A public-key certificate states that a specific public key belongs to a specific identity. Use this tag for all questions on certificates and authentication of public keys (not public-key authentication, which is authentication _using_ public-keys). If certificates are not a central issue in your ...

learn more… | top users | synonyms

0
votes
0answers
4 views

Is there a tool to check Windows MSI's Digital Signatures Hash for Linux?

I would like to automate the signature check for MSI's in a linux box, is there a tool that can help me achieve this?
2
votes
1answer
20 views

How can I sign as CA a multi domain certificate

I have set myself up as a Certicate Authority so I can sign certificates I need for development. I have imported my CA certificate in my browsers so certificates I sign are accepted without question ...
0
votes
0answers
5 views

Thunderbird SMIME certificate not imported automatically

I created own CA to sign SMIME certs for email encoding. Next I generated several certificates for particular users. Below script for generating such certs: openssl genrsa -des3 -out humble_coder.key ...
1
vote
1answer
28 views

Encrypting a p12 certificate

I'm trying to following this documentation (see section Create a Code Signing Certificate) in oder to encrypt a p12 file but I always receive the same warning. unknown option 'Cert.p12' Am I ...
1
vote
0answers
21 views

Changing the port letsencrypt tries to connect on

So, one of my servers is behind NAT, and since there is already a publicly accessible apache server going on my LAN, I decided to access it from the outside with different ports, and remap them to the ...
3
votes
1answer
26 views

What are the drawbacks of using policy_any in openssl.cnf?

As given in this document, we may use policy_any to ignore most of the fields of subject in certificate request. There must be some drawbacks of ignoring such fields, would it may lead to some ...
1
vote
0answers
20 views

How do I get a certificate on a server from a certificate authority server using an OpenSSL request?

How do I get a successful request for a certificate from one Linux server to a Linux server that is a certificate authority? I'm using Centos 7 on both servers on the network. I'm using an OpenSSL ...
1
vote
1answer
98 views

Install root SSL certificate

I created root certificates, and server certificate, signed with root. How can I install my root certificate, to remove warning about untrusted connection? update, dpkg-reconfigure don't work. I'm ...
0
votes
0answers
97 views

certificate error while Adding Hosts in Icinga monitoring tool

I am getting certificate error while Adding Hosts in Icinga ! I am very new to it so not able to figure out the error but I have received proper keys and certificates from client ! sh -x ...
1
vote
1answer
16 views

About openwrt dnscrypt

I am self hosted a dnscrypt server, using dnscrypt-server-docker (https://github.com/jedisct1/dnscrypt-server-docker) And i test it on my mac os x, it's work fine $ sudo dnscrypt-proxy \ ...
1
vote
1answer
54 views

Do I Need to Restart Nginx if I Renew My Security Certificate(s)?

So I'm setting up an nginx server with SSL enabled with a server definition something like: server { listen :80; listen [::]:80; server_name example.org; root /foo/bar; ssl on; ...
0
votes
0answers
11 views

Import certificates on tomcat

I have some difficulty to import our *.domain.com cert. I have the following files "<something>.crt" "<something>.csr" and "<something>.key". So what i need is to import this ...
0
votes
3answers
21 views

Verify SSL for local computers

I have a small business network and for this network, one computer is DHCP-, DNS- and web server. It uses local domains like machinary.ao or resources.ao I'd like to use ssl. Computers and network ...
0
votes
1answer
41 views

SSL Problem, Where should I insert the certificate.crt?

I'm using startSSL. I've got a private key.key, a certificate.crt and a decrypted key.key for private key.key. What should I do with this files and where should I upload them? How can I get https for ...
6
votes
2answers
751 views

script to check if SSL certificate is valid

I have several SSL certificates, and I would like to be notified, when a certificate has expired. My idea is to create a cronjob, which executes a simple command every day. I know that the openssl ...
1
vote
1answer
106 views

Dogtag CA after installation

After Dogtag 10 installation(step by step by https://www.youtube.com/watch?v=C3eElJAz7lU) when I open Admin (https://localhost.localdomain:8443/ca/agent/ca/) I get following error Problem ...
0
votes
0answers
10 views

