Questions tagged [self-signed]
Self signed certificates.
64
questions
1
vote
0
answers
25
views
Is it fine if I share a .pfx self signed certificate generated inside my machine with other users to test and use PnPCore SDK
We want to develop some Azure functions which use PnPCore SDK. For testing purposes, I registered an Azure app which uses self-signed certificate for authentication.
Now I configured the Azure app ...
1
vote
3
answers
152
views
self signed certificate
I read a lot of articles about self signed certificates and I'm not exactly sure if I'm getting near to what I want to actually achieve.
I'm trying to implement a self signed certificate so that the ...
- 11
1
vote
1
answer
58
views
With selfhosting email server, selfsigned certificate, does it make a difference with PGP mail, What can be leaked?
If we are self hosting our own email server with mydomain.com with a self sign CA for S/MIME. What are some possible ways that our email content can get leaked?
Then if we use PGP email, does it make ...
- 17
0
votes
0
answers
123
views
Is Self-Signed certificate sufficient for Production environments exposed to the Internet to secure our Azure Function
We have created an Azure Function which runs on a scheduled basis to update Sharepoint Online sites (each 10 minutes).
Now for this Azure Function to integrate with SharePoint, we have created an ...
0
votes
0
answers
292
views
Generate OpenSSL Certificate For Local IP Address NAS
I am a beginner. I am trying to generate SSL certificate for local Synology NAS server since valunarity assessment scan report as our NAS is not running on https.
According by this How to generate SSl ...
- 101
1
vote
1
answer
246
views
Digital Signature Generation
In short, I need to place a Digital Signature into slot 9c of my Yubikey. If you generate the certificate from the Yubikey; then the private key is not exportable. So I'm attempting to generate the ...
- 11
2
votes
1
answer
376
views
Why a public key must be signed with its private pair in PGP
I know about the trust web in PGP. When you sign a key, everybody that trusts you will trust the person with that key. But what is the point of self-signing a key when anybody else can do that with ...
- 121
0
votes
0
answers
84
views
Client Identification using Self Signed Certificates
Taking the concept from the Gemini protocol that allows clients to identify themselves using their own self-signed certificate - is this a valid concept that could be used in other protocols and what ...
0
votes
1
answer
164
views
Are self-signed certificates better for local usage?
When generating a certificate what would more secure - generating a self-signed certificate using PGP or using a public CA like Let's Encrypt? We are using it for signing and encrypting.
What are the ...
- 244
1
vote
1
answer
535
views
How insecure are self-signed certificates? Why does Tor still use them?
How insecure are self-signed certificates?
Why does Tor still use them?
- 71
2
votes
1
answer
190
views
Reverse Shell for managing unreachable remote computers
In the near future, I will have about 50 remote computers to manage. These will be physical PCs running Debian 11, distributed all over the country. They will automatically perform a special kind of ...
- 123
0
votes
0
answers
62
views
Is it possible for a company to buy a signing certificate so that everything it signs (Software,SSL, Documents) states its from that company?
If I work for a company that wants to sign its own certificates for its website, documents and software it writes, is it possible? I have read a couple of post on here from around 10/8 years ago but ...
- 109
0
votes
1
answer
247
views
How to update self-signed server certificate on the clients
We are currently shipping a product to our customers that is server-client-based running on Windows server 2016 (server) and Windows 10 (clients). The server is installed on-premise in our customer's ...
- 31
0
votes
1
answer
149
views
Is there any point in separating private key gen for a self signed certificate?
Disclaimer + Background
Since self signed certs are not that popular, here's some context:
I have a 3rd party client/server application that we're currently using (inside the LAN!) via unencrypted TCP/...
- 1,247
18
votes
3
answers
6k
views
What is the problem of using a self signed-certificate for a game?
I am trying to understand the security problems when working with a game that needs an account for its players.
What is the problem of using a self-signed certificate?
If I understand the problem ...
- 191
0
votes
1
answer
2k
views
Implications of using a self-signed certificate to sign JWT tokens in OAuth
I'm looking to setup an integration between GitHub and Service Now and I can use OAuth2 using JWT Tokens, the steps to take can be found here.
There is a specific step that states:
Create a CA signed ...
- 159
1
vote
2
answers
520
views
Required certificate key usage for signing document
What's the required key usage/extended key usage for signing documents, eg.PDF, Word, PowerPoint, Excel, etc...
I am going to create a self-signed certificate that is needed to sign those documents. I ...
