Questions tagged [certificates]

Questions about signed certificates and the processes involved (Creation, signing, accepting, viewing)

Filter by
Sorted by
Tagged with
1
vote
1answer
17 views

Created new pair of GPG Keys good for 1 wk - Why do I need to make Revocation Certificate

Testing GPG encrypted emails, I understand the reason for Revocation Certificate if you are making one for long time. Beings I'm trying to setup Thunderbird & Enigmail I thought I would start with ...
0
votes
0answers
48 views

CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile

I am trying to upgrade a Ubuntu 14.04 LTS server to 16.04. But when ever I ran sudo http_proxy="http://usrid:pwd@proxy...mcom:8080" apt update it returns following error: Error message Err http://...
1
vote
2answers
81 views

MITM-attack? I have an untrusted certificate dns.hinet.net

Since a few weeks a pop-up window appears (sometimes) after start-up of my Ubuntu 16.4 system, see this picture: The title in the window bar says: "Untrusted certificate". The 1st line in the window ...
0
votes
2answers
38 views

Location for SSL certificates, how to secure them?

I have a nodeStatic app on an ubuntu server. A domain links to the server. Now I need to add SSL certificates: var fs = require('fs'); var options = { key: fs.readFileSync('ssl/privatekey.pem')....
0
votes
0answers
44 views

Why Bitnami's bncert-tool can't find bitnami installation path?

I have an AWS bitnami instance, which is built on Ubuntu 16 with lemp stack. # cat /etc/*release* DISTRIB_ID=Ubuntu DISTRIB_RELEASE=16.04 DISTRIB_CODENAME=xenial ... here's bitnami stack info # ...
0
votes
0answers
20 views

What certificates are used by juju and where are those to get from?

While trying to juju bootstrap on a Ubuntu 18.04 machine, I get a certificate error: juju-vm$ juju bootstrap mycloud --debug [...] 12:19:42 DEBUG juju.api apiclient.go:745 looked up juju-apiserver -&...
0
votes
0answers
43 views

Apache2 Ubuntu 16.04 installing SSL certificate not working

some background info, I was originally running this site on Windows hosting with GoDaddy it was working with SSL. I am now setting it up with Ubuntu 16.04 on a GoDaddy VPS. I have got my site up and ...
0
votes
0answers
83 views

NET::ERR_CERT_AUTHORITY_INVALID with Certificate from VMWare

Running Ubuntu MATE 19.10. On Firefox and Chromium (the only browsers I've tried so far), there are getting NET::ERR_CERT_AUTHORITY_INVALID when going to certain HTTPS sites. For example, right now ...
0
votes
1answer
200 views

Install crt certificate on Ubuntu 18.04

I have a .crt certificate and I've tried installing it in .local/share/ca-certificates (I've created this last folder because It didn't exist) and put my ca.crt into it , then I executed this command :...
1
vote
2answers
263 views

How can I get the ca-certificates.crt?

My docker get error "x509 certificate signed by unknown authority" and then i find that my ubuntu contianer missing file ca-certificates.crt on /etc/ssl/certs/ or /usr/local/share/certificates/. The ...
0
votes
1answer
92 views

How do I install an SSL certificate in order to serve a local web application?

I need to install a local SSL certificate so that the browser trusts it. The tutorial Running Angular CLI over HTTPS with a Trusted Certificate has instructions for OS X and Windows, but not Ubuntu. ...
0
votes
0answers
37 views

certmonger used OTP for renewal

A Microsoft NDES is running with activated OTP. A certificate request with certmonger is running and in state monitoring. In the request-file under /var/lib/certmonger/requests there is a line with ...
0
votes
3answers
127 views

Nginx SSL configuration setup

I'm using Nginx on Ubuntu 18.04 with LEMP installed, recently I renewed my SSL certs therefore I can see some files with named . SSL cert related files last 2 files comes with .zip private.key ...
0
votes
1answer
393 views

“The PKCS #12 operation failed for unknown reasons.” when importing personal digital certificates into Firefox

I am trying to import a personal digital certificate to Firefox (under Your certificates) and I am getting this error: The PKCS #12 operation failed for unknown reasons. I am using Firefox 72.0.2 ...
0
votes
1answer
212 views

Git certificate validation error, but openssl succeeds

$ git clone https://stash.z-hub.io/scm/zp/z-push.git Cloning into 'z-push'... fatal: unable to access 'https://stash.z-hub.io/scm/zp/z-push.git/': server certificate verification failed. CAfile: /etc/...
16
votes
1answer
1k views

Are the DigiNotar certificates supposed to be present in Firefox in a clean install?

