A piece of data used in public key cryptography that contains identifying information (i.e. email address or web address), a hash of a public key, and a digital signature that authenticates the data in the certificate.

learn more… | top users | synonyms

2
votes
0answers
6 views

Signtool validation fails when signing and validating are done in different machines

I am signing an exe from a machine using a cer file. Then when I validate the EXE using the signtool.exe from the same machine, it succeeds. But when I try to validate it using the same .cer installed ...
-4
votes
0answers
12 views

Security issues to be considered in case of a webpage

What are the security issues to be taken into consideration while loading a webpage?
0
votes
1answer
82 views

Can we safely distribute password protected .p12 file?

I have a password protected .pfx file and I would like to know if it safe to share it on GitHub. The intention is to ensure that companies can trust a dll file of the Tweetinvi open source library. ...
0
votes
1answer
14 views

Replace certificates simultaneously on remote servers?

A third party server sends us signed messages that we verify. When its certificate is about to expire, the third party generates a new key pair and sends us the new certificate. At some point, the ...
1
vote
0answers
12 views

JWT vs. Client Certificates

We have a transaction server that is connected to by different client applications. The requirement is to have a secure means of authentication for client applications to communicate with the ...
1
vote
4answers
60 views

Is EV green extended validation slower than a regular SSL?

How does EV green extended validation SSL certificate affects the speed of my web site (if at all) comparing to a regular SSL? Also, my provider only allow the EV green certificates to be on the root ...
2
votes
2answers
56 views

How important is it to use a large encryption key for SSL certificate?

I'm trying to figure out which size of encryption key should I use for my SSL certificates (2k, 4k?) Is a 2k key "sufficient"? is it crackable...? and if so, is a 4k key not crackable? Also, how ...
2
votes
2answers
46 views

Is it possible to use more than one certificate on the same server at the same time? [duplicate]

Is it possible to use more than one certificate on the same sever at the same time, on the same connection? If I have a certificate from Alice Keys CA and another from Bob Security CA, is it possible ...
17
votes
5answers
2k views

Who is responsible for revoking a certificate?

The CA issues certificates to clients/servers. Whenever a request is made by the client/server, the certificate is used to verify the identity. Now, if a certificate needs to be revoked then who does ...
0
votes
0answers
44 views

SSL certificate problem: self signed certificate in certificate chain [migrated]

Behind a firewall, using chrome, I am able to access a github repository like so: https://github.com/Squirrel/Squirrel.Windows Chrome uses our certificate for this access. If I try to access the same ...
-1
votes
0answers
26 views

s/mime edit an existing certificate

We are using an encryption appliance that is capable of creating S/MIME certificates for internal users. The appliance is synchronizing with AD to get the user. When the certificate is created it will ...
0
votes
1answer
35 views

Downloading a new SSL pinned certificate insecure?

I want to make a mobile app secured with SSL pinned. The problem I know I will have is if the certificate expires. My possible solution would be downloading a certificate from my server from time to ...
2
votes
2answers
43 views

CA Certificate Lifecycle

I'm planning to implement a new PKI with 2 tiers of CAs. I'll have end entity certificates with a lifetime of up to 5 years. This means my Issuing CA should be valid for 10 years, in order to be able ...
0
votes
0answers
23 views

PKCS #7 Certificate p7f format

I'm looking for information about a .p7f signature file that I need to generate for an old webservice. I don't know a lot about certificates in general, but this particular extension is bothering me. ...
-1
votes
0answers
39 views

How do I set up confidentiality on files after download in Microsoft SharePoint

I'm currently working to setup a solution for a SharePoint server. Looking further into the possibilities for confidentiality on files after download I found a dead-end about what is used. My company ...
2
votes
2answers
61 views

Can we restrict cipher suites using server certificate?

Can we restrict cipher suites (such as RC4) using server certificate?
1
vote
0answers
23 views

Key distribution for zeromq [closed]

We're evaluating zeromq for a publisher/subscriber model where the publisher could change after each session. The public keys have to be distributed in advance. It seems that zeromq has its own ...
0
votes
1answer
73 views

Vicious circle with certificates - how to trust the server cert?

