Questions tagged [certificates]
Questions about signed certificates and the processes involved (Creation, signing, accepting, viewing)
202
questions
1
vote
1answer
17 views
Created new pair of GPG Keys good for 1 wk - Why do I need to make Revocation Certificate
Testing GPG encrypted emails, I understand the reason for Revocation Certificate if you are making one for long time. Beings I'm trying to setup Thunderbird & Enigmail I thought I would start with ...
0
votes
0answers
48 views
CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile
I am trying to upgrade a Ubuntu 14.04 LTS server to 16.04. But when ever I ran sudo http_proxy="http://usrid:pwd@proxy...mcom:8080" apt update it returns following error:
Error message
Err http://...
1
vote
2answers
81 views
MITM-attack? I have an untrusted certificate dns.hinet.net
Since a few weeks a pop-up window appears (sometimes) after start-up of my Ubuntu 16.4 system, see this picture:
The title in the window bar says: "Untrusted certificate".
The 1st line in the window ...
0
votes
2answers
38 views
Location for SSL certificates, how to secure them?
I have a nodeStatic app on an ubuntu server.
A domain links to the server.
Now I need to add SSL certificates:
var fs = require('fs');
var options = {
key: fs.readFileSync('ssl/privatekey.pem')....
0
votes
0answers
44 views
Why Bitnami's bncert-tool can't find bitnami installation path?
I have an AWS bitnami instance, which is built on Ubuntu 16 with lemp stack.
# cat /etc/*release*
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=16.04
DISTRIB_CODENAME=xenial
...
here's bitnami stack info
# ...
0
votes
0answers
20 views
What certificates are used by juju and where are those to get from?
While trying to juju bootstrap on a Ubuntu 18.04 machine, I get a certificate error:
juju-vm$ juju bootstrap mycloud --debug
[...]
12:19:42 DEBUG juju.api apiclient.go:745 looked up juju-apiserver -&...
0
votes
0answers
43 views
Apache2 Ubuntu 16.04 installing SSL certificate not working
some background info,
I was originally running this site on Windows hosting with GoDaddy it was working with SSL. I am now setting it up with Ubuntu 16.04 on a GoDaddy VPS. I have got my site up and ...
0
votes
0answers
83 views
NET::ERR_CERT_AUTHORITY_INVALID with Certificate from VMWare
Running Ubuntu MATE 19.10. On Firefox and Chromium (the only browsers I've tried so far), there are getting NET::ERR_CERT_AUTHORITY_INVALID when going to certain HTTPS sites. For example, right now ...
0
votes
1answer
200 views
Install crt certificate on Ubuntu 18.04
I have a .crt certificate and I've tried installing it in .local/share/ca-certificates (I've created this last folder because It didn't exist) and put my ca.crt into it , then I executed this command :...
1
vote
2answers
263 views
How can I get the ca-certificates.crt?
My docker get error "x509 certificate signed by unknown authority" and then i find that my ubuntu contianer missing file ca-certificates.crt on /etc/ssl/certs/ or /usr/local/share/certificates/. The ...
0
votes
1answer
92 views
How do I install an SSL certificate in order to serve a local web application?
I need to install a local SSL certificate so that the browser trusts it. The tutorial Running Angular CLI over HTTPS with a Trusted Certificate has instructions for OS X and Windows, but not Ubuntu.
...
0
votes
0answers
37 views
certmonger used OTP for renewal
A Microsoft NDES is running with activated OTP.
A certificate request with certmonger is running and in state monitoring. In the request-file under /var/lib/certmonger/requests there is a line with ...
0
votes
3answers
127 views
Nginx SSL configuration setup
I'm using Nginx on Ubuntu 18.04 with LEMP installed, recently I renewed my SSL certs therefore I can see some files with named .
SSL cert related files last 2 files comes with .zip
private.key ...
0
votes
1answer
393 views
“The PKCS #12 operation failed for unknown reasons.” when importing personal digital certificates into Firefox
I am trying to import a personal digital certificate to Firefox (under Your certificates) and I am getting this error:
The PKCS #12 operation failed for unknown reasons.
I am using Firefox 72.0.2 ...
0
votes
1answer
212 views
Git certificate validation error, but openssl succeeds
$ git clone https://stash.z-hub.io/scm/zp/z-push.git
Cloning into 'z-push'...
fatal: unable to access 'https://stash.z-hub.io/scm/zp/z-push.git/': server certificate verification failed. CAfile: /etc/...
16
votes
1answer
1k views
Are the DigiNotar certificates supposed to be present in Firefox in a clean install?
