Questions tagged [digital-signature]
The digital-signature tag has no usage guidance.
192
questions
0
votes
0answers
20 views
Possibility of obtaining officially signed .NET FW native generated images (C:\Windows\assembly\NativeImages…)
Is it possible to obtain .NET FW native generated images for particular .NET FW version that would be signed by official MSFT signature?
When using Device Guard / WDAC for enforcing higher security on ...
0
votes
0answers
6 views
How to enable GitHub clone using SSL Certificate?
I am new to GitHub.
Is it possible to clone GitHub private repos using SSL certificate?
Is CLI operations to GitHub & GitHub APIs can be done using SSL certificates?
0
votes
0answers
25 views
Setting the signing subject description directly in Powershell
We recently replaced signtool.exe invocations with a direct call to Set-AuthenticodeSignature in our build script. This works fine except that signtool allowed us to set the signature subject ...
0
votes
0answers
146 views
Encryption issues (emails being encrypted for sender, not receiver) in Microsoft Outlook for Microsoft 365 MSO (16.0.13628.20234) 64-bit using S/MIME
I am trying to setup email encryption functionality.
I have created my own CA, 2 PFX certificates, and have signed the PFX certificates with the CA certificate.
The setup on both machines seem to be ...
1
vote
0answers
48 views
Can I use my own driver on Windows without having to ask MS for permission while keeping Secure Boot on?
As per the subject :
I want to write my own kernel mode driver
I want to be able to use it with Secure Boot on
I don't want to ask for permission to use it (no WHQL testing or attestation signing)
...
0
votes
0answers
373 views
How to create certificate signed with RSAPSS using openssl command?
I tried https://gist.github.com/superseb/788a234647324b49ee5a56e07e3a91ac
for commands, but getting following error in first command itself:
sh-4.2$ openssl genpkey -algorithm rsa-pss -pkeyopt ...
1
vote
3answers
421 views
Why Outlook client's S/MIME settings use SHA1 as the default Hash Algorithm for digital signing a message?
can someone tell why Outlook client S/MIME settings use SHA1 as the default Hash Algorithm?
Doesn't that put the certificate private key to a risk when weak algorithm is used? Or am I ...
0
votes
1answer
110 views
Libre Office Sign a PDF with PGP key
I'm currently facing an issue with the "Sign" feature of Libre Office. I can digital sign my ODT files without a problem. That means I can select my pgp key in the list of keys and sign the ...
0
votes
0answers
24 views
Does the name next to “Signed by” in Acrobat Reader come always from the CN field in the signing certificate?
I have a digitally signed pdf, and I opened it with Acrobat Reader DC version 2020.012.20043. This is the signatures' info I get in the signature panel:
"Firmado por" is "Signed by&...
0
votes
0answers
194 views
How to verify PGP signature with signing key using Enigmail in Thunderbird
I received an email like this above:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Because anyone can claim to be me. There's no validation of the user
name or email address when someone posts a ...
0
votes
0answers
10 views
PDF fill and sign application offline distribution of fillable forms
Any suggestion regarding the PDF fill and sign offline application where we can distribute the PDF fillable forms without using email or creating link or through cloud ?
Fillable forms where we can ...
0
votes
0answers
35 views
PDF Certification signature: View initial revision in adobe reader
I have a pdf document with multiple signature fields. The first field is signed with a certification signature. Whenever an approval signature is added to my document, a new revision is created and it ...
0
votes
1answer
248 views
Verifying Veracrypt's public key
I execute the following command, as discussed in several sites:
gpg --with-fingerprint VeraCrypt_PGP_public_key.asc
Against current key here VeraCrypt download
The output I receive is as follows:
gpg:...
0
votes
0answers
11 views
Can I put all the information for a DocuSign envelope into a Word document without using the DocuSign API?
I would like to mark up an MS Word document with all of the information necessary to upload to DocuSign. Specifically, I want to include all the information required for the DocuSign envelope, and ...
0
votes
1answer
278 views
Is it possible to download electronically signed document with a signature on it?
I am sorry if this is a wrong place to ask this. If it is, redirect me to the right site.
A document is electronically signed and sent me in .asice file. I managed to open the document via my ...
0
votes
1answer
718 views
How to verify a gpg-signed file against a specific public key?
Background information: I have a directory full of files and detached .asc signatures. I also have my default keyring which includes many public keys of people (some of whom I trust and others I don't)...
