Questions tagged [certificates]
A public-key certificate states that a specific public key belongs to a specific identity. Use this tag for all questions on certificates and authentication of public keys (not public-key authentication, which is authentication _using_ public-keys). If certificates are not a central issue in your question, then don't use this tag.
342
questions
0
votes
0
answers
17
views
Using A3 Token (Safenet 5100) in Ubuntu
The company where I work is upgrading the certificates for VPN access from A1 to A3, but I am having trouble getting the new A3 Token to work in Ubuntu.
By following a bunch of instructions from ...
0
votes
0
answers
8
views
download .ovpn file from pfsense from terminal
i found this here link
but problem here is that download is only for .key and .crt file.
Have anyone idea how to download ovpn file, cause i need to download whole bundle.
Or how to download bundle ...
0
votes
1
answer
11
views
How do I view information contained in a file produced by `pdfsig -dump`?
pdfsig shows some information about digital signature of a PDF document, and also allows to -dump it to file. How do I view all information from that file in accessible form? It contains much more ...
- 5,176
0
votes
0
answers
15
views
How to not use cacert in curl again and again
our certificate expires
then we get new certificate we uploaded that certificate though iam server certificates.
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_server-certs.html
...
0
votes
1
answer
24
views
keyUsage command not found (for create certificat in non interactive mode)
I would like to create a certificate files for my website.
In the past, I use a non interactive script for doing that and it work perfectly.
Now, I want to use again this script but it stop in this ...
- 103
0
votes
0
answers
28
views
SSL Install on Ubuntu for Nextcloud - Apache2 FAILED
I want to express, I am still learning :)
This is my first attempt at updating/installing an SSL certificate in any Linux platform.
My SSL Cert expired for my Nextcloud server and so I created the CSR/...
- 1
1
vote
1
answer
22
views
SSL: SAN not populated
I'm trying to create my self-signed certificate:
CA private key creation: openssl genrsa -out ca.key 2048
CA certificate creation (see ca.cnf's content bellow): openssl req -x509 -new -key ca.key -...
- 285
0
votes
0
answers
30
views
Passwordless SSH not working with Roumenpetrov PKIX-SSH
I have followed http://tech.ciges.net/blog/openssh-with-x509-certificates-how-to/ to use X509 certs for SSH and used Roumenpetrov's PKIX-SSH builds. Still passwordless SSH is not working. From /var/...
- 1
4
votes
1
answer
176
views
Why is curl, but not wget, having trust issues with software.download.prss.microsoft.com?
The following URL redirects to a microsoft.com subdomain: https://tb.rg-adguard.net/dl.php?go=3dd1ce66
Namely to https://software.download.prss.microsoft.com/db/Win10_20H2_v2_EnglishInternational_x64....
- 697
1
vote
1
answer
101
views
Why are so many strange certificate filenames ending with 0 in /etc/ssl/certs?
As we know that CA certificates locate in /etc/ssl/certs in debian.
cd /etc/ssl/certs
ls | grep 0$ |wc -l
126
I paset part of them here:
f081611a.0
f0c70a8d.0
f249de83.0
f30dd6ad.0
f3377b1b.0
...
- 85
2
votes
1
answer
67
views
Adding custom field to the subject line in a opensssl X509 certificate via command line
I am attempting to generate a CSR for a certificate and wish to include a unique id as part of the certificate subject line. this information shall be used by the TLS client for some purpose after the ...
- 155
1
vote
0
answers
33
views
Get Linux Executable Signing Certificate Information
I wanted to know if there was a way (some sort of library that I'm unaware of) that gets the signing certificate details of an executable. I know it's possible to sign a binary using openssl but how ...
- 11
3
votes
2
answers
2k
views
Using `openssl` to display all certificates of a PEM file
I can use the following command to display the certificate in a PEM file:
openssl x509 -in cert.pem -noout -text
But it will only display the information of the first certificate. A PEM file may also ...
- 178
0
votes
0
answers
14
views
Why did the final command to import the cert into the java keystore work?
Yesterday I had a bit of an adventure when we found out that there is a certificate that did not get updated somewhere. Turned out that besides the certs in the application and on the load balancers, ...
0
votes
0
answers
46
views
"You can now switch to a Let’s Encrypt certificate." - should I?
I recently apt-get dist-upgraded my Devuan GNU/Linux Chimaera machine. after upgrading the package jitsi-meet-web-config to version 1.0.5818-1, I get a message saying:
You can now switch to a Let’s ...
- 7,311
0
votes
0
answers
37
views
ssh-keygen: Provide CA passphrase without prompt during signing
I am using ssh-keygen operations similar to the following to sign SSH keys with a SSH CA:
# for SSH hosts
ssh-keygen -s $CACert -hn $FQDN $HostPubKey
# for SSH users
ssh-keygen -s $CACert -n $User $...
