Collaborate Disseminate
I have an assignment in which I have to implement OCSP and do a proof of concept of a vulnerability.
My idea was to implement OCSP without using a nonce (this is done) and then perform a replay attack. However I’m having trouble doing the … Continue reading Any vulnerability of OCSP for proof of concept
I need to check revocation status of the certificate. It always ends with the error that the revocation status couldn’t be verified because it could not find the CertPath that establishes a key that can be used to verify the revocation sta… Continue reading Check certificate revocation status in Spring-WS [closed]
Imagine the following scenario:
We have Bob that wants to send a message to Alice. Both have a public/private key. Bob uses his private key to sign the digest (hash of the message) with it’s private key, and sends along it the plain text m… Continue reading How does a digital certificate prove authenticity?
I am looking for some examples of private key leakage or compromised keypair (via insider attack, configuration mistake, etc.) that lead to certificate revocation. I am particularly looking for cases when CA was compromised but can also us… Continue reading Examples of private key leakage / compromised keypair resulting in certificate revocation
I read this article at Electronic Frontier Foundation on how Russian government wants the residents there to install a specific "Trusted Root CA" certificate. According to the article, this certificate has can inspect the users t… Continue reading How to determine what Certificate Authorities to keep on my computer?
I am building a Certificate Authority using Windows Server ADCS as a ‘Standalone’ CA but my application would be greatly improved if I can utilise OCSP.
Is the ADCS Online Responder Role Service appropriate to be exposed on the public inte… Continue reading Exposing ADCS OCSP on the Public Internet
For a Windows 7 Home Premium box that does not have internet or network (LAN/WAN) access, how can one update the machine’s list of valid and revoked security certificates?
A non-connected device (no devices are connected to the Windows 7 b… Continue reading How to update certificates and certificate revocation lists on a Windows 7 box that does not have any networking? [migrated]
I was wondering if the connection towards the ocsp responder/server is TLS encrytped itself. Meaning that the client requesting a validity check for a certificate verifies the OCSPs server certificate?
If so that OCSP server should be sign… Continue reading Is a OCSP request verified via TLS?
tl;dr: In certificate based SSH authorization, is there any benefit to keeping host certificates lifespan short? Do you gain anything by renewing them periodically?
Full Story
Recently I have been exploring SSH access through certificates,… Continue reading Is there a reason to renew host SSH certificates?
I am an Open Banking enthusiast and I’m studying the Berlin Group’s XS2A framework these days. There, it has an error code called CERTIFICATE_BLOCKED. As the description of it, it states,
"Signature/corporate seal certificate has bee… Continue reading Can certificates be blocked temporarily by CAs?