1
vote
2answers
34 views

Generate a public key certificate signed by CA with OpenSSL

I am working on a webservice that requires a signature in the sent and received messages. After sending a certificate request to the entity that will consume the webservice, they sent me (in addition ...
0
votes
1answer
16 views

Is it possible to merge my certificate (.crt) with my private key to export as a Base-64 encoded X.509 (.CER)

I am very clueless when it comes to certificates/security and the like so please excuse my ignorance. I purchased a certificate and it was sent to me. I generated the CSR using the java keytool. I ...
0
votes
0answers
16 views

OpenSSL, Converting CRT to PEM

I've been trying to use openssl to convert a .crt certificate to a .pem openssl.exe x509 -in server.crt -out openssl.pem -inform der -outform pem After using that command, I get unable to load ...
4
votes
1answer
46 views

Imported cert into firefox/chrome, still warning

I generated a wildcard certificate for multiple (wildcard) domains (SANS, alternate domain names + IP) (see https://blog.flowl.info). I imported the certificate into Firefox, Chrome and Windows ...
1
vote
2answers
151 views

s_client not failing on revoked certifcate?

I'm running Firefox with with the EFF's HTTPS Everywhere. I recently visited Lavabit's site to see if its accepting donations: The revocation is expected considering the history.... However, I'm ...
0
votes
2answers
86 views

heartbleed are CA private keys compromised?

have any CA private keys such as those used by godaddy to issue private/public key pairs compromised as a result of heartbleed?
0
votes
1answer
96 views

OpenSSL CA keyUsage extension

I want to set up a chain of certificates, with a self signed 'root' CA at the top that signs sub CAs, which can then sign client and server certificates. When setting up openssl.cnf, I noticed a ...
2
votes
1answer
272 views

Incorrect Authority Key Identifier on openssl end cert

I'm getting interesting results when signing an end-server certificate using an intermediate CA using openssl. I have a Root CA which looks like this: Serial Number: 14296918985177649921 ...
0
votes
1answer
1k views

openssl pkcs12 keeps removing the PEM passphrase from keystore's entry?

OpenSSL 1.0.1e 11 Feb 2013 Generating a self-signed certificate: openssl req -x509 -newkey rsa:1024 -keyout key.pem -out cert.pem -days 365 During the process a PEM passphrase is ...
0
votes
0answers
138 views

How to dump the Subject Alternative Name (SAN) from an SSL certificate file

I know that I can dump the entire information from a PEM certificate file with this command: openssl x509 -in certfile -noout -text And I've already found another direct parameter to show me only ...
1
vote
1answer
686 views

Can not combine two CA certificate files to a CA certificate chain

Ι' m trying to concatenate two valid self-signed CA pem files generated using openssl in order to import a single CA file in Firefox (client side), using the following command: cat CA_file0.pem ...
5
votes
1answer
5k views

Can self-signed SSL certificate be renewed? How?

I'm fairly new to SSL certificates and would like to know if a self-signed certificate which I use for HTTPS can be renewed to extend its expiry date without all clients of the site having to go ...
3
votes
3answers
5k views

Check expiry date of ssl certificate for multiple remote servers

I can find out the expiry date of ssl certificates using this OpenSSL command: openssl x509 -noout -in <filename> -enddate But if the certificates are scattered on different web servers, how ...
0
votes
1answer
65 views

x590cafile default location for gnutls-cli

I am using gnutls-cli from Cygwin, on a laptop running Windows XP Home (I have openssl from cygwin also). I am wondering where does gnutls-cli look for CA certificates if I don't specify option ...
0
votes
1answer
383 views

How to add self signed certificate to certificate bundle?

How to add self signed certificate to certificate bundle so that the Curl http client can verify the self signed certificate as valid one?
2
votes
3answers
217 views

Certificates signed by multiple CAs

Is it possible to have a OpenSSL Certificate signed by multiple CAs? Background: We have a CA to issue certificates mainly for our machine-to-machine communications. Now we need to make some services ...
5
votes
1answer
593 views

How to create private security certificates that behave like official ones?

I'm trying to get a valid secured environment for HTTP communication to behave like normal ones. I'm doing this for a restricted group of users. There is a hardware server running a web service ...