Stack Overflow
Stack Overflow

Questions tagged [pki]

Public Key Infrastructure

PKI is a technical and/or organizational way to bind public keys with an identity. The most common types of PKI uses X.509 certificates (and in particular the IETF PKIX profiles).

823 questions
7
votes
2 answers

How to fix the error "Subject class type invalid."

I use java to code a CA module to create and sign the certificate. When I run my code, the error "Subject class type invalid." appeared, but in the destination folder I can get the two files: rooca.crt and rootca.pfx. The certificate contains the…
gann yee
  • 121
  • 2
  • 7
7
votes
0 answers

net::ERR_CERT_AUTHORITY_INVALID using nodejs

I'm using a wildcard certificate under apache2 and nodejs simultaneously. Sometimes (not always), when some clients try to connect to nodejs they get net::ERR_INSECURE_RESPONSE. I'm using the same certificate .key, .ca etc either for apache2 and…
Matteo Martinelli
  • 511
  • 6
  • 18
7
votes
2 answers

What is the maximum length of certificate chain?

What is the length of the longest certificate chain till date? I want to know the number of certificate authorities in that chain and not the size of the certificate chain.
d_geeks
  • 81
  • 1
  • 4
7
votes
2 answers

How do you convert a .CSR / p10 / PKCS#10 file to .DER format in java?

How do you convert a .CSR (a.k.a. p10 or PKCS#10) file to .DER format in java? Here is a sample one: -----BEGIN CERTIFICATE…
atom88
  • 1,449
  • 3
  • 22
  • 32
7
votes
1 answer

Digitally Signing Data in a web app

I have a web application where some data (not file) needs to be digitally signed using a PKI Private Key. The PKI Certificate & Private Key will be in a USB Cryptotoken which registers the certificates with the browser when inserted into the USB…
user93353
  • 13,733
  • 8
  • 60
  • 122
7
votes
2 answers

PHP OpenSSL Public Key Encryption With String Public Key

I have a public key -----BEGIN PUBLIC…
geoffreak
  • 2,288
  • 3
  • 17
  • 18
7
votes
2 answers

Encryption libraries?

I have been tasked with implementing a PKI library in C# for a company project, and have been unable to find a good implementation of it. There appear to be multiple libraries, and many broken links pointing to MSDN libraries that have been removed.…
Gabriel
  • 305
  • 1
  • 6
  • 15
6
votes
1 answer

Apache authentication via DOD PKI CAC

How does one implement Apache (within Linux) authentication using Department of Defense CAC cards? I've heard it can be done but have not come across any details. Currently we use Windows Active directory for Apache authentication but only…
Mr Gaylen Wong
6
votes
3 answers

Powershell Script to install trusted publisher certificates

I use powershell app deployment tool kit and I have a script to install a few MSI's. For one of the MSI's, I have a certificate (cert.cer) that I need to install on each machine's trusted publisher. After doing some digging, I came up with…
mpeytonfan18
  • 109
  • 1
  • 5
  • 14
6
votes
1 answer

Windows will not pass smart card information to browsers

I'm having an issue where when trying to connect to my employer's website from my home computers I'm not getting prompted for my smart card credentials whenever I'm using my laptop, however when I'm using my desktop the prompts appear and smart card…
Radio Doc
  • 379
  • 1
  • 4
  • 18
6
votes
3 answers

Firefox SEC_ERROR_INADEQUATE_CERT_TYPE with NO Enhanced Key Usage

I have spent my entire afternoon trying to create a CA that Firefox will work with, every attempt has worked with: Microsoft Edge Microsoft IE 11 Google Chrome 59 Opera 46 wget 1.17.1 curl 7.47.0 ... but not Firefox 54.0.1 which just consistently…
Joe P
  • 170
  • 1
  • 9
6
votes
1 answer

PHP RSA key creation

I have an issue with creating/using RSA keys created and used in PHP. Problem is, that the (public AND private) keys should be exchanged between different servers (e.g. when a user account is moved). Now, the openssl-lib of PHP does not provide any…
Xenonite
  • 1,823
  • 4
  • 26
  • 39
6
votes
2 answers

how does big companies like google, amazon, manage their private key infrastructure?

one of my company's employees private key was compromised and it had the disastrous consequences to the company. now the company is planning to have the public/ private key management. Im wondering how the big companies like google, amazon do the…
user3392188
  • 81
  • 1
  • 2
6
votes
1 answer

client certificates issued by my own CA with Apache

Trying to get an HTTPS session working using client certificates from a self-signed CA. The connection should check that all certificates are valid, both client and server side. The process I followed is roundly as follows: Create Certificate…
user2919956
  • 61
  • 1
  • 1
  • 2
6
votes
1 answer

Using JAXB with signatures, encryption and encoding

Recently we've been tasked with coming up with a XML communication specification for our products. A few of my coworkers have high opinions of JAXB for marshalling and unmarshalling XML docs. I've spent some time playing around with it and I…
Staros
  • 3,232
  • 6
  • 30
  • 41
1 2 3
…
54 55