Login or Register to Ask a Question and Join Our Community

Sponsored Content
Full Discussion: SSL Certificate Stores
Special Forums Cybersecurity SSL Certificate Stores Post 302900991 by Lost in Cyberia on Friday 9th of May 2014 10:05:59 PM
Old 05-09-2014
SSL Certificate Stores
Hey everyone, I'm trying to get a lay of the land for OS and Application Certificate Stores. Can someone confirm that I have this concept right?

If the application you're using say Firefox has it's own trusted CA store, it uses that exclusively. So if you're running firefox in Windows, Firefox will only check the validity of certificates on it's own store, and not ever reference the Microsoft Store.

As opposed to using internet explorer in Windows where it exclusively uses the Microsoft CA store.

This is something I'm unsure of, does iOS, Linux and Android provide a trusted suite of CA's? Where is it in the File system? It's my impression that these OS' use the SSL command suite to verify certificates? Or do these OS' offer no store, and just hope that the application is doing the checking of certificates?

For instance, right now I"m using google chrome in linux. When I go into the browser settings and advanced settings, to certificates, I get a list of trusted CA's. Where is this list coming from my Linux OS, or the browser itself?
 

9 More Discussions You Might Find Interesting

1. Web Development

SSL Certificate Installation problem

Hello everybody Hope somebody can help me I'm trying to install SSL Certificate on Apache/mod_ssl on Linux with Zend for Oracle. I bought and downloaded certificate from certificate from Network Solutions. Than I followed the instructions to the dot. I created a directory for certificate... (2 Replies)
Discussion started by: Trusevich
2 Replies

2. Web Development

SSL certificate

Dear All Anyone know how to issue two different certification on apache virtualhost fyi i have one virtualhost eg 69.192.1.25:443 already signed with verisign how can i configure another virtualhost 69.192.1.25:443 which signing with another certificate which self signing. i search net not... (1 Reply)
Discussion started by: netxus
1 Replies

3. AIX

Installing SSL certificate on AIX

Hello, I am new in UNIX, and some one asks me to install SSL certificates to allow exchange with an external system. Can someone tell how to install certificate (ex : verisignxxx.cer) on a UNIX server? Many thanks. Tibo (4 Replies)
Discussion started by: tibo51
4 Replies

4. Cybersecurity

SSL certificate

Hi guys. I have some questions about ssl certificates. I looked at SSL providers and saw that they are providing 2 types of certificates: per server or per domain. my server host name is: srv1.example.com I have a smtp, imap, web server on this box. but all services accessed by different... (1 Reply)
Discussion started by: majid.merkava
1 Replies

5. Web Development

export SSL certificate

we are doing TCP for our systems. I have a working SSL certificate on prodction webserver. Im planning to export it to our DR server for TCP purposes. However when I export based on the procedure below, it doesn't work. When I restart the DR webserver, it still says the certifcate is expired.Any... (1 Reply)
Discussion started by: lhareigh890
1 Replies

6. Red Hat

SSL Certificate Renewal on Tomcat

Hi, I want to renew the ssl certificate for one of my application on tomcat without down time. I want to know what would the possible impacts for the users who currently have sessions to the app. Regards, Arumon (1 Reply)
Discussion started by: arumon
1 Replies

7. Web Development

WebLogic SSL enabling ignoring CA certificate

Hi, I was trying to enable SSL cert on WebLogic 10.3 (CentOS), I don't have a third party Certificate Authority(C.A) to get the .csr file certified. Is there an alternate way that replaces the step sending .csr file to CA ? Thanks SZS (1 Reply)
Discussion started by: szs
1 Replies

8. Red Hat

SSL certificate generation error 8016

Hi guys, I'm trying to generate a key using the genkey command in centos 6.4 and RHEL6.4, Every thing seems to go cool but I get this error message bad certificate request error -8016 and no key/cert is generated. I don't want use the many openssl(s) commands instead since genkey is a shourtcut... (4 Replies)
Discussion started by: leo_ultra_leo
4 Replies

9. Web Development

CronJobs issues after SSL certificate

Hello! I had a cron job running on my website, activating a php script every friday. The Php script just activated another photo to add in the gallery. It worked fine until I got an SSL certificate for my website, then everything broke. This was the command before: lynx -source... (0 Replies)
Discussion started by: AGDesign
0 Replies

LEARN ABOUT CENTOS

pkidestroy

pkidestroy(8)						   PKI Instance Removal Utility 					     pkidestroy(8)

NAME

       pkidestroy - Removes a subsystem from an instance of Certificate Server.

SYNOPSIS

       pkidestroy -s <subsystem> -i <instance> [-u <secutiry domain username>] [-W <security domain password file>] [-h] [-v] [-p <prefix>]

DESCRIPTION

       Removes	a subsystem from an instance of Certificate Server.  This utility removes any of the Java-based Certificate Server subsystems (CA,
       KRA, OCSP, and TKS).

       Note:  This utility is only used for Java-based subsystems. The Apache-based Certificate Server subsystems (RA and TPS) are  removed  using
	      pkiremove.

       An  instance  can contain multiple subsystems, although it may contain at most one of each type of subsystem.  So, for example, an instance
       could contain CA and KRA subsystems,  but not two CA subsystems.  If pkidestroy is invoked on the last subsystem in the instance, then that
       instance  is  removed.	Typically,  as subsystems need to contact the CA to update the security domain, the CA instance should be the last
       instance to be removed.

OPTIONS

       -s <subsystem>
	      Specifies the subsystem to be removed, where <subsystem> is CA, KRA, OCSP, or TKS. If this option is not specified, pkidestroy  will
	      prompt for its value.

       -i <instance>
	      Specifies  the name of the instance from which the subsystem should be removed.  The instance is located at /var/log/pki/<instance>.
	      If this option is not specified, pkidestroy will prompt for its value.

       -u <security domain username>
	      Specifies the username of the security domain of the subsystem. This is an optional parameter.

       -W <security domain password file>
	      Specifies the file containing the password of the security domain of the subsystem. This is an optional parameter.

       -h, --help
	      Prints additional help information.

       -v     Displays verbose information about the installation.  This flag can be provided multiple times to increase  verbosity.   See  pkide-
	      stroy -h for details.

BUGS

       Report bugs to http://bugzilla.redhat.com.

AUTHORS

       Ade Lee <alee@redhat.com>.  pkidestroy was written by the Certificate Server project.

COPYRIGHT

       Copyright (c) 2012 Red Hat, Inc. This is licensed under the GNU General Public License, version 2 (GPLv2). A copy of this license is avail-
       able at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.

SEE ALSO

       pkispawn(8)

version 1.0							 December 13, 2012						     pkidestroy(8)
All times are GMT -4. The time now is 03:35 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy