Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [certificates]

A public-key certificate states that a specific public key belongs to a specific identity. Use this tag for all questions on certificates and authentication of public keys (not public-key authentication, which is authentication _using_ public-keys). If certificates are not a central issue in your ...

1
vote
1answer
95 views
+50

Unable to install Let's Encrypt certificate on CentOS 7

I am trying to install a Let's Encrypt SSL certificate to my website using Securing Apache with Let's Encrypt on CentOS 7. My web server is (include version): Apache (cPanel) My hosting provider is: ...
2
votes
0answers
59 views

Add LDAP server certificate to trusted list and enable certificate verification

I am trying to use a secure LDAP connection via TLS ldaps://<server_name>:<port> for various applications (e.g. Gitlab). However, the connection raises certificate errors which is due to ...
1
vote
3answers
28 views

Certbot does not force Apache2 to read newly generated certificates

System: GNU/Linux Debian 9.5 headless. Situation & Question I have just caught the Let's Encrypt Certbot to re-generate the SSL certificate but did not reload Apache2. This has resulted in a ...
0
votes
0answers
6 views

How to change the base url for ca subsytem of dogtag pki?

Hi I've configured dogtag PKI on CEL7. I want to do the certificate enrollment over scep. Currently the server responds to URLs of the form :/ca/cgi-bin/pkiclient.exe?. But the client is sending the ...
0
votes
1answer
35 views

zscaler certificate issue

Do any one have idea what could be error reason and how it can be resolved? [root@Linux ~]$ wget https://www.google.com --2018-10-19 07:46:25-- https://www.google.com/ Resolving www.google.com... ...
0
votes
0answers
15 views

How to install SSL and DSC certificates?

I generated a keystore and using that I got the SSL. I imported CA certificates and trust certificates to the keystore. After that, I need to implement the DSC so I had kept a backup of the keystore ...
2
votes
1answer
59 views

How can I view certificate details on a smart card

I am using p11tool on CentOS to read a PIV smart card. The card is being read via the coolkey package driver (using libcoolkeypk11.so, per p11-kit list-modules) I can get a listing of the certs on ...
3
votes
0answers
22 views

Authentication of users via HTTPd with certificates and two CAs

I would like to implement an internal site for our company, with certificate authentication used wherever possible. I have run into (and tried) various examples where one creates their own self-signed ...
0
votes
0answers
99 views

Certificate validation failure while using cisco anyconnect with pfx certificates

I have installed cisco anyconnect secure mobile client 4.2.01022 (+all required packages) on Linux Mint 18.3 Sylvia (kernel 4.17.9). Then added .pfx certificates to gnone2-key storage. Then I ...
0
votes
0answers
46 views

Centos 7.5: MOK Manager does not show up

I'm going to install VMWARE‌ drivers, i.e. vmmon and vmnet, on my CentOS. However since their signature and certificate are not installed on CentOS, I had to sign them myself and install my sign/...
0
votes
0answers
38 views

problem with ejbca user certificate

I have configured and installed EJBCA 6.1.1.3 tpgether with JBOSS 7.1 on centos 7. Application is connected to application h2 database. I need your help with superuser (admin) access to web portal. ...
2
votes
1answer
548 views

Adding a root certification authority to a java application

I've installed Jenkins on CentOS7 and I was getting an SSL error when trying to update/install plugins. After some investigation, it turned out I had a missing root CA certificate in the Java CA store....
0
votes
1answer
27 views

Create self-signed certificate on Suse Linux 4.4

I try to create a self-signed certificate for a intranet. I am following this suse documentation. It says: Change into the directory /usr/share/doc/packages/apache2 and run the following command:...
1
vote
1answer
79 views

Temporary SSH access for SFTP

I have a home server which hosts shared files to a set of users. When adding new users I have (in the past) set up user accounts which belong to an 'SFTP only' group that chroots them to the shared ...
0
votes
0answers
439 views

Can't load certificate

When I am trying to sign my cert I keep getting this error [root@sls0626 CA]# openssl ca -out newcerts/testcert.pem -infiles requests/testcsr.pem Using configuration from /etc/pki/tls/openssl.cnf ...
0
votes
1answer
294 views

valid SSL certificate verification reports as “Self-signed” and fails on ubuntu 14.04 for godaddy CA signed sites, despite root CAs being installed

System: Ubuntu 14.04, apt-upgraded to the latest. openssl, ca-certificates, wget installed Symptoms: wget https://api.tcell.io will result in this error: ERROR: cannot verify api.tcell.io's ...
0
votes
0answers
21 views

