Questions tagged [client-certificate]
48 questions
204
votes
6 answers
How do I view the contents of a PFX file on Windows?
I have a PFX certificate file on my machine and I'd like to view the details before importing it. (The import utility doesn't actually tell you what the certificate is!).
How do I view the details about the PFX certificate file?
PeterX
- 5,651
10
votes
1 answer
found a bunch of DO_NOT_TRUST_FiddlerRoot personal certificates installed on my system
I was looking at my personal certificates in Google Chrome and found a bunch of DO_NOT_TRUST_FiddlerRoot certs there. I don't know how these got there. Should I be concerned?
neubert
- 7,574
- 39
- 94
- 156
8
votes
2 answers
Can Firefox use the Windows certificate store?
How can I get Firefox to use the Windows certificate store to look for client certificates?
Use case: Web authentication with a client certificate that is stored in the Windows certificate store and secured with TPM. The certificate is visible there…
7
votes
2 answers
Enroll user's certificates for another user on the same machine
If I'm logged in as a normal user, how can I download/enroll user's certificates for another user (on the same machine)? This can be done using runas command but can't figure out exactly.
Stackbe
- 111
- 1
- 1
- 6
5
votes
2 answers
Using SSH pubkey with multiple certificates
I am using an SSH public key to connect to a number of servers. The servers use an SSH CA to manage authorized users. The basic concept is described here:…
jan
- 493
5
votes
1 answer
Can't import two p12/pfx client certificates into Chrome or Firefox
I have a website I want to use client authentication certificates with. This is just a personal website for myself and a handful of family/friends, so I created a CA to sign some certificates that I can distribute to them so they can sign on without…
Nertskull
- 151
4
votes
2 answers
Require only specific client certificates in IIS
I am implementing a solution that requires client certificates. I'm using IIS 7.5 and ASP.Net 4 WCF services.
I've set the SSL Settings to Require SSL and require client certificates. Looks good so far.
Because I'm new to the use of client…
Jeremy
- 398
4
votes
1 answer
RDP with client authentication via a certificate or a key file
I'm planning to set up secure WAN-accessible RDP to my personal computer (Windows 10, not Windows Server, since it's just a workstation).
The plan is:
Forward the RDP and Wake-on-LAN ports to my machine, naturally.
Have two certificates on a USB…
Kotauskas
- 144
4
votes
0 answers
curl (and openssl) two way authentication always fails
Problem
I'm trying to use curl to send a POST request to a web service deployed on tomcat with host and client verification is required (two way authentication) but I always get the response 404 Not Found. The same result is achieved using openssl…
joker
- 245
3
votes
1 answer
Safari forces user to select client certificate even if it is optional
This question is loosely related to another one:
IIS7.5 SSL Question, Safari users get a prompt of certificate to select, but since it was asked more than a year ago I thought that there may be some changes done in Safari.
So, the problem I am…
Maciej
- 131
3
votes
2 answers
Curl won't prompt me for a certificate password
I'm trying to use CURL to test simple HTTPS connections to servers that require a client certificate. I've specified the certificate type in my .curlrc file with cert = /path/to/Cert.p12 and told it that yes, it's a PKCS12 cert with cert-type =…
Coderer
- 1,700
3
votes
1 answer
How do I obtain a trusted, signed, client certificate for use with an FTPS site in IIS and tied to a Windows user?
I've been asked by a third party to setup an FTPS site for them to connect to.
I am doing this on IIS 10.
It is required that the third-party client uses a client certificate which is tied to the FTP user.
I have tested this and got everything to…
3
votes
1 answer
P12 Certificate Authentication - what is the correct method
I've been able to successfully set up an IKEv2/IPSec VPN Server using certificate authentication. However, I have a general issue regarding the correct method of creating P12 user certificates.
I've been using the following method :
ipsec pki --gen…
Tom Thorp
- 61
2
votes
1 answer
Mac OS X Yosemite and Client SSL Certificates
Ever since I upgraded from Mavericks to Yosemite, my SSL Client Certificates have stopped working in certain places. They still work in web browsers and in wget, but they have stopped working in curl and in Python's requests library.
This works:
$…
Nick Retallack
- 2,086
2
votes
1 answer
User name for an existing SSH certificate?
On a Jenkins server, there are two pairs SSH private and public keys in the ~/.ssh/ directory which apparently are both used to authenticate with the same external server. However, I don't know which user name to use for one of the certificates.
Is…
oberlies
- 756