Questions tagged [pki]

Public Key Infrastructure

PKI is a technical and/or organizational way to bind public keys with an identity. The most common types of PKI uses X.509 certificates (and in particular the IETF PKIX profiles).

823 questions
0
votes
1 answer

Connect to a SharePoint site when IIS requires client certificates

I currently have an application developed in C# that helps me in managing permissions on our Share-point 2013 site. Recently, I learned we may be loosing our local instance and moving to another instance that's behind a cac enforced IIS. I have…
0
votes
1 answer

Get Public Key from CSR

Can someone please help me with the following question (using PowerShell) I have a CSR in Base64 string saved to a variable called $CSR I want to get the public key from the CSR, the reason I want to do this is I want to check the public key (and…
user2971567
  • 51
  • 1
  • 1
  • 4
0
votes
3 answers

InvalidKeyException using ECPublicKey

I'm getting the following exception when I try to encrypt a byte array with a EC public key: java.security.InvalidKeyException: No installed provider supports this key: …
Hakim
  • 434
  • 7
  • 21
0
votes
1 answer

Multiple Public Keys PKI Package [R]

I am educating myself on cryptocurrencies and a theme within that community is to use separate "addresses" for each transaction. As I interpret an address as the hash of the public key for the individual, it leads me to believe that you can…
0
votes
2 answers

WSO2 IS authenticate PKI user

Does WSO2 IS support user with PKI authentications? I found one Blog at http://venurakahawala.blogspot.com/2013/12/custom-authenticator-for-pki-with-wso2.html is quite encouraging, but maven build fails. Documentation of WSO2 IS 5.0.0. "Creating…
tech1
  • 1
0
votes
2 answers

How do Openstack Keystone PKI certificates work?

Openstack Keystone PKI uses two certificates as this document mentions: https://www.mirantis.com/blog/understanding-openstack-authentication-keystone-pki/ CA certificate and the signing certificate. My understanding so far: Signing key is used to…
0
votes
0 answers

Using pki::pkcs::parse_key results in error

I try to use tcl package pki::sign. The goal is to sign a SOAP message with a X509 certificate, using tclws. Parsing the public key is OK : pki::x509::parse_cert $publickey However, parsing the private key does not work pki::pkcs::parse_key…
b2vincent
  • 610
  • 7
  • 14
0
votes
2 answers

Microsoft PKI or PKI Vendor?

I have a question related to PKI Infrastructure , should an organization go with Microsoft PKI or an independent separate PKI Infrastructure ? Is there any licensing restrictions if I user Microsoft PKI Infrastructure ? Or should I get an…
abmv
  • 7,042
  • 17
  • 62
  • 100
0
votes
1 answer

Is certificate Subject the content of certificate?

Is certificate Subject the content of certificate? such as: Subject DN = Subject Distinguished Name = the unique identifier for what this thing is. Includes information about the thing being certified, including common name, organization,…
0
votes
2 answers

Passing user authentication details from one server to the next

I've got users authenticating with client certificates in a JBoss server. All fine. If I then use Apache HTTPClient to call onto another server it sends the client certificate of the user JBoss is configured with. I'd like to be able to pass the…
rich
  • 18,987
  • 11
  • 75
  • 101
0
votes
1 answer

Verifying Signed Hash using Digital Signature

I am implementing a interface that takes 3 things as input X509 certificate A signedHash that was signed with that certificate’s private key The initial hash It must perform the following actions: Confirm that this hash is signed using the…
0
votes
1 answer

How to update crl for tomcat

How to create and update the crl file for tomcat server.xml?
mxz
  • 1
0
votes
1 answer

How to amend LDAP connection properties in LDAPCertStore for X509 cert chain validation

I'm trying to validate X509 certificate chain using sun.security.validator.PKIXValidator according to Oracle official guide. One of the steps in validation is to check CRLs. I'm providing LDAPCertStore to get the CRL from LDAP. But LDAPCertStore…
ichaki5748
  • 1,993
  • 1
  • 14
  • 13
0
votes
0 answers

Build a PKCS#15 file from ASN.1 syntax

I'm trying to build a pkcs#15 file to store certificate and the key pair that their data are extracted from a PKCS#12 file and I really don't know where to start. I have already read the pkcs15 structure written by asn.1 syntax. Is there anyone who…
0
votes
1 answer

Add Root Certificate into Android OS

Can anyone give me a hint if it is possible to ask Android to include (or 'trust') additional Root CA in their OS ( which will be updated during next update and pre installed on the new instances)? At this moment each website which use SSL…
Mithrand1r
  • 2,313
  • 9
  • 37
  • 76