10,501 questions
-2
votes
0
answers
12
views
How to remove revoked or expired certificates from Google Certificate Authority Service
Please let me know steps to remove revoked or expired certificates from Certificate Authority Service.
Also what is the maximum limit on number of certificates which can be created under a CA Pool ?
...
0
votes
0
answers
19
views
Trying to Sign a Manifest File using a Certificate with Non Exportable Private Key and is located in Local Machine
I'm trying to sign a manifest file for a ClickOnce web app using a certificate which is Installed in LocalMachine and have non exportable private keys, I have tried two different tools, one Mage.exe ...
Best practices
1
vote
7
replies
97
views
Loading XDP, in PDF with multiple subforms, already certificate signed
A smart PDF is given. Adobe LiveCycle Designer ES 10.0 PDF
https://mfinante.gov.ro/documents/2552173/3124827/ALOP_DocumentFundamentare_V03.pdf
It's even more special, it has 2 different sections A and ...
0
votes
0
answers
38
views
How to prevent renewing microk8s certificates every time switching network?
I am running microk8s on my Ubuntu laptop as development environment. Every time I move to another network (e.g from home to office or vice versa), I am no longer able to run kubernetes commands as ...
0
votes
0
answers
36
views
Kestrel .NET HTTP/3 fails to connect in Firefox, falls back to HTTP/2
I am trying to get a .NET 9 web server to serve HTTP/3 on Ubuntu 24.04 using Kestrel and MsQuic
Despite the server appearing to be configured correctly and listening on all the right ports, Firefox ...
-3
votes
0
answers
52
views
No Signing Tab in Visual Studio 2022 C++
I would like to sign my locally build application.
Application code is C++ / MFC, build for 32 Bit. It is a legacy application which should be replaced by new one in one - three years, so no much ...
0
votes
0
answers
36
views
In flutter do we need to manage the certificates manually when using the in_app_purchase package
In my flutter app do I need to put the following block of code in my project to manage the certificates for purchase for their respective environment testing and production which is given by there ...
0
votes
1
answer
86
views
Cannot install npm in maven due to missing certs
I got the correct certificate (a .crt file) from my co-worker. I did the appropriate command to add this to the Java Keystore which works well as per this command:
keytool -import -trustcacerts -...
0
votes
0
answers
29
views
Access certificates from Java Azure Function
I have Azure Function deployed in Linux App Service Plan P2v3.
On the left pane I can go to Settings and then Certificates. After clicking Bring your own certificates (.pfx) I can see cert DEV2APP.
I ...
0
votes
0
answers
97
views
MacOS altool validate: Signature in a bundle provisioning profile is Invalid
I am trying to build and upload a macOS distribution package to the Apple app store, but I am having difficulty validating the package using xcrun altool --validate-app.
Note: I do not use Xcode. I ...
0
votes
0
answers
199
views
Keycloak config : regex extraction from x509 UPN
We're configuring a Keycloak (v26) authentication flow and are trying to gather some information from the UPN in the client certificate.
Here's what that client certificate contains on the OtherName (...
1
vote
1
answer
57
views
I am trying to run invoke-sqlcmd in powershell in my laptop, getting error related to certificate
i got a new laptop from my organization, whenever i try to run invoke-sqlcmd i used to get an error saying that the server certificate is not trusted, i had to keep "-TrustServerCertificate" ...
0
votes
0
answers
61
views
Visual Signature is not appearing after digitally signed it using node.js
Recently a task is given to me for signing a pdf using pfx file using node.js . And I digitally signed the pdf and also the place the placeholder for sign. But visually the sign is not appearing as we ...
1
vote
0
answers
158
views
Using Windows cert store in Java application for https fails with java.security.InvalidAlgorithmParameterException
I have a Java application running on Windows 11 clients. It connects to a Java server application via https. The JRE is OpenJDK Runtime Environment (Temurin)(build 1.8.0_452-b09). The server is Linux ...
0
votes
0
answers
72
views
Member of developer team cannot deploy React-Native application in Apple
Our client created an Apple Developer account. And then invited me as a team member. I can see myself in https://appstoreconnect.apple.com in Users and Access with role Admin:
I don't have an active ...
0
votes
0
answers
231
views
certutil commands to check certificate and verify hash equivalent to openssl
I use two openssl commands to verify a certificate file:
openssl x509 -in <CERT_FILE> -noout
and verify a signature file:
openssl cms -verify -binary -content <INPUT_FILE> -inform PEM -...
0
votes
0
answers
25
views
Android certificate upload issue
I have an app on Google play. Currently active.