- 98
0
votes
1
answer
539
views
curl -- via proxy -- how to ignore self signed certificate
I can access insecure sites:
curl -k https://self-signed.badssl.com
I can access a site with mitmproxy:
curl --proxy 127.0.0.1:8080 --cacert ~/.mitmproxy/mitmproxy-ca-cert.pem https://google.com
...
- 264
0
votes
0
answers
115
views
How to add trusted certificates to openssl on LFS
I have an LFS system (11.0) with openssl. Whenever I use wget, I get an error that the certificate is not trusted. Where do I get and put trusted certificates?
- 37
0
votes
2
answers
389
views
Is it possible to install a custom CA certificate without the ca-certificates package on Debian?
Is it possible to install a custom ca certificate on Debian without installing the ca-certificate package?
I tend to run my servers beyond the lifespan of each release, and I always seem to have ...
- 684
2
votes
1
answer
3k
views
How to Convert .CER certificate to .CRT
I tried to to Convert Fiddler.CER certificate to .CRT format:
$ openssl x509 -in FiddlerRoot.cer -out FiddlerRoot.crt
unable to load certificate
139962232211264:error:0909006C:PEM routines:get_name:no ...
- 583
2
votes
1
answer
904
views
How to create a self-signed certificate for Okular PDF
I am at a loss. I want to create a self-signed certificate to sign PDFs with Okular. I have not found any step-by-step directions that work. I tried creating and installing a certificate, but Okular ...
- 69
0
votes
1
answer
4k
views
Server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
See edit below. We are having an issue where we are receiving an error on our Linux server that I am not receiving locally on my mac. on We are using an R library cfbfastR to fetch college football ...
- 145
4
votes
0
answers
122
views
Linux: Is it possible to encrypt a file so everybody in our organisation can view it? (but no one else) -> s/mime
In my organisation we have all s/mime installed in our email clients so we can verify our ID and send encrypted mails. These personal certificates are backed by a trusted server certificate. This ...
- 83
0
votes
0
answers
34
views
openssl certificate error for WinRM connection
I have on Windows server certificate which is valid and active and WinRM listener is active as well on port 5986 (telnet works) for WinRM connection that needs to be established from the Linux server.
...
- 188
2
votes
0
answers
241
views
Why was my root certificate not updated
LetsEncrypt migrated their root certificate from I believe DST Root CA X3 to ISRG Root X1 (at least 5 years ago I believe). The DST Root CA X3 certificate expired on 1-Oct-2021.
I have two Ubuntu 20....
- 121
1
vote
0
answers
403
views
Debian 11, OpenSSL 1.1.1k, adding and validating self-signed certificate does not work
I'm following this instruction to install self-signed certificate. Specifically:
create localhost.conf file with the following content:
[req]
default_bits = 2048
default_keyfile = localhost....
- 111
0
votes
1
answer
18
views
Who should be allowed access to /etc/kubernetes/pki/ca.crt?
Beginners' question.
Who would you allow access to /etc/kubernetes/pki/ca.crt?
What damage to you cluster if someone is not a cluster administrator has got access (e.g. copying and distributing, ...
3
votes
3
answers
3k
views
How to deal with www.postgres.org certificate expired?
I've started getting errors when getting certificate keys from the postgres website:
wget --quiet -O - https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add -
#6 0.310 --2021-10-04 20:56:35-...
- 131
0
votes
2
answers
966
views
No trusted certificate found when using Java for making request on HTTPS
I'm a Java developer and I need to use a particular version of java 8 (1.8.0_162) can't use OpenJDK either.
But, I'm getting this error when I try to connect / get / download / whatever from my java ...
- 101
2
votes
2
answers
517
views
Fedora: Citrix ICAClient SSL Error 61
Citrix workspace app fails to launch after downloading the .ica file.
The error says:
SSL Error
Contact your help desk with the following information:
You have not chosen to trust "DigiCert High ...
- 21
-1
votes
1
answer
1k
views
Debian 10 is somehow completely broken apt-get update / upgrade does not work
Debian 10 is somehow completely broken apt-get update / upgrade does not work the ca-certificates do not work I try to fix it for too long now but nothing works. that's why I hope someone can help me ...
- 3
1
vote
0
answers
146
views
How to configure mimproxy certificates on Arch Linux?
How are the steps to configure the certificates of mitmproxy on Arch Linux?
When opening mitm.it in the browser, it shows the following steps for Linux, but they are Ubuntu/Debian specific:
mv ...
- 4,121
0
votes
0
answers
263
views
Squid caught in loop/cert error
My goal is to have a kind of proxy, where the traffic is shrunk, by disabling ads, resizing images and stuff like that.
Now, I've been struggling with squid for a month, and I'm currently stuck with 2 ...
