Questions tagged [ca]

A Certification Authority(CA) is a trusted third party which asserts the identity of a remote website.

References

696 questions
11
votes
2 answers

Is there a way to check if the SSL digital certificate is valid without installing on the web server?

Are there any tools or mechanism(s) which can help validate a CA issued SSL certificate before installing it on the target web server?
Suresh Kumar
  • 11,241
  • 9
  • 44
  • 54
10
votes
1 answer

R Peer certificate cannot be authenticated with given CA certificates, Windows

When trying to import a google sheet using the gs_read() function, I get the following error message: Error in curl::curl_fetch_memory(url, handle = handle) : Peer certificate cannot be authenticated with given CA certificates I am following…
Malan Kriel
  • 301
  • 1
  • 2
  • 17
10
votes
1 answer

How do I force Python LDAP to validate/verify an SSL certificate when using .start_tls_s()

I've been trying to use Python-LDAP (version 2.4.19) under MacOS X 10.9.5 and Python 2.7.9 I want to validate my connection to a given LDAP server after I've called the .start_tls_s() (or to have the method raise and exception if the certificate…
Jim Dennis
  • 17,054
  • 13
  • 68
  • 116
9
votes
1 answer

Adding attributes to IBM Bluemix Blockchain CA(membersrvc.yaml)

I'm working on a proof of concept for blockchain. I've am using bluemix network for blockchain and deploying my application, which I develop locally. I want to test the CA functionalities and want to add users with attributes to the membersrvs.yaml…
tortuga
  • 737
  • 2
  • 13
  • 34
9
votes
2 answers

Android SSL HTTP Request using self signed cert and CA

I have an android application that is connecting to an SSL web service that we host. The Web server is apache and has its own CA that we created and a self signed SSL certificate. I have imported our CA certificate onto the Android tablet in the…
Andy Davies
  • 4,287
  • 5
  • 24
  • 31
8
votes
1 answer

Should the k8s Cluster Certificate Authority be kept secret?

I have an azure aks cluster and a local kubeconfig: apiVersion: v1 kind: Config clusters: - name: my-cluster cluster: certificate-authority-data: LS0...0tCg== server: https://api-server:443 contexts: - name: my-context context: …
u123
  • 15,603
  • 58
  • 186
  • 303
8
votes
1 answer

CA Cert are only added at ca-bundle-trust.crt

Env: Red Hat Enterprise Linux Server release 7.7 (Maipo) # openssl version OpenSSL 1.0.2g 1 Mar 2016 so a self-sign cert is generated using OpenSSL and the cacert.pem is put under /etc/pki/ca-trust/source/anchors/. Now according to the man from…
Zeta
  • 534
  • 6
  • 17
8
votes
1 answer

Client SSL with Self Signed CA not working

I have been struggling with an SSL problem for more than 1 month. We have used openssl to generate our own CA, server and client certificates. We have also enable "SSLrequire" on the Apache web server (in htaccess this may be wrong), which means…
icarus
  • 81
  • 1
  • 1
  • 2
8
votes
3 answers

NodeJS unable to read default CAs in ubuntu

On our testing environment we are connecting to another server with SSL signed by our company. Every time connection is made nodejs throws UNABLE_TO_VERIFY_LEAF_SIGNATURE. I have found workarounds by setting rejectUnauthorized: false, but this is…
viktorstaikov
  • 103
  • 1
  • 7
7
votes
1 answer

Failed to connect to a server with Golang due x509 certificate relies on legacy Common Name field

I'm trying to connect on a mongodb server, to connect I have to provide a CA cert file and also tls cert file. When I use the following command I don't have issue $ mongo --host customhost:port DB --authenticationDatabase=DB -u ACCOUNT -p PWD --tls…
Manawasp
  • 517
  • 6
  • 14
7
votes
4 answers

How to use a .pem SSL certificate for REST API developed as Spring Boot application

We have a Spring Boot application for REST web services which is still under development. And we are using self signed certificate for now. Now, it will be deployed into a system along with 1 more already developed application. This pre-existing…
Onki
  • 1,879
  • 6
  • 38
  • 58
7
votes
0 answers

Updating ca-certificates on mac os

I am not completely familiar under the mac os environment, but I am trying to update the ca-certificates following the instructions on this page to solve an error: https://confluence.ecmwf.int/display/WEBAPI/Web-API+Troubleshooting point 3.1.2.3. I…
Colin
  • 71
  • 1
  • 2
7
votes
2 answers

Golang httpClient CA certificates default location?

I have a go program that connects to an internal API using the httpClient (it's all generated by swagger-codegen). The internal API is using https and internal certificates with our internal CA. On my Windows laptop, it works fine without specifying…
gotson
  • 3,613
  • 1
  • 23
  • 40
7
votes
1 answer

C# .NET - Pinning Certificates Authorities - I am doing it correctly?

My software connects to Dropbox using an HTTPS connection in order to retrieve some sensitive data. I would like to pin the Certificates Authorities in order to prevent a man-in-the-middle attack. So far I have the following code: static bool…
John
  • 1,011
  • 11
  • 18
7
votes
2 answers

How to validate a certificate chain from a specific root CA in C#

I have a certificate chain that looks like this: root CA -> intermediate CA -> client certificate. How can I validate that a received certificate is explicitly created by "root CA"? To validate the whole chain is not a problem. This can be done like…
Tharnas
  • 93
  • 1
  • 8
1 2
3
46 47