Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [self-signed]

Self signed certificates.

Filter by
Sorted by
Tagged with
2 votes
1 answer
40 views

SSL cert for mailserver, which domain? mail client refuses self-signed

I've got a mailserver and the hostname is mx.domain.com. Of course the server is configured to send emails to $mydomain and/or $myhostname.$mydomain in Postfix. Do I need to create the CSR/key for the ...
shawnixer's user avatar
0 votes
1 answer
110 views

Does self-signed encryption certificate violate "no multi-use keys" principle?

Say that I have generated an RSA keypair, which I intend to publish only for use with RSA-KEM; I can see that this is provisioned for: The intended application for the key MAY be indicated in the key ...
JamesTheAwesomeDude's user avatar
1 vote
0 answers
78 views

Is it fine if I share a .pfx self signed certificate generated inside my machine with other users to test and use PnPCore SDK

We want to develop some Azure functions which use PnPCore SDK. For testing purposes, I registered an Azure app which uses self-signed certificate for authentication. Now I configured the Azure app ...
microsoftdeveloperdesigner's user avatar
1 vote
3 answers
274 views

self signed certificate

I read a lot of articles about self signed certificates and I'm not exactly sure if I'm getting near to what I want to actually achieve. I'm trying to implement a self signed certificate so that the ...
Reefo Relaxo's user avatar
1 vote
1 answer
105 views

With selfhosting email server, selfsigned certificate, does it make a difference with PGP mail, What can be leaked?

If we are self hosting our own email server with mydomain.com with a self sign CA for S/MIME. What are some possible ways that our email content can get leaked? Then if we use PGP email, does it make ...
user294265's user avatar
1 vote
1 answer
386 views

Digital Signature Generation

In short, I need to place a Digital Signature into slot 9c of my Yubikey. If you generate the certificate from the Yubikey; then the private key is not exportable. So I'm attempting to generate the ...
Oort's user avatar
  • 11
2 votes
1 answer
559 views

Why a public key must be signed with its private pair in PGP

I know about the trust web in PGP. When you sign a key, everybody that trusts you will trust the person with that key. But what is the point of self-signing a key when anybody else can do that with ...
Fish_n_Chips's user avatar
0 votes
0 answers
146 views

Client Identification using Self Signed Certificates

Taking the concept from the Gemini protocol that allows clients to identify themselves using their own self-signed certificate - is this a valid concept that could be used in other protocols and what ...
LittleBobTable's user avatar
0 votes
1 answer
222 views

Are self-signed certificates better for local usage?

When generating a certificate what would more secure - generating a self-signed certificate using PGP or using a public CA like Let's Encrypt? We are using it for signing and encrypting. What are the ...
Munchkin's user avatar
  • 264
1 vote
1 answer
715 views

How insecure are self-signed certificates? Why does Tor still use them?

How insecure are self-signed certificates? Why does Tor still use them?
Gaai Chia's user avatar
2 votes
1 answer
230 views

Reverse Shell for managing unreachable remote computers

In the near future, I will have about 50 remote computers to manage. These will be physical PCs running Debian 11, distributed all over the country. They will automatically perform a special kind of ...
kol's user avatar
  • 123
0 votes
0 answers
92 views

Is it possible for a company to buy a signing certificate so that everything it signs (Software,SSL, Documents) states its from that company?

If I work for a company that wants to sign its own certificates for its website, documents and software it writes, is it possible? I have read a couple of post on here from around 10/8 years ago but ...
Definity's user avatar
  • 109
0 votes
1 answer
328 views

How to update self-signed server certificate on the clients

We are currently shipping a product to our customers that is server-client-based running on Windows server 2016 (server) and Windows 10 (clients). The server is installed on-premise in our customer's ...
Juergen's user avatar
  • 31
0 votes
1 answer
194 views

Is there any point in separating private key gen for a self signed certificate?

Disclaimer + Background Since self signed certs are not that popular, here's some context: I have a 3rd party client/server application that we're currently using (inside the LAN!) via unencrypted TCP/...
Martin's user avatar
  • 1,237
17 votes
3 answers
6k views

What is the problem of using a self signed-certificate for a game?

