Questions tagged [certificate]

A certificate is an electronic document used in cryptography.

In cryptography, a public key certificate (also known as a digital certificate or identity certificate) is an electronic document which uses a digital signature to bind a public key with an identity — information such as the name of a person or an organization, their address, and so forth. The certificate can be used to verify that a public key belongs to an individual.

See the Wikipedia entry for more background and concepts regarding certificates.

9943 questions
150
votes
19 answers

How to solve "Could not establish trust relationship for the SSL/TLS secure channel with authority"

I have a WCF service hosted in IIS 7 using HTTPS. When I browse to this site in Internet Explorer, it works like a charm, this is because I have added the certificate to the local root certificate authority store. I'm developing on 1 machine, so…
JL.
  • 78,954
  • 126
  • 311
  • 459
149
votes
19 answers

Java SecurityException: signer information does not match

I recompiled my classes as usual, and suddenly got the following error message. Why? How can I fix it? java.lang.SecurityException: class "Chinese_English_Dictionary"'s signer information does not match signer information of other classes in the…
Frank
  • 30,590
  • 58
  • 161
  • 244
148
votes
22 answers

How to fix the "java.security.cert.CertificateException: No subject alternative names present" error?

I have a Java web service client, which consumes a web service via HTTPS. import javax.xml.ws.Service; @WebServiceClient(name = "ISomeService", targetNamespace = "http://tempuri.org/", wsdlLocation = "...") public class ISomeService extends…
Glory to Russia
  • 17,289
  • 56
  • 182
  • 325
148
votes
5 answers

What is difference between cacerts and keystore?

What's the difference between the two, cacerts and keystore? If I use the definition found in these links, cacerts and keystore, it seems that they're a collection of certificates, but in context of a (Java) distributed system. Which one is used to…
dimas
  • 2,487
  • 6
  • 40
  • 66
144
votes
9 answers

How to create P12 certificate for iOS distribution

We have an iOS app whose push notification cert has expired and we're trying to create a new one. I've created new certs in the Provisioning portal (ios_developer.cer, ios_distribution.cer) and downloaded them. I was following instructions here on…
RobG
  • 1,751
  • 2
  • 11
  • 7
142
votes
7 answers

How to convert .pfx file to keystore with private key?

I need to sign Android application (.apk). I have .pfx file. I converted it to .cer file via Internet Explorer and then converted .cer to .keystore using keytool. Then I've tried to sign .apk with jarsigner but it says that .keystore doesn't content…
Ola
  • 1,517
  • 2
  • 12
  • 12
140
votes
24 answers

Xcode Command /usr/bin/codesign failed with exit code 1 : errSecInternalComponent

I am trying to add new provisioning profile to my Xcode, to test an app on the device. Here are the steps I followed: Deleted all certificates and provisioning profiles Create/Add IOS Dev Certificate Add My IOS Device Online Create IOS…
Alex Pelletier
  • 4,933
  • 6
  • 34
  • 58
131
votes
10 answers

How to check if APK is signed or "debug build"?

As far as I know, in android "release build" is signed APK. How to check it from code or does Eclipse has some kinda of secret defines? I need this to debug populating ListView items from web service data (no, logcat not an option). My thoughts: …
Im0rtality
  • 3,463
  • 3
  • 31
  • 41
131
votes
3 answers

When you use 'badidea' or 'thisisunsafe' to bypass a Chrome certificate/HSTS error, does it only apply for the current site?

Sometimes and especially very often when developing a web-application Chrome doesn't allow you to visit certain sites and throwing certificate/HSTS error. I've found that typing badidea (more recently thisisunsafe) in Chrome window will tell Chrome…
sk1llfull
  • 1,505
  • 2
  • 10
  • 14
130
votes
28 answers

Cannot install signed apk to device manually, got error "App not installed"

I'd like to publicate my app to GooglePlay but first i would like to do a last testing with the signed apk to ensure that all of the used API keys are working correctly with the release version (GMaps, Facebook, etc) So i just made a signed version…
Adam Varhegyi
  • 11,307
  • 33
  • 124
  • 222
129
votes
7 answers

OpenSSL: PEM routines:PEM_read_bio:no start line:pem_lib.c:703:Expecting: TRUSTED CERTIFICATE

I need a hash-name for file for posting in Stunnel's CApath directory. I have got some certs in this directory and they are working well. Also, I have a server sert and server key: cert = c:\Program Files (x86)\stunnel\server_cert.pem key =…
lsv
  • 1,687
  • 4
  • 21
  • 31
126
votes
4 answers

SAML: Why is the certificate within the Signature?

I have to implement SSO with SAML for my company's website (as the relying party). An essential part off course is the verification of the signature. Here is the signature part of a sample SAML from our partner company (asserting…
Dante
  • 1,261
  • 2
  • 9
  • 3
125
votes
7 answers

How to give ASP.NET access to a private key in a certificate in the certificate store?

I have an ASP.NET application that accesses private key in a certificate in the certificates store. On Windows Server 2003 I was able to use winhttpcertcfg.exe to give private key access to the NETWORK SERVICE account. How do I give permissions to…
thames
  • 5,833
  • 6
  • 38
  • 45
123
votes
4 answers

What is the difference between X509Certificate2 and X509Certificate in .NET?

What is the difference between the two?
Kyle
  • 17,317
  • 32
  • 140
  • 246
121
votes
4 answers

How to obtain Certificate Signing Request

How do I obtain a Certificate Signing Request? All I'm trying to do is get my app running on my ipod touch. This was easy as I could just go to the IOS development portal and just download one, no muss no fuss. But now they want me to create a CSR…
John Bowlinger
  • 1,561
  • 4
  • 12
  • 14