Certificate type

I am downloading certificate from given URL as: echo -n | openssl s_client -showcerts -connect url > certificate.ext Now, how do I find out, the saved certificate.ext file is actually of which ...
2
votes
0answers
148 views

Unable to delete Root CA (UNIX: operation not permitted)

I am trying to delete a root certificate authority from my Mac OS machine. When I try this from the 'Keychainaccess' program it asks for my password and then shows 'ecKeychainItemDelete: ...
0
votes
0answers
64 views

fetchmail: Missing trust anchor certificate:

I try to setup fetchmail on mac for checkdomain.de and created a certificate .pem file in the cert directory of ssl by copying certificate from running this command: openssl s_client -connect ...
0
votes
4answers
104 views

How can I find where the Location of SSL key file is?

I inherited a RedHat server and I'm trying to find the SSL key file that was used to generate the self signed cert so I can make a CSR. From what poking around I've done, I can't find it in any of ...
0
votes
1answer
145 views

Offlineimap unknown SSL protocol error

I am using offlineimap to fetch mail from several IMAP servers. This used to work but today offlineimap has been unable to fetch mail, producing the following errors: *** Processing account example ...
1
vote
1answer
75 views

Automate to adding certificate for ca-certificate

I try to automate to adding a certificate on an Ubuntu server 14.04 with puppet or a one liner command. I added certificates manually with these commands : mkdir /usr/share/ca-certificates/extra cp ...
2
votes
0answers
86 views

Adding nssdb certificate from an install script

I am trying to write an script (postinst for a .deb package) that will install a secure websockets (wss:) application and a certificate that allows access from the Chrome browser. The developer has ...
0
votes
1answer
81 views

Can I reuse the certificate when setting up OpenVPN over stunnel?

I am setting up an OpenVPN server to run over stunnel following this tutorial. It asks that I create a self-signed certificate for stunnel on the server side. Since I already have one that was ...
2
votes
3answers
71 views

Does a Certificate Authority represent my company or a server?

I am setting up my second OpenVPN server with TLS and so I have a question about CA. Should I create a separate CA for each server or use the same? Why? Both servers will cater to the same network ...
0
votes
0answers
42 views

authorize untrusted certificates

I'm trying to install WordPress on a server running Debian 7.5 and when using: wget http://wordpress.org/latest.tar.gz It says "the certificate of wordpress.org is not trustworthy" and "the ...
3
votes
1answer
5k views

Unable to locally verify the issuer's authority

I am not able to open any https URLs using wget or curl: $ wget https://www.python.org --2015-04-27 17:17:33-- https://www.python.org/ Resolving www.python.org (www.python.org)... 103.245.222.223 ...
2
votes
1answer
780 views

Adding certificates to trusted CA on Fedora

I'm trying to setup anyconnect from Cisco on a Fedora 19 machine. I have received some certificates from the organization running the VPN, but there are several layers between me and their IT people ...
5
votes
1answer
283 views

How to find more details on Invalid Certificates

Setup I am following this blog post to set up ASP.net MVC5 on Linux. When I get to the part that adds the Microsoft certificates, I am warned that they are invalid. For example, this command: ...
0
votes
2answers
94 views

SSL by IP or domain

The server that this is for will operate in a intranet environment... I have Apache working with SSL. I am using a self-signed SSL Certificate created using the steps outlined here: ...
0
votes
0answers
30 views

how to create a certifying entity? create a Public Key Infrastructure (pki)

I know that must process and technologies used to create a linux infrastructure that allows me to have a server to make it certifying entity. For this I need to know what the technological options ...
2
votes
0answers
237 views

How to get certificate type from SSL Certificate of a domain?

Is there any way to get Certificate Type (EV/OV/DV) from the certificate? I tried the following command and get entire certificate at output, but can't find Certificate Type from it. $ openssl ...
0
votes
0answers
63 views

Exporting contact certificates in Evolution

I posted this here a couple of days ago, but now think I might have more luck here. Any help at all is greatly appreciated. I have been searching but unable to find a way to export my contact ...
1
vote
0answers
210 views

Creating Self signed certificate for tomcat 6

I am trying to configure self signed certificate for our tomcat server. For that initially I created the keystore certificate file using keytool . The command I tried for this is keytool -genkey ...
4
votes
1answer
7k views

Why openssl s_client verifies a cert against a mismatching CAfile?

