Tagged Questions
0
votes
1answer
110 views
Behavior when validating an expired certificate chain
I have the following situation:
A server certificate (CServ) is signed by self-signed certificate (C0)
A client certificate (CCli) is signed by CServ
Client's trust-store contains C0, so the client ...
3
votes
2answers
133 views
In practice, does crypto software accept a *.com or or even a *. certificate?
Assuming this will be done with your own PKI, and not a public trusted CA.
Considering that *.sub.domain.com is valid, and so is *.domain.com is valid, is it technically possible to issue *.com and ...
2
votes
2answers
77 views
Using External Certificates on a network that doesn't permit outbound HTTP/S access
Some highly secure networks and DMZs prevent all communication to outside hosts. This can cause issues with validating externally signed data
I can guess that issues with signature validation occur ...
2
votes
3answers
2k views
What data should I validate when validating X.509 certificates using Java?
Well I began with PKI a year ago with RFID system at school. Now I'm asked to implement this in my job. I understand most part of the idea. The doubt is about the certificate validation.
I know it ...
