I'm using the OpenSSL command line tool to generate a self signed certificate. It seems to be working correctly except for two issues. I can't get it to create a .cer with a Subject Alternative Nam...

I am trying to create a signature as shown below, but I am getting this error: java.lang.NoSuchFieldError: xmss_SHA256ph I am using bcprov-jdk15on and bcpkix-jdk15on version 1.64 and Java 8. I h...

I am trying to get a better grapple on how public/private keys work. I understand that a sender may add a digital signature to a document using his/her private key to essentially obtain a hash of t...

Currently, the only way to use VSCode get around a corporate firewall that requires company CA certificates is to set "http.proxyStrictSSL = false" in the config. This is a no-go for me at work. I ...

I am having issue with Client Side certificates in MS Edge browser, Window 10. Basically my PKI structure is following: RootCA(self signed 4096) -> Intermediate CA (signed by RootCA 2048)-> One Se...

I store my PKI CA certificate and private key on a Yubikey and used it to issue end user certificates but after upgrading to openssl3 from openssl1 this no longer works. The script that I have used...

I have a self-signed certificate at the endpoint of my API. I'm trying to test some things using the simulator but am getting "untrusted server certificate". I have tried to use safari on...

I have a web app, which allows user to upload pkcs12. I store the pkcs12 as binary in database. Is there any way for me to know if the certificate in the pkcs12 is self signed or CA signed? I am r...

I want to preface this question with two things so I can narrow down where my actual question is: a) I've done software dev before, though never for android b) I'm familiar with PKI and encryptio...

I have a certificate file called customer_pem.cert . This file has PEM format. It contains three ---BEGIN CERTIFICATE-- sections (end user certificate, CA intermediate certificate and CA certificat...

When I choose a client certificate in Firefox (or cancel choosing none), Firefox seems to remember this decision even though I've told it to ask me every time. I understand that it'd be usele...

I'm using OpenSSL's c library to generate an elliptic curve Diffie-Hellman (ECDH) key pair, following the first code sample here. It glosses over the actual exchange of public keys with this line: ...

I need to ignore the PKIX path building exception javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertP...

I have spent my entire afternoon trying to create a CA that Firefox will work with, every attempt has worked with: Microsoft Edge Microsoft IE 11 Google Chrome 59 Opera 46 wget 1.17.1 curl 7.47.0...

The following command generates a file which contains both public and private key: openssl genrsa -des3 -out privkey.pem 2048 Source: here With OpenSSL, the private key contains the public key ...

An error was discovered processing the <wsse:Security> header This is a WS-Security question btw... I can't see anything wrong with my WS endpoint (apart from the fact that it's running i...

I am developing Web Application for Certifying Authority as a part of which, I need to Generate asymmetric key pair - Private Key and Public Key in user's smartcard through browser, create Certifi...

I'm developing in a Windows environment. My company functions as it's own certificate authority for internal-use https applications, and I've been issued a certificate from our system (for an int...

I am trying to renew a certificate (on my local machine) that is going to expire shortly. I know to do this manually but I can't find a way to do this using Powershell. I've looked up PKIPS and QAD...

I use powershell app deployment tool kit and I have a script to install a few MSI's. For one of the MSI's, I have a certificate (cert.cer) that I need to install on each machine's trusted publisher...

When I visit a website that requires PKI client certificates Firefox will allow the user to select which certificate to present. How do you present a different PKI client certificate to a se...

I'm a newbie with Hashicorp Vault and PKI so bear with me :) I've recently set up an intermediate CA and went through the motions of creating roles etc. I then proceeded and generated a certificate...

-sky switch Specifies the subject's key type, which must be signature, exchange, or an integer that represents a provider type. By default, you can pass 1 for an exchange key and 2 for a sign...

I need to generate a cert and can't find this directory. Thanks!

I have got ePass2003 Auto token loaded with self signed certificate. I got lib**.so file to load into firefox and now firefox can list the certificate in token. My requirement is to access the keys...