'm using an OpenSSL ...
1
vote
1answer
408 views

Install root SSL certificate

I created root certificates, and server certificate, signed with root. How can I install my root certificate, to remove warning about untrusted connection? update, dpkg-reconfigure don't work. I'm ...
0
votes
0answers
328 views

certificate error while Adding Hosts in Icinga monitoring tool

I am getting certificate error while Adding Hosts in Icinga ! I am very new to it so not able to figure out the error but I have received proper keys and certificates from client ! sh -x ...
1
vote
1answer
30 views

About openwrt dnscrypt

I am self hosted a dnscrypt server, using dnscrypt-server-docker (https://github.com/jedisct1/dnscrypt-server-docker) And i test it on my mac os x, it's work fine $ sudo dnscrypt-proxy \ ...
2
votes
1answer
374 views

Do I Need to Restart Nginx if I Renew My Security Certificate(s)?

So I'm setting up an nginx server with SSL enabled with a server definition something like: server { listen :80; listen [::]:80; server_name example.org; root /foo/bar; ssl on; ...
0
votes
1answer
31 views

Import certificates on tomcat

I have some difficulty to import our *.domain.com cert. I have the following files "<something>.crt" "<something>.csr" and "<something>.key". So what i need is to import this ...
0
votes
3answers
24 views

Verify SSL for local computers

I have a small business network and for this network, one computer is DHCP-, DNS- and web server. It uses local domains like machinary.ao or resources.ao I'd like to use ssl. Computers and network ...
0
votes
1answer
42 views

SSL Problem, Where should I insert the certificate.crt?

I'm using startSSL. I've got a private key.key, a certificate.crt and a decrypted key.key for private key.key. What should I do with this files and where should I upload them? How can I get https for ...
6
votes
2answers
1k views

script to check if SSL certificate is valid

I have several SSL certificates, and I would like to be notified, when a certificate has expired. My idea is to create a cronjob, which executes a simple command every day. I know that the openssl ...
1
vote
1answer
191 views

Dogtag CA after installation

After Dogtag 10 installation(step by step by https://www.youtube.com/watch?v=C3eElJAz7lU) when I open Admin (https://localhost.localdomain:8443/ca/agent/ca/) I get following error Problem ...
0
votes
0answers
12 views

Certificate type

I am downloading certificate from given URL as: echo -n | openssl s_client -showcerts -connect url > certificate.ext Now, how do I find out, the saved certificate.ext file is actually of which ...
2
votes
0answers
222 views

Unable to delete Root CA (UNIX: operation not permitted)

I am trying to delete a root certificate authority from my Mac OS machine. When I try this from the 'Keychainaccess' program it asks for my password and then shows 'ecKeychainItemDelete: ...
0
votes
0answers
91 views

fetchmail: Missing trust anchor certificate:

I try to setup fetchmail on mac for checkdomain.de and created a certificate .pem file in the cert directory of ssl by copying certificate from running this command: openssl s_client -connect ...
0
votes
4answers
223 views

How can I find where the Location of SSL key file is?

I inherited a RedHat server and I'm trying to find the SSL key file that was used to generate the self signed cert so I can make a CSR. From what poking around I've done, I can't find it in any of ...
0
votes
1answer
239 views

Offlineimap unknown SSL protocol error

I am using offlineimap to fetch mail from several IMAP servers. This used to work but today offlineimap has been unable to fetch mail, producing the following errors: *** Processing account example ...
1
vote
1answer
130 views

Automate to adding certificate for ca-certificate

I try to automate to adding a certificate on an Ubuntu server 14.04 with puppet or a one liner command. I added certificates manually with these commands : mkdir /usr/share/ca-certificates/extra cp ...
2
votes
0answers
122 views

Adding nssdb certificate from an install script

I am trying to write an script (postinst for a .deb package) that will install a secure websockets (wss:) application and a certificate that allows access from the Chrome browser. The developer has ...
0
votes
1answer
108 views

Can I reuse the certificate when setting up OpenVPN over stunnel?

I am setting up an OpenVPN server to run over stunnel following this tutorial. It asks that I create a self-signed certificate for stunnel on the server side. Since I already have one that was ...
2
votes
3answers
76 views

Does a Certificate Authority represent my company or a server?