I have a java app on Android that needs to be able to communicate with a web server over ssl using an client x509 certificate (for encryption negotiation) - the private key is in the java keystore ...
3
votes
2answers
90 views

What are the risks of still using a 1024-bit certificate in a private network?

One of our colleagues ran a Qualys scan on an internally used product and found that the product still uses 1024-bit certificates for its modules to communicate with each other. The vendor says that ...
6
votes
1answer
119 views

Manually walking through the signature validation of a certificate

Since I am not too familiar with the Web of Trust and Public Key-Infrastructure I decided to learn about it by following the signing chain of a X.509 certificate issued to CN=*wikipedia.org (Serial ...
1
vote
1answer
80 views

TLSv1: Reason for client not sending client certificate

Our BizTalk installation consists of two load balanced nodes B1 (10.137.10.1) and B2 (10.137.10.2) which process and route incoming SOAP messages. The processing is nothing more than: sending the ...
2
votes
1answer
197 views

Snapchat tracking over company WiFi. What can they see, save or open?

I sent a snapchat to a coworker during company time. I was not on the work wifi, but now I believe they may have been. What will my employer be able to see from the snapchat that was sent and opened ...
6
votes
3answers
2k views

Isn't HTTPS insecure over a hacked router? [duplicate]

I have heard that a hacker can become a proxy using the router your device is connected to and send his own public key to you instead of you getting the server's public key - which the browser will ...
3
votes
2answers
126 views

How to tell if a SSL cert is 128 bit or 256 bit?

My cert is: Key Length = 2048 Signature algorithm = SHA256 + RSA So is it a 256 bit SSL cert?
4
votes
1answer
33 views

When prompted to add a certificate or profile to connect to a secured WiFi network, how can I tell if it's safe to install it?

Sometimes when I connect to secured WiFi networks on my computer, such as my internet provider's WiFi hotspots around the city, I'm asked to add a certificate to my certificate store. When I'm on my ...
-2
votes
1answer
63 views

SSL Server-side certificate on client computer? [closed]

There is a server with WCF client, which periodically initiates communications over internet with many WCF services installed on our clients computers. WCF services and WCF clients are hosted in ...
3
votes
2answers
102 views

Comparison and difference between CAs

While doing some Google searches, I learnt that there are a lot of different Certification Authorities like the Windows role named "Active Directory Certificate Services", the OpenSSL library or the ...
0
votes
0answers
44 views

My school is making everyone install a SSL certificate. Will my VPN still work? [duplicate]

My public highschool is having everyone with a non-school rented device install a SSL certificate provided by Securely. Nothing has taken place yet but they threatened that personal laptops without ...
1
vote
1answer
100 views

Why is CAcert not trusted by my browser?

I am fairly new to encryption and SSL. Today I googled a bit (read some atricles about security) and encountered the site https://cacert.org. I clicked it and was surprised. Chrome showed me a "not ...
0
votes
0answers
24 views

How to check Firefox CA health?

If we have a RHEL based desktop at a workplace, how can we check the health of the Certificate Authorities trusted by Firefox? I mean: The list that which CA is allowed in the webbrowser And that ...
-3
votes
1answer
54 views

How two identical domains work on Internet when they got signed from two different CA

Let's say A and B. Considering A and B are from same location. A went to the verisign and get signed for example.com B went to the godaddy.com and get signed for same domain(example.com) Now question ...
4
votes
1answer
122 views

Why is BlueCoat proxy passing HTTPS communication to Google sites?

I have a machine behind corporate BlueCoat's proxy server. For any HTTPS site I get a certificate signed by BlueCoat's CA, for example: BlueCoat *.duckduckgo.com The only exceptions are sites ...
0
votes
1answer
37 views

SSL warnings while using Origin Certificate on my VPS

I created Origin Certificate in cloudflare and installed on my Apache on Debian VPS using the guide https://support.cloudflare.com/hc/en-us/articles/217472077. My URL is like this: https://socket....
1
vote
1answer
119 views

Firefox security certificate issues: FUD or truth?

