Questions tagged [certificate]

A certificate is an electronic document used in cryptography.

In cryptography, a public key certificate (also known as a digital certificate or identity certificate) is an electronic document which uses a digital signature to bind a public key with an identity — information such as the name of a person or an organization, their address, and so forth. The certificate can be used to verify that a public key belongs to an individual.

See the Wikipedia entry for more background and concepts regarding certificates.

9943 questions
97
votes
5 answers

How to Check Subject Alternative Names for a SSL/TLS Certificate?

Is there a way to programmatically check the Subject Alternative Names of a SAN SSL cert? Using, for instance, the following command I can get many info but not all the SANs: openssl s_client -connect www.website.example:443
JoeSlav
  • 4,479
  • 4
  • 31
  • 50
90
votes
26 answers

Android Studio - Unable to find valid certification path to requested target

I'm getting this error Gradle 'project_name' project refresh failed: Unable to find valid certification path to requested target when I create a new project on Android Studio 0.8.14 Mac OSX Build.gradle file seems to become empty // Top-level build…
rubdottocom
  • 8,110
  • 10
  • 39
  • 59
89
votes
13 answers

Console errors. Failed to load resource: net::ERR_INSECURE_RESPONSE

I'm getting them on my links in my head. GET https://fr.s.us/js/jquery-ui.css net::ERR_INSECURE_RESPONSE GET https://fr.s.us/js/jquery-1.9.1.min.js net::ERR_INSECURE_RESPONSE GET https://fr.s.us/js/jquery-ui.js net::ERR_INSECURE_RESPONSE Someone…
cooking good
  • 1,416
  • 1
  • 14
  • 17
88
votes
3 answers

Certificate subject X.509

According to the X.509, a certificate has an attribute subject. C=US, ST=Maryland, L=Pasadena, O=Brent Baccala, OU=FreeSoft, CN=www.freesoft.org/emailAddress=baccala@freesoft.org This is the typical subject value. The question is what are the…
Sergey
  • 11,548
  • 24
  • 76
  • 113
88
votes
10 answers

How to ignore PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException?

I got the following exception when try to post a request to a http server: Here is the code I used URL url = new URL( "https://www.abc.com"); HttpURLConnection conn = (HttpURLConnection)…
DeepNightTwo
  • 4,809
  • 8
  • 46
  • 60
87
votes
2 answers

How to read TLS certificate sent by a client on the server side?

I am trying to call a service with mutual TLS using the Curl command. Curl command used: curl -k -vvvv \ --request POST \ --header "Content-Type: application/json" \ --cert client.pem:password \ --key key.pem \ …
sunsin1985
  • 2,437
  • 5
  • 22
  • 27
87
votes
19 answers

iOS error "Embedded binary is not signed with the same certificate as the parent app"

Those are my first steps in IOS applications development and I'm facing some problem that I can't figure out. error: Embedded binary is not signed with the same certificate as the parent app. Verify the embedded binary target's code sign settings…
Emil Adz
  • 40,709
  • 36
  • 140
  • 187
85
votes
2 answers

What happens if my distribution certificate expires?

My certificate will expire in 4 days, and I've uploaded for submission new app version with the new certificate. What happens if the old certificate expires? Will users be available do download my app with old certificate, or will Apple remove my…
Timur Mustafaev
  • 4,869
  • 9
  • 63
  • 109
79
votes
4 answers

How can you add a Certificate to WebClient (C#)?

I know it is pretty simple to add a certificate to a HttpWebRequest. However, I have not found a way to do the equivalent using WebClient. Basically, I want to send out a POST with a specific certificate using WebClient. How would you accomplish…
Andrew
  • 3,524
  • 5
  • 35
  • 50
78
votes
4 answers

why doesn't java send the client certificate during SSL handshake?

I'm trying to connect to a secure webservice. I was getting a handshake failure even though my keystore and truststore have been set correctly. After several days of frustration, endless googling and asking everyone around I found out that the only…
Jakub Hlavatý
  • 1,097
  • 2
  • 9
  • 17
78
votes
6 answers

Convert .cer to .p12

I'm working on a project for a client. I have two .cer files (developer and distribution) both are loaded into Keystore Access on Mac OS X. However I'm unable to export as a .p12 file. Alternatively I tried OpenSSL but still no luck... openssl…
Michael Schwartz
  • 8,153
  • 14
  • 81
  • 144
78
votes
21 answers

"Invalid provider type specified" CryptographicException when trying to load private key of certificate

I'm trying to read the private key of a certificate which has been shared with me by a third-party service provider, so I can use it to encrypt some XML before sending it to them over the wire. I'm doing so programmatically in C#, but I think this…
Simon13
  • 781
  • 1
  • 5
  • 5
78
votes
13 answers

keytool error bash: keytool: command not found

I have tried to execute keytool from Java bin directory but I get an error with warning bash: keytool: command not found. root@xxxxxx]# keytool -genkey -alias mypassword -keyalg RSA bash: keytools: command not found
Xcalibur
  • 1,865
  • 1
  • 12
  • 9
77
votes
3 answers

How to get APK signing signature?

Is there a way to retrieve the signature of the key used to sign an APK? I signed my APK with my key from my keystore. How can I retrieve it programmatically?
Waypoint
  • 17,283
  • 39
  • 116
  • 170
73
votes
4 answers

Convert PEM traditional private key to PKCS8 private key

I've been given a PEM file with a certificate and pub/private keys. Specifically it includes the headers -----BEGIN CERTIFICATE----- -----END CERTIFICATE----- -----BEGIN RSA PRIVATE KEY----- -----END RSA PRIVATE KEY----- -----BEGIN RSA…
Peter Oehlert
  • 16,368
  • 6
  • 44
  • 48