A piece of data used in public key cryptography that contains identifying information (i.e. email address or web address), a hash of a public key, and a digital signature that authenticates the data in the certificate.
-2
votes
0answers
35 views
SSL certificate installation in browser [closed]
I have an web application of which we have SSL certificate on browser.
I have installed it in few computers its working perfectly fine.
However I have 2 computers in which I have installed ...
6
votes
2answers
865 views
Is there any way to get Chrome 27 to trust a self-signed cert? [closed]
I'm running latest gen Chrome (27) and preparing a demo that requires using a self-signed cert to support HTTPS on a local IIS website. The cert has been created with the correct common name for the ...
0
votes
1answer
45 views
Dangers of client & server package, communication over HTTPS using user's own self-signed certificate?
I want to create a client & server package with the option of an encrypted connection.
From my limited understanding, to get HTTPS connections working, the user needs their own certificate ...
0
votes
1answer
31 views
how to make socat ignore client certificate?
I'm trying to set up a listener to check if an application checks the server's certificate (I'm strongly assuming it is not). So I've created a self-signed certificate fake.pem for a listener and am ...
6
votes
0answers
195 views
Web Authentication using PKI Certs [migrated]
I understand PKI reasonably well from a conceptual point of view - i.e. private keys/public keys - the math behind them, use of hash & encryption to sign a certificate, Digital Signing of ...
10
votes
3answers
187 views
Multi-tenancy, SSL Certificates, and Subject Alternative Name
The X509 specification allows a CA to issue a single certificate for multiple hostnames, by using the "Subject Alternative Name" extension.
From the spec:
The subject alternative name ...
3
votes
3answers
100 views
Adding self signed certificate to trusted store
I have been reading about certificates and often is said that self signed certificate should not be added to the trusted authority store and even if you did, remove it after usage immediately.
MSDN ...
8
votes
2answers
188 views
How to stop/detect someone else registering a certificate for my domain
With the proliferation of low-cost automated CAs what can be done to mitigate the attack of someone doing a spear phishing attack to get a login to our webmail system, then using an automated service ...
3
votes
1answer
65 views
Design of system based on HTTPS, Client Certificates and custom CA
I have the following system:
2 application servers. At the beginning is installed the first server and later is installed the second one.
A client access from a browser to both servers
Application ...
9
votes
1answer
93 views
How CA ensures that a certificate request is coming from me?
To establish trusted SSL connection I need to create a certificate request. For example, if I use openSSL I can do it by the following command:
openssl req -new -key privkey.pem -out cert.csr
...
3
votes
1answer
74 views
Is “Fingerprint Check” enough to verify HTTPS certificates?
So I'm at place A, see this sign:
and I'm writing the fingerprints to a piece of paper (this website is just an example):
Ok. Then, I go to place B (other country, etc.) then I check this ...
0
votes
0answers
17 views
File not found error comes when trying to run pvk2pfx.exe file [migrated]
I am trying to create a simple client side certificate and for that I am following a link “How to create client certificate”.
I have installed SDK on machine, and I have successfully run the two ...
4
votes
2answers
102 views
Why are Certificate Revocation List periodically renewed?
While studying a security course I have been asked this very question:
Why are CRL periodically renewed, even if there are no new revoked certificates to add to the list?
Honestly I can't find the ...
4
votes
1answer
146 views
How is an HTTPS login secure when pages use HTTP?
When someone go to eBay's website, they use an unencrypted connection between their PC and eBay's server. If they sign in, they are redirected to a secure site identified by its certificate and may ...
4
votes
1answer
106 views
Why do we allow SSL certificates to be replaced before their expiry date, without revokation of others?
Imagine a situation where a rogue CA creates a certificate for your site. Since the user's browser trusts the CA, it will accept the certificate without any fuss. However, the site's real certificate ...
-1
votes
0answers
60 views
What are my options in deploying an authentication certificate to iPhones and Android devices? [closed]
I need to deploy certificates to iPhone and Android devices for the purpose of Activesync and Egnnite (like Dropbox) web authentication.
