Questions tagged [pki]

Public Key Infrastructure

PKI is a technical and/or organizational way to bind public keys with an identity. The most common types of PKI uses X.509 certificates (and in particular the IETF PKIX profiles).

823 questions
4
votes
3 answers

How clients are verified in Safenet Luna SA HSM?

How Safenet Luna SA HSM clients are verified when the clients are registered using hostname ?
Buzz LIghtyear
  • 480
  • 5
  • 16
4
votes
2 answers

Error installing PKI package in R

I'd like to publish a slidify presentation in RPubs but it requires PKI and rsconnect packages. I'm having this error message when trying to install PKI package in R Installing package into ‘/home/juanchi/R/x86_64-pc-linux-gnu-library/3.2’ (as ‘lib’…
Juanchi
  • 1,147
  • 2
  • 18
  • 36
4
votes
1 answer

R RSA signature raw to character and back

SO I am using the R PKI package, thanks to Simon Urbanek, and am trying to understand the application of signing a message. So I can figure out how to sign something. require(PKI) # generate 2048-bit RSA key key <- PKI.genRSAkey(bits =…
4
votes
1 answer

Unable to get local issuer certificate while processing chain

I do have private key(my_ca.key) and public key(my_cert.crt) which is signed by DigiCert. Now I want to create RA(Registration Authority) and sign it by my private key . Here is the way I tried to do that. But when I try to export private and public…
GPrathap
  • 7,336
  • 7
  • 65
  • 83
4
votes
1 answer

Get chain of certificates for a file with PowerShell?

I am looking for a method, using PowerShell only, to list the certificate chain for signed files. Specifically to get the Root certificate. As I need to get a list of which Non-Microsoft root certificates certain executables (on installed software),…
ledetekst
  • 41
  • 1
  • 2
4
votes
1 answer

Tomcat SSL: unable to find valid certification path to requested target

I'm trying to access an url in my application, but I'm getting this error. 1771426 [http-bio-8180-exec-15] ERROR gadget.GadgetValidatorServlet - wsdl.exception.WSInvokerException: wsdl.exception.WSInvokerException:…
Sergio Santiago
  • 1,316
  • 1
  • 11
  • 19
4
votes
1 answer

Read certificates from a PKI card

How can I read certificates from a PKI card? I tried finding answer on the Internet but I didn't get any good results. Any ideas how to get the certs from a PKI card? I need to sign some forms with a certificate key. All this will happen in a web…
tzortzik
  • 4,993
  • 9
  • 57
  • 88
4
votes
3 answers

Compile / submit iOS app with strings / text which should never reach of hackers

In our app we have several API keys (aka shared or private keys). Those are needed runtime. It is crucial that these strings never gets in the hand of anyone else but me / my organization. Attempt 1 - Do nothing NSString *privateKey =…
hfossli
  • 22,616
  • 10
  • 116
  • 130
4
votes
1 answer

Generating public/private key pair based on input

OpenSSL provides tools to generate random public/private key pairs. Is there any mechanism to deterministically generate a pair based on some initial value? For example, given the string 'abcd', generate a public/private key pair, such that the…
Charles Salvia
  • 52,325
  • 13
  • 128
  • 140
4
votes
2 answers

Storing X509 certificates in DB - Yea or Nay?

I find myself needing to store public key certificates, and a single private key certificate for an in-house application. A member of our team suggested storing the X509 certificates in the database, instead of storing it in the windows certificate…
Gabriel
  • 305
  • 1
  • 6
  • 15
4
votes
1 answer

Asymmetric Encryption and Decryption

Let us say that I use the algorithm on this site to encrypt and decrypt data with public-private keys: Public Key RSA Encryption in C# .NET on CodeProject Now, let us say that someone encrypts his data using my public key using another algorithm…
Matthew
  • 4,477
  • 21
  • 70
  • 93
4
votes
2 answers

TLS Handshake failure due to TLS decrypt error

I am trying to debug a TLS related issue. TLS is setup between two application Client A & Server B. Both A & B have certificates exchanged and I have verified that certificates have the right extensions and is also verified successfully with its…
user839917
  • 851
  • 5
  • 13
  • 20
4
votes
1 answer

Accessing Browser Certificate Using Forge

We are working on a secure application which is using PKI. As a part of requirement we need to build a browser and platform independent application which supports all kind of certificates in browser and on eTokens. We use these certificates for…
Kuntal Shah
  • 183
  • 2
  • 13
3
votes
2 answers

Java implementations of TSP, OCSP and CMS

I'm trying to understand java APIs for digital signatures. I should use custom cryptoprovider to compose digital signature. I know how to sign document and get detached signature using this CSP, now I need to add timestamp and certificate status to…
pls
  • 565
  • 5
  • 16
3
votes
0 answers

Smartcard authentication using Django

Is there a way to enable CAC authentication with Django? I've been looking at articles stating to use OpenSSL, pkcs11, etc, but no clue on how to actually get python to parse x509 certificates. Goal is to be able to authenticate users via their…
jpk
  • 31
  • 1