Does SoapUI accept pfx files as keystores?
I have been trying out Soap UI’s WSS options and it isn’t quiet clear whether PXF files are accepted as a valid key-store in preference to JKS?
Category Archives: pkcs12
How to create a pkcs12 store where the private key is encrypted with a different password than the store itself?
Basically, as the title says.
Neither keytool nor openssl allow that.
EDIT: apparently, pkcs12 doesn’t support that. So, use JKS, which you can easily create with keytool.
What’s the difference between DER and PKCS#12 formats? [closed]
Both are binary files and both can store digital certificates and private keys.
Continue reading What’s the difference between DER and PKCS#12 formats? [closed]
How to handle KB5025823 X509 changes correctly?
According this change here, .NET Core will handle imports of X509 certificates differently.
Using .NET 6, for the value of System.Security.Cryptography.Pkcs12UnspecifiedPasswordIterationLimit, we either have to specify -1 to ignore this ch… Continue reading How to handle KB5025823 X509 changes correctly?
how to create truststore and keystore
I created a root CA and intermediate CA, and then created a server CA certificate signed by the intermediate CA. The purpose of whole that is for a TLS one way encryption between a java thin client and a server.
Please find the commands be… Continue reading how to create truststore and keystore
Help understanding PKI MTLS and digital signature architecture
I’m building an identity service using PKI and MTLS for authentication where users are supposed to be able to sign data e.g. a json string or a document.
Where I am now
I have implemented working MTLS using AWS ACM PCA as Private CA and KM… Continue reading Help understanding PKI MTLS and digital signature architecture
Can/should a x509 client auth certificate be used to sign data?
I’m building an identity service and have successfully managed to implement MTLS authentication using x509 client certificates to identify the user.
However, we also want the user to be able to sign some data.
At the moment we’re signing t… Continue reading Can/should a x509 client auth certificate be used to sign data?
Do I need different certificates for MTLS and Signing data?
I’m building an identity service using PKI and MTLS for authentication.
I use AWS ACM PCA for private certificate authority and AWS KMS for key pairs. I use the private key created by KMS to sign the Certificate Signing Request that’s sent… Continue reading Do I need different certificates for MTLS and Signing data?
How to create PKCS12 container with no password
I have set up 802.1x authentication on my wireless network with EAP-TLS. The use case here is that I would like the presence of a certificate to be both necessary and sufficient for connecting to the network. The condition is that there … Continue reading How to create PKCS12 container with no password
Strange keystore from payment processor
I am working on an older software for a company at the moment and in my work have been upgrading a number of libraries. The app connects to a web service hosted by the third party payment processor, and in doing so it must create a digital… Continue reading Strange keystore from payment processor