Collaborate Disseminate
While not particularly knowledgeable on public key infrastructure, I’ve noticed strange issues with SSL and TLS lately that I’m unable to diagnose. As these issues have currently left me dumbfounded I’m hoping someone more knowledgeable ma… Continue reading Extremely strange and concerning SSL issues. MITM attack?
I was doing some security checks in some devices in my local network and I noticed that I obtain two different certificate chains for the same domain (www.google.com) from two different devices (smartphone and desktop pc, again both connec… Continue reading Same domain, same local network, different certificate chain
During local development of our website we need some features that are restricted to secure contexts, meaning we need a self signed certificate for ‘localhost’ for some things to work.
To make things as easy as possible for new developers … Continue reading What are the security implications of storing a CA password for local development only in a repository?
Recently, I happened to notice that a site I was looking at had different certificate providers for different subdomains. Whilst looking around, I found that seems to be somewhat common (or at least not rare).
Whilst I understand the logic… Continue reading Why would a company choose to use different SSL providers for different subdomains
I was able to grasp how CT works by reading this explanation, but one thing remains unclear for me – how CT may protect ecosystem from hacked CA server. For example, someone hacked Digicert, and now from it behaves issues EV or regular cer… Continue reading How does Certificate Transparency protect from hacked CA server [duplicate]
I was able to grasp how CT works by reading this explanation, but one thing remains unclear for me – how CT may protect ecosystem from hacked CA server. For example, someone hacked Digicert, and now from it behaves issues EV or regular cer… Continue reading How does Certificate Transparency protect from hacked CA server [duplicate]
My plan is to create rootCA.crt and sign newly created server.crt. Later server.crt should sign newly created child.crt. As result I will get small chain.
Now I would like to test if child certificate was signed by server one:
openssl veri… Continue reading Verify self signed certificate
What solution can be used that would allow users to connect to a wireless network using certificates when using EAP TLS/TTLS methods. What proven solutions besides freeradius can the community offer?
Continue reading Connect to a wireless network via TLS/TTLS [closed]
Wi-Fi user is getting autheticated via RADIUS server using EAP-TTLS by providing username and password. User needs to have X.509 CA certificate on their device.
I am having problem understanding how this whole process works.
Who is creati… Continue reading EAP-TTLS and certificates
I have deployed a Certificate Transparency (CT) log server that uses Google’s CTFE (named "certificate-transparency-go" on Github) and Trillian Projects. And I have issued a pre-certificate, submitted to my own CT log server.
I h… Continue reading How to create and embed Signed Certificate Timestamp (SCT) in certificate