Questions tagged [digital-signature]
The digital-signature tag has no usage guidance.
209
questions
0
votes
2
answers
1k
views
gpg-zip using secret key sign a zip
I have the following problem.
I created a Key-Pair with Thunderbird (Engimail), then I exported the asc file, and importet it in the git bash to gpg.
Now I need to sign a zip.
Using the command:
...
1
vote
2
answers
376
views
How to create GlobalSign Timestamp Digest?
I am attempting to use the Global Sign Digital Signing Service API to sign a PDF document. I have received some of their documentation. But I am unable to understand their request to provide a "digest"...
4
votes
3
answers
4k
views
Digitally signed driver not verified by Windows (Code 52)
I am installing the I2CTools USB-to-I2C Elite driver for Win 10 x64, but I got a dialog saying ”Jungo Connectivity: a digitally signed driver is required.”
In device manager the two drivers ...
0
votes
1
answer
633
views
Signing a message with a SmartCard / Yubikey
So I've gone through a pretty bog-standard GPG-key-setup process, and then used addtokey to move said keys onto a Yubikey 4.
Now, on a fresh setup, I want to try and use those keys, to sign something....
3
votes
1
answer
851
views
How to use PIV smartcards (YubiKey 4) to sign application binaries?
I am about to start using my YubiKey 4 (RSA 2048 bit key) for signing application binaries. There a quite a few tutorials about how to setup this. It seems that most tutorials based on the original ...
25
votes
4
answers
21k
views
How to verify a digital signature on a PDF on Linux?
I am a Linux desktop user.
Someone sends me a PDF file which is digitally signed. It is supposed to be signed using some kind of government / regulated body / official institution issued certificate.
...
1
vote
0
answers
7k
views
Prevent losing a digital Signature when a document is saved?
The question
What is an effective work-around to prevent a Digital Signature dropping from a file when it's saved? Or, What would be an efficient way to replicate saving data to a Macro Enabled MS ...
0
votes
2
answers
8k
views
S/MIME signed email loses attachment
We have a small number of users who digitally sign (but don't encrypt) their email. When they send attachments, it usually works fine. However, when the recipient is using Outlook Mobile, all ...
0
votes
0
answers
1k
views
This digital signature is invalid and cannot be trusted. The macros will be disabled
I am using MS Excel containing macro at customer place for some automation in excel. When the customer opens excel containing macro with the valid EV digital signature (Also tried with previously ...
3
votes
0
answers
1k
views
How to sign with a specific subkey using GnuPG?
Say I have two subkeys like below.
/c/Users/user/.gnupg/secring.gpg
---------------------------------
sec 2048R/DC****** 2017-05-25
uid J D <[email protected]>
ssb 2048R/...
0
votes
1
answer
1k
views
Verifying/decrypt email using PGP signature/public key
UPDATED QUESTION:
Using Outlook 2013 64bit on Windows 7 64bit, I have setup GnuPG which allows me to send encrypted emails. To do that, I asked someone for their public key. I sent them an email ...
1
vote
1
answer
980
views
How to do RPM package signature verification in Windows?
I’m trying to do GPG signature validation to Centos 7 RPM files that I have downloaded. They are validated during the first download, but I am trying to another validation after they have been ...
0
votes
0
answers
216
views
Permanent accept of java certificate is not woring on windows 10
Usually when starting a signed Java Application - no matter if starting inside a browser as applet or via JNLP/JavaWebStart – there is a warning prompt notifying if to run the application.
On ...
3
votes
2
answers
7k
views
Programmatically getting an executable's Certificate Details
It is possible to somehow programmatically export a file's digital certificate's subject if the certificate itself is not installed on the workstation but is only used to sign that specific file?
I ...
2
votes
1
answer
2k
views
minispy - Windows cannot verify the digital signature for this file
I have built the Microsoft sample minispy minifilter with no issue. I made sure that since I am using 64-bit, I have also compiled in x64 on my Visual Studio. Tried both Debug and Release. Hence in ...
1
vote
2
answers
8k
views
How do I check gpg signature given only the fingerprint and key ID?
I am trying to check the integrity of my gmp-6.1.2.tar.lz download (see here). I am on CentOS 6.6 using gpg (GnuPG) 2.0.14.
The GMP website only lists
Key ID: 0x28C67298
Key type: 2560 bit RSA
...
