Collaborate Disseminate
I would like to understand how certificate-based signature works, I understand the standard asymmetric key signature where one party signs using their private key, and anyone else can validate this is authentic by checking against the publ… Continue reading How does a CA-backed signature works?
I am trying to sign certificate by CA which generated by CA. But I am facing below error code while singing.
Generate certificate:
# tpm2tss-genkey -a rsa -s 2048 mykey
# openssl req -new -engine tpm2tss -key mykey -keyform engine -out tpm… Continue reading TPM tss2 certificate signing request sign by CA
I am attempting to lock down our on-prem TFS server using client certificate authentication. I am being asked to ensure that no user has access to the server using Certificates rather than just log in credentials.
I was able to get a certi… Continue reading Limiting TFS Server Access using Certificates
When firefox (v111 2023) is opened for the first time it connects to ocsp.digicert.com on port 80 in cleartext. Isn’t this a terrible security vulnerability. Can someone help me understand why this would be allowed practice?
Continue reading Why does Firefox use unsecured port 80 to download certs? [duplicate]
When creating certificates with the step CLI I have the option to create a leaf certificate for a certain subject or sign a certificate signing request (CSR). I could not really determine a difference between those two, given I use the sam… Continue reading What is the difference between a signed CSR and a leaf certificate?
This question is specifically about certificates that should have had a long lifetime, but were revoked quickly.
Is every CRL issued by this CA guaranteed to include its revocation, as long as the original certificate would still be valid?… Continue reading Does a certificate revocation list (CRL) keep it’s entries at least as long as the certificate would have been valid?
Currently I’m working with mitmproxy and intercepting some HTTPs traffic using it. Before I could use it in my browser, I had to trust the certificate via my OS settings. After that, the certificate was trusted by my machine and browser di… Continue reading Misuse of trusted certificate authority [duplicate]
I don’t know if what I’m asking is even possible, but I’ll ask anyway.
I’m trying to get FireFox or Chrome to trust a self-signed certificate used on a website I’m running locally. I started up an ubuntu server and ran these commands:
# go… Continue reading Added root authority certificate for firefox, but still not trusting certificate
I am trying to learn how ssl chain of trust works with practical examples. I thought maybe openssl would be a good education tool. But I’m running into a few problems while practicing, and I’m at a lost on how to approach my education.
B… Continue reading How to practice making self-signed certificates with intermediate CAs
Is this how X509 certificates are verified to be valid?
The receiver receives the certificate
Look at the issuer of the cert, and find the public key of that CA (its hardcoded in the application or the OS)
Decrypt the signature using the … Continue reading Over what fields is the X509 hash computed over? [duplicate]