I have created an update that used code from another project, so I basically expanded that 'other' project as I have multiple parts already setup.
I ...
1
vote
0
answers
126
views
How to install a custom CA as a system certificate (not user CA) on fully managed Android device with Android Management API?
I am developing an Android Enterprise solution where I provision devices as fully managed (Device Owner) using the Android Management API. My requirement is to install my own custom CA certificate ...
1
vote
1
answer
148
views
Can Azure DevOps be used to install certificates?
We use a wildcard certificate for all of our internal Dev, QA, Validation, and Production websites and APIs. For our network staff, it's a pain because they have a lot of servers to update when ...
0
votes
0
answers
37
views
Corona not finding my developer certificate
Half a year ago I reawakened my Apple developer subscription and created a certificate and iOS development provisioning profiles. Now I'm on a new clean-installed Mac system (Mac OS 15, an upgrade ...
0
votes
0
answers
40
views
Does GnuTLS have a command to convert the format of CRL files?
After checking the GnuTLS documentation, I couldn't find a command for converting the format of CRL files. Could you tell me if GnuTLS has a command to convert CRL file formats, specifically ...
0
votes
0
answers
63
views
Issue merging Azure Key Vault signed csr with Subject Alternate Name URL field
I have generated a certificate in Azure Key Vault using the following parameters:
Method of Certificate Creation - Generate
Certificate Name - mycert
Type of Certificate Authority (CA) -...
0
votes
0
answers
171
views
Copy a certificate (as secret) to another key vault
I have an App Service Certificate.
Then you point to a key vault and the end result will be a certificate stored as a secret in the key vault.
I want to copy that secret to another key vault, but ...
0
votes
0
answers
150
views
WinVerifyTrust fails with 0x800B010A (CERT_E_CHAINING but only on SYSTEM user
When verifying signing of a DLL/EXE with WinVerifyTrust API it fails with the error code 0x800B010A (CERT_E_CHAINING).
The MSDN doesn't include this error code for the API, but many articles point ...
0
votes
2
answers
116
views
Add individual certificate to HttpClient created via HttpClientFactory
I do have a .NET 8.0 web application using HttpClient to send requests to different vendors. To get the HttpClient objects, I'm using the IHttpClientFactory interface installed via AddHttpClient ...
0
votes
1
answer
64
views
How can I add a certificate chain from dev.azure.com using SChannel and self-hosted agents?
I am receiving the error "unable to get local issuer certificate" when I attempt to run certain tasks that require verification. I know which certificate needs to be added, but I cannot seem ...
0
votes
0
answers
55
views
Editing certificate chain in JKS
I have a certificate chain in my JKS file which has root certificates, and an IBM mq certificate. The ibm mq certificate has expired and I have already recieved the renewed certificate. However, I ...
1
vote
0
answers
119
views
Set up Vite for certificates
I am trying to set up my local vite development server working with certificates. The client side is a React single page application, the server is Golang.
Here my vite config:
import react from "...
0
votes
0
answers
21
views
Why sometimes we can't read CryptoAPI keys with CNG?
I have read an interesting bit here:
When you move or copy CryptoAPI keys from a source machine to a target machine with Windows User State Migration Tool (USMT), CNG will fail to access the keys on ...
0
votes
1
answer
25
views
How do you use certificates and certificate chain with Flask SocketIO?
I need to use SocketIO from flask_socketio with certificate, secret key, and certification chain. How do I do that?
Here is my code so far:
from gevent import monkey
monkey.patch_all()
import ssl
...
-1
votes
1
answer
44
views
Sprinboot https enabling gives an error during startup
I wanted to enable my Springboot webproject to locally run on https.
Unfortunately I got the following error during startup:
javax.crypto.BadPaddingException: Given final block not properly padded. ...
-2
votes
1
answer
358
views
Postman Error: Unable to verify the first certificate with localhost
Currently I am working on .NET WebApi project which is using SSL authentication. I am the only one in the team who works on this project under Windows 11 and I am the only one who is unable to send ...
0
votes
3
answers
192
views
Where does .NET Core look for root certificates on linux?
I am trying to make calls to a service and I am getting the following error:
The SSL connection could not be established. The remote certificate is invalid because of errors in the certificate chain: ...
0
votes
1
answer
159
views
RSA.ExportRSAPrivateKey throws The requested operation is not supported Error
Background:
I'm using the Azure Key Vault to create certificates. I need the the public and private key once the certificate is created. The public key is a available from the Azure.Security.KeyVault....
0
votes
1
answer
33
views
Does RFC5280 require the RDNSequence in the CRL Issuer field to be output in reverse order in the string?