- 113
0
votes
0
answers
163
views
Self-Signed Certificates on Management Interfaces - Cyber Security Standards
We have dozens of internal management interfaces on our appliances that use self-signed certificates - ILO, DRAC, switch management, etc. These certificates display a warning in the browser, but their ...
- 71
1
vote
3
answers
1k
views
Self-Signed Certificates with SSL
Today I was playing around with an SslStream implementation in C#, and was able to create a client/server connection over TCP. Also to verify it, I used wireshark to ensure that the data was in fact ...
- 111
0
votes
3
answers
320
views
Authenticating root certificate
I'm building a web service and have questions regarding authentication. I have a strict requirement that this application only run on company machines. We have a root certificate this is installed on ...
- 3
1
vote
1
answer
867
views
Possible to create a self-signed certificate with AIA extension using PowerShell or openssl?
I am able to use the PowerShell New-SelfSignedCertificate cmdlet to create a self-signed cert just fine, but I'd like to create one with an AIA extension and give it an OCSP responder URL.
There is a ...
- 297
0
votes
1
answer
649
views
NET::ERR_CERT_INVALID in Chrome/Opera on Linux [duplicate]
I have set up a self-signed CA in a development environment and have issued a server certificate to a test website.
The issue I'm having is that the certificate is being rejected by the browser with ...
- 121
2
votes
1
answer
348
views
Securing HTTPS between two local applications on same system
I would like to know how to securely setup HTTPS between two applications running on the same workstation in a production environment please:
A local server application (C#)
A web frontend which ...
- 125
1
vote
0
answers
84
views
What is the job on each file and command when creating self signed certificate [closed]
I had to create a self-signed certificate for client-server application
but I do not understand what each file and command means and how the client and server work together to do the mutual SSL ...
- 111
4
votes
2
answers
716
views
Why should I go to SHA512withRSA signature for my Android apps?
I have an Android 11 device and many of my apps and system apps use MD5withRSA or SHA1withRSA as signature algorithm by default.
Why should I take my apps SHA256withRSA or SHA512withRSA? Are there any ...
- 41
3
votes
1
answer
1k
views
TLS and self-signed certs. Is hostname verification necessary if client-supplied CA is the same as server leaf cert?
TLS client implementations will tend to try and do hostname verification by default for remote TLS endpoints (servers). The client connects to the server, and as part of the negotiation the ...
- 551
1
vote
2
answers
2k
views
HTTPS IP devices and certificate best practices, why can't I sign a certificate for my local ip device?
I have a IPv4 network behind a pfSense firewall at my small business. We have around 200 IP devices on the network. We have about 30 Axis IP cameras which have MJPG streams embedded into webpages as ...
- 11
1
vote
2
answers
833
views
Does signing of CSR by the same private key create self-signed certificate?
I know how to create a self-signed certificate in a one command:
openssl req -x509 -newkey rsa:4096 \
-keyout my.key -passout pass:123456 -out my.crt \
-days 365 \
-subj /CN=localhost/O=home/C=US/...
- 123
1
vote
1
answer
201
views
Register a new client with self-signed certificate
I'm trying to understand a series of steps for an authentication system I want to replicate. The steps are executed by this script. To sum up, it does the following:
It runs in a Raspberry Pi and the ...
- 111
2
votes
1
answer
424
views
Any disadvantages to long-lived self-signed certificates for personal use?
I run my own IMAP server on my own machine, and am the only user of it. The server uses a self-signed certificate that I generated with OpenSSL. I don't use the certificate for any other purpose. I ...
- 655
0
votes
0
answers
34
views
Self signed SSL certificate usage for private site [duplicate]
I have a website that is not supposed to be open to the public and the URL is hidden.
Currently, I use Comodo certs to do the SSL, but I'm wondering since only approved devices should be accessing it, ...
- 101
2
votes
2
answers
2k
views
How do clients extract the public key from a self-signed certificate?
I have gone over:
Why do we need to sign the self-signed certificate?
Basic self-signed certificate questions
Is a self-signed SSL certificate much better than nothing?
I am new to cryptography and ...
- 121
0
votes
1
answer
5k
views
Error Loading extension 'copy_extensions' in Openssl
While running the following command on Ubuntu 19.10, with OpenSSl 1.1.1c 28 May 2019:
openssl req -config ${CNF_FILE} -key ${PRIVATE_FILE} -new -x509 -days 10950 -sha384 -extensions v3_ca -out ${...
