Collaborate Disseminate
Is it possible to generate a PKCS12 keystore that will be FIPS compliant? In regular mode, I’m using “1.2.840.113549.1.12.1.3” – pbeWithSHAAnd3-KeyTripleDES-CBC(3) algorithm to encrypt private keys, while leaving the certific… Continue reading Can a PKCS12 keystore be FIPS compliant?
Background: I have a .pfx file from a microsoft CA that some appliance dislikes, but openssl considers it valid. I can use openssl to rewrite the pkcs12 file, trimming away some unnecessary attributes.
openssl pkcs12 -in ori… Continue reading Dissecting and decrypting a .PFX file
I have to digitally sign a pdf. I created a little app using the DSS library (an EU project, based on Bouncy Castle, very simple to use) that sign the PDF with PADES using a p12 file.
I know how to create a p12 file from a c… Continue reading How to get a certificate valid for digitally sign a document? [on hold]
I sniffed the communication between the client and the server using Wireshark, and I found out that during the handshake session, the client sends its certificate to the server.
I’ve managed to get the client’s certificate, … Continue reading Unable to get information from a PKCS certificate
I’ve asked a question on SO, but was directed here since it might align better with this SE.
The problem I have is that I need to extract the certificate and key in unencrypted PEM format for use in an application on a syste… Continue reading Extracting .p12 cert and key without OpenSSL
The documentation of a PKCS12 implementation for Go states the following:
It is intended for decoding P12/PFX files for use with the crypto/tls package, and for encoding P12/PFX files for use by legacy applications which … Continue reading Which format is the PKCS12 successor?
I am trying to enable an Azure Front Door instance on the front of my website using my EV cert (Extended Validation Certificate).
However, from Azure Front Door Cert Instructions,
Azure Front Door Service currently only supports certi… Continue reading How to convert my cert chain to PFX without a password
Is it possible to extract the expiration date from a private key (.p12 file) without knowing the password?
I used the command bellow without success:
openssl pkcs12 -in test.p12 -nokeys -nomacver
Continue reading Extract expiration date from private key file (.p12) without the password
Our application is based on Java and Tomcat server. Which type of keystore is better ? does JKS or PCKS12 ? I understand JDK keytool by default creates JSK type then for which uses-cases one should go for PKCS12 type ?
I tr… Continue reading Which keystore type is good for java / Tomcat based applications
My app will require maintaining an RSA keypair locally on the user’s machine. I was a bit disappointed to discover that PKCS#12 and JKS don’t offer higher than 3DES (correct me if I have this wrong). Or feel free to suggest… Continue reading Custom certificate to hold asymmetric (RSA) keys