A public-key certificate states that a specific public key belongs to a specific identity. Use this tag for all questions on certificates and authentication of public keys (not public-key authentication, which is authentication _using_ public-keys). If certificates are not a central issue in your ...

learn more… | top users | synonyms

0
votes
4answers
111 views

How can I find where the Location of SSL key file is?

I inherited a RedHat server and I'm trying to find the SSL key file that was used to generate the self signed cert so I can make a CSR. From what poking around I've done, I can't find it in any of ...
0
votes
3answers
21 views

Verify SSL for local computers

I have a small business network and for this network, one computer is DHCP-, DNS- and web server. It uses local domains like machinary.ao or resources.ao I'd like to use ssl. Computers and network ...
3
votes
1answer
6k views

Unable to locally verify the issuer's authority

I am not able to open any https URLs using wget or curl: $ wget https://www.python.org --2015-04-27 17:17:33-- https://www.python.org/ Resolving www.python.org (www.python.org)... 103.245.222.223 ...
2
votes
1answer
451 views

Configure SSL Mutual (Two-way) Authentication

I was asked to do it "Configure SSL Mutual (Two-way) Authentication" and I don't know where to start or how to test it . server and many clients . they can access code on server only if they have a ...
1
vote
1answer
4k views

How to remove SSL certificate?

I've been asked to remove certificates from some of our servers, but I don't know anything about httpd configuration. If I have one server where if I do this /usr/sbin/httpd -t -DDUMP_CERTS ...
0
votes
1answer
82 views

Can I reuse the certificate when setting up OpenVPN over stunnel?

I am setting up an OpenVPN server to run over stunnel following this tutorial. It asks that I create a self-signed certificate for stunnel on the server side. Since I already have one that was ...
0
votes
1answer
273 views

LPIC-1 for non-professional experienced user

I am interested in trying out the LPIC-1 certification however I am slightly worried that I may not have the needed professional experience to pass. I am still studying hard and running a lab with a ...
3
votes
0answers
300 views

Creating a signed subordinate CA for client certificates

I have a root self-signed CA which I've created for myself. With this CA (we'll call it country), I've created a server certificate and key for my webserver, nginx. I now would like to create a ...
2
votes
0answers
152 views

Unable to delete Root CA (UNIX: operation not permitted)

I am trying to delete a root certificate authority from my Mac OS machine. When I try this from the 'Keychainaccess' program it asks for my password and then shows 'ecKeychainItemDelete: ...
2
votes
0answers
88 views

Adding nssdb certificate from an install script

I am trying to write an script (postinst for a .deb package) that will install a secure websockets (wss:) application and a certificate that allows access from the Chrome browser. The developer has ...
2
votes
0answers
237 views

How to get certificate type from SSL Certificate of a domain?

Is there any way to get Certificate Type (EV/OV/DV) from the certificate? I tried the following command and get entire certificate at output, but can't find Certificate Type from it. $ openssl ...
2
votes
0answers
148 views

SSH + Certificate Authority server?

Is it possible to setup SSH (via pam for instance) to check the public key of the connecting client against a CA server? I've tried with gnupg (via gpg-agent --daemon --enable-ssh-support) and also ...
2
votes
0answers
358 views

SSL Configurations for Intermediate certificate

I had implement a mutual certificate authentication and it worked successfully for following steps : create root ca (self-signed) create server certificate and sign it with ca private key create ...
1
vote
0answers
23 views

Changing the port letsencrypt tries to connect on

So, one of my servers is behind NAT, and since there is already a publicly accessible apache server going on my LAN, I decided to access it from the outside with different ports, and remap them to the ...
1
vote
0answers
20 views

How do I get a certificate on a server from a certificate authority server using an OpenSSL request?

How do I get a successful request for a certificate from one Linux server to a Linux server that is a certificate authority? I'm using Centos 7 on both servers on the network. I'm using an OpenSSL ...
1
vote
0answers
210 views

Creating Self signed certificate for tomcat 6

I am trying to configure self signed certificate for our tomcat server. For that initially I created the keystore certificate file using keytool . The command I tried for this is keytool -genkey ...
1
vote
0answers
95 views

Add cacert certificates to kopete

ca-cert was recently removed from the ca-certificates bundle, and I would like to readd it, at least to kopete so I don't get the invalid certificate warnings because one of the jabber servers I ...
1
vote
0answers
609 views

ngircd / xchat SSL issues

I'm trying to setup a ngircd IRC server on Fedora 18 (which was installed using yum), but I'm having some SSL issues. I can connect to the server locally and remotely if I choose to "accept invalid ...
1
vote
0answers
504 views

How to add my own created certificate authority to system trusted repositories

I was told that I can add my created CA to trusted repositories/authorities in my system instead of adding it from browser and configuring in in ssl.conf. Yet I can't find anything similar on the ...
0
votes
0answers
7 views

Is there a tool to check Windows MSI's Digital Signatures Hash for Linux?

I would like to automate the signature check for MSI's in a linux box, is there a tool that can help me achieve this?
0
votes
0answers
5 views

Thunderbird SMIME certificate not imported automatically

I created own CA to sign SMIME certs for email encoding. Next I generated several certificates for particular users. Below script for generating such certs: openssl genrsa -des3 -out humble_coder.key ...
0
votes
0answers
98 views

certificate error while Adding Hosts in Icinga monitoring tool

I am getting certificate error while Adding Hosts in Icinga ! I am very new to it so not able to figure out the error but I have received proper keys and certificates from client ! sh -x ...
0
votes
0answers
11 views

Import certificates on tomcat

I have some difficulty to import our *.domain.com cert. I have the following files "<something>.crt" "<something>.csr" and "<something>.key". So what i need is to import this ...
0
votes
0answers
10 views

Certificate type

I am downloading certificate from given URL as: echo -n | openssl s_client -showcerts -connect url > certificate.ext Now, how do I find out, the saved certificate.ext file is actually of which ...
0
votes
0answers
66 views

fetchmail: Missing trust anchor certificate:

I try to setup fetchmail on mac for checkdomain.de and created a certificate .pem file in the cert directory of ssl by copying certificate from running this command: openssl s_client -connect ...
0
votes
0answers
42 views

authorize untrusted certificates

I'm trying to install WordPress on a server running Debian 7.5 and when using: wget http://wordpress.org/latest.tar.gz It says "the certificate of wordpress.org is not trustworthy" and "the ...
0
votes
0answers
30 views

how to create a certifying entity? create a Public Key Infrastructure (pki)

I know that must process and technologies used to create a linux infrastructure that allows me to have a server to make it certifying entity. For this I need to know what the technological options ...
0
votes
0answers
63 views

Exporting contact certificates in Evolution

I posted this here a couple of days ago, but now think I might have more luck here. Any help at all is greatly appreciated. I have been searching but unable to find a way to export my contact ...
0
votes
0answers
4k views

'Git clone' times out with 443 error message

git clone -v https://github.com/me/myproj Cloning into 'myproj'... <minutes pass> error: Failed connect to github.com:443; Operation now in progress while accessing ...
0
votes
0answers
158 views

How to determine the sequence of ordering certificates by browser?

I did a Mutual Certificate Authentication implementation with OpenSSL and Apache Web Server on CentOS platform. To simple explanation see this diagram: ---------- | ...