Questions tagged [digital-signature]
The digital-signature tag has no usage guidance.
205
questions
1
vote
0
answers
15
views
ecryptfs: What would happen if we entered the wrong passphrase and continued like that? Can we prevent encryptfs from accepting a wrong passphrase?
Using ecryptfs, a fine file-system encryption mechanism on Linux.
After the filesystem is setup with ecryptfs (ecryptfs is an overlay of the actual filesystem, like ext4. Files and directories name ...
- 655
1
vote
1
answer
158
views
Can multiple signed PDF files be merged into one?
It seems that the industry converged to the weird consensus where the digital signature of a file is stored in the file itself, on a crude imitation of paper documents. If I have a PDF document that ...
- 360
0
votes
0
answers
22
views
Managing signed commits as an organization
We are looking to introduce signing of commits into our company.
Currently we are leaning towards using GPG kays, but we can consider SSH if what we want cannot be achieved with GPG.
We are using a ...
Slav
0
votes
1
answer
319
views
How to digital sign Excel document with a P12 file
I have a few Excel documents we need to sign at my job. Also some PDF ones. I've looked everywhere and all sites shows an "easy" answer but all lead to the same: obtain a digital id from ...
- 251
1
vote
1
answer
466
views
Error running installer in Windows 7 VM: "publisher of file [xxx] cannot be verified"
For various reasons, I need to install a third-party program on a Windows 7 VM running under Parallels Desktop 18 on a MacBook Pro running OS 12.6.1.
The problem appears when I try to run the ...
- 123
1
vote
1
answer
675
views
Why can't I sign a friend's GPG key, even though I can sign git commits and messages just fine?
I'm trying to sign someone's GPG key, and keep getting a strange error:
# for example
$ gpg --sign-key [email protected]
pub rsa2048/DBD2CE893E2D1C87
created: 2017-06-27 expires: never ...
- 153
6
votes
1
answer
893
views
How do I sign a file using SSH and verify it using a certificate authority?
I would like to give a selected number of developers ability to run code on a system, and verify it using OpenSSH's -Y verify feature.
# Generate the certificates, and sign the dev cert with the root ...
- 203
2
votes
1
answer
87
views
Create sample Microsoft Word document with invalid electronic signature
I'm involved in informal education of notaries public. I would like to create a sample Microsoft Word document with a valid electronic signature, made with a digital certificate. I would then like to ...
- 158
2
votes
0
answers
20
views
Digital Signature for project
i want to know for me to sign digitally software(i am not a developer just an investor)
Do i need to use services like comodo or it can be done manually, for example i freelance soft like desktop app ...
- 21
1
vote
0
answers
89
views
How to resolve Signature Verification Results false positives?
I noticed that there are six DLLs in C:\Windows\System32 that sigverif.exe flags as not having been digitally signed - even though they have been. After digging into it a bit, it looks like the ...
- 11
0
votes
1
answer
66
views
Do audiofiles contain digital footprint which enables to trace back to the PC where the audiofile got downloaded and edited?
I'm using windows10 os on my pc. so i downloaded few audio files from a website which needs my email to login. My first question is - how to see if those audiofiles contains my email which i used to ...
- 1
0
votes
1
answer
586
views
How do you know if a code signing certificate for a file is ok?
Which things should you look out for, to indicate all looks okay, when viewing a downloaded file's "Digital Signatures" tab in Windows 10?
What are the signs there may be an issue with the ...
- 83
0
votes
1
answer
75
views
Does GpgOL attempt to grab public keys off a default keyserver?
I currently have a customer who noticed firewall logs pointing to a URL that was never used by them before. They blocked all traffic to and from the domain of another company that was recently hit by ...
- 1
1
vote
1
answer
207
views
DocuSign, User Certificates, and eIDAS
Based on my understanding in order to by eIDAS compliant, signer's digital certificate is included in the PAdES envelope.
However when i sign a document with DocuSign and open it with Acrobat reader, ...
- 171
0
votes
1
answer
206
views
How can I allow another user to move files around a shared folder in OneDrive?
I have setup a Shared folder on my Onedrive account for my team to facilitate document sign off however after a member of the team signs the document they can not move the document to the next persons ...
- 1
0
votes
1
answer
27
views
Remove trust from built app package file once added to windows trusted app
I created package of an app I developed. When running the built app it was blocked by windows. So I checked the Unblock from the properties as show in the below image.
But Now I want to remove it ...
- 11
1
vote
1
answer
4k
views
Microsoft Word: Digital Signature in document has "recoverable signature" error
I am trying to add a digital signature to a document in Microsoft Word for Microsoft 365 MSO (Version 2110). When signing, Word says:
The certificate you selected cannot be verified. Please check ...