0
votes
1
answer
777
views
How to modify a resource in exporer.exe
I've created a notification icon that's much more visible than the existing black and white one. This icon has exactly the same size in bytes as the existing one, so I was hoping I could replace it ...
3
votes
0
answers
275
views
Windows 10: will drivers installed using testmode still work then testmode is disabled?
I have a general understanding problem with Windows Testmode and how to install unsigned drivers: I understand that if I have drivers (in my case for an USB to RS232 serial adapter) that are not ...
-1
votes
1
answer
428
views
Where can I get a X509 certificate with my email address embedded and nonRepudiation and digitalSignature bits set? [closed]
I would like to buy a X.509 certificate for user authentication not for SSL. The certificate should have my email address in it and should have 2 bits set in KeyUsage extension:
nonRepudiation
...
2
votes
1
answer
4k
views
Is it possible to find signer's email address(es) from an OpenPGP (GnuPG) signed message?
I have two files bla.txt and bla.txt.sig.
The latter is the signature for the first.
I do not (yet) know who is the signer.
GnuPG just says (correctly): "No public key".
With the email address I could ...
2
votes
2
answers
2k
views
Inspecting digital signature in PDF file
I have a PDF that was signed with a certificate from a PKCS#11 module (a Belgian identity card reader, also known as eID) using Adobe Acrobat Reader DC. How can I inspect the signature that's attached ...
0
votes
2
answers
2k
views
Add author at SFX archive with WinRAR
For example:
In "Autore" i want insert an author.
0
votes
1
answer
1k
views
Digitally sign my word or pdf document with timestamp
I need to find a way to digitally sign my word or PDF document with a digital timestamp to prove that the content (mainly text content and images) has not been changed since ever then.
I need whoever ...
0
votes
0
answers
3k
views
How to sign drivers properly for Windows 10
I am currently developing drivers for Windows 10, and I also have a code-signing certificate. When I sign my files, they get the signature and a hash set in the properties. However, Windows 10 refuses ...
1
vote
1
answer
172
views
What is difference between E signature (Electronic Signature) and Digital Signature?
I would like to understand difference between E Signature (Electronic Signature) and Digital Signature ? Can we replace digital signature with e signature ? what is benefit to use e signature over ...
0
votes
1
answer
2k
views
OpenSSL on Windows: Problems by signing a file through commandline
I have to sign an XML-File with OpenSSL on a Windows-Server 2012 through command-line.
Unfortunately it didn`t work out if I set the passphrase inside the command.
I then always get the error: "Can ...
0
votes
1
answer
458
views
What kind of certificate do you need to digitally sign an .exe?
I want to digitally sign a setup.exe file for Windows.
According to https://msdn.microsoft.com/en-us/library/ee290833(v=vs.100).aspx I need a "certificate" to do so.
What kind of certificate do I ...
6
votes
3
answers
6k
views
What determines the clearsign hash algorithm used by GnuPG?
When using GnuPG to clear sign a text, there is a hash part in signed message. Take the example:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
abc
-----BEGIN PGP SIGNATURE-----
...
2
votes
1
answer
376
views
What is the most practical way of finding out which certificate is the problematic one?
I've been using wsusoffline for quite sometime, but recently, I've had this problem. The program downloads an update but then immediately deletes it producing the following warning in the log:
...
1
vote
2
answers
374
views
GnuPG with CAPI smartcard / NOT an OpenPGP card
I have a RSA SecurId loaded with two keys and their corresponding certificate (signature and authentication).
I'm already using the authentication key pair for SSH login (from my Windows desktop) ...
1
vote
0
answers
607
views
Driver installation failed despite test mode
I have test mode enabled. But still, I get the message that the driver couldn't be installed (Code 52).
Context: I'm trying to connect a TI84+ with my Windows 7 PC with an USB cable to transfer files,...
2
votes
1
answer
4k
views
How to specify which key to use for GnuPG sign/verify?
We have a package that we're trying to create a detached signature for, to ensure the other end can be confident it's from us.
I know how to specify the correct identities when creating a key-pair ...
1
vote
0
answers
661
views
Disable installation permission popup for my installer
I built an application and signed it. The update method of the application is to update silently automatically each time there is a new version.
The problem is, I expected that the "Do you want to ...