- 33
1
vote
1
answer
166
views
Independent C library or function (on Linux) to programmatically generate a self-signed certificate [closed]
Is there a simple C library or function to programmatically generate a self-signed certificate in C on Ubuntu? Of course, one can execute a simple system("....") call to execute a CLI. I am ...
- 261
2
votes
2
answers
5k
views
Where to put SAN
Where SAN means: Subject Alternative Name.
I feel I have a basic misunderstanding in which certificate the SAN stuff shall go: ca or server or both or what?
It might be 3 Years or more in the past, ...
- 131
0
votes
3
answers
673
views
Why do we need to sign the self-signed certificate?
When we add a self-signed certificate to a device's list of trusted root certificates, we're already trusting it. So, why should it be signed with the server's private key?
Signatures only ensure ...
- 199
0
votes
3
answers
329
views
While importing certificates in keystore, do we treat these like CA root certificates?
When we need to call an internal domain via HTTPS, Java doesn't allow it because it doesn't recognize the certificate that those domain web servers are sending (probably because those certificates are ...
- 199
4
votes
1
answer
2k
views
Self-signed certificates in embedded IoT device
I have multiple IoT devices that will be connected to a cloud based platform in order to control these devices (IoT node running baremetal arm SoC).
These IoT nodes would be deployed and, during ...
- 103
1
vote
1
answer
553
views
Chrome: why is invalid certificate usage for resources loaded from localhost disabled?
In chrome there is a flag called: allow-insecure-localhost. As far as I can tell all it does is block localhost connection over tls if the certificate is self signed.
Why is this feature turned off ...
- 121
14
votes
2
answers
2k
views
Technical description of a self-signed certificate
I'm having a friendly debate with a co-worker as to the meaning of "self-signed" when it comes to PKI. We have an internal root and subordinate CA in our organization. We import the cert chain on ...
- 140
8
votes
1
answer
1k
views
Is a self-signed certificate from my ISP-provided router a security threat?
I recently found out that in order to log on to the web-based administration tool on my ISP-provided router, I need to accept a self-signed certificate it offers. I did a bit of reading and it sounds ...
- 83
4
votes
1
answer
2k
views
Trusted CA SSL certificates and embedded devices
There is an embedded device which should connect to the server over HTTPS and MQTTS. A server certificate is issued by a trusted CA (for example, Let's Encrypt). But there is a problem with server ...
- 141
1
vote
3
answers
615
views
How does server validate that self-signed certificate came from the client who self-signed the certificate in mutual TLS?
I have a mTLS (client authentication) setup where client sends a self-signed certificate. This self-signed certificate is transferred to and trusted by the server. The server's certificate is signed ...
- 165
4
votes
2
answers
3k
views
How to Trust a Self-Signed Certificate
According to Why are self signed certificates not trusted and is there a way to make them trusted?, to trust a self-signed certificate we need to import the root certificate into the trust store of ...
1
vote
1
answer
3k
views
Self Signed Certificate in Certificate of Chain [closed]
I setup an internal Root CA with another Intermediate CA, which will issue and sign the certificates for other internal servers.
When I did the "openssl s_client -connect :443"
it shows the error ...
- 11
21
votes
7
answers
8k
views
Is encryption still applied if you ignore the SSL certificate warning for self-signed certs?
Would encryption still be applied on communication with devices using self-signed certificates if you ignore the warning and proceed without installing the certificate? Would you need to install it to ...
- 327
1
vote
1
answer
394
views
.Net WebClient - self signed certificate
I have two applications (.net) on two web-servers.
The first application will need to do a request (via WebClient) to the second and get results.
I need to ensure Encryption, data integrity, and ...
- 11
2
votes
1
answer
759
views
Should I stop using DSA key algorithm self-signed certificates in production in favor of RSA Certificates?
We use a self-signed certificate with DSA key algorithm (and RSA signature algorithm) for securing a Kafka cluster in production. The access to the Kafka servers is already limited (by firewall) by ...
- 21
1
vote
2
answers
602
views
Are SAN IP addresses / DNS names useless in self signed certificates by untrusted CAs?
I want to generate a self signed certificate for temporary local testing of a web service via HTTPS. I don't want to install the CA though, because the self signed certificate is generated on the fly ...
- 11
0
votes
0
answers
799
views
encrypting TCP and UDP with self signed cert
I don't have much experience in computer security and I am developing a server for a project. I'm using a tcp connection and UDP packets for some real time data transmission. I want both of these ...
- 123