Just installed Ubuntu 18.04 LTS, and noticed in Mozilla Firefox 70.0.1 (64-bit), two strange certificates that rang a bell for some reason. Not wanting to trust anywhere on the web for information in ...
0
votes
1answer
643 views
openvpn error outines:SSL_CTX_use_certificate:ca md too weak
On Ubunto 16 I've configured openVPN with password with Certificate (TSL)
my config file is:
dev tun
remote XX.XX.XXX.X
ca ca.crt
cert user_name.crt
key user_name.key
ns-cert-type server
It does ...
0
votes
0answers
24 views
No usage specified for certificate ssl Ubuntu 18.04.02
In order to have testing CA certificates for Fabric CA: Fabric CA User’s Guide I followed these indications: Securing PostgreSQL using hostssl cert clientcert=1
In fabric-ca-server-config.yaml I put:
...
-1
votes
1answer
51 views
How do I let only specific PCs connect to via SSH?
I have an Ubuntu Server and I want only a few PCs to be able to connect to my server via SSH (on port 22). Is there a way that I can create an certificate that I would install on the few PCs that are ...
0
votes
0answers
12 views
How to make Evolution automatically reject invalid certificates?
When connecting to some wifi networks, HTTP(S) traffic is blocked by serving a terms-of-use page under every domain. To accomplish this, some gateways serve invalid TLS certificates for every domain. ...
0
votes
1answer
341 views
Problem installing ACS ACR38T (smart card reader) on Ubuntu 18.04-64
After struggling for a few hours, I thought it was time to ask the community. I am trying to install an ACS ACR38T Smart Card Reader on Ubuntu 18.04-64 (see https://www.acs.com.hk/en/products/1/acr38t-...
0
votes
1answer
2k views
Cannot add APT repository: SSL handshake failed
I followed the procedure described here https://packages.sury.org/php/README.txt for adding an APT repository that has some packages i need to install ( for example i need php7.0-dev).
sudo apt-get -...
1
vote
0answers
757 views
wget unable to locally verify the issuer's authority but curl works
After updating from Ubuntu 16 to 18, wget stopped working (among other stuff), while curl works properly.
$ curl -v https://google.com
...
* Server certificate:
* subject: C=US; ST=California; L=...
1
vote
0answers
190 views
Import root.cer, server.pfx and client.pfx certificates
I have to install these three certificates (root.cer, server.pfx and client.pfx) genereted by Qlik Sense in a Ubuntu machine.
My cenario: https://help.qlik.com/en-US/sense/June2019/Subsystems/...
4
votes
1answer
4k views
How to install PFX certificate?
Okay, I have PFX certificate. I need to install it to my Ubuntu 19.04 to have access to other resource by Cisco.
I received PFX certificate from my customer & I need to have connection to his ...
3
votes
0answers
165 views
How to digitally sign documents in OpenOffice under Ubuntu?
On Ubuntu 19.04, Libreoffice seems to be there, but when I clicked, all the apps seem to be missing (like the word processor and the spreadsheet). So I first installed OpenOffice. Then I figured out ...
0
votes
0answers
105 views
Apache 2.4 randomly return wrong certificate
I've a server with ~50 different Virtual Hosts, ~10 with SSL enabled. Everything worked perfectly until last week, when I added another host with SSL, it is configured exactly like the other hosts, ...
1
vote
2answers
486 views
Cannot verify certificate, sha256sum's are failing, recently updated openssl
It's working now, see final 2 edits
There have been multiple instance recently for me where sha256sum is failing or a certificate cannot be verified. This has happened during use of wget, winetricks,...
1
vote
1answer
281 views
Cannot connect to server with Citrix - error: Cannot find file: /opt/Citrix/ICAClient//config/module.ini
I'm trying to run Citrix receiver on Ubuntu. However when trying to connect with a server using citrix receiver I get the following error message:
Cannot find file: (/opt/Citrix/ICAClient//config/...
0
votes
1answer
556 views
Make trusted self-signed certificate not register as “self-signed” (i.e. trusted) on private network
I'm currently implementing a private Docker Registry server with nginx configured to forward https traffic securely to the running Docker Registry (i.e. docker-compose) instance on a private network (...
0
votes
1answer
761 views
Server certificate verification failed when updating
I am experiencing an issue when updating packages. I get the following error message:
server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
If I manually ...
1
vote
0answers
228 views
Does Ubuntu support a CA chain?
Is there a way to install a CA certificate where the file is a certificate chain?
I don't want to have certain files for each step so I want to use a PEM file with a certification chain e.g.:
-----...
2
votes
1answer
107 views
What are all these SSL certificates on a fresh installation of Ubuntu?
