1,937 questions
- Bountied 0
- Unanswered
- Frequent
- Score
- Trending
- Week
- Month
- Unanswered (my tags)
Advice
0
votes
2
replies
86
views
PKIX path building failed: unable to find valid certification path — How to load PEM certificate into truststore at runtime in Spring Boot?
I am getting the below SSL error when my Java (Java 21, Spring Boot 3/4) application makes a REST call to a gateway:
Internal server error: (certificate_unknown) PKIX path building failed:
sun....
0
votes
0
answers
93
views
Dart SecurityContext not accepting programmatically generated RSA private key for Android TV Remote Protocol
I'm building a Flutter app that uses Android TV Remote Protocol v2. The app requires client certificates for authentication. When I use a manually created certificate (placed in assets), everything ...
0
votes
0
answers
233
views
Keycloak config : regex extraction from x509 UPN
We're configuring a Keycloak (v26) authentication flow and are trying to gather some information from the UPN in the client certificate.
Here's what that client certificate contains on the OtherName (...
0
votes
1
answer
102
views
How do you extract the `nonce` (challenge) from an Apple App Attest CMS/PKCS7 receipt on the server side?
HOW TO EXTRACT NONCE FROM APPLE ATTEST CMS RECEIPT?
I'm working on a server implementation to validate Apple's iOS device App Attest protocol, specifically validating the attestation (receipt) on the ...
4
votes
1
answer
333
views
How to connect .NET application to IBM MQ using Server Side SSL/TLS authentication with username and password (X.509 certificate-based auth)?
I'm trying to connect my .NET (8.0) application to IBM MQ over TLS using X.509 certificate-based authentication, but running into issues during the SSL handshake.
Using Python + pymqi, I was able to ...
0
votes
0
answers
135
views
How to create a x509 certificate without Subject name but with Subject Alternative Name?
I read that a machine certificate can be created without a subject name if it has a subject alternative name. My use case is to generate such a certificate and use it for certificate chain ...
1
vote
0
answers
172
views
Client certificate issues on Windows 2022 / IIS10 for mutual TLS in .NET 4.8
We are communicating to an external server through HttpClient using mutual TLS. They provided us the following OpenSSL command to create the private key and the CSR:
openssl genrsa -aes256 -out ...
0
votes
0
answers
204
views
Connect using a Certificate for Authentication
Is there any way to connect to SQL Server 2022 using Client Certificate Authentication using an X.509 cert? From everything I can see it looks like this is not possible but where I am confused is it ...
0
votes
1
answer
132
views
How to open a connection with Azure iot hub with proof of possession challenge
Using X.509 certificate stored in a hardware security module (HSM), how can my IoT device establish a secure connection with IoT hub doing proof of possession challenge?
All samples I have seen assume ...
0
votes
0
answers
59
views
Embdded jetty 9 with Spring security MVC Access denied 403 from servlet dispatcher using x509 client certificate authentication
Environment is jetty v9 embedded server with a Spring web MVC application.
The server requests the client certificate but does not authenticate giving Access denied 403 from servlet dispatcher. (...
0
votes
0
answers
40
views
django-x509 library - any way to use certificate authentication only on several pages of application and continue with password for others?
After searching and investigating various X509 libs for django I found this https://github.com/openwisp/django-x509 IMHO looks the best - even CA and certificate generation are present in admin UI.
...
4
votes
2
answers
143
views
openssl and C - how to pass config file when doing a x509 certificate request
Im trying to implement this in C:
openssl req -new -config client.config -key ./my-key.pem -out certreq.csr
client.config has this
...
[ req_attributes ]
challengePassword = password
...
so ...
0
votes
0
answers
73
views
How can i create a root key and X.509 Certificate
I am running a part of the open-source fleet code from:
https://github.com/fleetdm/fleet/blob/7fd9d8a3e9de47ab325882dd5e46035a81d26617/tools/mdm/windows/poc-mdm-server/mde_enrollment.go
When I use ...
0
votes
1
answer
62
views
Java Keystore not loading certificate -- Keystore loads only the private key but not the certificate of a password-less PKCS12 file
I am trying to load a private key and a certificate bundled in a PKCS12 file using Java's Keystore#load. The PKCS12 file uses no password and is intended for two-way TLS connections (TLS client-...
1
vote
1
answer
120
views
Bouncy Castle GeneralName creation failing with "argument type mismatch" in CFML
I'm trying to generate a Certificate Signing Request (CSR) using Bouncy Castle in CFML/Lucee. The CSR needs to include Subject Alternative Names (SANs) for both DNS names and IP addresses. However, I'...