The Stack Overflow podcast is back! Listen to an interview with our new CEO.

New answers tagged

2

I figured out the issue. The problem was not with the CA key, it was with the private key. Once i remade the private key using this: keytool -genkey -alias gis.akrf.com -keyalg RSA -keystore "C:\Program Files\Apache Software Foundation\Tomcat 9.0\conf\Keystore\keystore" -ext SAN=dns:(your dns here, like some.domain.com or localhost, which should also ...


0

You have the keystore and the truststore. The truststore is where you store CA's you trust, the issuer CA must be added to the truststore. The keystore is where you store the key. Does your keystore contain both private key and the certificate? Your connector must point to both the keystore and the truststore. If you are working on the same Tomcat server you ...


0

Is there any technique that may help me get a RCE out of this vulnerability? Or is this the most I can do with it? No,in and of itself you cant exploit this for an RCE.You will simply be able to smuggle shells using this way and wont be able to execute them.You will have to chain this vulnerability with another one to gain RCE.A vulnerability like ...


0

Let people store anything they want, rename the file to something random (SHA1 of random long number is enough), move them off the server root, and record the new name and original name on a database, taking care of sanitizing the filename. List files using the original names on the filename (again take care with sanitization), and use PHP fpassthru or ...


Top 50 recent answers are included