Even though most access is over HTTPs via the browser, the ...
5
votes
1answer
58 views
'Trusted CA Certificates' and 'Trusted remote Certificates'
What is the difference between Trusted CA Certificates and Trusted remote Certificates?
3
votes
2answers
55 views
Change 'Key Usage' of a certificate
Is it possible to change the 'Key Usage' property of an existing ssl certificate of a web site? Our goal is to host a web service so that a third party can integrate with our solution, and their ...
1
vote
2answers
81 views
Force SSL/TLS client cert authentication even if server does not request it?
Usually the server specifies in the Server Hello message if a client certificate is needed/wanted.
Does anybody know if it is possible to perform an authentication via client cert if the server does ...
2
votes
1answer
60 views
Use Client Certificate using Self Signed CA while using Web Certificate of a publicly trusted CA
I would like to ask if it is possible to use different CA for the client certificate and the web certificate?
For example, I would use Verisign to sign my web certificate while I use my Self Sign ...
1
vote
1answer
89 views
Certificate authentication with jQuery's ajax() function
I need to sync with my server with the client certificate abc.pfx which is generated by the server using Ajax. How do I send my certificate with Ajax object. Can I do this certificate authentication ...
-1
votes
1answer
101 views
Wireshark Decode HTTPS Root Certificate
I'm currently dealing with a "Sniffy" java application. Well I can see it connecting to some kind of server using HTTPS. I would like to see what its sending or getting over HTTPS. i have read some ...
3
votes
1answer
112 views
What is the difference between Serial and Thumbprint
I have problems to understand what the difference between the Serial Number of a certificate and its SHA1 Hash is.
the MSDN says:
Serial number A number that uniquely identifies the ...
0
votes
1answer
30 views
What is the difference between SSL and X.509 Certificates?
I used openssl to create a X.509 certificate but I don't quite understand the relationship between a X.509 and a SSL certificate. Are they the same? Is a SSL certificate just a X.509 certificate that ...
5
votes
5answers
194 views
A standard way to manually add a digital signature to a pdf file?
I've created a few certificates to use myself, but I find myself stumped when it comes to creating a certificate which contains a digital signature. First, how would I go about creating a standard ...
2
votes
1answer
86 views
How does an offline CA revoke certificates?
If an RSA private key of a root CA is stored offline, how does it revoke certificates it signs?
From looking at OpenSSL config the default_crl_days option seems to indicate that a CRL must be ...
3
votes
1answer
89 views
How does an end user differentiate between OV and DV certificates?
This is a very good link that explains the different types of SSL certificates and level of trust provided by them. An Extended Validation (EV) certificate it is easily identified by the green color ...
1
vote
1answer
75 views
SSL Communication and Proxy
Let us say that I have a client and a server communicating using SSL.
If a hacker sets up a proxy between the client and the server, will he be able to decrypt the data which is being sent?
0
votes
1answer
65 views
Determine the Identity of Caller
Let me explain my situation.
I have a provider which is made up of a registration page and a web service. Online vendors (clients) register with the provider by providing details such as username, ...
2
votes
1answer
46 views
Sending Digital Certificates
I used the makecert tool in order to create:
a self-signed certificate
a server certificate using the self-signed certificate
a client certificate using the self-signed certificate
I then ...
2
votes
1answer
70 views
Security Certificates - Tools to Generate Security Certificates
I want to create a self-signed certificate that will be installed as a trusted certificate authority.
I then want to create another two certificates which are signed using the private key of the ...
1
vote
1answer
212 views
The request was aborted: Could not create SSL/TLS secure channel Exception
Let me explain my situation.
I created a self-signed certificate and installed it in the Trusted Root Certification Authorities section in MMC.
I then created two certificates using the self-signed ...
3
votes
1answer
114 views
Creation and deployment of self-signed certificates for a two-machine scenario
Let us assume that I have two computers:
client
server
Now, in the server computer, I set up a legacy ASMX web service which will going to be used by the client. Before the client can connect to ...
5
votes
1answer
112 views
How do I make or get computer certificates to use with IPSEC user authentication on Windows?
