Stack Overflow
Stack Overflow

Questions tagged [pki]

Public Key Infrastructure

PKI is a technical and/or organizational way to bind public keys with an identity. The most common types of PKI uses X.509 certificates (and in particular the IETF PKIX profiles).

823 questions
0
votes
2 answers

How does the server encrypt? (openSSL specifically)

I have a high level question about public key authentication in SSL (doing a school project on openSSL). Anyway, as I understand it, this is basically how SSL works.. Server creates private key using RSA or DSA. Uses private key to create public…
theCamburglar
  • 224
  • 1
  • 2
  • 10
0
votes
1 answer

keystone, cert_required and nova

I'm trying to configure Keystone in my OpenStack setup to use SSL. I'm currently playing with cert_required flag in keystone.conf: [ssl] enable = True certfile = /etc/keystone/ssl/certs/signing_cert.pem keyfile =…
dulek
  • 47
  • 3
0
votes
1 answer

Mutual authentication using pkcs12 certificate in java client with weblogic server

I am not able to get mbeans from Weblogic server using PKCS12 ssl certificate through Java client. Server: Weblogic Client: Java client/JConsole Server side commands used to create self signed certificates: Created a certificate using the Weblogic…
user3588245
  • 9
  • 1
  • 3
0
votes
0 answers

What is a real world example of how Diane's browser looks to see if it trusts the CA in a PKI?

PKI Question I am trying to learn about Public Key Infrastructure (PKI). I read the following example from a book for how two users can participate in a PKI. The only part I do not understand is step #10 "When Diane receives John’s certificate, her…
cleancutguy
  • 9
  • 1
0
votes
1 answer

How to get current user's ssh public key from the Linux ssh server?

Is there a way for a program at the server to get the public key that the user used for ssh login? For example, github knows that it's user "Ben" by searching the public key from their database. ssh -T git@github.com Hi Ben! You've successfully…
Cheng
  • 4,816
  • 4
  • 41
  • 44
0
votes
2 answers

Trusted CA's - how does is work?

can somebody please explain about the trust model in the know CA's ?? here's what i mean: microsoft.com for example can use Verisign Certificate for their domain - what are the chances for an attacker to ask for a M1crosoft.com domain ?? very…
user3209554
  • 19
  • 4
0
votes
1 answer

PDF Digital Signature in java and signature verification in c# (iText)

I'm developing a webserver in c# that performs digital signatures validations, to ensure that the pdf files weren't modified. I'm using iText and iTextSharp for this. But the client-side is based on a java applet. I perform the digital signatures in…
William
  • 85
  • 2
  • 11
0
votes
1 answer

What characters does RFC 5280 allow in the DN?

I've been having a bit of trouble parsing a couple of corner cases of RFC 5280 (My ASN.1 isn't quite up to spec). Firstly, is a lone comma allowed as part of a RDN field? Commas are common, i.e. CN=Wingdings, Inc but is a name like CN=,…
mikek
  • 1,555
  • 17
  • 30
0
votes
3 answers

Symmetric Key to Asymmetric key handoff

I'm not a cryptography expert, I actually only have a little bit of experience using it at all. Anyways, the time has come where one of my applications demands that I have some encryption set up. Please note, the program won't be managing anything…
Crowe T. Robot
  • 2,045
  • 17
  • 18
0
votes
1 answer

Microsoft CA, Automatic issue

Does anybody know if it's possible to issue several certificates from a CSV like this: CN=TestCertificate1, DNS=testServer1 CN=TestCertificate2, DNS=testServer2 CN=TestCertificate3, DNS=testServer3 Using a given template and getting a pfx as…
srbob
  • 533
  • 1
  • 5
  • 14
0
votes
1 answer

How can I use pkcs11 in mac os(10.9) native programs?

First, I can't communicate in english very well. I will develop PKI. I can control token in firefox, thunderbird but can't control mac native program(ex. safari, mail). How can I control the token in os x 10.9(mavericks) native program (ex. safari,…
strangeworld
  • 1
  • 2
0
votes
1 answer

Can SQL Server EKM be used with MS Certificate Service?

I am trying to implement EKM and feel current 3rd party products are a bit pricy. Can i simply use MS Certificate Service for EKM? Thanks, Ebe.
blah
  • 399
  • 1
  • 3
  • 6
0
votes
1 answer

Error: Unknown SSL protocol error in connection to demo.apis-it.hr:8444

EDIT: I have solved the problem! :) I'm new in PKI, so I have problems with certificates. I am writing PHP script for downloading protected file which is updated every day.My company obtained data for generating demo server certificate. I had…
Cikson
  • 106
  • 2
  • 17
0
votes
0 answers

C does not gives real result when with doubles

I'd like to just calculate and print value of variables such as; 65^17, 2760^2345 etc. when i define variables and calculate normally; double x=65,y=17; double pw = pow(x,y); printf("%.0lf\n", pw); the result is always…
akikara
  • 212
  • 1
  • 2
  • 12
0
votes
2 answers

Alternative for openSSL

I have academical project to build communicator with Public Key Infrastructure. For communication between server and clients I'll use SSL/TLS and I need for them certificates. I have to build Certificate Authority with CRL and I can do this with…
mydew
  • 57
  • 2
  • 9
1 2 3
…
54 55