- 327
0
votes
0
answers
174
views
Bazel Remote Cache not working with certificates/TLS
I'm runnig Bazel remote cache from https://github.com/buchgr/bazel-remote inside docker, by runnig the following commands to start the http and grpc server:
docker pull buchgr/bazel-remote-cache
...
- 101
2
votes
1
answer
1k
views
Unable to get local issuer certificate (but my trusted CA-certificate store seems OK)
This has kept me busy for a good number of hours. I have read a good deal other articles and Stackexchange-questions, and tried other things, but no positive result so far.
Running Ubuntu20/Nginx/...
0
votes
0
answers
33
views
Renew certificate
(I deleted the earlier question. Rephrasing here for more clarity from my POV).
In my network, I do have one private CA who had issues certificates to 100 machines. Each machine has its expiry date ...
- 13.5k
2
votes
0
answers
710
views
NuGet `dotnet restore` doesn't work on Ubuntu 20.04 (Linux Mint 21) due to errors in the certificate chain
When I try to make a simple Unit Test project with the following command (inside a project folder called test):
dotnet new xunit
It fails and this is the output I get:
/usr/share/dotnet/sdk/5.0.301/...
- 121
0
votes
1
answer
420
views
openssl: force no default CA certificates, to verify private signed certificate
I would like to verify that my web-server is configured correctly with my self signed certificate. The web-server also has some regular purchased CA signed certificates.
The challenge I have is that I ...
2
votes
1
answer
45
views
how to access to raw cert chain of an SSL server?
I know how to get the cert chain presented by a server with
openssl s_client -showcerts -connect server.domain:portnum <<<''
But, what openssl prints is the "reconstructed" cert ...
- 233
0
votes
0
answers
458
views
Adding a self-signed cert in Linux Mint 20.1? [duplicate]
I'm playing around with aspnetcore in Linux Mint (an Ubuntu derivative), and I've run into issues with the dotnet dev-cert. The dotnet cli's "dotnet dev-certs https --trust" command doesn't ...
- 101
0
votes
1
answer
95
views
Why is this package (pdfc-gui) updates my ca-certificates, on Ubuntu 16.04?
I am trying to figure out if an application I installed can be trusted, based on the following output. I hope this is the correct platform to get some advice on the matter!
I installed this package (...
- 103
1
vote
2
answers
940
views
Connect with curl to FTPS server and download file
I'm able to connect to my FTPS server with TLS1.2 by curl, using --cert, --key and --cacert files. The command looks like:
curl -3 -k -v --ftp-ssl --tlsv1.2 --ftp-ssl-reqd --ftp-pasv --verbose \
...
- 1,937
0
votes
1
answer
107
views
Virtualmin wrong msg about SSL certificates expired
I've a dedicated server on which I use Webmin/Virtualmin. SSL is done through Let's Encrypt and renewal via a CRON job.
When I open VirtualMin, I've always a message saying
Some virtual servers' SSL ...
- 111
0
votes
0
answers
67
views
As a root user, I do not have permission to create/write any file in any directory
As a root user, I cannot create/edit any file in any directory all of a sudden with the following error.
E212: Can't open file for writing
Everything was working fine. The last thing I did was to ...
- 1
9
votes
2
answers
12k
views
How to permanently add self-signed certificate in Firefox?
When I go to the web interface of my home server Nextcloud via Firefox, I get the following message:
After I click Accept the Risk and Continue, and then the self-signed certificate of Nextcloud is ...
- 323
0
votes
1
answer
1k
views
How to add a custom root certificate MS Edge on Linux
I have to use MS Edge on Linux, and I need to my company's internal ca root certificate public key to validate internal sites.
The security section in Settings there is a "Manage certificates&...
- 180
0
votes
1
answer
47
views
Tools to investigate how DNS over TLS/HTTPS work / how resolve / if work correctly/ how establish tunnels etc
DoT DNS over TLS https://www.rfc-editor.org/rfc/rfc7858
DoH DNS over HTTPs https://www.rfc-editor.org/rfc/rfc8484
(nice explanation: https://blog.cloudflare.com/dns-encryption-explained/ - TL;DR- ...
0
votes
1
answer
574
views
CentOS certificate check fails behind proxy
I am trying to install Tensorflow Serving on a CentOS-based container image behind a corporate proxy. However, I have issues running this bazel build command:
$ bazel build -c opt //tensorflow_serving/...
- 265
0
votes
1
answer
570
views
How can I add CA certs as trusted for local user without root?
Is there a way for the CA certificate to be added on system wide, without root priviledges?
- 255
2
votes
1
answer
802
views
Listing installed certificates in alpine
I know there are several topics regarding installation of certiciates in alpine.
Is there a way however to list the already trusted root CA's in alpine?
- 2,225