Questions tagged [digital-signature]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
2 answers
1k views

gpg-zip using secret key sign a zip

I have the following problem. I created a Key-Pair with Thunderbird (Engimail), then I exported the asc file, and importet it in the git bash to gpg. Now I need to sign a zip. Using the command: ...
Anima's user avatar
  • 153
1 vote
2 answers
376 views

How to create GlobalSign Timestamp Digest?

I am attempting to use the Global Sign Digital Signing Service API to sign a PDF document. I have received some of their documentation. But I am unable to understand their request to provide a "digest"...
Austin's user avatar
  • 121
4 votes
3 answers
4k views

Digitally signed driver not verified by Windows (Code 52)

I am installing the I2CTools USB-to-I2C Elite driver for Win 10 x64, but I got a dialog saying ”Jungo Connectivity: a digitally signed driver is required.” In device manager the two drivers ...
Rugbrød's user avatar
  • 153
0 votes
1 answer
633 views

Signing a message with a SmartCard / Yubikey

So I've gone through a pretty bog-standard GPG-key-setup process, and then used addtokey to move said keys onto a Yubikey 4. Now, on a fresh setup, I want to try and use those keys, to sign something....
ELLIOTTCABLE's user avatar
  • 2,465
3 votes
1 answer
851 views

How to use PIV smartcards (YubiKey 4) to sign application binaries?

I am about to start using my YubiKey 4 (RSA 2048 bit key) for signing application binaries. There a quite a few tutorials about how to setup this. It seems that most tutorials based on the original ...
burnersk's user avatar
  • 436
25 votes
4 answers
21k views

How to verify a digital signature on a PDF on Linux?

I am a Linux desktop user. Someone sends me a PDF file which is digitally signed. It is supposed to be signed using some kind of government / regulated body / official institution issued certificate. ...
TorstenS's user avatar
  • 401
1 vote
0 answers
7k views

Prevent losing a digital Signature when a document is saved?

The question What is an effective work-around to prevent a Digital Signature dropping from a file when it's saved? Or, What would be an efficient way to replicate saving data to a Macro Enabled MS ...
Samuel Everson's user avatar
0 votes
2 answers
8k views

S/MIME signed email loses attachment

We have a small number of users who digitally sign (but don't encrypt) their email. When they send attachments, it usually works fine. However, when the recipient is using Outlook Mobile, all ...
Alexander Martin's user avatar
0 votes
0 answers
1k views

This digital signature is invalid and cannot be trusted. The macros will be disabled

I am using MS Excel containing macro at customer place for some automation in excel. When the customer opens excel containing macro with the valid EV digital signature (Also tried with previously ...
IT researcher's user avatar
3 votes
0 answers
1k views

How to sign with a specific subkey using GnuPG?

Say I have two subkeys like below. /c/Users/user/.gnupg/secring.gpg --------------------------------- sec 2048R/DC****** 2017-05-25 uid J D <[email protected]> ssb 2048R/...
David S.'s user avatar
  • 926
0 votes
1 answer
1k views

Verifying/decrypt email using PGP signature/public key

UPDATED QUESTION: Using Outlook 2013 64bit on Windows 7 64bit, I have setup GnuPG which allows me to send encrypted emails. To do that, I asked someone for their public key. I sent them an email ...
oshirowanen's user avatar
  • 1,720
1 vote
1 answer
980 views

How to do RPM package signature verification in Windows?

I’m trying to do GPG signature validation to Centos 7 RPM files that I have downloaded. They are validated during the first download, but I am trying to another validation after they have been ...
just_another_noob's user avatar
0 votes
0 answers
216 views

Permanent accept of java certificate is not woring on windows 10

Usually when starting a signed Java Application - no matter if starting inside a browser as applet or via JNLP/JavaWebStart – there is a warning prompt notifying if to run the application. On ...
PaulEdison's user avatar
3 votes
2 answers
7k views

Programmatically getting an executable's Certificate Details

It is possible to somehow programmatically export a file's digital certificate's subject if the certificate itself is not installed on the workstation but is only used to sign that specific file? I ...
Claudiu Dragan's user avatar
2 votes
1 answer
2k views

minispy - Windows cannot verify the digital signature for this file

I have built the Microsoft sample minispy minifilter with no issue. I made sure that since I am using 64-bit, I have also compiled in x64 on my Visual Studio. Tried both Debug and Release. Hence in ...
Sydrik's user avatar
  • 33
1 vote
2 answers
8k views

How do I check gpg signature given only the fingerprint and key ID?

