Questions tagged [ca]

A Certification Authority(CA) is a trusted third party which asserts the identity of a remote website.

References

696 questions
18
votes
1 answer

IIS Self-signed certificate trouble - 'The Parameter is incorrect'

I am trying to create a self-signed certificate in IIS 7 on Windows Server 2008, but I get the error, 'The parameter is incorrect'. I can't find any other information about this error, does anyone know what the problem is, or where I can look to to…
user1239299
  • 665
  • 8
  • 26
18
votes
3 answers

Subject Alternative Name is not copied to signed certificate

I use self-signed CA cert to sign other certificates. For some certs I need to specify subject alternative names. I can specify them during request generation (openssl req ...) and I see them in .csr file. Then I sign it with CA cert using openssl…
4ybaka
  • 2,954
  • 4
  • 16
  • 21
18
votes
3 answers

How to set ca-bundle path for OpenSSL in ruby

I am experiencing a problem in ruby, where an SSL cert could not be validated by OpenSSL. I think this is caused by the ca-bundle.pem not being known by the script. Is there a possibility to configure the path of the ca-bundle.pem manually?
Coxer
  • 1,694
  • 2
  • 26
  • 44
18
votes
3 answers

How to check if X509Certificate is CA certificate?

I have a X509Certificate instance in Java and I need to identify if it is a CA certificate or user certificate. Can anyone provide any help? Thanks in advance!
Jurica Krizanic
  • 1,072
  • 2
  • 11
  • 26
16
votes
1 answer

How to specify CA private key password for client certificate creation using OpenSSL

I am building a command line script to create a client certificate using OpenSSL "mini CA" feature. I have a CA certificate and CA private key encrypted with a password. With those things I am trying to create the client certificate and stumbled…
Dio F
  • 2,458
  • 1
  • 22
  • 39
15
votes
3 answers

How to make browser trust localhost SSL certificate?

Although, there are similar questions, and even good answers, they either don't concern themselves with localhost specifically, or ask about one particular option/solution (self-signed vs CA). What are the options? How do they compare? Ho do I do…
x-yuri
  • 16,722
  • 15
  • 114
  • 161
15
votes
4 answers

Understanding Various Certificates in Hyperledger fabric

Hello I am tryin to use hyperledger fabric for a block chain implementation. I did the first-network demo and found lot of certificates in it. I have tried arranging them hierarchically in below picture. I Have some questions related to them Why…
Katiyman
  • 827
  • 2
  • 12
  • 32
14
votes
2 answers

How to add an enterprise certificate authority (CA) to git on cygwin (and some linux distros)

When fetching with git on Cygwin you get: Fetching origin fatal: unable to access 'https://.../...git': SSL certificate problem: self signed certificate in certificate chain error: Could not fetch origin The certificate was added to…
Jason Pyeron
  • 2,388
  • 1
  • 22
  • 31
13
votes
3 answers

Android: List of available trusted root certificates

Is there a android developer page that lists all of the trusted root CAs? I know I can just pull the file, and list them using keytool - looking for a published web page.
wuntee
  • 12,170
  • 26
  • 77
  • 106
12
votes
4 answers

Python requests CA certificates as a string

Currently we're using an approach of putting CA Certificates on the server to access third party APIs. certificate_path = os.path.join(CERT_PATH, 'cacert.pem') certificate_key_path = os.path.join(CERT_PATH, 'cacert.key') response = requests.get(url,…
Laxmikant Ratnaparkhi
  • 4,745
  • 5
  • 33
  • 49
12
votes
2 answers

Programmatically read root CA certificates in iOS

The following code reads out the root certificates in macOS. I just wonder what are the equivalent code in iOS? https://github.com/HaxeFoundation/hxcpp/blob/7bd5ff3/src/hx/libs/ssl/SSL.cpp#L455-L491 CFMutableDictionaryRef search; CFArrayRef…
KevinResoL
  • 982
  • 8
  • 19
11
votes
1 answer

kubernetes k3s agent can't connect to master CA/SSL error

I am trying to deploy an application with k3s kubernetes. Currently I have two master nodes behind a load-balancer, and I have some issues connecting worker nodes to them. All nodes and the load-balancer runs in seperate vms. The load balancer is a…
Jonas Grønbek
  • 1,709
  • 2
  • 22
  • 49
11
votes
2 answers

Trust self-signed certificate CentOS 7

I am generating a self-signed certificate for a development server but I need it to be trusted in order to use some of the tools that will be using the certificate. This is what I have tried: openssl req -newkey rsa:2048 -x509 -nodes -keyout…
rink.attendant.6
  • 44,500
  • 61
  • 101
  • 156
11
votes
2 answers

Issue with my ca-certificates.crt

(I am on Ubuntu 14.10. uname -r => 3.16.0-31-generic) apt-get update Failed to fetch https://get.docker.com/ubuntu/dists/docker/main/binary-amd64/Packages server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile:…
user3538553
  • 1,443
  • 3
  • 15
  • 21
11
votes
2 answers

How to create own self-signed root certificate and intermediate CA to be imported in Java keystore?

How to create self-signed root certificate and intermediate CA to be imported in Java keystore? We will use this for SSL and TLS, and later for Client certificate based CLIENT-AUTH authentication. Using OpenSSL and KeyTool.
EpicPandaForce
  • 79,669
  • 27
  • 256
  • 428
1
2
3
46 47