Questions tagged [certificates]

A piece of data used in public key cryptography (specifically public key infrastructures) that contains identifying information (i.e. email address or web address), a hash of a public key, and a digital signature that authenticates the data in the certificate. For questions specifically about [x509], [certificate-authority], or [public-key-infrastructure], please use those tags.

Filter by
Sorted by
Tagged with
0
votes
1answer
281 views

Is the StartCom tool safe to generate CSR and private keys?

I've used StartCom tool to generate CSR and private keys for my websites,but now i am concerned after reading about StartCom trustworthiness problems.Are my private keys and certificates secure or i ...
0
votes
3answers
1k views

Can a Man In The Middle attack cause a certificate error? [closed]

I was playing around with Ettercap and I performed an ARP spoofing, MiTM attack on a friends computer as a joke. Now (about a day later) she tried to login to a website for work and it said "Your ...
-1
votes
2answers
6k views

School Wifi Certificate [duplicate]

My school is requiring that I download a wifi certificate to use the school wifi on my phone but i was wondering what downloading the certificate entails since it doesn't really tell you if I download ...
-1
votes
2answers
81 views

SSL/TLS Extended Validation implemented in fraudulent domains

People trust green bars, because it is proven to not to be of malicious origin. This seems to be the questions of hundreds and many are concerned about it, picture that; a team of fraudsters(or at ...
-1
votes
1answer
361 views

SSL and Fake Domain

I am reading information related to SSL handshake on the Internet. It seems like in the last step the domain name is compared to the domain in the certificate. How exactly is this protecting against ...
-1
votes
1answer
295 views

Why don't CAs sell certificates as files, instead of hardware or as a service?

I'm trying to purchase multiple certificates, some just signing, some just encrypting, and some a combination of the two. I wanted to purchase one signed by a CA, rather than using a self-signed one. ...
-1
votes
2answers
222 views

user identity certificate

I want to create a new scheme for user identification, like X.509 certificates, but not X.509. Is it possible to use this new certificate over the existing Internet? and if yes, what are basic ...
-1
votes
2answers
2k views

Generate openSSL certificates from within C code using commands?

This is an openSSL command for generating a private key and a certificate, openssl req -out CSR.csr -new -newkey rsa:2048 -nodes -keyout privateKey.key The question I have is whether there is some ...
-1
votes
1answer
8k views

Reasons for a “Bad certificate” error

I have a problem with self-signed certificates in an etcd cluster. The certificates are ok because if I use them in nginx, there is no error at all as long as I add the CA file to my certs store. ...
-1
votes
1answer
171 views

Certificate weird behaviour

I tried to understand a certificate issue and capturing using Wireshark to inspect the different sequences. The case that is not working (wifi connection through my cable provider), I see: client ...
-1
votes
1answer
140 views

SSL Certificate Subject Alternative Name Information Disclosure

I'd appreciate if someone could shed some lights on the subject findings. Is this a security problem having bank.com appearing on the SAN? Hostname was discovered in the Subject Alternative Name (...
-1
votes
2answers
438 views

At which offset is the public key in an DER encoded certificate chain?

I have the following bytes array storing a certificate chain (DER encoded): ...
-1
votes
1answer
54 views

HTTPS - if this protocol protect against connecting to false server?

I know about SSL certificates. However it is ok to say: protocol HTTPS protects against connecting to false server ?
-1
votes
1answer
57 views

Signed E-Mail certificate invalid [closed]

I sent a valid signed e mail a few weeks ago. Now I reinstalled everything on my computer (including the OS). Is the certificate now invalid?
-1
votes
1answer
95 views

Do certificates need to be protected at rest? [closed]

I have downloaded numerous certificates to my device. How do I ensure the confidentiality and integrity of the data at rest?
-1
votes
1answer
211 views

XER encoded X.509 certs [closed]

Would anyone happen to have an example of an XER encoded X.509 certificate so I can play around with it? Thanks!
-1
votes
2answers
773 views

Request/Creating a Code Signing Certificate

I have need for a code signing certificate which is trusted by a CA in the windows domain. How do I request/create this certificate? Do I have to request a code signing certificate on the ...
-1
votes
1answer
544 views

Expired Digital Certificate for an EXE

An EXE file that I downloaded from the official website has an expired digital certificate signature (1999 to 2015) That is it has been expired for two years. Is it still safe to run the EXE? There is ...
-1
votes
1answer
74 views

tls custom system trusted certificate on android6 not working [closed]

I encounter the same problem as the user has in this post: Why does Samsung Android browser say our site has a valid certificate, but the site identity has not been verified? The accepted answer is: ...
-1
votes
1answer
103 views

SHA-1 Certificate warning on Windows7

I have installed a clean Win7 machine on a network where my own PC is connected. When I navigate to google.com from my PC (Win 8.1) I receive proper valid TLS connection. Yet when I navigate to google....
-1
votes
1answer
36 views

What if I have an address-based certificate and a domain based certificate loading HTTPs resources in the background

What if I have an address-based certificate and a domain based certificate loading HTTPs resources in the background, will this change the Lock-Logo in the Browser Address bar? Does an address based ...
-1
votes
1answer
2k views

How does SSL client authentication work?

