Questions tagged [certificates]

A public-key certificate states that a specific public key belongs to a specific identity. Use this tag for all questions on certificates and authentication of public keys (not public-key authentication, which is authentication _using_ public-keys). If certificates are not a central issue in your question, then don't use this tag.

Filter by
Sorted by
Tagged with
0 votes
0 answers
17 views

Using A3 Token (Safenet 5100) in Ubuntu

The company where I work is upgrading the certificates for VPN access from A1 to A3, but I am having trouble getting the new A3 Token to work in Ubuntu. By following a bunch of instructions from ...
user avatar
0 votes
0 answers
8 views

download .ovpn file from pfsense from terminal

i found this here link but problem here is that download is only for .key and .crt file. Have anyone idea how to download ovpn file, cause i need to download whole bundle. Or how to download bundle ...
user avatar
0 votes
1 answer
11 views

How do I view information contained in a file produced by `pdfsig -dump`?

pdfsig shows some information about digital signature of a PDF document, and also allows to -dump it to file. How do I view all information from that file in accessible form? It contains much more ...
user avatar
  • 5,176
0 votes
0 answers
15 views

How to not use cacert in curl again and again

our certificate expires then we get new certificate we uploaded that certificate though iam server certificates. https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_server-certs.html ...
user avatar
0 votes
1 answer
24 views

keyUsage command not found (for create certificat in non interactive mode)

I would like to create a certificate files for my website. In the past, I use a non interactive script for doing that and it work perfectly. Now, I want to use again this script but it stop in this ...
user avatar
  • 103
0 votes
0 answers
28 views

SSL Install on Ubuntu for Nextcloud - Apache2 FAILED

I want to express, I am still learning :) This is my first attempt at updating/installing an SSL certificate in any Linux platform. My SSL Cert expired for my Nextcloud server and so I created the CSR/...
user avatar
  • 1
1 vote
1 answer
22 views

SSL: SAN not populated

I'm trying to create my self-signed certificate: CA private key creation: openssl genrsa -out ca.key 2048 CA certificate creation (see ca.cnf's content bellow): openssl req -x509 -new -key ca.key -...
user avatar
  • 285
0 votes
0 answers
30 views

Passwordless SSH not working with Roumenpetrov PKIX-SSH

I have followed http://tech.ciges.net/blog/openssh-with-x509-certificates-how-to/ to use X509 certs for SSH and used Roumenpetrov's PKIX-SSH builds. Still passwordless SSH is not working. From /var/...
user avatar
  • 1
4 votes
1 answer
176 views

Why is curl, but not wget, having trust issues with software.download.prss.microsoft.com?

The following URL redirects to a microsoft.com subdomain: https://tb.rg-adguard.net/dl.php?go=3dd1ce66 Namely to https://software.download.prss.microsoft.com/db/Win10_20H2_v2_EnglishInternational_x64....
user avatar
  • 697
1 vote
1 answer
101 views

Why are so many strange certificate filenames ending with 0 in /etc/ssl/certs?

As we know that CA certificates locate in /etc/ssl/certs in debian. cd /etc/ssl/certs ls | grep 0$ |wc -l 126 I paset part of them here: f081611a.0 f0c70a8d.0 f249de83.0 f30dd6ad.0 f3377b1b.0 ...
user avatar
  • 85
2 votes
1 answer
67 views

Adding custom field to the subject line in a opensssl X509 certificate via command line

I am attempting to generate a CSR for a certificate and wish to include a unique id as part of the certificate subject line. this information shall be used by the TLS client for some purpose after the ...
user avatar
  • 155
1 vote
0 answers
33 views

Get Linux Executable Signing Certificate Information

I wanted to know if there was a way (some sort of library that I'm unaware of) that gets the signing certificate details of an executable. I know it's possible to sign a binary using openssl but how ...
user avatar
3 votes
2 answers
2k views

Using `openssl` to display all certificates of a PEM file

I can use the following command to display the certificate in a PEM file: openssl x509 -in cert.pem -noout -text But it will only display the information of the first certificate. A PEM file may also ...
user avatar
0 votes
0 answers
14 views

Why did the final command to import the cert into the java keystore work?

Yesterday I had a bit of an adventure when we found out that there is a certificate that did not get updated somewhere. Turned out that besides the certs in the application and on the load balancers, ...
user avatar
0 votes
0 answers
46 views

"You can now switch to a Let’s Encrypt certificate." - should I?

