Questions tagged [certificate]

Certificates are a Public Key and Identifying Information

Within public key cryptography (such as that used in SSL and TLS), you have both a private key (that you keep secret), and a public key (that you share widely).

In order to avoid MITM (Man In The Middle) attacks, rather than publishing just the raw public key, you normally share a Certificate. The Certificate contains your public key, along with information identifying you (such as the hostname of your website, and your organisation). The identifying information is authenticated by a Certificate Authority (CA), and can be used to ensure you're talking to the right person.

Certificates are normally issued by a Public Certificate Authority, but they can be self signed (the certificate is its own CA), or issued by a private CA.

1415 questions
-1
votes
1 answer

CA server is going to be decommissioned. What will happen with internal-reverse proxy connection?

Tell me please what will happen if my ssl CA server is decommissioned and I am using certificates signed by this CA to establish connection between internal Apaches and reverse proxies Apaches? SSLVerifyClient properties in Apaches are set to…
Dmytro
  • 11
-1
votes
1 answer

802.1x authentication fails

I have a domain with a Subordinate CA. I acquired the SubCA from our CA which is offline. The SubCA authenticates 802.1X communications. Every week we have an issue with our 802.1X where it cannot reach the revocation list of the Sub CA. We turn off…
JukEboX
  • 931
-1
votes
1 answer

Can we use double quotes (") as the first character for an SSL certificate alias name? Naming conventions recommended by stds?

Testing my SSL certificate alias name with double quotes (") as my first character, like "abcd" but connection failed with below errors, 05-15 18:55:03.744 13646 13646 D wpa_supplicant: SSL: Initializing TLS engine keystore 05-15 18:55:03.746 13646…
-1
votes
1 answer

SOAP Webservice HTTPS request

I would like more informations about how to configure a server to test a SOAP request. The webservice provider sent me two ".cer" files that I need to install in a apache server. In my ssl vhost conf file I usually work with : SSLCertificateFile…
Jojo
  • 1
  • 1
-1
votes
1 answer

How to verify signed file?

How to check a validity of a file using openssl and cms? I've got a file (foo.bin) and a signature (foo.bin.cms) which is include x509 der format certificate. is there any way to check validity of the file with it cert? I can find SHA256 of foo.bin,…
-1
votes
1 answer

Can I create an SSL Certificate to a domain that redirects to other domain servers?

I hope you could help me with this one. Here is the case: I have a domain in ZoneEdit name dummysite.org . This domain has the following A records: HOST IP ADDRESS TTL @.dummysite.org 193.10.xx.xx default @.dummysite.org 52.67.xxx.xxx default…
-1
votes
1 answer

SSL certificate

I have root and intermediate certificate, and I need to create the certificate which I need to install on RADIUS server. However, I don't have clear idea in my head about this. Here are my questions: How to create the certificate? Do I first need to…
Quirik
  • 97
  • 2
-1
votes
1 answer

Cant Enroll/renew Certificate : Server 2008R2 as client ans Server 2019 as CA

I have an issue with all my 2008R2 servers, they can no longer enroll/renew certificates. It works with windows 10 and server 2012 R2 as client. Error is RPC not available. From Event Viewer L’inscription de certificat pour Système local n’a pas pu…
Alex Lum
  • 267
-2
votes
1 answer

ESXi 6.5 web client mutual SSL authentication

Has anyone done it? Don't like the idea of relying exclusively on a user and password. Thanks!
-2
votes
1 answer

ssl certificate for .ca and .com

I have a mail server which has a domain pointer with a .ca and .com (ie. mail.example.com and mail.example.ca). Is it possible to have an SSL certificate for each for that mail server? I am running Qmail with an Apache Web server front. I tried to…
-2
votes
1 answer

Let's Encrypt Certbot DNS 01 Challenge

I'm hosting my own webserver and currently don't use port 80 because my ISP has blocked it. But I found out that my ISP doesn't actually block port 443, so I attempted to use Certbot on my domain with a txt record (DNS 01 Challenge I believe it is…
Erik
  • 101
-2
votes
1 answer

Need Help Forcing SSL for Remote Desktop

I have a standard windows 2008 R2 server (non-domain). I have a web service (non-IIS) I have a certificate issues from "GlobalSign" that came in a .pfx file. It's properties allow for Server Authentication and Client Authentication. I have an RDP…
-2
votes
2 answers

Why does domain hosted with no-ip.org get rejected by browser's phishing filter/malware detection

I'm trying to host a tiny website on my home server (Windows 2012) and I am using a domain hosted with no-ip.org. That domain is forwarded to my server here at home, which is only hooked up to a simple DSL router, but people tell me that when…
John
  • 97
-2
votes
1 answer

How to discover HTTPS servers on local network with certificate for particular hostname

I am making a network-connected device (using Raspberry Pi 4 inside), and I would like a way for these devices to discover each other (when on the same local subnet). I am vaguely aware of protocols like SSDP / UPnP which can help with things like…
jacobq
  • 132
-3
votes
1 answer

Buying a certificate for APIs

Our requirements are simply to secure end-to-end communication over https://. We need it from a CA that will be available on most android / iphones. The variety of certificates out there are simply mind boggling and range from free to 1000USD.…
1 2 3
…
94
95