I am trying to check the integrity of my gmp-6.1.2.tar.lz download (see here). I am on CentOS 6.6 using gpg (GnuPG) 2.0.14. The GMP website only lists Key ID: 0x28C67298 Key type: 2560 bit RSA ...
irritable_phd_syndrome's user avatar
0 votes
1 answer
777 views

How to modify a resource in exporer.exe

I've created a notification icon that's much more visible than the existing black and white one. This icon has exactly the same size in bytes as the existing one, so I was hoping I could replace it ...
Luis Ferrao's user avatar
  • 4,345
3 votes
0 answers
275 views

Windows 10: will drivers installed using testmode still work then testmode is disabled?

I have a general understanding problem with Windows Testmode and how to install unsigned drivers: I understand that if I have drivers (in my case for an USB to RS232 serial adapter) that are not ...
Erik's user avatar
  • 1,399
-1 votes
1 answer
428 views

Where can I get a X509 certificate with my email address embedded and nonRepudiation and digitalSignature bits set? [closed]

I would like to buy a X.509 certificate for user authentication not for SSL. The certificate should have my email address in it and should have 2 bits set in KeyUsage extension: nonRepudiation ...
user674669's user avatar
2 votes
1 answer
4k views

Is it possible to find signer's email address(es) from an OpenPGP (GnuPG) signed message?

I have two files bla.txt and bla.txt.sig. The latter is the signature for the first. I do not (yet) know who is the signer. GnuPG just says (correctly): "No public key". With the email address I could ...
user avatar
2 votes
2 answers
2k views

Inspecting digital signature in PDF file

I have a PDF that was signed with a certificate from a PKCS#11 module (a Belgian identity card reader, also known as eID) using Adobe Acrobat Reader DC. How can I inspect the signature that's attached ...
Pieter's user avatar
  • 776
0 votes
2 answers
2k views

Add author at SFX archive with WinRAR

For example: In "Autore" i want insert an author.
Riccardo La Marca's user avatar
0 votes
1 answer
1k views

Digitally sign my word or pdf document with timestamp

I need to find a way to digitally sign my word or PDF document with a digital timestamp to prove that the content (mainly text content and images) has not been changed since ever then. I need whoever ...
Bill Kary's user avatar
  • 123
0 votes
0 answers
3k views

How to sign drivers properly for Windows 10

I am currently developing drivers for Windows 10, and I also have a code-signing certificate. When I sign my files, they get the signature and a hash set in the properties. However, Windows 10 refuses ...
Erik's user avatar
  • 1,399
1 vote
1 answer
172 views

What is difference between E signature (Electronic Signature) and Digital Signature?

I would like to understand difference between E Signature (Electronic Signature) and Digital Signature ? Can we replace digital signature with e signature ? what is benefit to use e signature over ...
Ashish Patel's user avatar
0 votes
1 answer
2k views

OpenSSL on Windows: Problems by signing a file through commandline

I have to sign an XML-File with OpenSSL on a Windows-Server 2012 through command-line. Unfortunately it didn`t work out if I set the passphrase inside the command. I then always get the error: "Can ...
P. Baeumel-Private's user avatar
0 votes
1 answer
458 views

What kind of certificate do you need to digitally sign an .exe?

I want to digitally sign a setup.exe file for Windows. According to https://msdn.microsoft.com/en-us/library/ee290833(v=vs.100).aspx I need a "certificate" to do so. What kind of certificate do I ...
Joey's user avatar
  • 143
6 votes
3 answers
6k views

What determines the clearsign hash algorithm used by GnuPG?

When using GnuPG to clear sign a text, there is a hash part in signed message. Take the example: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 abc -----BEGIN PGP SIGNATURE----- ...
social_loser's user avatar
2 votes
1 answer
376 views

What is the most practical way of finding out which certificate is the problematic one?

I've been using wsusoffline for quite sometime, but recently, I've had this problem. The program downloads an update but then immediately deletes it producing the following warning in the log: ...
Andrew Savinykh's user avatar
1 vote
2 answers
374 views

GnuPG with CAPI smartcard / NOT an OpenPGP card

I have a RSA SecurId loaded with two keys and their corresponding certificate (signature and authentication). I'm already using the authentication key pair for SSH login (from my Windows desktop) ...
Cerber's user avatar
  • 257
1 vote
0 answers
607 views

Driver installation failed despite test mode

I have test mode enabled. But still, I get the message that the driver couldn't be installed (Code 52). Context: I'm trying to connect a TI84+ with my Windows 7 PC with an USB cable to transfer files,...
Fabian Röling's user avatar
2 votes
1 answer
4k views

How to specify which key to use for GnuPG sign/verify?