I saw in RFC 4514 that the RDNSequence should be output in reverse order in the string (for example: RDNSequence (binary order): [C=US, O=Example, CN=CA]
String representation (RFC 4514): CN=CA,O=...
0
votes
0
answers
355
views
Meta Cloud API: "Cannot create certificate" error when registering phone number, even though 2FA is disabled
I'm trying to register a phone number using the Meta Cloud API (for WhatsApp Business), but I'm encountering the following error response:
{
"error": {
"message": &...
0
votes
1
answer
167
views
Add Public Key Certificate - Error uploading key certificate. The parameter location, thumbprint has an invalid value
I have App Service (SKU and size is PremiumV2 P3v2) and wanted to add certificate via Azure Portal.
Went into Certificates then Public key certificates (.cer) and then Add certificate:
I choose .cer ...
1
vote
0
answers
73
views
Digital signature appears invalid in Acrobat Reader using USB Smartcard in WinForms (no error during signing)
I'm working on a WinForms application that signs PDF files using a USB smartcard reader. The signature process completes without any exceptions or errors in the log, and the PDF is saved. However, ...
1
vote
1
answer
52
views
Does RFC 5280 require that a RelativeDistinguishedName can store an emailAddress?
I saw in RFC 4514 that it specifies that the Distinguished Name must support the following short names.
CN commonName (2.5.4.3)
L localityName (2.5.4.7)
ST stateOrProvinceName (2.5.4....
1
vote
1
answer
82
views
The use of reason codes in RFC 5280
while reviewing RFC 5280, I noticed that the reason codes used in different extensions seem to vary. I would like to ask, for the CRL Distribution Points extension, which one does it use— the first ...
0
votes
0
answers
20
views
Is there a way in pyasn1 to add the <host> and <attrdesc> attributes to the nameRelativeToCRLIssuer?
I saw in RFC5280 that…
When the LDAP URI scheme [RFC4516] is used, the URI MUST include a field containing the distinguished name of the entry holding the CRL, MUST include a single that contains an ...
0
votes
0
answers
37
views
Signing a PKG Apple file
I created the CSR according the developer Apple tutorial https://developer.apple.com/help/account/certificates/create-a-certificate-signing-request/
And inside of Apple developer dashboard I requested ...
0
votes
1
answer
182
views
WinRM Certificate Authentication Fails with 401 Error on Windows Server 2022
I'm encountering an issue with WinRM certificate authentication on a Windows Server 2022 CIS STIGs image. The server is running the WinRM service, and I'm trying to connect from an Ubuntu Pro 20.04 ...
0
votes
0
answers
99
views
Which Should I Choose: SHA256withRSA or SHA512withRSA for Android App Keystore?
I'm in the process of generating a keystore for signing my Android app, and I'm wondering about the best choice for the signature algorithm. My current command is as follows:
KeyTool.exe -genkey -v ^
-...
-3
votes
1
answer
68
views
ClickOnce failing to run - file name too long
How do I shorten the name of the shortcut created by the ClickOnce installation process?
Apparently the moderators don't like the way I ask questions, so I can't respond to the
original post. However,...
0
votes
0
answers
24
views
Problems with new Developer ID certificate
My Developer ID certificate will expire in few days, so I downloaded and installed new certificate in the login keychain. However my key is still linked to my old certificate. I have my .p12 file but ...
0
votes
1
answer
363
views
MS Entra ID, OAuth 2.0 Client Credentials Flow with Certificate Authentication – Who Manages the Keys?
I'm using OAuth 2.0 Client Credentials Flow with certificate-based authentication in Microsoft Entra ID to secure my backend API.
I have registered an application in Microsoft Entra ID that protects ...
0
votes
0
answers
96
views
Openssl 3.4.1 verify Certificates Fail
I tried using openssl verify to verify the end-entity certificate. The certificate chain is root -> CA -> cert, and I used the command: openssl verify -CAfile ca_root.der -untrusted ca_kdh.der ...
0
votes
0
answers
45
views
Disable EJBCA TLS Popup During Automation in Helm Deployment
I am using EJBCA Community Edition to create certificates and have deployed EJBCA using Helm, where TLS_SETUP_ENABLED="simple".
As part of our automation script, we access the EJBCA Admin ...
0
votes
0
answers
82
views
Sign jars and signer certificate expiration
Believe it or not, I am signing a jar for a legacy application that uses java webstart.
I am running the following command:
C:/javapath/.\jarsigner -storetype pkcs12 -tsa http://timestamp.digicert.com ...