I recently apt-get dist-upgraded my Devuan GNU/Linux Chimaera machine. after upgrading the package jitsi-meet-web-config to version 1.0.5818-1, I get a message saying: You can now switch to a Let’s ...
user avatar
  • 7,311
0 votes
0 answers
37 views

ssh-keygen: Provide CA passphrase without prompt during signing

I am using ssh-keygen operations similar to the following to sign SSH keys with a SSH CA: # for SSH hosts ssh-keygen -s $CACert -hn $FQDN $HostPubKey # for SSH users ssh-keygen -s $CACert -n $User $...
user avatar
  • 98
0 votes
1 answer
539 views

curl -- via proxy -- how to ignore self signed certificate

I can access insecure sites: curl -k https://self-signed.badssl.com I can access a site with mitmproxy: curl --proxy 127.0.0.1:8080 --cacert ~/.mitmproxy/mitmproxy-ca-cert.pem https://google.com ...
user avatar
  • 264
0 votes
0 answers
115 views

How to add trusted certificates to openssl on LFS

I have an LFS system (11.0) with openssl. Whenever I use wget, I get an error that the certificate is not trusted. Where do I get and put trusted certificates?
user avatar
0 votes
2 answers
389 views

Is it possible to install a custom CA certificate without the ca-certificates package on Debian?

Is it possible to install a custom ca certificate on Debian without installing the ca-certificate package? I tend to run my servers beyond the lifespan of each release, and I always seem to have ...
user avatar
  • 684
2 votes
1 answer
3k views

How to Convert .CER certificate to .CRT

I tried to to Convert Fiddler.CER certificate to .CRT format: $ openssl x509 -in FiddlerRoot.cer -out FiddlerRoot.crt unable to load certificate 139962232211264:error:0909006C:PEM routines:get_name:no ...
user avatar
  • 583
2 votes
1 answer
904 views

How to create a self-signed certificate for Okular PDF

I am at a loss. I want to create a self-signed certificate to sign PDFs with Okular. I have not found any step-by-step directions that work. I tried creating and installing a certificate, but Okular ...
user avatar
0 votes
1 answer
4k views

Server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none

See edit below. We are having an issue where we are receiving an error on our Linux server that I am not receiving locally on my mac. on We are using an R library cfbfastR to fetch college football ...
user avatar
  • 145
4 votes
0 answers
122 views

Linux: Is it possible to encrypt a file so everybody in our organisation can view it? (but no one else) -> s/mime

In my organisation we have all s/mime installed in our email clients so we can verify our ID and send encrypted mails. These personal certificates are backed by a trusted server certificate. This ...
user avatar
0 votes
0 answers
34 views

openssl certificate error for WinRM connection

I have on Windows server certificate which is valid and active and WinRM listener is active as well on port 5986 (telnet works) for WinRM connection that needs to be established from the Linux server. ...
user avatar
  • 188
2 votes
0 answers
241 views

Why was my root certificate not updated

LetsEncrypt migrated their root certificate from I believe DST Root CA X3 to ISRG Root X1 (at least 5 years ago I believe). The DST Root CA X3 certificate expired on 1-Oct-2021. I have two Ubuntu 20....
user avatar
1 vote
0 answers
403 views

Debian 11, OpenSSL 1.1.1k, adding and validating self-signed certificate does not work

I'm following this instruction to install self-signed certificate. Specifically: create localhost.conf file with the following content: [req] default_bits = 2048 default_keyfile = localhost....
user avatar
0 votes
1 answer
18 views

Who should be allowed access to /etc/kubernetes/pki/ca.crt?

Beginners' question. Who would you allow access to /etc/kubernetes/pki/ca.crt? What damage to you cluster if someone is not a cluster administrator has got access (e.g. copying and distributing, ...
user avatar
3 votes
3 answers
3k views

How to deal with www.postgres.org certificate expired?

I've started getting errors when getting certificate keys from the postgres website: wget --quiet -O - https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add - #6 0.310 --2021-10-04 20:56:35-...
user avatar
0 votes
2 answers
966 views

No trusted certificate found when using Java for making request on HTTPS

I'm a Java developer and I need to use a particular version of java 8 (1.8.0_162) can't use OpenJDK either. But, I'm getting this error when I try to connect / get / download / whatever from my java ...
user avatar
2 votes
2 answers
517 views

Fedora: Citrix ICAClient SSL Error 61

Citrix workspace app fails to launch after downloading the .ica file. The error says: SSL Error Contact your help desk with the following information: You have not chosen to trust "DigiCert High ...
user avatar
-1 votes
1 answer
1k views

Debian 10 is somehow completely broken apt-get update / upgrade does not work

Debian 10 is somehow completely broken apt-get update / upgrade does not work the ca-certificates do not work I try to fix it for too long now but nothing works. that's why I hope someone can help me ...
user avatar
  • 3
1 vote
0 answers
146 views

How to configure mimproxy certificates on Arch Linux?

