Tag Info

Hot answers tagged

5

If you want to make sure the image has not been tampared with, just publish an MD5/SHA checksum, as many others do with such types of downloads. There is nothing built-in to hyper-v


4

You would need to ask Microsoft about the specific case in hand. While I've not had this issue with drivers, my experience has been that they will support a system up to the point where it becomes certain (or at least very highly likely) that the problem area is the unsupported area, at which case it becomes your problem to move back to a supported ...


4

FreeBSD packages are not signed, depending on your environment ports or PBIs might be alternatives. FreeBSD ports include an authentication chain: portsnap verifies signatures for its ports tree updates and all downloaded sources are checked by an SHA digest. The PBI packet system includes some more features, including digital signatures. Addendum: the ...


3

You were on the right track, until "and, obviously, get my private key". There's a lot of mathematics that goes into how the keys operate. The way public/private keypairs work is that with the public key, you can verify the matching private key was used, without ever knowing what the private key is. From having the public key, there's no easy way to ...


3

I figured out that when you tick the Don't show this message again box, and click Ok, this action generate new registry key. This is the path in registery: HKCU\Software\Microsoft\office\14\Common\Signature\SignatureUISettings The key is REG_DWORD and the value is 448( in Decimal). Basically if you make this register key and push it by GPO to the users, ...


3

How do you think that would work? The signature would be invalid the moment the appliance changes anything in the file. No, it is not supported.


3

It needs to be recreated. Public and private keys are made in pairs at the same time.


2

The only real advantage from my perspective is that outgoing emails are just a bit less likely to be flagged as spam. Some legitimate emails can appear to be borderline spam, for all sorts of reasons. In the mail scanners I've seen and used a valid DKIM sig will add a positive (ham) score, which may make all the difference between those emails being flagged ...


2

Gmail S/MIME plugin for firefox.


2

FireGPG can use GnuPG, but I couldn't find any mention of S/MIME.


2

This is what ended up with: #!/bin/sh tmpfile=$(mktemp gpgverifyXXXXXX) trap "rm -f $tmpfile" EXIT gpg --status-fd 3 --verify "$@" 3> $tmpfile || exit 1 egrep -q '^\[GNUPG:] TRUST_(ULTIMATE|FULLY)' $tmpfile This looks for the trust information that gpg outputs on --status-fd. The script exits with an error in the presence of an untrusted signature ...


2

Edit: I forgot AppLocker! http://technet.microsoft.com/en-us/library/dd723683(v=WS.10).aspx Before performing the following procedure, ensure that you created the default rules for the rule collection that is described in Preventing Standard Users from Running Per-user Applications. To allow only signed applications to run 1.To open the Local Security ...


1

It's a cluster of RPM bugs. Not just one bug, or two bugs. A nest of the critters. RPM fails (failed?) to validate signed packages, didn't understand v4 GPG signatures but didn't notice it didn't understand them, didn't understand some key sizes and types but didn't notice it didn't understand that, and also choked on subkeys! This lifesaving blog entry by ...


1

As you may have deduced by now, Windows needs to connect to internet to verify that the signing cert is valid. Since your server has no internet connectivity, it timeouts. A solution for Windows XP is suggested at http://rusanu.com/2009/07/24/fix-slow-application-startup-due-to-code-sign-validation/ For Windows Vista and higher, you may have to refer to ...


1

I think I found where the issue was coming from. The server I have is a Windows Server 2008 Standard, and from Microsoft's documentation it only supports version 1 of certificates. I can create a custom certificate template for code signing, but I can't make this template available to my domain users because custom templates version is either 2 or 3. So I ...


1

PGP/GnuPG is pretty much the standard tool for this.


1

It appears that Remote app requires explicit rights to use it for signing, you can not just use the <All> rights. Changing my cert generation to makecert -pe -n "CN=*.vw.local" -a sha1 -sky signature -ic VetWebCA.cer -iv VetWebCA.pvk -sv VetWebComputerWildcard.pvk -eku 1.3.6.1.5.5.7.3.1,1.3.6.1.5.5.7.3.2 VetWebComputerWildcard.cer solves the issue ...


1

It's possible, using an encryption gateway. Several products are available for Postifx. I've had some experience with Djigzo, works great.


1

Two options come to mind (other than parsing the output). A quick and dirty way would be to run both gpg and gpgv. The first run of gpg would ensure the key was fetched from the keyserver, and then gpgv will give you the return code you want. A more elegant, controlled way (though it would involve more work) would be to use the gpgme library to verify the ...


1

So let me try to split the issue: First issue seems that the key your are testing against is untrusted. gpg -v < test.txt.asc gpg: armor header: Version: GnuPG v1.4.11 (GNU/Linux) gpg: original file name='test.txt' this is a test gpg: Signature made Thu 11 Aug 2011 09:09:35 PM EST using RSA key ID FE1B770E gpg: using PGP trust model gpg: Good ...


1

What you are looking for is a Public Key Infrastructure. Here are the components provided by Microsoft for PKI: •Certificate Authority (CA) •Certificate Revocation Lists (CRL) •Active Directory (AD) – store for certificates •Internet Information Services (IIS) – enrollment – a method of requesting and installing certificates. This is a component Windows ...


1

Have a look at GPG it can sign the documents for you. If you have development skills or put a tender out you could create a front end to this by using an application that manages this for the user or have a central website that authenticates the user and allows them to upload a document that gets digitally signed and email to the appropriate list. There ...



Only top voted, non community-wiki answers of a minimum length are eligible