Just installed Ubuntu 18.04 LTS, and noticed in Mozilla Firefox 70.0.1 (64-bit), two strange certificates that rang a bell for some reason. Not wanting to trust anywhere on the web for information in ...
0
votes
1answer
643 views

openvpn error outines:SSL_CTX_use_certificate:ca md too weak

On Ubunto 16 I've configured openVPN with password with Certificate (TSL) my config file is: dev tun remote XX.XX.XXX.X ca ca.crt cert user_name.crt key user_name.key ns-cert-type server It does ...
0
votes
0answers
24 views

No usage specified for certificate ssl Ubuntu 18.04.02

In order to have testing CA certificates for Fabric CA: Fabric CA User’s Guide I followed these indications: Securing PostgreSQL using hostssl cert clientcert=1 In fabric-ca-server-config.yaml I put: ...
-1
votes
1answer
51 views

How do I let only specific PCs connect to via SSH?

I have an Ubuntu Server and I want only a few PCs to be able to connect to my server via SSH (on port 22). Is there a way that I can create an certificate that I would install on the few PCs that are ...
0
votes
0answers
12 views

How to make Evolution automatically reject invalid certificates?

When connecting to some wifi networks, HTTP(S) traffic is blocked by serving a terms-of-use page under every domain. To accomplish this, some gateways serve invalid TLS certificates for every domain. ...
0
votes
1answer
341 views

Problem installing ACS ACR38T (smart card reader) on Ubuntu 18.04-64

After struggling for a few hours, I thought it was time to ask the community. I am trying to install an ACS ACR38T Smart Card Reader on Ubuntu 18.04-64 (see https://www.acs.com.hk/en/products/1/acr38t-...
0
votes
1answer
2k views

Cannot add APT repository: SSL handshake failed

I followed the procedure described here https://packages.sury.org/php/README.txt for adding an APT repository that has some packages i need to install ( for example i need php7.0-dev). sudo apt-get -...
1
vote
0answers
757 views

wget unable to locally verify the issuer's authority but curl works

After updating from Ubuntu 16 to 18, wget stopped working (among other stuff), while curl works properly. $ curl -v https://google.com ... * Server certificate: * subject: C=US; ST=California; L=...
1
vote
0answers
190 views

Import root.cer, server.pfx and client.pfx certificates

I have to install these three certificates (root.cer, server.pfx and client.pfx) genereted by Qlik Sense in a Ubuntu machine. My cenario: https://help.qlik.com/en-US/sense/June2019/Subsystems/...
4
votes
1answer
4k views

How to install PFX certificate?

Okay, I have PFX certificate. I need to install it to my Ubuntu 19.04 to have access to other resource by Cisco. I received PFX certificate from my customer & I need to have connection to his ...
3
votes
0answers
165 views

How to digitally sign documents in OpenOffice under Ubuntu?

On Ubuntu 19.04, Libreoffice seems to be there, but when I clicked, all the apps seem to be missing (like the word processor and the spreadsheet). So I first installed OpenOffice. Then I figured out ...
0
votes
0answers
105 views

Apache 2.4 randomly return wrong certificate

I've a server with ~50 different Virtual Hosts, ~10 with SSL enabled. Everything worked perfectly until last week, when I added another host with SSL, it is configured exactly like the other hosts, ...
1
vote
2answers
486 views

Cannot verify certificate, sha256sum's are failing, recently updated openssl

It's working now, see final 2 edits There have been multiple instance recently for me where sha256sum is failing or a certificate cannot be verified. This has happened during use of wget, winetricks,...
1
vote
1answer
281 views

Cannot connect to server with Citrix - error: Cannot find file: /opt/Citrix/ICAClient//config/module.ini

I'm trying to run Citrix receiver on Ubuntu. However when trying to connect with a server using citrix receiver I get the following error message: Cannot find file: (/opt/Citrix/ICAClient//config/...
0
votes
1answer
556 views

Make trusted self-signed certificate not register as “self-signed” (i.e. trusted) on private network

I'm currently implementing a private Docker Registry server with nginx configured to forward https traffic securely to the running Docker Registry (i.e. docker-compose) instance on a private network (...
0
votes
1answer
761 views

Server certificate verification failed when updating

I am experiencing an issue when updating packages. I get the following error message: server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none If I manually ...
1
vote
0answers
228 views

Does Ubuntu support a CA chain?

Is there a way to install a CA certificate where the file is a certificate chain? I don't want to have certain files for each step so I want to use a PEM file with a certification chain e.g.: -----...
2
votes
1answer
107 views

What are all these SSL certificates on a fresh installation of Ubuntu?

