Stack Overflow
Stack Overflow

Questions tagged [pki]

Public Key Infrastructure

PKI is a technical and/or organizational way to bind public keys with an identity. The most common types of PKI uses X.509 certificates (and in particular the IETF PKIX profiles).

823 questions
0
votes
3 answers

X509 Certificates, DigitalSignature vs NonRepudiation (C#)

We have been handed a set of test sertificates on smart cards for developing a solution that requires XML messages to be signed using PKI. Each (physical) smart card seems to have two certificates stored on it. I import them into the Windows…
Eyvind
  • 5,221
  • 5
  • 40
  • 59
0
votes
1 answer

What's a good strategy for automatically incorporating self-signed certs into my truststore in Java?

We've built a Java EE app in JBoss that exposes web services to external consumers. We want to secure these services so that we know who is making the web service invocations. We have a registration process that requires the consumers to upload…
Kevin Pauli
  • 8,577
  • 15
  • 49
  • 70
0
votes
1 answer

Reading X509v3 extension fields from Request.ClientCertificate in .NET

How do I read X509v3 extension fields from a certificate? I iterated through AllKeys in HttpClientCertificate but that contains only the regular fields of the certificate & not the extension fields. HttpClientCertificate cs =…
user93353
  • 13,733
  • 8
  • 60
  • 122
0
votes
1 answer

Authorization Denied after moving EJBCA to another server

So for some reason I have to move our PKI to another server. I stopped JBoss, dumped and restored database on the target box, and packed and moved the whole JBoss directory. Now JBoss starts up without obvious errors, but I cannot access the…
xiaofeng.li
  • 8,237
  • 2
  • 23
  • 30
0
votes
2 answers

X.509 Self Signed Certificates

I'm trying to understand more about X.509 Digital Certificates. There seems to be lots of contradiction around. I am using Bouncy Castle to generate a key pair, using public static void SaveToFile(X509Certificate newCert, AsymmetricCipherKeyPair…
JDubya13
  • 95
  • 1
  • 1
  • 5
0
votes
1 answer

Requesting Client Certificate Dynamically

Web Servers have settings by which you request client certificates - for eg. SSLVerifyClient require in Apache, a different setting in IIS etc. If this is set, then the browser throws up a dialog asking you to chose a certificate. Is it possible to…
user93353
  • 13,733
  • 8
  • 60
  • 122
0
votes
2 answers

Java card key installation

I am new to java card development.i want to know how we can store secure key values in the java card applet.because i want to use PKI (public key infrastructure) for the authentication.is it possible ?? if yes how we can store key in java card…
Sajith Vijesekara
  • 1,324
  • 2
  • 17
  • 52
0
votes
3 answers

nginx proxy doesn't cache OCSP responses

I want to use nginx as a caching proxy in front of an OCSP responder. 'An OCSP request using the POST method is constructed as follows: The Content-Type header has the value "application/ocsp-request" while the body of the message is the binary…
jans
  • 1,768
  • 3
  • 17
  • 22
0
votes
3 answers

Alternative to PKI digital signature

I'm looking for a way of transforming an xml document in a way that achieves the following goals: It can be distributed to known applications across the internet and managed by them without any special storage requirements The applications can…
Paul Taylor
  • 5,651
  • 5
  • 44
  • 68
0
votes
1 answer

how to load additional untrusted cert into the SSL_CTX

I have SSL client and server, and a testing PKI like this root_ca -> server_singing_ca -> ssl server |--> client_signing_ca -> ssl client in the server, I put the server certificate and the server_signing_ca certificate into the same file,…
John Crane
  • 371
  • 5
  • 14
0
votes
2 answers

Is there some way to restrict private key visibility on Android?

I am developing and application that would need to certify data created by end users. I know that I could use KeyChain API for that, but this API has what I believe would be a flaw for our application. Since KeyChain requires user access to…
mrcaramori
  • 2,503
  • 4
  • 29
  • 47
0
votes
1 answer

Decryption result using RSA differs in plain Java and Android

I encrypt/decrypt a message like the following: Encrypt string -> base64 encode bytes -> serialize string -> deserialize string -> decode b64 -> decrypt bytes. The encryption looks like this: PublicKey pubKey = readPublicKey(); Cipher cipher; cipher…
anders
  • 772
  • 1
  • 10
  • 17
0
votes
1 answer

PKI standards for java applets

I am working on developing an java applet to access client's private and public key from his digital certificate. Currently i am able to access both the private and public key's from the digital certificate but i have doubt as to whether i am…
V K
  • 471
  • 8
  • 13
0
votes
1 answer

Encrypt the encrypted message by using RSA in java

I have encrypted a String using AES. I have given a key for AES to do so. Now , i am trying to encrypt that given key with RSA(Till here everything went well), Now i need to encrypt this encrypted key with RSA once again. I am getting an error "Data…
RecklessSergio
  • 806
  • 3
  • 10
  • 34
0
votes
1 answer

How to use OCSP responses in validation of CertPath

I don't want the Java validator to contact the OCSP responder. I'm working on XAdES library, as such I'll need to use OCSP responses that somebody saved in the XML document to validate if the signatures were valid at some time in past. That makes it…
Hubert Kario
  • 21,314
  • 3
  • 24
  • 44
1 2 3
…
54 55