I am setting up my second OpenVPN server with TLS and so I have a question about CA. Should I create a separate CA for each server or use the same? Why? Both servers will cater to the same network ...
3
votes
1answer
8k views

Unable to locally verify the issuer's authority

I am not able to open any https URLs using wget or curl: $ wget https://www.python.org --2015-04-27 17:17:33-- https://www.python.org/ Resolving www.python.org (www.python.org)... 103.245.222.223 ...
2
votes
1answer
1k views

Adding certificates to trusted CA on Fedora

I'm trying to setup anyconnect from Cisco on a Fedora 19 machine. I have received some certificates from the organization running the VPN, but there are several layers between me and their IT people ...
5
votes
1answer
362 views

How to find more details on Invalid Certificates

Setup I am following this blog post to set up ASP.net MVC5 on Linux. When I get to the part that adds the Microsoft certificates, I am warned that they are invalid. For example, this command: ...
0
votes
2answers
107 views

SSL by IP or domain

The server that this is for will operate in a intranet environment... I have Apache working with SSL. I am using a self-signed SSL Certificate created using the steps outlined here: ...
2
votes
0answers
296 views

How to get certificate type from SSL Certificate of a domain?

Is there any way to get Certificate Type (EV/OV/DV) from the certificate? I tried the following command and get entire certificate at output, but can't find Certificate Type from it. $ openssl ...
0
votes
0answers
73 views

Exporting contact certificates in Evolution

I posted this here a couple of days ago, but now think I might have more luck here. Any help at all is greatly appreciated. I have been searching but unable to find a way to export my contact ...
1
vote
1answer
45 views

Confusion regarding generating self signed certificate for application portal developed using liferay

We have a Application Portal developed using Liferay bundled with tomcat. There are two application servers running liferay and we use httpd as a front-end which forwards requests to application ...
1
vote
0answers
241 views

Creating Self signed certificate for tomcat 6

I am trying to configure self signed certificate for our tomcat server. For that initially I created the keystore certificate file using keytool . The command I tried for this is keytool -genkey ...
4
votes
1answer
8k views

Why openssl s_client verifies a cert against a mismatching CAfile?

I am trying to yield a certificate verification error with openssl s_client like this: $ openssl s_client -crlf -verify 9 \ -CAfile /etc/ssl/certs/TURKTRUST_Certificate_Services_Provider_Root_1.pem ...
6
votes
1answer
4k views

FreeBSD 10 root certificate store

Is on a default FreeBSD 10 no root certificate store? When I install one by hand it is in /usr/local/share/certs/ca-root-nss.crt, which I symlink to /etc/ssl/cert.pem and thats the main places I ...
1
vote
1answer
270 views

Parse expirydate from openssl command

Was about to ask how to check the date of SSL certificates automatically but then figured it out, so below you can find my answer too.
4
votes
2answers
292 views

certificate errors trying to create a virtualenv on old Ubuntu

On an old Ubuntu 8.04 (cannot upgrade yet) I need to create a Python virtualenv, install some packages and then my software. I do get certificate errors: Could not fetch URL ...
10
votes
3answers
3k views

Open signed PDFs in Linux

We have some PDF files which are secured by a .pfx certificate. On Windows we can use Adobe Reader to read these PDF files (with previously imported certificate). I've googled for a long time but I ...
4
votes
1answer
127 views

How to configure kmail2 to use client certificates for POP3 and IMAP access

I would like to run a POP3 server with TLS transport security such that a client must authenticate with a client certificate. (This shields the server from brute force password guessing attacks.) How ...
0
votes
2answers
4k views

Redhat httpd start failed showing “ELinks: Connection refused”

I'm on RHEL 6.5 and Apache 2.2.15. And now applying a trusted SSL on the Server. After adding the respective SSL related Certs and files, my Apache is NOT starting up anymore. Here are some outputs: ...
4
votes
4answers
5k views

specify certificate of CA in Dovecot

In Postfix, I have specified my private key, my certificate, and the certificate of my CA smtpd_tls_CAfile = /etc/ssl/cacert.pem smtpd_tls_key_file = /etc/ssl/server.key smtpd_tls_cert_file = ...