2
votes
1answer
5k views
What does the check mark `Lock document after signing` do in Acrobat Reader?
I need to sign PDF documents with the Acrobat Reader DC (V19, Win10).
What consequences does the check mark Lock document after signing specifically have? This is what I checked/got so far (partly ...
0
votes
1answer
801 views
Is my QUBES-OS master signing key right or wrong?
i just tried to verify my Qubes Master Signing Key with this description:
https://www.qubes-os.org/security/verifying-signatures/#1-get-the-qubes-master-signing-key-and-verify-its-authenticity
I ...
1
vote
0answers
674 views
OpenSSL Digital Signature with ES256
I am trying to reproduce a valid signature for the JSON Web Token.
I make the privat key with: openssl ecparam -genkey -name prime256v1 -noout -out private.pem
also convert this from Pem to P8 with: ...
0
votes
1answer
283 views
Device Driver Signing on Windows 10
I am not Windows users so I need some help with driver digital signature enforcement in windows 10 64 bits.
1) I have device driver which according Windows 10 doesn't have digital signature.
When I ...
5
votes
1answer
555 views
How to verify an email signature from Facebook?
Facebook allows users
to add OpenPGP public keys to their profile; these keys can be used to "end-to-end" encrypt notification emails sent from Facebook to your preferred email accounts. – ...
0
votes
1answer
851 views
Secure Boot - Custom signed bootloader
Through Secure Boot on Windows 10, I am trying to make it so that only a bootloader signed with my private key can boot on a machine. This means that even if someone else comes along with a Microsoft ...
0
votes
1answer
103 views
Word Signature Line: not all certificates from certmgr.msc/Personal/Certificates selectable?
In Microsoft Word you can add a signature line to a document. It is an item inside the document that initially looks like this:
Once you've added that signature line to the document you can double ...
0
votes
2answers
5k views
How to add multiple digital signatures to an Excel spreadsheet?
I have an Excel spreadsheet that lives on a shared folder, that everybody can access. On that spreadsheet, I have a worksheet with a list of tasks that have to be completed, but not necessarily by the ...
0
votes
0answers
323 views
unknown tag 26 encountered bouncy castle exception
unknown tag 26 encountered
at org.bouncycastle.asn1.ASN1InputStream.buildObject(Unknown Source)
at org.bouncycastle.asn1.ASN1InputStream.readObject(Unknown Source)
at org.bouncycastle.asn1....
0
votes
0answers
39 views
Understanding an email with no SPF, DKIM, or DMARC but is has a valid digital signature
Can someone explain in simple terms what does it mean, that an email has no SPF, DKIM, or DMARC (from what I read and understood is that this email is likely to end up as as spam or rejected by the ...
0
votes
1answer
101 views
Combine excel and keep signature line
I'm doing an excel and SharePoint project where I provide user with an excel file with a Microsoft signature line that user review and sign. These are separate files for each user and the files are ...
2
votes
1answer
1k views
Sign only using GpgOL in Outlook
I currently have the Outlook plugging GpgOL which lets me encrypt/sign emails using an OpenPGP encryption key.
Is it possible to somehow remove the encryption option or somehow hide the encryption ...
2
votes
1answer
2k views
How to fake handwriting on pdf without printer and scanner?
Bureaucracy sometimes requires us to print a document, fill in blank fields, sign it, scan it and send it back. Is there an easy way to fool the bureaucrats when no printer or scanner are available? I ...
1
vote
1answer
707 views
Windows 10 Driver(without hardware device) with Error 39, 0xc0000603, Certificate Revoked
Well, the driver was signed by EV Signing Certificate and Microsoft Windows Hardware Compatibility Publisher(WHLK\WHQL)
With Secure Boot on Win 10 machine, I got the error code 39(Windows cannot ...
11
votes
1answer
2k views
How can I verify that a Windows XP POS operating system executable is authentic?
I have a 3rd party firewall that alerted me that msiexec.exe was replaced by another version. The timing didn't correspond to an OS update, so I was worried a bad actor replaced the exe. How can I ...
0
votes
2answers
41 views
Issues understanding CA certificates
I have misconceptions regarding CA (Certificate Authority) certificates. No matter how many things I read, it is still not fully clear.
Let's take an example, Bob accesses a website. In order for ...
1
vote
0answers
650 views
Windows 10 - Different methods to disable driver signature check and their realations
For Windows 10
I am examining different methods to monitor the disabling of "driver signature check". From a search online I found 3 main method:
from administrator cmd run:
bcdedit.exe -set ...