- 131
0
votes
0
answers
81
views
Verify a digital signed document by fetching public key from local CA at the time of verification
Is it possible for a user (say A) to verify a digitally signed (by user B) document without having public key of user B in local system and fetching key from the server (local CA) at the time of ...
- 11
1
vote
0
answers
174
views
How to enable CA_CERTIFICATES on manjaro so that openssl works (xanmod installation error) (solved)
I'm trying to install the XanMod kernel on a Manjaro machine, but receive errors:
$pamac build linux-manjaro-xanmod
...
scripts/sign-file.c:25:10: fatal error: openssl/opensslv.h: No such file or ...
- 11
4
votes
0
answers
4k
views
gpg: skipped "12345689": Unusable secret key / how to use signing subkey for gpg?
As you see, I have a key with id 12345689, and I'm trying to sign with it in git
gpg -k
/home/lz/.gnupg/pubring.kbx
---------------------------
pub rsa4096 2020-03-02 [C]
12345689
uid ...
- 141
0
votes
0
answers
43
views
Is it bad to use a let's encrypt certificate outside its scope?
I have a let's encrypt certificate issued for my website,
Since I have this certificate's private key, I could use it to sign other stuff like files, etc...
(Assuming I don't leak the private key, of ...
- 335
0
votes
0
answers
207
views
How to enable GitHub clone using SSL Certificate?
I am new to GitHub.
Is it possible to clone GitHub private repos using SSL certificate?
Is CLI operations to GitHub & GitHub APIs can be done using SSL certificates?
- 1
0
votes
0
answers
880
views
Encryption issues (emails being encrypted for sender, not receiver) in Microsoft Outlook for Microsoft 365 MSO (16.0.13628.20234) 64-bit using S/MIME
I am trying to setup email encryption functionality.
I have created my own CA, 2 PFX certificates, and have signed the PFX certificates with the CA certificate.
The setup on both machines seem to be ...
- 101
2
votes
0
answers
68
views
Can I use my own driver on Windows without having to ask MS for permission while keeping Secure Boot on?
As per the subject :
I want to write my own kernel mode driver
I want to be able to use it with Secure Boot on
I don't want to ask for permission to use it (no WHQL testing or attestation signing)
...
- 133
3
votes
3
answers
2k
views
Why Outlook client's S/MIME settings use SHA1 as the default Hash Algorithm for digital signing a message?
can someone tell why Outlook client S/MIME settings use SHA1 as the default Hash Algorithm?
Doesn't that put the certificate private key to a risk when weak algorithm is used? Or am I ...
- 31
0
votes
1
answer
868
views
Libre Office Sign a PDF with PGP key
I'm currently facing an issue with the "Sign" feature of Libre Office. I can digital sign my ODT files without a problem. That means I can select my pgp key in the list of keys and sign the ...
- 11
0
votes
1
answer
757
views
Verifying Veracrypt's public key
I execute the following command, as discussed in several sites:
gpg --with-fingerprint VeraCrypt_PGP_public_key.asc
Against current key here VeraCrypt download
The output I receive is as follows:
gpg:...
- 135
0
votes
1
answer
843
views
Is it possible to download electronically signed document with a signature on it?
I am sorry if this is a wrong place to ask this. If it is, redirect me to the right site.
A document is electronically signed and sent me in .asice file. I managed to open the document via my ...
- 101
1
vote
1
answer
1k
views
How to verify a gpg-signed file against a specific public key?
Background information: I have a directory full of files and detached .asc signatures. I also have my default keyring which includes many public keys of people (some of whom I trust and others I don't)...
- 152
3
votes
1
answer
10k
views
What does the check mark `Lock document after signing` do in Acrobat Reader?
I need to sign PDF documents with the Acrobat Reader DC (V19, Win10).
What consequences does the check mark Lock document after signing specifically have? This is what I checked/got so far (partly ...
- 9,461
0
votes
1
answer
2k
views
Is my QUBES-OS master signing key right or wrong?
i just tried to verify my Qubes Master Signing Key with this description:
https://www.qubes-os.org/security/verifying-signatures/#1-get-the-qubes-master-signing-key-and-verify-its-authenticity
I ...
- 1
1
vote
0
answers
1k
views
OpenSSL Digital Signature with ES256
I am trying to reproduce a valid signature for the JSON Web Token.
I make the privat key with: openssl ecparam -genkey -name prime256v1 -noout -out private.pem
also convert this from Pem to P8 with: ...
- 11
0
votes
1
answer
390
views
Device Driver Signing on Windows 10
I am not Windows users so I need some help with driver digital signature enforcement in windows 10 64 bits.
1) I have device driver which according Windows 10 doesn't have digital signature.
When I ...