I am trying to understand the security problems when working with a game that needs an account for its players. What is the problem of using a self-signed certificate? If I understand the problem ...
NaolShow's user avatar
  • 181
0 votes
1 answer
3k views

Implications of using a self-signed certificate to sign JWT tokens in OAuth

I'm looking to setup an integration between GitHub and Service Now and I can use OAuth2 using JWT Tokens, the steps to take can be found here. There is a specific step that states: Create a CA signed ...
user1876202's user avatar
1 vote
2 answers
681 views

Required certificate key usage for signing document

What's the required key usage/extended key usage for signing documents, eg.PDF, Word, PowerPoint, Excel, etc... I am going to create a self-signed certificate that is needed to sign those documents. I ...
CHOO YJ's user avatar
  • 113
0 votes
0 answers
204 views

Self-Signed Certificates on Management Interfaces - Cyber Security Standards

We have dozens of internal management interfaces on our appliances that use self-signed certificates - ILO, DRAC, switch management, etc. These certificates display a warning in the browser, but their ...
Jay 's user avatar
  • 71
1 vote
3 answers
1k views

Self-Signed Certificates with SSL

Today I was playing around with an SslStream implementation in C#, and was able to create a client/server connection over TCP. Also to verify it, I used wireshark to ensure that the data was in fact ...
michael b's user avatar
  • 113
0 votes
3 answers
409 views

Authenticating root certificate

I'm building a web service and have questions regarding authentication. I have a strict requirement that this application only run on company machines. We have a root certificate this is installed on ...
secert's user avatar
  • 3
1 vote
1 answer
1k views

Possible to create a self-signed certificate with AIA extension using PowerShell or openssl?

I am able to use the PowerShell New-SelfSignedCertificate cmdlet to create a self-signed cert just fine, but I'd like to create one with an AIA extension and give it an OCSP responder URL. There is a ...
ericOnline's user avatar
0 votes
1 answer
688 views

NET::ERR_CERT_INVALID in Chrome/Opera on Linux [duplicate]

I have set up a self-signed CA in a development environment and have issued a server certificate to a test website. The issue I'm having is that the certificate is being rejected by the browser with ...
Aditya K's user avatar
  • 121
2 votes
1 answer
429 views

Securing HTTPS between two local applications on same system

I would like to know how to securely setup HTTPS between two applications running on the same workstation in a production environment please: A local server application (C#) A web frontend which ...
bemo's user avatar
  • 125
1 vote
0 answers
106 views

What is the job on each file and command when creating self signed certificate [closed]

I had to create a self-signed certificate for client-server application but I do not understand what each file and command means and how the client and server work together to do the mutual SSL ...
user63898's user avatar
  • 111
4 votes
2 answers
841 views

Why should I go to SHA512withRSA signature for my Android apps?

I have an Android 11 device and many of my apps and system apps use MD5withRSA or SHA1withRSA as signature algorithm by default. Why should I take my apps SHA256withRSA or SHA512withRSA? Are there any ...
julia.fds387's user avatar
3 votes
1 answer
2k views

TLS and self-signed certs. Is hostname verification necessary if client-supplied CA is the same as server leaf cert?

TLS client implementations will tend to try and do hostname verification by default for remote TLS endpoints (servers). The client connects to the server, and as part of the negotiation the ...
growse's user avatar
  • 551
1 vote
2 answers
2k views

HTTPS IP devices and certificate best practices, why can't I sign a certificate for my local ip device?

I have a IPv4 network behind a pfSense firewall at my small business. We have around 200 IP devices on the network. We have about 30 Axis IP cameras which have MJPG streams embedded into webpages as ...
David Sindar's user avatar
1 vote
2 answers
1k views

Does signing of CSR by the same private key create self-signed certificate?

I know how to create a self-signed certificate in a one command: openssl req -x509 -newkey rsa:4096 \ -keyout my.key -passout pass:123456 -out my.crt \ -days 365 \ -subj /CN=localhost/O=home/C=US/...
gavenkoa's user avatar
  • 123
1 vote
1 answer
229 views

Register a new client with self-signed certificate

I'm trying to understand a series of steps for an authentication system I want to replicate. The steps are executed by this script. To sum up, it does the following: It runs in a Raspberry Pi and the ...
Miguel's user avatar
  • 111
2 votes
1 answer
848 views

Any disadvantages to long-lived self-signed certificates for personal use?

I run my own IMAP server on my own machine, and am the only user of it. The server uses a self-signed certificate that I generated with OpenSSL. I don't use the certificate for any other purpose. I ...
Psychonaut's user avatar
0 votes
0 answers
34 views

Self signed SSL certificate usage for private site [duplicate]

I have a website that is not supposed to be open to the public and the URL is hidden. Currently, I use Comodo certs to do the SSL, but I'm wondering since only approved devices should be accessing it, ...
Kilisi's user avatar
  • 101
2 votes
2 answers
2k views

How do clients extract the public key from a self-signed certificate?

