Questions tagged [digital-certificate]

A certificate which uses a digital signature to bind together a public key with an identity or information.

In cryptography, a public key certificate (or identity certificate) is a certificate which uses a digital signature to bind together a public key with an identity — information such as the name of a person or an organization, their address, and so forth. The certificate can be used to verify that a public key belongs to an individual.

In a typical public key infrastructure (PKI) scheme, the signature will be of a certificate authority (CA). In a web of trust scheme, the signature is of either the user (a self-signed certificate) or other users ("endorsements"). In either case, the signatures on a certificate are attestations by the certificate signer that the identity information and the public key belong together.

484 questions
9
votes
1 answer

Why would a digitally signed executable be treated as unsigned until viewing certificate details

I'm getting a very odd result when running an executable that has been digitally signed. The executable was signed using signtool.exe using a proper level 2 code signing certificate (not self-generated). Testing on a Windows 7 machine, if i launch…
9
votes
1 answer

java.security.cert.CertificateParsingException: signed fields invalid

I'm trying to read a X509 certificate FileInputStream fr = new FileInputStream("suresh.pfx"); CertificateFactory cf = CertificateFactory.getInstance("X509"); X509Certificate c = (X509Certificate) cf.generateCertificate(fr); And run in to the…
Suresh Atta
  • 120,458
  • 37
  • 198
  • 307
8
votes
3 answers

Can SSL cert be used to digitally sign files?

I want to ask a thing about digital signing I am not very sure. Instead of creating a self signed certificate to use to sign some (PDF) files, I wanted to take my SSL cert which have my data already verified. But the question is: Can a SSL cert be…
StormByte
  • 1,266
  • 1
  • 13
  • 33
8
votes
3 answers

How to implement digital signature with my existing web project

I'm working on the project where the user needs to do a digital signature on a document. I checked in the google and know about sinadura which is a desktop application but I need to invoke this into my web application. I installed alfresco…
Sree
  • 2,792
  • 8
  • 25
  • 33
8
votes
1 answer

java keystore and password settings

I have the following question on java keystores and keytool. I assume that a keystore may have more than 1 certificates. As I have tried, via keytool I can create a keystore, and to access this keystore I have to set a password. Also to access each…
Cratylus
  • 52,998
  • 69
  • 209
  • 339
8
votes
3 answers

Code signing certificates for Java, Adobe AIR, Authenticode, VBS - are they different?

We have a code-signing certificate, purchased from GlobalSign for Authenticode signing (as they call it). Now we need to sign Java applet and soon Adobe AIR module (applet?). The question is: from technical point of view is there any difference…
8
votes
1 answer

Getting RSA Public Key from Certificate in Golang

I can't find it in the functions that a Certificate has in https://golang.org/pkg/crypto/x509/ But, how do I get a Public Key as defined in https://golang.org/pkg/crypto/rsa/#PublicKey from a Certificate in Go?
Gakho
  • 603
  • 1
  • 9
  • 18
8
votes
3 answers

Validating a signature without intermediate certificate

Is it possible to validate a signature only having an ancestor or root certificate in the hierarchy? Disclaimer: I'm a newbie to the certificates handling so please forgive the naive terminology. Consider the following situation. We have two…
lexicore
  • 42,748
  • 17
  • 132
  • 221
8
votes
2 answers

Generating X509Certificate with BouncyCastle with Java

This is what I have right now to generate a digital certificate. And now I'm able to generate a digital certificate with password protected for private key. public static void main(String[] args) throws Exception { Security.addProvider(new…
Suresh Atta
  • 120,458
  • 37
  • 198
  • 307
7
votes
2 answers

How to add digital signature image to pdf in ios?

Can anybody help me to solve this problem. I am working on iphone development. This is new for me. I need to generate a pdf with digital signature. I don't have any idea about this . I have googled past 1 week, still i am not able to crack this…
sachi
  • 2,122
  • 7
  • 30
  • 46
7
votes
1 answer

How do I create my own Extended validation certificate to display a green bar?

I created one root, one intermediate certificate. Then I signed my Extended Certificate, but it did not. I added root and intermediate certificates to the browser and to the computer' keystore. I see the word "Secure" but I want to see my name in…
7
votes
1 answer

Key Management: Public/Subordinate key

I was looking at GnuPG manual (Manual) and came across below section at page 18: chloe% gpg -edit-key chloe@cyb.org Secret key is available. pub 1024D/26B6AAE1 created: 1999-06-15 expires: never trust: -/u sub 2048g/0CF8CB7A created: 1999-06-15…
Vicky
  • 5,380
  • 18
  • 60
  • 83
7
votes
2 answers

SSL Certificates - Import Root and Chain in Azure KeyVault?

I have successfully imported an digital signature certificate (which comes with a root certificate and a chain certificate) in my Azure KeyVault using the command "mport-AzureKeyVaultCertificate -VaultName $vaultName -Name $certificateName…
Chrismaf
  • 73
  • 1
  • 4
7
votes
2 answers

(Java) Programmatically access SSL certificates under "System Roots" on Mac OS X

I am writing a Java application that does rest Api calls with remote Https site. The remote site is signed by trusted certificates. It runs well on Windows, however, it has trouble to run on OS X due to SSL certificate issues. I did some digging and…
7
votes
3 answers

Can signed executables be tampered with while retaining the integrity of the signature?

I was wondering to what degree I can rely on the digital signatures on files (aka Digital Certificates from Verisign, Simantec etc), when deciding if it's been tampered with or not. Say I want download an application version that's no longer on…
1 2
3
32 33