Questions tagged [certificate]

Certificates are a Public Key and Identifying Information

Within public key cryptography (such as that used in SSL and TLS), you have both a private key (that you keep secret), and a public key (that you share widely).

In order to avoid MITM (Man In The Middle) attacks, rather than publishing just the raw public key, you normally share a Certificate. The Certificate contains your public key, along with information identifying you (such as the hostname of your website, and your organisation). The identifying information is authenticated by a Certificate Authority (CA), and can be used to ensure you're talking to the right person.

Certificates are normally issued by a Public Certificate Authority, but they can be self signed (the certificate is its own CA), or issued by a private CA.

1327 questions
0
votes
1 answer

ActiveMQ Artemis: TLS certificate reload

Can Apache ActiveMQ Artemis (v2.13.0) use an updated TLS certificate while running, or does it require a restart? I did not find something about it in Configuring Transports and Configuration Reload sections. When aiming towards short-living TLS…
Stephan
  • 275
  • 2
  • 7
0
votes
1 answer

Do I need to copy RootCA in machine 2 & 3's trusted root

I have 3 machines in domain and where I choose Machine1 to host asp.net web api application. I have create my own CA RootCA and put in Machine1's trusted root. then I issued one more certificate X with Machine1 fully qualified domain name from…
user584018
  • 123
  • 5
0
votes
0 answers

Apache forward proxy with mod_rewrite

The Story: I've to (forward) proxy a request - whith certificate checking - to a site which has more than 96 character long URL. The Apache mod_proxy implementation doesn't work URLs that longer 96 characters. I've tried mod_rewrite's RewriteRule…
0
votes
1 answer

When does a windows client notice that certificate is revoked?

We use code signing certificates, that we distribute through an autoenrollment group policy. These certificates were used to sign excel macros and are issued by an internal CA. Now, when try to revoke one of these certificates, they were listed in…
rumpi
  • 1
  • 1
0
votes
1 answer

Is there a way to automate deployment of user certificates with a Microsoft enterprise CA?

Users can request certificates from our enterprise CA via the AD Certificate Services web app or the certificate manager MMC snap-in. If I have a large number of users who wish to do this, is there any way to automate deployment of these…
Steve Gaucher
0
votes
2 answers

SSL Certificate error for self signed certificate although certificate is installed

we are using a server that is used by like 5 coworkers and is accessed by its web interface. It is a internal only website and doesn't have a valid SSL certificate as it is self signed. The certificate is deployed via GPO to the trusted root CA…
Rimini
  • 31
  • 5
0
votes
0 answers

Wrong certificate used when using the Windows L2TP VPN client

I have my VPN security gateway configured to only allow clients having a VPN computer certificate issued by a specific CA. Such a certificate is correctly installed on the client side. In addition to that, another machine certificate is installed on…
TomS
  • 175
  • 1
  • 1
  • 9
0
votes
1 answer

OpenVPN Access Server - Encounter the Warning X509_V_ERR_CERT_HAS_EXPIRED but the cert is actually not expired yet

I was trying to connect to my company openvpn network via MacOS openvpn application and hitting the warning "The server vpn.my_company.com has an UNTRUSTED SSL certificate. Allow the connection to proceed?" When clicking the "More details", the…
user87313
  • 103
  • 1
0
votes
0 answers

Why does replacing certificate in WebLogic now require TLS1.2

We replaced a self-signed certificate JKS with a signed certificate in WebLogic 12.2.1.3.0. The C# desktop applications that connect to a service hosted there now fail with "The request was aborted: Could not create SSL/TLS secure channel". That…
0
votes
1 answer

Two sites on the same server with unwanted redirection

I have two different sites domain1.com domain2.com Problem : I only can access domain2.com by using www.domain2.com If i try domain2.com it redirects to domain1.com. Configuration files: domain1.com.conf ServerName…
Ianagos
  • 11
  • 2
0
votes
2 answers

Why should I renew a cert instead of upload a new one in Exchange

I have a certificate for Exchange 2016 expiring in the next couple months and I have downloaded the new cert. I can go through the steps here to renew the cert but why couldn't I just upload the new cert and assign the roles to it, which seems far…
Zombian
  • 291
  • 2
  • 4
  • 14
0
votes
0 answers

Active Directory server is sending RST when client Hello is send over TLSv1.2

I am facing the same problem as stated Server sends RST after receiving Client Hello when binding certain certificate when I try to authenticate to AD (Active Directory server) over TLSv1.2. Wireshark capture is same as the posted in question. And…
0
votes
1 answer

How can I distribute end users certificates in an Enterprise

We us our own mechanism to create a signed certificate for each and every end user of an Enterprise. However, we'd like to use the Enterprise mechanisms (like AD) to distribute each user its designated certificate. How can we do it ? (AD answer…
feder
0
votes
1 answer

Renew Issuing CA Certificate via offline Root CA

I have an offline root CA and an enterprise issuing CA. I created a req from the issuing CA and issued a cert with it on the offline root CA. When I try to install the cert on the issuing CA with the Certification Authority snap in I get the…
Peter
  • 1
  • 1
  • 1
0
votes
1 answer

Windows 10 SSTP with self-signed certificates

I can't seem to get the Windows 10 sstp client to connect to the (router) sstp server I have tried numerous combinations when creating my self signed certificates (ca & server) but I have to admit that I'm a little stumped CA :…
azurtem
  • 1
  • 2