I have gone over: Why do we need to sign the self-signed certificate? Basic self-signed certificate questions Is a self-signed SSL certificate much better than nothing? I am new to cryptography and ...
Sheel Pancholi's user avatar
0 votes
1 answer
6k views

Error Loading extension 'copy_extensions' in Openssl

While running the following command on Ubuntu 19.10, with OpenSSl 1.1.1c 28 May 2019: openssl req -config ${CNF_FILE} -key ${PRIVATE_FILE} -new -x509 -days 10950 -sha384 -extensions v3_ca -out ${...
jj_inno's user avatar
  • 33
1 vote
1 answer
192 views

Independent C library or function (on Linux) to programmatically generate a self-signed certificate [closed]

Is there a simple C library or function to programmatically generate a self-signed certificate in C on Ubuntu? Of course, one can execute a simple system("....") call to execute a CLI. I am ...
asinix's user avatar
  • 261
2 votes
2 answers
6k views

Where to put SAN

Where SAN means: Subject Alternative Name. I feel I have a basic misunderstanding in which certificate the SAN stuff shall go: ca or server or both or what? It might be 3 Years or more in the past, ...
woodz's user avatar
  • 131
0 votes
3 answers
748 views

Why do we need to sign the self-signed certificate?

When we add a self-signed certificate to a device's list of trusted root certificates, we're already trusting it. So, why should it be signed with the server's private key? Signatures only ensure ...
Daud's user avatar
  • 189
0 votes
3 answers
570 views

While importing certificates in keystore, do we treat these like CA root certificates?

When we need to call an internal domain via HTTPS, Java doesn't allow it because it doesn't recognize the certificate that those domain web servers are sending (probably because those certificates are ...
Daud's user avatar
  • 189
4 votes
1 answer
2k views

Self-signed certificates in embedded IoT device

I have multiple IoT devices that will be connected to a cloud based platform in order to control these devices (IoT node running baremetal arm SoC). These IoT nodes would be deployed and, during ...
LazyTurtle's user avatar
1 vote
1 answer
584 views

Chrome: why is invalid certificate usage for resources loaded from localhost disabled?

In chrome there is a flag called: allow-insecure-localhost. As far as I can tell all it does is block localhost connection over tls if the certificate is self signed. Why is this feature turned off ...
user2887596's user avatar
14 votes
2 answers
2k views

Technical description of a self-signed certificate

I'm having a friendly debate with a co-worker as to the meaning of "self-signed" when it comes to PKI. We have an internal root and subordinate CA in our organization. We import the cert chain on ...
Keith Madaras's user avatar
8 votes
1 answer
2k views

Is a self-signed certificate from my ISP-provided router a security threat?

I recently found out that in order to log on to the web-based administration tool on my ISP-provided router, I need to accept a self-signed certificate it offers. I did a bit of reading and it sounds ...
user109923's user avatar
4 votes
1 answer
2k views

Trusted CA SSL certificates and embedded devices

There is an embedded device which should connect to the server over HTTPS and MQTTS. A server certificate is issued by a trusted CA (for example, Let's Encrypt). But there is a problem with server ...
chimit's user avatar
  • 141
1 vote
3 answers
947 views

How does server validate that self-signed certificate came from the client who self-signed the certificate in mutual TLS?

I have a mTLS (client authentication) setup where client sends a self-signed certificate. This self-signed certificate is transferred to and trusted by the server. The server's certificate is signed ...
Harry Cho's user avatar
  • 165
4 votes
2 answers
3k views

How to Trust a Self-Signed Certificate

According to Why are self signed certificates not trusted and is there a way to make them trusted?, to trust a self-signed certificate we need to import the root certificate into the trust store of ...
ShieldOfSalvation's user avatar
1 vote
1 answer
3k views

Self Signed Certificate in Certificate of Chain [closed]

I setup an internal Root CA with another Intermediate CA, which will issue and sign the certificates for other internal servers. When I did the "openssl s_client -connect :443" it shows the error ...
JT Lai's user avatar
  • 11
21 votes
7 answers
9k views

Is encryption still applied if you ignore the SSL certificate warning for self-signed certs?

Would encryption still be applied on communication with devices using self-signed certificates if you ignore the warning and proceed without installing the certificate? Would you need to install it to ...
user3483792's user avatar
1 vote
1 answer
473 views

.Net WebClient - self signed certificate

I have two applications (.net) on two web-servers. The first application will need to do a request (via WebClient) to the second and get results. I need to ensure Encryption, data integrity, and ...
J1mak0s's user avatar
  • 11
2 votes
1 answer
832 views

Should I stop using DSA key algorithm self-signed certificates in production in favor of RSA Certificates?

We use a self-signed certificate with DSA key algorithm (and RSA signature algorithm) for securing a Kafka cluster in production. The access to the Kafka servers is already limited (by firewall) by ...
avm's user avatar
  • 21
1 vote
2 answers
639 views

Are SAN IP addresses / DNS names useless in self signed certificates by untrusted CAs?

I want to generate a self signed certificate for temporary local testing of a web service via HTTPS. I don't want to install the CA though, because the self signed certificate is generated on the fly ...
phlow's user avatar
  • 11
0 votes
0 answers
896 views

encrypting TCP and UDP with self signed cert

I don't have much experience in computer security and I am developing a server for a project. I'm using a tcp connection and UDP packets for some real time data transmission. I want both of these ...
Bhanuka Yd's user avatar