I was doing a little reading over at gHacks, and came across this comment attributed to Joey Spinosa regarding certificates in Firefox: These certificates are installed automatically by the ...
1
vote
1answer
56 views

Securing confidential information between users

I know there are several issues about encryption, but my case is slightly different Users have confidential information stored on their device They have a RSA key pair The information must be ...
1
vote
1answer
60 views

How do websites prevent certificate forgery?

I have recently developed interest about Wireless hacking, and I have seen in many instances in videos and stuff that people are (or more correctly, were) able to perform some kind of MitM attack ...
0
votes
0answers
14 views

CertGetCertificateChain takes 15 seconds for chain building [migrated]

I have a semi-isolated Windows 10 system, which is not connected to public internet network but connected to local network. In my application I need to verify the trust status of the received ...
0
votes
2answers
46 views

SSL protocol analysis

1) What is the use of Cert B in this protocol? 2) What does it prove to Alice? 3) Is it okay if we remove Cert B in this protocol? Even without Cert B, isn't the fact that Bob used his private key ...
3
votes
2answers
347 views

What is the exact problem if a website has an SHA-1 certificate?

There was a recent question about trusting (or not) a website showing an SHA-1 certificate. I would like to know whether I understand the actual issue correctly. The dangers are (a) that someone ...
2
votes
1answer
104 views

Strange CA certificate prompt

My network went down for a minute today, then this window popped up: Can someone here clarify this for me? I was using firefox. I had google, youtube and outlook open. My name isn't even close to ...
4
votes
1answer
83 views

TLS/SSL Certificate - Key usage and encryption

So I'm looking at google.com's SSL certificate and do not understand a few things: I totally get that it ensures the identity of Google's webserver, but don't understand how it proves anything ...
34
votes
5answers
5k views

Should I trust a website which uses a SHA-1 HTTPS certificate?

I am on a website where I need to pay for something. This website has the following warning in the top left: This site uses a weak security configuration (SHA-1 signatures) so your connection ...
0
votes
1answer
27 views

Use externally generated CA cert to sign CSR's in OpenSSL

I wondering if it is at all possible to use an externally generated root CA ( and by external I mean an internal root CA that was created using another tool) and use it with OpenSSL to sign a CSR? ...
1
vote
1answer
44 views

Password manager login with compromised certificates

This morning I booted my work laptop as usual and logged in to Windows, then my password manager (Dashlane, if it makes a difference) as usual. Opening up Chrome and browsing to a site with HTTPS ...
2
votes
1answer
67 views

Can a DNS “route” change cause an SSL certificate error?

What I mean by "route change": As a working example, mysite.example.net is set up as: mysite.example.net. 3600 IN CNAME some-other-site.elsewhere.com. some-other-site.elsewhere....
0
votes
0answers
34 views

Certificate not showing up for signing in Outlook

I have a new ECA certificate installed on my Windows 7 machine, but when I use Outlook it is not letting me change the signing certificate to the new certificate, but it does let me change the ...
2
votes
2answers
49 views

How do I handle HTTPS certificates for a device with dynamic IP?

I'm fairly new to HTTPS and therefore risk this being a dumb question. I have a server hosted on my Raspberry Pi that allows me to configure it remotely, over a network and I'd like to convert to ...
0
votes
2answers
53 views

What is the purpose/role of the “alias” attribute in Java keystore files?

I've heard conflicting information about the purpose of the alias attribute in Java keystore files. Can someone please clarify on what exactly this attribute is, and what it should be set to when ...
0
votes
0answers
30 views

Validate Code Signing Root Certificate Offline

I am developing a library distributed as a Windows DLL to be called by 3rd party executables. I expect the calling EXE to be digitally signed and need to verify that. I have no control over the ...