Questions tagged [ca]

A Certification Authority(CA) is a trusted third party which asserts the identity of a remote website.

References

696 questions
3
votes
2 answers

How SSL Certificates (CA) are validated exactly?

I am searching the algorithm about how SSL validation process is performed, but almost everywhere, they explain the certificate validation step as "certificate is checked by client" or something like that, but I wonder what is the scenario behind…
3
votes
1 answer

"java.security.cert.CertPathValidatorException: Trust anchor for certification path not found." Android + Retrofit + Asp.net API

I am trying to consume RestApi from asp.net running in (local machine). I followed the exact steps on https://developer.android.com/training/articles/security-config#ConfigCustom in (Configure a custom CA) but with no success, always getting the…
Salim
  • 62
  • 1
  • 8
3
votes
1 answer

How to install HttpCanary Certificate on Android 11 Without Root

i want to install the CA certificate which required to use HttpCanary, but my phone says that i can't install in app also i don't know where the CA file that i install. So it needs root to solve that problem. Is there an any way to install without…
Umut Işık
  • 33
  • 1
  • 1
  • 5
3
votes
1 answer

CA Siteminder, Agent.Init() fails indecisively

While using CA Siteminder's JAVA SDK API we noticed a starnge issue that sometimes the init fails randomly. Also re-initializtions happens later with no change in the system. It's little alarming and unexpected. Since AgentAPI is majorly connecting…
Soumen
  • 1,006
  • 2
  • 12
  • 19
3
votes
2 answers

How to allow GetBucketLocation promission on s3 bucket in order to create CA

In order to update the SSL certificate on AWS, CA is required for the CSR. When I try to configure and create the CA, I get this massage: ValidationException The ACM Private CA Service Principal 'acm-pca.amazonaws.com' requires…
Gensus
  • 75
  • 1
  • 6
3
votes
1 answer

SSL works on url without .com?

I am trying to enable SSL in my hosted project via tomcat. I managed to upload certs but the connection is still unsecured. My Url looks like this laptap.partner.solution Is it possible to enable SSL using this url, and get a green lock at the same…
AyukNayr
  • 386
  • 2
  • 21
3
votes
1 answer

Perform client authentication to server with gRPC in Java with only a CA

Problem I am trying to make a client in Java using gRPC. I have been given access to a kubernetes namespace to test out the client. However, all I have is the certificate authority for the cluster and a bearer token. apiVersion: v1 clusters: -…
Hid
  • 533
  • 6
  • 18
3
votes
1 answer

NodeJS TLS Hostname/IP doesn't match certificate's altnames

So as far as I understood the nodejs ssl/tls request implementation checks by default if the hostname or IP is part of the cert's alt names. One of the workarounds is that in the options object you can override the checkServerIdentity function so it…
chnging
  • 746
  • 1
  • 8
  • 27
3
votes
1 answer

How to configure multible CA certs in git?

I currently have a situation where I need a (self generated) RootCA.crt configured for our internal private gitlab installation. At the same time we still need "normal" access to github.com. Therefore I need both CA settings working at the same…
derHugo
  • 83,094
  • 9
  • 75
  • 115
3
votes
1 answer

Define CA Info at Compile Time for libcurl

I have built libcurl for Windows x64 with OpenSSL. If I specify the CA Info with the libcurl command as shown below I am able to post my data via https. curl_easy_setopt(curl_handle, CURLOPT_CAINFO, "C:\\cacert.pem"); My question is regards to…
GCB613
  • 174
  • 13
3
votes
0 answers

Is it possible to add multiple CAs to kafka truststore

While configuring kafka security using ssl certificates, is it possible to have multiple certification authorities in kafka truststore .jks file ? When i tried adding multiple CAs to truststore, only one CA can be added with the alias caroot. Looks…
3
votes
1 answer

alias mismatch of .pfx file or .p12 file between keytool and java keystore.aliases()

I am trying to get aliases from pfx/p12 file using keytool -v -list -storetype pkcs12 -keystore servercert.p12 -storepass 1234 which gives me Keystore type: PKCS12 Keystore provider: SunJSSE Your keystore contains 1 entry Alias name: 1 Creation…
Tanmoy Mandal
  • 466
  • 4
  • 14
3
votes
1 answer

npm error UNABLE_TO_GET_ISSUER_CERT_LOCALLY, how to generate a .pem file from a bundle of certificates and that bundle as well?

Using Webstorm and Node.js, I am trying to install ursa module through npm. I need this module because it is a pre-requisite of another module. When I do install, the installation fails on node-gyp rebuild. The console output is as:…
magic_turtle
  • 1,243
  • 3
  • 17
  • 37
3
votes
0 answers

How to access Apache from IOS using HTTPS with authentication SSL?

I have done a new installation of the latest version of Mac OS X (10.12.5). This versión of Mac include Apache 2.4.25 (Unix) In that Apache I have configured two virtualhost: Virtual host 1. example.com (80 - http) Virtual host 2.…
harder
  • 31
  • 1
3
votes
1 answer

Self-signed certificate with CA:TRUE and Key Usage not set to sign certificates - is it safe?

We have such kind of certificate being used for developing purposes X509v3 extensions: X509v3 Basic Constraints: CA:TRUE X509v3 Key Usage: Digital Signature, Non Repudiation, Key Encipherment …
Anton Serdyuk
  • 1,208
  • 10
  • 13