0
votes
1
answer
641
views
Clonezilla's checksums file verification using signature with gpg extension
There are CHECKSUMS.TXT and CHECKSUMS.TXT.gpg files available on the Clonezilla Live's official download page.
However I cannot verify its signature by usual verify command:
$ gpg --verify --...
0
votes
1
answer
1k
views
Extract DKIM signature from gmail email
Gmail signs emails between .gmail.com addresses with DKIM. How can I extract the DKIM signature from a gmail email so I can prove to others it was sent at a specific date by a specific person? ...
1
vote
0
answers
59
views
GnuPG --> How do I list only the keys that have my signature
I use my signature to validate a public key.
If someone's public the key is signed by me, then it is considered secure to encrypt and send emails to that recipient.
Is there a command under gpg that ...
1
vote
1
answer
2k
views
How to show certificate and signature information attached to a Windows binary?
How do I use OpenSSL to show the certificate and signature information attached to a binary (e.g. windows exe or msi)?
I know that it's possible to read certificates directly from certificate files ...
1
vote
1
answer
850
views
Document digital signature is both validated and invalid?
I am using Libre Office to try to sign a document. Libre has notified me that my certificate is both validated but also invalid.
What do?
I have used this signature multiple times today already on ...
1
vote
1
answer
2k
views
self signing of powershell script
I created a selfsigned certifiacte with Power Shell cmdlet
New-SelfSignedCertificate -DnsName test.OJ.com -CertStoreLocation cert:\LocalMachine\My
After that the certificate can be seen in the ...
1
vote
1
answer
73
views
What makes OpenPGP keyrings trustworthy?
I've started reading the Linux From Scratch book and in the first few chapters, you are required to download the sources of all software packages you will need during the installation.
The book ...
1
vote
1
answer
365
views
A digital certificate contain only one public key?
If I know well, many digital certificate can contain a single public key. But I didn't see a certificate containing more public key.
I would like to know if it is completely impossible to a ...
1
vote
0
answers
43
views
Mac app becomes smaller when copied to USB
I have a Mac app that is 443,245,675 bytes.
When I copy it to a flash drive, the copied version is only 443,239,527 bytes and the app package becomes invalid (spctl -a fails).
This difference (6148 ...
0
votes
2
answers
899
views
Signing and verifying a file using GnuPG
I created an RSA signing key using GnuPG.
I have few files and I want to sign these files and store online.
I signed these using GnuPG. If the original file is a.txt, GnuPG created a 1 KB file with ...
0
votes
2
answers
2k
views
How to fix Windows system file digital signature that prevents booting
I was using my laptop in Windows on Macbook Pro this morning and decided I should reboot after a software update (non-Windows).
Assuming all was fine, Windows prompted me with the "Diagnosing your PC....
1
vote
1
answer
3k
views
How can I extract many P7M (pkcs#7) signed files?
I have many P7M files and I need to extract them to unsigned original file, I found some free tools but with these I have to extract each one and I want something to do a massive extraction or a ...
0
votes
1
answer
1k
views
How can I retrieve original data from a signature with GnuPG?
I am currently in a situation where using the --clearsign flag would be impractical.
I have established via the size of a signature that it does contain some form of the input data (so when I typed ...
17
votes
2
answers
5k
views
How do I allow cross-signed kernel drivers in Windows 10 version 1607 with secure boot enabled?
Windows 10 Version 1607 (aka Anniversary Update) is now enforcing the tightened kernel driver certification which was already announced 2015 as a requirement for Windows 10. The new rule is that all ...
0
votes
1
answer
50
views
How do I USE my google signature once it's made?
There's a million videos on how to make a Gmail signature. Would someone PLEASE just tell me how to include it in an email once it's made. I'm pulling my hair out. Is there an include signature button ...
0
votes
1
answer
64
views
Password keychan forgotten, not the login one ( ArubaKey )
I have installed a bunch of certificates on my mac, due to italian legal system, in order to login to a certain website with a smartcard.
It all worked well for a few months and then yesterday it ...
5
votes
2
answers
6k
views
Can you use an SSL certificate provided by LetsEncrypt.org to digitally sign pdfs?
Let's say that I have an SSL cert (x.509 cert) that I use to provide my personal website via HTTPS. Is it possible to use this cert to digitally sign pdfs in Acrobat DC which come from me? Would I ...