Questions tagged [certificate]

An electronic document used in cryptography.

Filter by
Sorted by
Tagged with
0 votes
0 answers
46 views

Security of the cerfiticates in the client application in a gRPC service

I have a gRPC service and I was thikning about the security aspects in the client side. I have only one certificate (public and private certificates) for the client, that it is uses for all my clients,...
Álvaro García's user avatar
1 vote
1 answer
2k views

Where to include a pfx certificate in a http request?

I would like to understand what happens in a request which includes a .pfx certificate to authenticate to client to the server. I know how to implement this in python or use it in postman, but I don't ...
user3933039's user avatar
0 votes
1 answer
264 views

What will happen if I don't purchase a signed SSL certificate for my website?

I don't use SSL on my website currently. It's a small hobby site with no online store or anything of that nature that would need it. I've read that Google Chrome will stop loading such sites sometime ...
posfan12's user avatar
  • 111
0 votes
1 answer
258 views

Is there a best practice for storing certificates (e.g. x509), which include private keys, used in unit tests?

In a software library, I wrote, large parts of the code use x509 certificates for various puprposes like signing documents digitally. Is there a best practice for storing test certificates used for ...
Bahaa's user avatar
  • 127
1 vote
1 answer
207 views

Secure Admin-pages-only login without HTTPS

I'm adding admin dashboard to a website that doesn't use HTTPS. For now only that (admin) section requires user authentication. If I use encrypted + salted password and check the client IP address to ...
sny's user avatar
  • 113
3 votes
1 answer
79 views

What is the best practice(-s) for managing many certificates?

Situation: In our system there are a lot of certificates. Some of them are used to secure HTTPS endpoints. Many more of them are used as a means of authenticating our system to an external system (we ...
Vilx-'s user avatar
  • 5,320
5 votes
1 answer
293 views

How can I obtain a CA certificate for my application if I do not own a business/company?

I have developed an application which I intend to sell. I set up a website with information and download links, advertising, payments, everything is ready to go - except the digital signature. I want ...
Justinas Rubinovas's user avatar
1 vote
0 answers
103 views

iOS Push Notifications Certificate Sync Cert to Servers

I'm not sure if this is the correct form to be posting this on Stack Exchange. If not I apologize in advance and hope someone can point me in the right direction of where to post. I have a AWS Load ...
Charlie Fish's user avatar
3 votes
1 answer
68 views

Is is ok to sign SSL by an authority while developing a web application?

I am currently working on a web application page, my boss sees the changes online while i still make the changes, sometimes the page is shown to some clients in order to get feedback while it's still ...
Oscar Reyes's user avatar
0 votes
0 answers
30 views

DataStore for Certificates and Keys

I am developing a web application. It is a multitenant(SAAS) application. My application involves getting signed certificates from users. Obviously each certificate would be having a separate CSR and ...
BinaryMee's user avatar
  • 101
3 votes
2 answers
126 views

Pem certificate in mobile app

I am developing a cross platform app that can handle payments, the online payment service issued a certificate for my use, thus I have a .pem certificate and within it there is 2 actual certificates ...
NicolasZ's user avatar
  • 133
0 votes
0 answers
830 views

Mutual Authentication in JSON or AJAX only?

AFAIK we must install the client-certificate into the users browser to connect with https-sites using server-certificates to have a mutual authentication. What about AJAX and JSON, can we connect to ...
Grim's user avatar
  • 262
1 vote
1 answer
1k views

Problem : Certificate for multi Clients of WCF

If My WCF service have big number of clients through the Internet,then whether should all of them share the same Client Certificate(X509)? And if their certificates should be unique , what should I do ...
Andrew Carl's user avatar
1 vote
1 answer
551 views

X509 certificate question on WCF

My condition: A WCF service which is self-hosted and it's on a Win8 Machine. Client is a WPF Program on another machine. Then I follow the article on Codeproject about how to set X509 certificate ...
Andrew Carl's user avatar
0 votes
3 answers
192 views

How effective are code signing certificates when it comes to customer behavior or acceptance? [closed]

Whenever a potential customer downloads a copy of my software they get the "Unknown Publisher" warning message. I understand that if I purchase a code signing certificate this message goes away and ...
Michael Riley - AKA Gunny's user avatar
0 votes
0 answers
42 views

Login to a Web App using PKI Certs [duplicate]

I understand PKI reasonably well from a conceptual point of view - i.e. private keys/public keys - the math behind them, use of hash & encryption to sign a certificate, Digital Signing of ...
user93353's user avatar
  • 441
6 votes
1 answer
3k views

Implementing Digitally signed data in a Web Application

I understand PKI well from a conceptual point of view - i.e. private keys/public keys - the math behind them, use of hash & encryption to sign a certificate, Digital Signing of Transactions or ...
user93353's user avatar
  • 441
2 votes
3 answers
564 views

iOS App Signing and Certificates

In order to sign an application for the Apple App Store, we need to create a certificate by saving a certificate request file from keychain and then upload it to the Apple store. I was wondering, ...
Abcd Efg's user avatar
  • 123
3 votes
2 answers
6k views

Committing https certificates to Github...is there ever a good reason for this?

If a server certificate is published to Github, a la: -----BEGIN CERTIFICATE----- is that necessarily a bad thing? Is there ever a legitimate reason to do this? I ask because of a recent wave of ...
yurisich's user avatar
  • 1,391
1 vote
3 answers
2k views

Windows driver signing [closed]

My company is developing driver for our hardware. Now I need to sign my driver for 32 and 64 bit platforms. Please tell, now I need to buy Authenticode certificate, right? What CA to use? DigiCert? ...
The Architect's user avatar
5 votes
1 answer
3k views

Java solution for mutual authentication with smart card

I need to develop a Java solution for mutual authentication between Tomcat 6 (server) and SmartCard "IDGo 300" (client). In order to do this I thought of the following scheme: 1.Tomcat (server) send ...
xfocus's user avatar
  • 51
2 votes
2 answers
510 views

Programming certificates [duplicate]

Possible Duplicate: Are certifications worth it? I'd be glad to hear your opinions on which programming certificates are the most widely recongnized in the industry and how useful are they ...
user43051's user avatar
  • 121
21 votes
2 answers
8k views

Has anyone ever claimed a warranty on an SSL certificate? [closed]

SSL certificates often advertise varying amounts of warranties or guarantees, for example $500,000 or $1m. My question is, in the history of SSL, has anyone ever actually successfully claimed one of ...
Tom's user avatar
  • 681
1 vote
1 answer
132 views

How to get familiarized with certificate generation

I am supposed to work on web Services (using Apache CXF and Spring ) I was asked to get familiarized with certificate generation, as we will need to generate certificates going forward for the web ...
user avatar