I am having trouble and need some direction using computer certificates with Windows 7 firewall IP Security rules, using certificates only for user authentication. I can get everything to work ...
2
votes
1answer
45 views
How does a function certificate work?
Say that we have a client / server solution (written in .NET). If we want to use a certificate for the TCP communication, is it enough to use one function/service certificate to encrypt communication ...
3
votes
3answers
239 views
Self signed certificates for https
Where I work, currently for internal sites, self signed certificates are being used.
In Firefox, the info regarding the certificate are displayed:
site domain: xxx.com
Owner: Site doesn't supply ...
1
vote
2answers
196 views
SSL: How to send generated client certificate from server to avoid MITM?
The question I have is simply how do I prevent a MiTM attack on a certificate once the server side creates a new one and tries to send it to a client? Does the certificate get encrypted by rsa and ...
-1
votes
2answers
118 views
Generate openSSL certificates from within C code using commands?
This is an openSSL command for generating a private key and a certificate,
openssl req -out CSR.csr -new -newkey rsa:2048 -nodes -keyout privateKey.key
The question I have is whether there is some ...
4
votes
1answer
219 views
SSL Cert Types and Key Usage
I want to use OpenSSL to create a CSR and submit it to my CA (which uses Microsoft PKI) and receive certificates that can be used for both Server Auth and Client Auth. I'm not clear on a couple of ...
2
votes
0answers
78 views
SANS Forensic Course -worth it? [closed]
I'm a Security Student at Pennsylvania State University and I am considering taking FOR408 through SANS this summer in Pittsburgh (not far from my home). I really want this to help me stand out in my ...
2
votes
2answers
112 views
Looking for general guidance on securing web API application for client applications and users
I have a web service built with WebAPI that accepts JSON requests and responds accordingly. The core architecture is built but there isn't any authentication/authorization.
After a lot of googling ...
4
votes
2answers
80 views
Using SSL Certification in Multiple Locations
I have some issues with respect to using SSL Certificates. I have a website hosted in UK and I also have an organisation in South Africa hosting my company application online for web access.
The ...
2
votes
1answer
106 views
How do I diagnose client-side SSL errors?
Often on my home network I get random SSL certificate errors when I visit certain well-known sites. Today it was a Google SSL error, where Google apparently tried to identify itself as *.icloud.com. ...
1
vote
1answer
84 views
x509: must the signature algorithm and public key algorithm match?
I'm having trouble getting Firefox to send an encrypted message using a certificate, and I've found that the only difference between this one and others that work fine are that this one has a DSA ...
2
votes
1answer
110 views
Would introducing client certificates for a mobile app improve security?
I have developed a REST API which has been configured to only operate over HTTPS. The sole purpose of this API (at least for the moment) is to operate as the backend entry point for a mobile ...
1
vote
1answer
122 views
Can I use any ssl certificate to sign and encrypt AS2 message?
I'm absolutely new to this topic of ssl certificates, so please be patient with me.
My task is to install an AS2 communication with some business partner. Therefore we need message signing and ...
2
votes
1answer
106 views
Certificate Chains When Importing Signed CSR Response
I'm interfacing with a secure web service, and authenticating using a client certificate. I'm confused about step #3 in the client configuration:
Generate a private key into keystore
Generate a CSR ...
0
votes
2answers
119 views
Create a SSL certificate and sign it with a personal certificate which in turn is signed by a certificate authority [duplicate]
I have a personal certificate which is signed by a certificate authority. This certificate is unrestricted with respect to its allowed purposes. Is it possible to create a SSL server certificate on my ...
0
votes
0answers
84 views
Extended validation SSL certificates [closed]
Where can i buy the cheapest EV SSL certificate?
By now the cheapest one i've found is Godaddy.
But i want know if there are a cheaper one.
2
votes
1answer
244 views
ECDHE_RSA and gmail
I'm using Chrome on Ubuntu Linux to connect to Gmail. The connection info says that ECDHE_RSA is used for the https symmetric key exchange.
Based on my understanding of TLS and Gmail, my client ...
