Stack Overflow
Stack Overflow

Questions tagged [ca]

A Certification Authority(CA) is a trusted third party which asserts the identity of a remote website.

References

696 questions
7
votes
2 answers

How to fix the error "Subject class type invalid."

I use java to code a CA module to create and sign the certificate. When I run my code, the error "Subject class type invalid." appeared, but in the destination folder I can get the two files: rooca.crt and rootca.pfx. The certificate contains the…
gann yee
  • 121
  • 2
  • 7
6
votes
1 answer

OSError: Could not find a suitable TLS CA certificate bundle

when making Api requests to binance , after building main.py to exe using pyinstaller, I get this error: OSError: Could not find a suitable TLS CA certificate bundle, invalid path: C:\Users\ADMINI~1\AppData\Local\Temp\2\_MEI76602\certifi\cacert.pem…
Notmyname
  • 65
  • 1
  • 1
  • 5
6
votes
4 answers

Installing curl with ssl so I can install homebrew

The Solution I used Bruno's post to find the solution, but feel that it needs to be made more concrete, so this is explicitly what I did. Downloaded cacert.pem into my ~/.ssh dir (I don't know if this is where it should go, but I saw someone do…
Joshua Cheek
  • 30,436
  • 16
  • 74
  • 83
6
votes
3 answers

Export HTTPS certificate in a format acceptable for PHP SSL context option "cafile"

How do I export certificate in a format that will be acceptable by PHP SSL context option cafile? My code below uses openssl_x509_export to export a certificate chain of stackoverflow.com to a file. The code is based on How to get SSL certificate…
Martin Prikryl
  • 188,800
  • 56
  • 490
  • 992
6
votes
1 answer

Can we run RAFT ordering node without tls in hyperledger fabric?

My current network has no TLS, deployed on Kubernetes. Currently, we are migrating from Kafka (1.4.0) to RAFT(1.4.4). TLS is not necessary for Kubernetes. Is it compulsory to have TLS enabled for the RAFT ordering node? If yes, Can I enable on the…
PAVAN
  • 771
  • 4
  • 14
6
votes
3 answers

Create certificate with QCStatements using OpenSSL

I want to create mock CA and set QCStatements extension, but I can't find any information about setting it using OpenSSL. I was looking about I found some old topics where people looking for this information, but no one answer. Is this possible to…
chebad
  • 919
  • 1
  • 13
  • 29
6
votes
1 answer

Is there a way to import a company root CA in traefik?

I have a docker swarm with traefik running in it and I want to be able to serve Grafana in https which is currently in http. I've tried with the following traefik compose configuration: version: "3.6" services: traefik: image: traefik …
IvanR
  • 198
  • 1
  • 1
  • 12
6
votes
2 answers

Where to find ca.crt in docker-for-desktop kubernetes?

I've installed Kubernetes with docker-for-desktop. Now I want to create a user (following RBAC principle). I'm using private certificates and want to sigh them against the ca.crt of the cluster. For minikube this ca.crt was in .minikube/ca.crtbut I…
DenCowboy
  • 13,884
  • 38
  • 114
  • 210
6
votes
1 answer

Difference between java keytool commands when importing certificates or chain

Just wanted to ask this question as "Clarification" as opposed to a resolution: java keytool has the -importcert command with -trustcacerts arg. From the offical help guideline. Import the Certificate Reply from the CA After you import a…
ha9u63a7
  • 6,233
  • 16
  • 73
  • 108
6
votes
2 answers

Configuring TLS certificate for Github Enterprise server

On my Github enterprise when I install the SSL certificate with the key its displaying an error message: "Github ssl cert The certificate is not signed by a trusted certificate authority (CA) or the certificate chain is missing intermediate CA…
Biju
  • 61
  • 1
  • 3
6
votes
2 answers

Ignore/Turn off verification of the certificate in Jmeter/Java

I am testing HTTPS Requests to a custom server using JMeter, but the certificate that the custom server returns in untrusted (as this is a development server). Because of this, the requests fail as it needs a signed/verified CA Certificate. Is there…
sidman
  • 213
  • 2
  • 4
  • 15
6
votes
3 answers

Has tinyca moved? What else to use for a private CA?

I've been researching how to set up a private certificate authority for an intranet, and one of the tools I read about is tinyca. The official web site according to Google and Wikipedia is http://www.sm-zone.net/. This site appears to be done, and…
Richard J. Barbalace
  • 234
  • 1
  • 4
  • 9
6
votes
4 answers

Trust Only Particular Certificate Issued by CA - Android

I am developing an Android application which requires SSL handshaking to be done only if the server has a particular certificate issued by a CA(For eg: GoDaddy). I referred the documentation on Android developer website but it only says about…
androidGuy
  • 5,553
  • 12
  • 39
  • 56
6
votes
2 answers

If I create a signed Java applet, can I host it on any domain I want?

Or is the signed applet associated with and considered signed only when downloaded from a specific domain (i.e., the domain you used as part of your CA identity verification)? My situation: I created an applet, which I offer for download as a tool,…
martinez314
  • 12,162
  • 5
  • 36
  • 63
5
votes
0 answers

cross-signing with OpenSSL

I need to create two self-signed Certificate Authorities (that would belong to different people), and then cross-sign them, so the certificates emitted would be trusted by both. However, surprisingly, I can't find any documentation on how to do so…
wizzard0
  • 1,883
  • 1
  • 15
  • 38
1 2 3
…
46 47