Questions tagged [ca]

A Certification Authority(CA) is a trusted third party which asserts the identity of a remote website.

References

696 questions
3
votes
1 answer

Exporting or Saving CX509PrivateKey

Is it possible somehow to save or export CX509PrivateKey. The idea is that I create a CSR sent to CA get a Certificate and then... somehow I have to get the private key but no idea how, unfortunately nothing found on google. My piece of code: var…
coceban.vlad
  • 509
  • 1
  • 7
  • 23
3
votes
2 answers

Verify errorcode = 20 : unable to get local issuer certificate

I have a certificate chain in server: Certificate chain 0 s:/******/O=Foobar International BV/OU**** i:/C=US/O=Symantec Corporation/OU=Symantec Trust Network/**** 1 s:/C=US/O=Symantec Corporation/OU=Symantec Trust Network/**** …
Kaidul
  • 15,409
  • 15
  • 81
  • 150
3
votes
0 answers

Https two-way authentication with server using a public signed cert, but client using a private CA

I'm a node-js guy but I think this is about Certificate/CA only. I want to set up an https server using a certificate which is signed by a public CA, so that all the browsers can visit my website without certificate error. At the same time, I want…
3
votes
1 answer

Why does a Certificate Authority (CA) issue certificates from an intermediate authority instead of the root authority?

When a digital certificate is purchased it is verified by recursively following the chain of "issued by" authorities which ends at the certificate of the root CA. An inspection of a few of the web sites of companies selling certificates shows that…
westwell
  • 191
  • 2
  • 11
3
votes
1 answer

Is it secure to check a self-signed certificate based on it's fingerprint?

I currently develop a small system consisting of an embedded server (including a small display) and some mobile devices (at the moment just Android phones). These mobile devices should be able to talk to the embedded server over a secure channel.…
Alan Q.
  • 394
  • 2
  • 10
3
votes
1 answer

SecTrustSetAnchorCertificates with client certificate

I am developing iOS Application. We have custom certificate authority with self-signed ca-cert. Certification authority issues certificates both for users and for https server too. I would like to create iOS application which can authenticate https…
user2153861
  • 51
  • 1
  • 5
3
votes
1 answer

CCA analysis: Error in rowSums(X) : 'x' must be numeric

I try to do a CA analysis from the vegan package. This is the code I use: install.packages("vegan") library(vegan) plots <- c("plotA", "plotB", "plotC", "plotD", "plotE") animal1 <- c(2,7,4,8,1) animal2 <- c(4,3,7,1,0) animal3 <-…
fidelfisch
  • 131
  • 1
  • 3
2
votes
1 answer

Python equivalent of ssh-keygen command (create and sign user certificate)

I looking for a way to get a signed openssh user certificate without using the subprocess library, equivalent to the following command: ssh-keygen -s user_ca -I ID_USER -n user1,user2 -V+1d user-key.pub Output: ssh-rsa-cert-v01@openssh.com…
2
votes
1 answer

Add a new trusted CA to Netbeans SVN manager

So I have a private SVN server for my company that has its own self signed certificate, it was signed by the company CA, I have the CA certificate and I want to add it to the list of default trusted CAs in the Netbeans SVN client. I have tried…
Shane McIntosh
  • 132
  • 1
  • 7
2
votes
0 answers

SSL cert schannel: disabled automatic use of client certificate with VPN

I read the lot of blogs about the issue but none of the workaround /solutions worked for me. I am using the curl command like below curl -v https://golang.org/dl/?mode=json * Trying 142.250.80.113:443... * Connected to golang.org (142.250.80.113)…
thulasi39
  • 521
  • 2
  • 5
  • 19
2
votes
0 answers

How to verify the signer of a public key with a signing authority?

I'm working through implementing the algorithm outlined by apple here for authenticating a player given a public key and signature, and I don't quite understand what they mean by Verify with the appropriate signing authority that Apple signed the…
Evan
  • 1,892
  • 2
  • 19
  • 40
2
votes
0 answers

change network-security-config at run time

I have the following configuration:
Claudiu
  • 485
  • 1
  • 4
  • 17
2
votes
1 answer

Trying to renew a cert made with my own CA fails with "There is already a certificate for... "

I've set up my own CA following the directions from Jamie and issued my first certs a year ago happily. They have now expired, but I'm having a devils own time trying to renew them. I have tried the code I used to create the certs in the first…
Peter Nunn
  • 2,110
  • 3
  • 29
  • 44
2
votes
1 answer

Store KOPS CA key and certificate in Vault

I've recently started using KOPS as a tool to provision Kubernetes clusters and from what I've seen so far, it stores it's CA key and certificates in its S3 bucket, which is fine. But out curiosity, would it be possible to store these in Hashicorp…
Metro
  • 873
  • 8
  • 19
2
votes
2 answers

How to make host CA certificates known to podman/Docker containers?

My company is using self-signed TLS certificates for internal IT systems. In order to connect to said systems from Linux servers (Ubuntu 20.04 LTS), e.g., by means of curl, we have to put the CA certificate mycompany.crt in…
Joerg
  • 790
  • 2
  • 10
  • 23