We have a package that we're trying to create a detached signature for, to ensure the other end can be confident it's from us. I know how to specify the correct identities when creating a key-pair ...
user avatar
1 vote
0 answers
661 views

Disable installation permission popup for my installer

I built an application and signed it. The update method of the application is to update silently automatically each time there is a new version. The problem is, I expected that the "Do you want to ...
Alexandru Irimiea's user avatar
0 votes
1 answer
641 views

Clonezilla's checksums file verification using signature with gpg extension

There are CHECKSUMS.TXT and CHECKSUMS.TXT.gpg files available on the Clonezilla Live's official download page. However I cannot verify its signature by usual verify command: $ gpg --verify --...
Ertugrul's user avatar
  • 849
0 votes
1 answer
1k views

Extract DKIM signature from gmail email

Gmail signs emails between .gmail.com addresses with DKIM. How can I extract the DKIM signature from a gmail email so I can prove to others it was sent at a specific date by a specific person? ...
Elliot Gorokhovsky's user avatar
1 vote
0 answers
59 views

GnuPG --> How do I list only the keys that have my signature

I use my signature to validate a public key. If someone's public the key is signed by me, then it is considered secure to encrypt and send emails to that recipient. Is there a command under gpg that ...
Vivarto's user avatar
  • 305
1 vote
1 answer
2k views

How to show certificate and signature information attached to a Windows binary?

How do I use OpenSSL to show the certificate and signature information attached to a binary (e.g. windows exe or msi)? I know that it's possible to read certificates directly from certificate files ...
hypnomaki's user avatar
1 vote
1 answer
850 views

Document digital signature is both validated and invalid?

I am using Libre Office to try to sign a document. Libre has notified me that my certificate is both validated but also invalid. What do? I have used this signature multiple times today already on ...
KDecker's user avatar
  • 2,251
1 vote
1 answer
2k views

self signing of powershell script

I created a selfsigned certifiacte with Power Shell cmdlet New-SelfSignedCertificate -DnsName test.OJ.com -CertStoreLocation cert:\LocalMachine\My After that the certificate can be seen in the ...
OJNSim's user avatar
  • 215
1 vote
1 answer
73 views

What makes OpenPGP keyrings trustworthy?

I've started reading the Linux From Scratch book and in the first few chapters, you are required to download the sources of all software packages you will need during the installation. The book ...
PawkyPenguin's user avatar
1 vote
1 answer
365 views

A digital certificate contain only one public key?

If I know well, many digital certificate can contain a single public key. But I didn't see a certificate containing more public key. I would like to know if it is completely impossible to a ...
Kroy's user avatar
  • 11
1 vote
0 answers
43 views

Mac app becomes smaller when copied to USB

I have a Mac app that is 443,245,675 bytes. When I copy it to a flash drive, the copied version is only 443,239,527 bytes and the app package becomes invalid (spctl -a fails). This difference (6148 ...
corpico's user avatar
  • 111
0 votes
2 answers
899 views

Signing and verifying a file using GnuPG

I created an RSA signing key using GnuPG. I have few files and I want to sign these files and store online. I signed these using GnuPG. If the original file is a.txt, GnuPG created a 1 KB file with ...
RPK's user avatar
  • 2,733
0 votes
2 answers
2k views

How to fix Windows system file digital signature that prevents booting

I was using my laptop in Windows on Macbook Pro this morning and decided I should reboot after a software update (non-Windows). Assuming all was fine, Windows prompted me with the "Diagnosing your PC....
ScottN's user avatar
  • 277
1 vote
1 answer
3k views

How can I extract many P7M (pkcs#7) signed files?

I have many P7M files and I need to extract them to unsigned original file, I found some free tools but with these I have to extract each one and I want something to do a massive extraction or a ...
Tobia's user avatar
  • 2,261
0 votes
1 answer
1k views

How can I retrieve original data from a signature with GnuPG?

I am currently in a situation where using the --clearsign flag would be impractical. I have established via the size of a signature that it does contain some form of the input data (so when I typed ...
user13129's user avatar
  • 111
17 votes
2 answers
5k views

How do I allow cross-signed kernel drivers in Windows 10 version 1607 with secure boot enabled?

Windows 10 Version 1607 (aka Anniversary Update) is now enforcing the tightened kernel driver certification which was already announced 2015 as a requirement for Windows 10. The new rule is that all ...
gollum's user avatar
  • 456
0 votes
1 answer
50 views

How do I USE my google signature once it's made?

There's a million videos on how to make a Gmail signature. Would someone PLEASE just tell me how to include it in an email once it's made. I'm pulling my hair out. Is there an include signature button ...
Joe Rizzo's user avatar
0 votes
1 answer
64 views

Password keychan forgotten, not the login one ( ArubaKey )

I have installed a bunch of certificates on my mac, due to italian legal system, in order to login to a certain website with a smartcard. It all worked well for a few months and then yesterday it ...
Gerardo Zinno's user avatar
5 votes
2 answers
6k views

Can you use an SSL certificate provided by LetsEncrypt.org to digitally sign pdfs?

Let's say that I have an SSL cert (x.509 cert) that I use to provide my personal website via HTTPS. Is it possible to use this cert to digitally sign pdfs in Acrobat DC which come from me? Would I ...
Jason's user avatar
  • 315