Browsing and cloning issue in Kali, Certificates issue? [duplicate]

I recently installed Kali in a virtual machine to set my own little security lab. It seems I can't access many websites I would consider secure such as github (cloning in terminal or browsing). I ...
2
votes
1answer
390 views

how to update ca-bundle.crt with local company-root.crt

I am on RHEL 6.9 When I run the command sudo rpm --import https://packages.microsoft.com/keys/microsoft.asc I get the following message curl performs SSL certificate verification by default, using ...
1
vote
2answers
3k views

Can't connect to remote server using RDP remmina after upgrade

I recently upgraded my Ubuntu to 18.04, and now my Remmina cannot connect to a windows server we use at work. Now I am getting a popup about certificates. It asks if I want to accept the certificate, ...
1
vote
2answers
364 views

How to verify that ssh certificate was signed by specified ssh CA private key?

I am trying to harden my ssh setup using this material. It works fine, but I've got a question which I'm struggling to find the answer to. Does anyone know if there is a way to check the ssh host/...
0
votes
2answers
1k views

Self-signed certificate gives error “x509: certificate signed by unknown authority”

I want to establish a secure connection with self-signed certificates. I used the following conf file for openssl [req] distinguished_name = req_distinguished_name x509_extensions = v3_req prompt = ...
-2
votes
2answers
148 views

Which certificate gives more skills LPIC or RHCSA and which distro to choose CentOS or RedHat? [closed]

Can you give me some advise on which cert should I focus? LPIC or RHCSA? I want to do one of the certifications to learn some more skills and prove that I know the things at some level. From what I ...
0
votes
1answer
217 views

Command to get ssl certificate pinning from certificate

There is a new certificate in pem format. How to get from it (using openssl?) a format expeced by ios? (example: https://github.com/Alamofire/Alamofire/blob/master/Source/ServerTrustPolicy.swift) I've ...
1
vote
0answers
278 views

Using curl with certificates on Ubuntu 16.04

I'm trying to use the API for the Swedish payment service Swish on my Ubuntu server, but I can't get it to work. I believe the problem is with the certificates. I have generated a CSR (without a pass ...
1
vote
3answers
70 views

Copying second occurrence pattern to a new file in sed

I am new to this forum. I have a quick question. Have a certificate file which has 2 certificates in it. Starts with ---BEGIN CERTIFICATE-- and ends with ---END CERTIFICATE----. Example: ---BEGIN ...
2
votes
2answers
422 views

Problems with ldap userCertificate attribute

I'm trying to use the 'userCertificate' attribute to hold a 'der' file. I can happily add my certificate using the ldif: dn: cn=bob,ou=users,dc=home changetype: modify add: userCertificate;...
0
votes
0answers
124 views

Where to put information from `key` entry of OpenVPN config file in pfSense?

I have the following config file which works well with native OpenVPN client client dev tap proto udp port 1198 remote myhost.com 1194 persist-key persist-tun tls-client ca my-ca.crt cert my-...
0
votes
2answers
971 views

Curl not returning response

I have a scenario where I was using curl --noproxy "*" https://.. to get the response but suddenly when I use it now it doesn't return me the response instead it says curl: (60) Peer certificate ...
1
vote
3answers
254 views

Checking whether a date is within the next week

Total Linux beginner - Trying to create a script for automatic SSL renewal with LetsEncrypt. Daily script begins with checking when SSL expiry is: response="$(openssl x509 -enddate -noout -in ~/...
4
votes
2answers
2k views

Apache: I have lost my private.key, is it possible to re-create it from certificate.crt?

I lost my private.key file, which is necessary for the proper operation of my SSL certificate. I have only the certificate.crt file. Is it possible to generate private.key file from certificate.crt ...
1
vote
2answers
465 views

OpenSSL fetches different SSL certificate than the one obtained via a browser

I need to download a SSL cert in PEM format from a HTTPS website, https://api.paczkomaty.pl . So I am using OpenSSL to do that: openssl s_client -connect api.paczkomaty.pl:443 > myfile openssl ...
1
vote
1answer
279 views

openssl -showcerts with -servername gives wrong anchor/root?