How are the steps to configure the certificates of mitmproxy on Arch Linux? When opening mitm.it in the browser, it shows the following steps for Linux, but they are Ubuntu/Debian specific: mv ...
user avatar
0 votes
0 answers
263 views

Squid caught in loop/cert error

My goal is to have a kind of proxy, where the traffic is shrunk, by disabling ads, resizing images and stuff like that. Now, I've been struggling with squid for a month, and I'm currently stuck with 2 ...
user avatar
  • 327
0 votes
0 answers
174 views

Bazel Remote Cache not working with certificates/TLS

I'm runnig Bazel remote cache from https://github.com/buchgr/bazel-remote inside docker, by runnig the following commands to start the http and grpc server: docker pull buchgr/bazel-remote-cache ...
user avatar
  • 101
2 votes
1 answer
1k views

Unable to get local issuer certificate (but my trusted CA-certificate store seems OK)

This has kept me busy for a good number of hours. I have read a good deal other articles and Stackexchange-questions, and tried other things, but no positive result so far. Running Ubuntu20/Nginx/...
user avatar
0 votes
0 answers
33 views

Renew certificate

(I deleted the earlier question. Rephrasing here for more clarity from my POV). In my network, I do have one private CA who had issues certificates to 100 machines. Each machine has its expiry date ...
user avatar
  • 13.5k
2 votes
0 answers
710 views

NuGet `dotnet restore` doesn't work on Ubuntu 20.04 (Linux Mint 21) due to errors in the certificate chain

When I try to make a simple Unit Test project with the following command (inside a project folder called test): dotnet new xunit It fails and this is the output I get: /usr/share/dotnet/sdk/5.0.301/...
user avatar
0 votes
1 answer
420 views

openssl: force no default CA certificates, to verify private signed certificate

I would like to verify that my web-server is configured correctly with my self signed certificate. The web-server also has some regular purchased CA signed certificates. The challenge I have is that I ...
user avatar
2 votes
1 answer
45 views

how to access to raw cert chain of an SSL server?

I know how to get the cert chain presented by a server with openssl s_client -showcerts -connect server.domain:portnum <<<'' But, what openssl prints is the "reconstructed" cert ...
user avatar
  • 233
0 votes
0 answers
458 views

Adding a self-signed cert in Linux Mint 20.1? [duplicate]

I'm playing around with aspnetcore in Linux Mint (an Ubuntu derivative), and I've run into issues with the dotnet dev-cert. The dotnet cli's "dotnet dev-certs https --trust" command doesn't ...
user avatar
  • 101
0 votes
1 answer
95 views

Why is this package (pdfc-gui) updates my ca-certificates, on Ubuntu 16.04?

I am trying to figure out if an application I installed can be trusted, based on the following output. I hope this is the correct platform to get some advice on the matter! I installed this package (...
user avatar
  • 103
1 vote
2 answers
940 views

Connect with curl to FTPS server and download file

I'm able to connect to my FTPS server with TLS1.2 by curl, using --cert, --key and --cacert files. The command looks like: curl -3 -k -v --ftp-ssl --tlsv1.2 --ftp-ssl-reqd --ftp-pasv --verbose \ ...
user avatar
  • 1,937
0 votes
1 answer
107 views

Virtualmin wrong msg about SSL certificates expired

I've a dedicated server on which I use Webmin/Virtualmin. SSL is done through Let's Encrypt and renewal via a CRON job. When I open VirtualMin, I've always a message saying Some virtual servers' SSL ...
user avatar
  • 111
0 votes
0 answers
67 views

As a root user, I do not have permission to create/write any file in any directory

As a root user, I cannot create/edit any file in any directory all of a sudden with the following error. E212: Can't open file for writing Everything was working fine. The last thing I did was to ...
user avatar
9 votes
2 answers
12k views

How to permanently add self-signed certificate in Firefox?

When I go to the web interface of my home server Nextcloud via Firefox, I get the following message: After I click Accept the Risk and Continue, and then the self-signed certificate of Nextcloud is ...
user avatar
  • 323
0 votes
1 answer
1k views

How to add a custom root certificate MS Edge on Linux

I have to use MS Edge on Linux, and I need to my company's internal ca root certificate public key to validate internal sites. The security section in Settings there is a "Manage certificates&...
user avatar
  • 180
0 votes
1 answer
47 views

Tools to investigate how DNS over TLS/HTTPS work / how resolve / if work correctly/ how establish tunnels etc

DoT DNS over TLS https://www.rfc-editor.org/rfc/rfc7858 DoH DNS over HTTPs https://www.rfc-editor.org/rfc/rfc8484 (nice explanation: https://blog.cloudflare.com/dns-encryption-explained/ - TL;DR- ...
user avatar
0 votes
1 answer
574 views

CentOS certificate check fails behind proxy

I am trying to install Tensorflow Serving on a CentOS-based container image behind a corporate proxy. However, I have issues running this bazel build command: $ bazel build -c opt //tensorflow_serving/...
user avatar
0 votes
1 answer
570 views

How can I add CA certs as trusted for local user without root?

Is there a way for the CA certificate to be added on system wide, without root priviledges?
user avatar
  • 255
2 votes
1 answer
802 views

Listing installed certificates in alpine

I know there are several topics regarding installation of certiciates in alpine. Is there a way however to list the already trusted root CA's in alpine?
user avatar
  • 2,225

1
2 3 4 5
7