I am trying to yield a certificate verification error with openssl s_client like this: $ openssl s_client -crlf -verify 9 \ -CAfile /etc/ssl/certs/TURKTRUST_Certificate_Services_Provider_Root_1.pem ...
4
votes
1answer
3k views

FreeBSD 10 root certificate store

Is on a default FreeBSD 10 no root certificate store? When I install one by hand it is in /usr/local/share/certs/ca-root-nss.crt, which I symlink to /etc/ssl/cert.pem and thats the main places I ...
1
vote
1answer
215 views

Parse expirydate from openssl command

Was about to ask how to check the date of SSL certificates automatically but then figured it out, so below you can find my answer too.
4
votes
2answers
249 views

certificate errors trying to create a virtualenv on old Ubuntu

On an old Ubuntu 8.04 (cannot upgrade yet) I need to create a Python virtualenv, install some packages and then my software. I do get certificate errors: Could not fetch URL ...
10
votes
3answers
2k views

Open signed PDFs in Linux

We have some PDF files which are secured by a .pfx certificate. On Windows we can use Adobe Reader to read these PDF files (with previously imported certificate). I've googled for a long time but I ...
4
votes
1answer
114 views

How to configure kmail2 to use client certificates for POP3 and IMAP access

I would like to run a POP3 server with TLS transport security such that a client must authenticate with a client certificate. (This shields the server from brute force password guessing attacks.) How ...
4
votes
4answers
4k views

specify certificate of CA in Dovecot

In Postfix, I have specified my private key, my certificate, and the certificate of my CA smtpd_tls_CAfile = /etc/ssl/cacert.pem smtpd_tls_key_file = /etc/ssl/server.key smtpd_tls_cert_file = ...
5
votes
1answer
405 views

Add a single key to to CA certificates from an automated script

I'm doing some automation for a local machine in Vagrant using Puppet. I need to add a CA certificate to the trusted list in Ubuntu Trusty 14.04 LTS. I simply add the file to the right place: file ...
4
votes
2answers
4k views

Verifying a SSL certificate's fingerprint?

I'm toying around with a Puppet agent and a Puppet master and I've noticed that the Puppet cert utility provides a fingerprint for my agent's public key as it has requested to be signed: $ puppet ...
1
vote
1answer
226 views

SSL no certificate

I'm trying to make a bash script who will check the SSL status of my web site client and return the error. But for every IP, wget https://$ip:$port gives me the following error: ERROR: The ...
0
votes
1answer
641 views

Generating server and client certificates with multiple hostnames

When starting up my Puppet Master for the first time, it automatically generates its own server certificate, which is awesome. My server's hostname is kungfumaster and the Puppet Master generates a ...
1
vote
1answer
971 views

Wget or curl a self-signed certificate from server

From my browser, I can browse to a machine in my companies local intranet and (after marking the certificate as trusted) export that certificate to a file. I'm trying to automate this process into a ...
3
votes
1answer
1k views

Linux equivalent of “Trusted Root Certification Authorities” on Windows?

Where I live we have a corporate firewall which is configured to need a certificate installed on the computers in the house for it to be able to scan for vulnerabilities in secure connections. Without ...
3
votes
3answers
13k views

Obtain .cer file from .pem file

I have generated RSA private key using below command: openssl genrsa -out privkey.pem 2048 And created a self signed certificate using below command: openssl req -new -x509 -key privkey.pem -out ...
1
vote
1answer
4k views

How to remove SSL certificate?

I've been asked to remove certificates from some of our servers, but I don't know anything about httpd configuration. If I have one server where if I do this /usr/sbin/httpd -t -DDUMP_CERTS ...
1
vote
1answer
4k views

Linux openssl CN/Hostname verification against SSL certificate

How does an Enterprise Linux system with openssl 1.0.1+ verify that the CN=hostname value in the cert matches the server it resides on? Does it use a plain old reverse DNS lookup on the IP address of ...