8
votes
1
answer
1k
views
How to verify an email signature from Facebook?
Facebook allows users
to add OpenPGP public keys to their profile; these keys can be used to "end-to-end" encrypt notification emails sent from Facebook to your preferred email accounts. – ...
- 221
0
votes
1
answer
2k
views
Secure Boot - Custom signed bootloader
Through Secure Boot on Windows 10, I am trying to make it so that only a bootloader signed with my private key can boot on a machine. This means that even if someone else comes along with a Microsoft ...
- 111
0
votes
1
answer
133
views
Word Signature Line: not all certificates from certmgr.msc/Personal/Certificates selectable?
In Microsoft Word you can add a signature line to a document. It is an item inside the document that initially looks like this:
Once you've added that signature line to the document you can double ...
- 139
0
votes
2
answers
11k
views
How to add multiple digital signatures to an Excel spreadsheet?
I have an Excel spreadsheet that lives on a shared folder, that everybody can access. On that spreadsheet, I have a worksheet with a list of tasks that have to be completed, but not necessarily by the ...
- 195
0
votes
0
answers
864
views
unknown tag 26 encountered bouncy castle exception
unknown tag 26 encountered
at org.bouncycastle.asn1.ASN1InputStream.buildObject(Unknown Source)
at org.bouncycastle.asn1.ASN1InputStream.readObject(Unknown Source)
at org.bouncycastle.asn1....
0
votes
0
answers
52
views
Understanding an email with no SPF, DKIM, or DMARC but is has a valid digital signature
Can someone explain in simple terms what does it mean, that an email has no SPF, DKIM, or DMARC (from what I read and understood is that this email is likely to end up as as spam or rejected by the ...
- 75
0
votes
1
answer
154
views
Combine excel and keep signature line
I'm doing an excel and SharePoint project where I provide user with an excel file with a Microsoft signature line that user review and sign. These are separate files for each user and the files are ...
3
votes
1
answer
2k
views
Sign only using GpgOL in Outlook
I currently have the Outlook plugging GpgOL which lets me encrypt/sign emails using an OpenPGP encryption key.
Is it possible to somehow remove the encryption option or somehow hide the encryption ...
- 1,700
4
votes
2
answers
6k
views
How to fake handwriting on pdf without printer and scanner?
Bureaucracy sometimes requires us to print a document,
fill in blank fields, sign it, scan it and send it back.
Is there an easy way to fool the bureaucrats
when no printer or scanner are available?
...
- 231
1
vote
2
answers
3k
views
Windows 10 Driver(without hardware device) with Error 39, 0xc0000603, Certificate Revoked
Well, the driver was signed by EV Signing Certificate and Microsoft Windows Hardware Compatibility Publisher(WHLK\WHQL)
With Secure Boot on Win 10 machine, I got the error code 39(Windows cannot ...
- 13
11
votes
1
answer
2k
views
How can I verify that a Windows XP POS operating system executable is authentic?
I have a 3rd party firewall that alerted me that msiexec.exe was replaced by another version. The timing didn't correspond to an OS update, so I was worried a bad actor replaced the exe. How can I ...
- 483
0
votes
2
answers
59
views
Issues understanding CA certificates
I have misconceptions regarding CA (Certificate Authority) certificates. No matter how many things I read, it is still not fully clear.
Let's take an example, Bob accesses a website. In order for ...
- 193
2
votes
0
answers
2k
views
Windows 10 - Different methods to disable driver signature check and their realations
For Windows 10
I am examining different methods to monitor the disabling of "driver signature check". From a search online I found 3 main method:
from administrator cmd run:
bcdedit.exe -set ...
- 245
0
votes
2
answers
860
views
gpg-zip using secret key sign a zip
I have the following problem.
I created a Key-Pair with Thunderbird (Engimail), then I exported the asc file, and importet it in the git bash to gpg.
Now I need to sign a zip.
Using the command:
...
- 153
1
vote
2
answers
341
views
How to create GlobalSign Timestamp Digest?
I am attempting to use the Global Sign Digital Signing Service API to sign a PDF document. I have received some of their documentation. But I am unable to understand their request to provide a "digest"...
- 121
4
votes
3
answers
4k
views
Digitally signed driver not verified by Windows (Code 52)
I am installing the I2CTools USB-to-I2C Elite driver for Win 10 x64, but I got a dialog saying ”Jungo Connectivity: a digitally signed driver is required.”
In device manager the two drivers ...
- 153
0
votes
1
answer
612
views
Signing a message with a SmartCard / Yubikey
So I've gone through a pretty bog-standard GPG-key-setup process, and then used addtokey to move said keys onto a Yubikey 4.
Now, on a fresh setup, I want to try and use those keys, to sign something....
- 2,325