I just noticed that I have more than a hundred installed certificates on a fresh installation of Ubuntu 18.04.
This command:
sudo ls /etc/ssl/certs
is yielding certificates with the names of ...
2
votes
0answers
389 views
letsencrypt with nginx - renew failed
since one month i receive an error from letsencrypt renewal cronjob.
Operating System: Ubuntu 16.04.6 Xenial
letsencrypt version: certbot 0.23.0
Cronjob command:
@daily letsencrypt renew >&...
0
votes
0answers
66 views
Unable to rename VPN connection because Save button is gray
I was wishing to rename my VPN connection, but was unable, because Save button is gray.
When running from command line it says:
$ nm-connection-editor
Gtk-Message: GtkDialog mapped without a ...
10
votes
1answer
1k views
List and remove unofficially installed CA certificates
This article expose how around 18% of HTTPS connections are being detected as intercepted by MITM proxies. As the great related paper state:
To circumvent this validation, local software injects a ...
0
votes
1answer
892 views
Install Portecle on Ubuntu
Portecle is a nifty tool written in Java to manage keystores och certificates.
How to install it in Ubuntu?
At the time of writing there seems not to be a Ubuntu (deb) package. The zip download ...
0
votes
0answers
2k views
Ubuntu server with active directory integration - is AD root certificate installed on server?
I have joined an Ubuntu 18.04 server to an Active Directory by following this : https://www.tecmint.com/join-ubuntu-to-active-directory-domain-member-samba-winbind/
Everything is OK, I can log in ...
1
vote
0answers
3k views
Hostname/IP doesn't match certificate's altnames | Node & Nginx
Among several subdomains, I have node servers running on different ports. I have a subdomain called alexa-service.healform.de, which runs a node server that should execute some functions and requests. ...
0
votes
2answers
135 views
How do I figure out how my certbot is configured?
I need to change the domain on my server, which I've been using certbot to get certificates for successfully. I need to switch it to a different domain though. I did not set it up initially so I have ...
13
votes
2answers
11k views
Disable SSL certificate validation in Ubuntu totally
I am new to Linux and learning Linux on Ubuntu 18.0401 LTS installed on oracle virtualbox on company system. Company has private proxy network. So all the websites I browse on ubuntu pass through ...
1
vote
0answers
45 views
Ubuntu Apt 1.6.6 with client cert and HTTPS
After upgrading to Ubuntu 18.04, the connection to my repository using https and client cert authentication is no longer working.
My config:
Acquire::https::example.com {
Verify-Peer "true";
...
2
votes
1answer
377 views
LibreOffice fails to access my personal certificate
Recently, I updated my personal certificate. Then I wanted to sign a libreoffice document.
I followed the instructions from Part 1 to Part 4. Both Thunderbird and Firefox are displaying the correct, ...
0
votes
0answers
258 views
Where to look for 'Gemalto PKCS11 Library' PPA, deb or snappy?
I would like to find a trusted source for the files required to use Gemalto .NET smart card (libgtop11dotnet.so).
Unfortunately I cannot see them in the default repositories and cannot find them on ...
0
votes
1answer
42 views
Openssl keeps prompting for a phrase during key generation
I am following the directions that are published on the Ubuntu site. First, it asks you to create a secure key, then it tells you to enter openssl rsa -in server.key -out server.key.insecure to create ...
7
votes
0answers
5k views
How to install user PFX certificate
I need to install a PFX certificate into some analog of personal certificates store in Windows.
Does a personal certificate store exist in Ubuntu?
If it does, how can I install the PFX certificate ...
0
votes
1answer
707 views
CertBot Installation: Could not connect to ppa.launchpad.net:80 (91.189.95.83)
I'm trying to install CertBot to issue a let's encrypt certificate for a domain but on my Ubuntu Server 16.04 I get errors when I run
sudo apt install python-certbot-apache
I get the following ...
1
vote
0answers
679 views
Add all Firefox Certificates to Ubuntu 18.04 trust store
What is the best way to add all common used Intermediate Certificates in Ubuntu 18.04+, and keep them up2date with apt? I mean typical intermediate certs signed from Digicert, Comodo, etc.
It seems ...
1
vote
0answers
390 views
can I export VPN certificate from OSX to Ubuntu?
I have configuration file for VPN that works on OSX with Tunnelblick.
As far as I understand, the same VPN certificate can be used from different machines.
So I copied the configuration file the *....
0
votes
1answer
5k views
wget fails by a certificate problem
Same problem of wget interrupted by a certificate problem:
After do-release-upgrade from 16.04 to 18.01
Failed to connect to https://changelogs.ubuntu.com/meta-release-lts. Check your Internet ...