Despite reading multiple SO posts on this topic (eg and eg), openssl s_client -showcerts -servername downloads the wrong anchor/root certificate, whereas my web browser shows the correct anchor/root ...
2
votes
0answers
507 views

Timeout error after https configuration on CentOS 7

I have an app that has been running for 2 years now via http. Now we want to move to https for better security. Our OS is CentOS Linux 7. We have a virtual host config in /etc/httpd/sites-available ...
0
votes
1answer
246 views

Restrict SSH CA certificates to specific users/groups

Is it possible to restrict the use of CA certificates to specific users/principals/groups? The use case is that I'd like to have 2 CA certificates. One would be used as part of an automated system to ...
0
votes
0answers
45 views

How to specify certificate file instead of credentials to login to the remote host via RDP?

I've copied my certificate from EC2 instance into ~/.freerdp/certs folder. Then I run: $ xfreerdp --no-tls --certificate-name MyCertFile 54.166.17.xxx connected to 54.166.17.xxx:3389 Password: ...
2
votes
0answers
349 views

Chrome Chromium should accept self signed certifcates

Yes, this question has been asked earlier here, but the facts, that none of the answers worked out for me, and that the question is pretty old (2011) makes me ask it again: How could I install my own ...
0
votes
0answers
25 views

Thunderbird and system-wide certificate authorities

I need to install a CA for a mail server that works for Thunderbird (technically icedove) and other mail clients. Other mail clients are easy, I just take the following step: cp ca.crt /usr/share/ca-...
0
votes
1answer
70 views

How do root ca certificates get updated on linux?

I was reading about adding new root CA certificates. I have figured that out but I wanted to know how already existing certificates get updated? Do they get updated over network every time the machine ...
0
votes
2answers
420 views

Can't clone https urls with git

After the upgrade to Fedora 27, I can't clone urls using https anymore, ssh works fine. The error is: fatal: unable to access 'https://repo-url': SSL certificate problem: unable to get local issuer ...
1
vote
2answers
214 views

Where does the certificate chain from openssl come from?

I am trying to verify the chain for flo2cash.com openssl gives me this: openssl s_client -showcerts -connect flo2cash.com:443 CONNECTED(00000003) depth=3 C = SE, O = AddTrust AB, OU = AddTrust ...
0
votes
0answers
38 views

GNU IceCat and CAcert root certificate

Wikipedia about GNU IceCat: In version 3.0.2-g1, the certificate of CAcert.org, a certificate authority, has been added to the list of trusted root certificates. Concern about that decision has ...
2
votes
1answer
166 views

List of self-signed certificates on the server [closed]

Is there a way to list all the self-signed certificate on the server, or maybe verify if a certificate for a port is a self-signed certificate or not?
1
vote
0answers
387 views

NSS Version Update For Ubuntu 16.04

Our root certificate added to NSS version which is 3.30.2 but on Ubuntu-16.04 the version of NSS is 3.28.4 thus our certificate appear as untrusted on browsers and we have receiving complaint. This ...
1
vote
1answer
433 views

Self-Signed Certificate with CRL DP? Is this even possible?

First off, this is a very stupid question, feel free to down vote it due to that. I'm use to creating self-signed certificates for local use via: openssl req -newkey rsa:2048 -nodes -keyout key....
0
votes
1answer
232 views

Nagios: are certificates required for SSL/TLS?

Configuring check_nrpe and NRPE daemon with --enable-ssl generates a DH key pair. Are these DH keys enough to establish SSL connection? Or do we need certs and keys signed by a CA? Docs say ...
1
vote
0answers
53 views

Ability to use GNUPG's Webkey as a Web Services authentication mechanism

Is there a way to use GNUPG's new Webkey capability to create a federated passwordless public key authentication mechanism for web services login? Something like the following architecture: .----...
7
votes
1answer
306 views

Wget cannot validate https://ftp.gnu.org?

I'm working on Solaris and trying to upgrade Git by building Git and all of its dependencies from sources. Wget is failing to download a dependency, which is located at https://ftp.gnu.org/gnu/...
0
votes
2answers
275 views

What's wrong with my SSL certificate?

I've got a Nginx server with SSL certificate signed by a my own CA (EIT-CA-G2) at https://ds-client.demo.e-it.nz For some reason both my Chrome 61 and SSL Labs tester complain about name mismatch. ...
1
vote
1answer
318 views

Local SSL Certificates in Chrom(e/ium) 63

I have asked a similar question here before. But the solution provided has stopped working. I am trying to get ssl certificates for local hosts. I do not need them to be official, they only need to ...
0
votes
2answers
47 views

Black-listing client side certificates in Apache2?

Is there a way to black-list a client-side certificate issued to an specific user? I currently have a case where a few malicious actors have my website's client side certificates and I do not know ...