I read the RFC document, it mentioned that there are some kinds of client certificate type. So I don't understand what does this type mean. For a instance, one type named rsa_fixed_ecdh, it said, the ...
-2
votes
1answer
163 views

Is there a fix to the ongoing security issues with ssl / tls? [closed]

Seems like the methods we use to ensure secure information exchange with servers continually fail. Given the ongoing issues with SSL / TLS and the ever changing methods to fix issues such as: HTTP ...
-2
votes
1answer
74 views

A collection of tests and demos for security headers and TLS configurations [closed]

There are (or have been) various websites designed to educate and provide examples on good / bad configurations of security headers and TLS configurations (e.g. https://badssl.com/) I want to build a ...
-2
votes
2answers
6k views

How do you fix this error in IE: “The security certificate presented by this website was issued for a different website's address.” [closed]

I've searched for an answer for two days, I feel none even knows what the error really means. I have an Issuing Certificate Authority and it has one valid certificate, and I want users to access its ...
-2
votes
1answer
459 views

Wget cannot securely connect to web.archive: self-signed certificate encountered [closed]

I wanted to get a few files from https://web.archive.org with wget, but it's throwing a self-signed certificate encountered error. I'm connecting through my phone directly to the mobile network so I ...
-2
votes
1answer
340 views

How do I detect if the public key in a digital certificate is modified?

I know how the basic process of digital certificate, but how do I detect if the public key in a digital certificate is modified?
-2
votes
1answer
55 views

Where to find required information to lodge a security certificate? [closed]

This is Bob's current understanding about security certificates: Security certificates are required for SSL communication. If you want to take part in SSL communication you have buy a certificate ...
-2
votes
1answer
3k views

How to dnsspoof against HTTPS

I am doing a dnsspoof PoC, but apparently it doesn't work with HTTPS because of the certificate. Please don't tell me that I have to generate a certificate or send a legitimate certificate, I want ...
-2
votes
1answer
117 views

Can OCSP stapling reduce or eliminate the weaknesses inherrent with OCSP? [closed]

Specifically, the problems with OCSP that Adam Langley talks about here?
-2
votes
0answers
34 views

How can I determine which algorithm a certificate implements for data encryption? [duplicate]

I'm attempting to discover which encryption algorithm(s) are available on a particular Certificate. Is this possible? I have examined some certs in CertMgr and I see things like: Signature ...
-2
votes
1answer
82 views

Create public key from Private key

Is it possible to create public key from Private key? In Microsoft certificate console (Capi) you can export a certificate out of a private key. Is this exported certificate a public key? I know that ...
-2
votes
1answer
1k views

Does a third level domain wildcard certificate prove a fourth level domain website? [duplicate]

Suppose I have a certificate for *.example.com and privileged access to all example.com websites. Sure I could install the wildcard certificate into https://api.example.com website so that it can ...
-2
votes
1answer
361 views

SSL Server-side certificate on client computer? [closed]

There is a server with WCF client, which periodically initiates communications over internet with many WCF services installed on our clients computers. WCF services and WCF clients are hosted in ...
-2
votes
1answer
488 views

Are VPNs for iPhones vulnerable to hacking?

I use VPNs all the time on my iPhone to get around websites being blocked and sometimes just for privacy, but are they secure? In this video the guy installed a certificate on the lady's phone that ...
-2
votes
3answers
221 views

Can a website that uses https be absolutely reliable? [duplicate]

Https websites cover some security requirements and certify the author, but how can we be sure that an author of such an https website is not malicious?
-3
votes
1answer
83 views

what is the maximum life-time for Let's Encrypt certificates

Let's Encrypt is one of the most popular TLS Certificate Authorities. I have conflicting information about its certificates life-time. In this link it says 90-days. In one research paper I read 1 ...
-3
votes
2answers
132 views

TLS Verification does NOT fail although the CA root is NOT set in IE

As far as I know: when we make an ssl connection to a site we receive the site certificate, the browser check if the site certificate is in its list of root and trusted certification. So if the CA is ...
-3
votes
1answer
83 views

How two identical domains work on Internet when they got signed from two different CA

Let's say A and B. Considering A and B are from same location. A went to the verisign and get signed for example.com B went to the godaddy.com and get signed for same domain(example.com) Now question ...
-3
votes
0answers
38 views

How to be sure that my app is my app? [duplicate]

I want to protect my server against someone who would have replicate my iOS application and used the internal http calls, by decompiling or just by some way obtained my source code. I guess It would ...
-4
votes
2answers
439 views

Using my own encryption instead of https in app

I am writing a program that uses a webserver as a backend for communication between different users. Is it okay to use my own encryption (such as http://www.logikdev.com/2010/11/01/encrypt-with-php-...
-4
votes
1answer
256 views

Illegal Russian Forums [closed]

I recently found this link hxxps://maza.cc:888 and it was saying No required SSL certificate was sent. How can I bypass to see the content on this site?
-4
votes
2answers
170 views

Does SSL doesn't work without a secondary Symmetric/Asymmetric session key?

I keep reading that Symmetric session key is used in SSL after handshake only for faster performance but isn't true a secondary session key either Symmetric or Asymmetric key generated by the client ...
-5
votes
3answers
850 views

PHP web application security [closed]

I am building a PHP web application, that needs enhanced security, due to the fact that it contains very sensitive information (in a database). I think that I want to use self-signed SSL ...
-6
votes
4answers
736 views

Is TLS-in-TLS supported in any software? Does it make sense? [closed]

I got fun idea how to increase the security of the SSL (TLS) for websites. However I think there is no support for it in the browsers, so I thought I could add it eventually, but have no idea if it's ...