0
votes
2answers
390 views
gpg-zip using secret key sign a zip
I have the following problem.
I created a Key-Pair with Thunderbird (Engimail), then I exported the asc file, and importet it in the git bash to gpg.
Now I need to sign a zip.
Using the command:
...
1
vote
2answers
216 views
How to create GlobalSign Timestamp Digest?
I am attempting to use the Global Sign Digital Signing Service API to sign a PDF document. I have received some of their documentation. But I am unable to understand their request to provide a "digest"...
3
votes
3answers
2k views
Digitally signed driver not verified by Windows (Code 52)
I am installing the I2CTools USB-to-I2C Elite driver for Win 10 x64, but I got a dialog saying ”Jungo Connectivity: a digitally signed driver is required.”
In device manager the two drivers ...
0
votes
1answer
379 views
Signing a message with a SmartCard / Yubikey
So I've gone through a pretty bog-standard GPG-key-setup process, and then used addtokey to move said keys onto a Yubikey 4.
Now, on a fresh setup, I want to try and use those keys, to sign something....
1
vote
1answer
439 views
How to use PIV smartcards (YubiKey 4) to sign application binaries?
I am about to start using my YubiKey 4 (RSA 2048 bit key) for signing application binaries. There a quite a few tutorials about how to setup this. It seems that most tutorials based on the original ...
12
votes
2answers
13k views
How to verify a digital signature on a PDF on Linux?
I am a Linux desktop user.
Someone sends me a PDF file which is digitally signed. It is supposed to be signed using some kind of government / regulated body / official institution issued certificate.
...
1
vote
0answers
4k views
Prevent losing a digital Signature when a document is saved?
The question
What is an effective work-around to prevent a Digital Signature dropping from a file when it's saved? Or, What would be an efficient way to replicate saving data to a Macro Enabled MS ...
0
votes
2answers
6k views
S/MIME signed email loses attachment
We have a small number of users who digitally sign (but don't encrypt) their email. When they send attachments, it usually works fine. However, when the recipient is using Outlook Mobile, all ...
0
votes
0answers
858 views
This digital signature is invalid and cannot be trusted. The macros will be disabled
I am using MS Excel containing macro at customer place for some automation in excel. When the customer opens excel containing macro with the valid EV digital signature (Also tried with previously ...
1
vote
0answers
467 views
How to sign with a specific subkey using GnuPG?
Say I have two subkeys like below.
/c/Users/user/.gnupg/secring.gpg
---------------------------------
sec 2048R/DC****** 2017-05-25
uid J D <J.D@gmail.com>
ssb 2048R/...
0
votes
1answer
888 views
Verifying/decrypt email using PGP signature/public key
UPDATED QUESTION:
Using Outlook 2013 64bit on Windows 7 64bit, I have setup GnuPG which allows me to send encrypted emails. To do that, I asked someone for their public key. I sent them an email ...
1
vote
1answer
450 views
How to do RPM package signature verification in Windows?
I’m trying to do GPG signature validation to Centos 7 RPM files that I have downloaded. They are validated during the first download, but I am trying to another validation after they have been ...
0
votes
0answers
148 views
Permanent accept of java certificate is not woring on windows 10
Usually when starting a signed Java Application - no matter if starting inside a browser as applet or via JNLP/JavaWebStart – there is a warning prompt notifying if to run the application.
On ...
0
votes
2answers
3k views
Programmatically getting an executable's Certificate Details
It is possible to somehow programmatically export a file's digital certificate's subject if the certificate itself is not installed on the workstation but is only used to sign that specific file?
I ...
2
votes
1answer
1k views
minispy - Windows cannot verify the digital signature for this file
I have built the Microsoft sample minispy minifilter with no issue. I made sure that since I am using 64-bit, I have also compiled in x64 on my Visual Studio. Tried both Debug and Release. Hence in ...
0
votes
2answers
5k views
How do I check gpg signature given only the fingerprint and key ID?
I am trying to check the integrity of my gmp-6.1.2.tar.lz download (see here). I am on CentOS 6.6 using gpg (GnuPG) 2.0.14.
The GMP website only lists
Key ID: 0x28C67298
Key type: 2560 bit RSA
...
0
votes
1answer
303 views
How to modify a resource in exporer.exe
I've created a notification icon that's much more visible than the existing black and white one. This icon has exactly the same size in bytes as the existing one, so I was hoping I could replace it ...