I just noticed that I have more than a hundred installed certificates on a fresh installation of Ubuntu 18.04. This command: sudo ls /etc/ssl/certs is yielding certificates with the names of ...
2
votes
0answers
389 views

letsencrypt with nginx - renew failed

since one month i receive an error from letsencrypt renewal cronjob. Operating System: Ubuntu 16.04.6 Xenial letsencrypt version: certbot 0.23.0 Cronjob command: @daily letsencrypt renew >&...
0
votes
0answers
66 views

Unable to rename VPN connection because Save button is gray

I was wishing to rename my VPN connection, but was unable, because Save button is gray. When running from command line it says: $ nm-connection-editor Gtk-Message: GtkDialog mapped without a ...
10
votes
1answer
1k views

List and remove unofficially installed CA certificates

This article expose how around 18% of HTTPS connections are being detected as intercepted by MITM proxies. As the great related paper state: To circumvent this validation, local software injects a ...
0
votes
1answer
892 views

Install Portecle on Ubuntu

Portecle is a nifty tool written in Java to manage keystores och certificates. How to install it in Ubuntu? At the time of writing there seems not to be a Ubuntu (deb) package. The zip download ...
0
votes
0answers
2k views

Ubuntu server with active directory integration - is AD root certificate installed on server?

I have joined an Ubuntu 18.04 server to an Active Directory by following this : https://www.tecmint.com/join-ubuntu-to-active-directory-domain-member-samba-winbind/ Everything is OK, I can log in ...
1
vote
0answers
3k views

Hostname/IP doesn't match certificate's altnames | Node & Nginx

Among several subdomains, I have node servers running on different ports. I have a subdomain called alexa-service.healform.de, which runs a node server that should execute some functions and requests. ...
0
votes
2answers
135 views

How do I figure out how my certbot is configured?

I need to change the domain on my server, which I've been using certbot to get certificates for successfully. I need to switch it to a different domain though. I did not set it up initially so I have ...
13
votes
2answers
11k views

Disable SSL certificate validation in Ubuntu totally

I am new to Linux and learning Linux on Ubuntu 18.0401 LTS installed on oracle virtualbox on company system. Company has private proxy network. So all the websites I browse on ubuntu pass through ...
1
vote
0answers
45 views

Ubuntu Apt 1.6.6 with client cert and HTTPS

After upgrading to Ubuntu 18.04, the connection to my repository using https and client cert authentication is no longer working. My config: Acquire::https::example.com { Verify-Peer "true"; ...
2
votes
1answer
377 views

LibreOffice fails to access my personal certificate

Recently, I updated my personal certificate. Then I wanted to sign a libreoffice document. I followed the instructions from Part 1 to Part 4. Both Thunderbird and Firefox are displaying the correct, ...
0
votes
0answers
258 views

Where to look for 'Gemalto PKCS11 Library' PPA, deb or snappy?

I would like to find a trusted source for the files required to use Gemalto .NET smart card (libgtop11dotnet.so). Unfortunately I cannot see them in the default repositories and cannot find them on ...
0
votes
1answer
42 views

Openssl keeps prompting for a phrase during key generation

I am following the directions that are published on the Ubuntu site. First, it asks you to create a secure key, then it tells you to enter openssl rsa -in server.key -out server.key.insecure to create ...
7
votes
0answers
5k views

How to install user PFX certificate

I need to install a PFX certificate into some analog of personal certificates store in Windows. Does a personal certificate store exist in Ubuntu? If it does, how can I install the PFX certificate ...
0
votes
1answer
707 views

CertBot Installation: Could not connect to ppa.launchpad.net:80 (91.189.95.83)

I'm trying to install CertBot to issue a let's encrypt certificate for a domain but on my Ubuntu Server 16.04 I get errors when I run sudo apt install python-certbot-apache I get the following ...
1
vote
0answers
679 views

Add all Firefox Certificates to Ubuntu 18.04 trust store

What is the best way to add all common used Intermediate Certificates in Ubuntu 18.04+, and keep them up2date with apt? I mean typical intermediate certs signed from Digicert, Comodo, etc. It seems ...
1
vote
0answers
390 views

can I export VPN certificate from OSX to Ubuntu?

I have configuration file for VPN that works on OSX with Tunnelblick. As far as I understand, the same VPN certificate can be used from different machines. So I copied the configuration file the *....
0
votes
1answer
5k views

wget fails by a certificate problem

Same problem of wget interrupted by a certificate problem: After do-release-upgrade from 16.04 to 18.01 Failed to connect to https://changelogs.ubuntu.com/meta-release-lts. Check your Internet ...

1
2 3 4 5