Questions tagged [digital-signatures]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
25 views

Missing "Proceed without enrollment policy" When Generating Certificate Enrollment Policy

I am trying to follow the instructions listed here. But when I get to the step: Select the option to Proceed without enrollment policy > Click Next. I see: No "Proceed without enrollment ...
user avatar
0 votes
1 answer
32 views

How does one configure Windows not to execute tampered binaries on Windows 10

Similar to the question here, how do you configure this for a windows 10 machine so that you can configure Windows not to execute tampered binaries? How does one configure Windows not to execute ...
user avatar
  • 1
0 votes
1 answer
52 views

Outlook: Invalid signature of mixed HTML/Plaintext E-Mails

while testing new security GPOs, i've found the problem that with E-Mails that contain HTML and Plaintext, Outlook always complains about invalid signatures or tempered messages, even though with the ...
user avatar
1 vote
1 answer
335 views

How to get DKIM to sign for both, a subdomain and the root domain addresses?

I'm using latest versions of DKIM + Postfix on Ubuntu 20.04 I got the DKIM to sign the e-mails user@smtpmail.mydoamin.com. However it refuses to sign e-mails that originate from @mydomain.com. Is it ...
user avatar
  • 23
1 vote
0 answers
131 views

Signed Installer Downloads Unsigned Executable

Context: I'm designing a deployment process for a Windows 10 desktop application that will run on client machines. There are two programs: an app and an installer which downloads and installs the app. ...
user avatar
-1 votes
1 answer
56 views

What is signature in a packet payload?

What is a signature in a packet payload? Why are they even necessary ? Also traffic classifiers use signature to detect the type of protocol of packet like there are regular expressions for http ...
user avatar
2 votes
1 answer
342 views

Install not signed driver in Windows 2019 with no prompt

I want to install the not signed driver in the Azure DevOps pipeline (windows-2019 image). Driver is in the form of the .inf file. On the local machine i am using the following command: pnputil -i -a ...
user avatar
1 vote
1 answer
496 views

extract timestamp from p7s(signature file)

I am looking to find out how to extract the time stamp information (when the file is signed) from p7s file. I am currently extracting the time stamp through asn1parse and using the string (id-smime-aa-...
user avatar
  • 115
0 votes
1 answer
251 views

number of crl certificate(s) or pem certificate(s) present in p7s file

Q. How can we find out the number of CRL files or number of PEM files that can be generated from a P7S file? I understand ( from here ) that the data that is contained in a P7S file is nothing but the ...
user avatar
  • 115
0 votes
1 answer
302 views

powershell signed script does not run in different domain

so I managed to sign a powershell script using this nice tutorial https://www.darkoperator.com/blog/2013/3/5/powershell-basics-execution-policy-part-1.html I have one script signed and it works fine ...
user avatar
  • 147
0 votes
1 answer
844 views

Requirements for certificates to sign PDFs in Adobe Reader?

I'm trying to set up PDF digital signatures using certificates generated by openssl. I have generated a CA certificate, and used that to sign end user certificates, which I archive in PKCS#12 format. ...
user avatar
0 votes
0 answers
115 views

Convert mycert.cer root.cer and ca.cer into p12 file with openssl

I purchase a certificate to sign PDF from a supplier. They delivered 3 files: mycert.cer, ca.cer and root.cer. I need to create a p12 file from it. But i have no success doing this. I tried: openssl ...
user avatar
  • 159
0 votes
1 answer
28 views

Can MS AD Certificate Services maintain both public and private keys in active directory?

Is there enough control over AD user properties to have custom fields (one with only SELF having read permissions) and with Certificate Services to automatically maintain/auto-renew certificates and ...
user avatar
2 votes
1 answer
3k views

gpg: no valid OpenPGP data found [closed]

I am trying to make sense of the following two serverfault posts: How to verify a file using an asc signature file? and gpg --import bind-9.9.4.tar.gz.sha1.asc fails with no valid OpenPGP data ...
user avatar
  • 176
1 vote
2 answers
89 views

Digital Signatures Using Entreprise PKI

We are a global entreprise with thousands of employees worldwide. We have our own PKI infrastructure which is trusted internally by our systems but unknown externally. We sign contrats with our ...
user avatar
  • 861
0 votes
0 answers
93 views

Azure - disable all web server signatures

We recently had a penetration test and they recommended that we disable all web server signatures. We have one external facing IP address and all our servers running in Azure. I am new to azure ...
user avatar
  • 1
0 votes
0 answers
371 views

Digital signing certificate for SOAP

I'm calling a third-party Web Service with SOAP requests. This service requires me to to sign my SOAP requests digitally. Regarding to How to buy a X.509 certificate for signing digital payloads ...
user avatar
0 votes
1 answer
1k views

What are the best practices for providing S/MIME-Certificates in Outlook?

I got some questions regarding S/MIME in Outlook and certificates in general. Some questions arrised about the possibility to digitally sign emails in my company. As I'm new to the topic I had to do ...
user avatar
  • 3
3 votes
1 answer
2k views

What is the best practice for logs integrity and authenticity?

We have hundreds of workstations, tens of servers, sending logs to a syslog server or Windows Event Collector server whether they come from Linux or Windows machines. At this point, logs integrity and ...
user avatar
  • 141
0 votes
1 answer
224 views

rhel7 yum repository metadata GPG signatures

I'm trying to sign yum repo metadata using GPG, as part of a Jenkins job. This is proving more difficult than I first imagined, but I'm sure lots of people must have done this already. I've worked ...
user avatar
0 votes
1 answer
84 views

How to view signatures fulfilling the "Authroized Signatures" option in a Smart Card Logon certificate from a Windows CA

I'm playing with the Windows Server CA role and Smart Card logons. We have a working PKI setup and smart card issuance/logon working. What I'm curious about is the "Require this number of authorized ...
user avatar
1 vote
1 answer
121 views

Word document signing - extremely long wait verifying signatures

Our users all have Office 2016 (365 subscription version). We have our own internal MS certificate authority with signing certificates issued to each user. I have a document in Word with 2 signature ...
user avatar
  • 17.2k
32 votes
2 answers
45k views

How to verify a file using an asc signature file?

As an example, this project offers an *.asc file with a PGP signature to verify the contents of the download (as opposed to a checksum, you can see the empty column): https://ossec.github.io/downloads....
user avatar
4 votes
2 answers
4k views

How to verify signature on a file using OpenSSL with custom engine

Update Dec 28, 2017 – 3: The author of OpenSSL DSTU module kindly provided patch to OpenSSL+DSTU implementation with a fix for the issue, and assisted further. I was able to accomplish what I need ...
user avatar
  • 221
4 votes
1 answer
1k views

Let's Encrypt: Why is DNS challenge static? [closed]

To my understanding, LetsEncrypt DNS verification works by setting a static TXT record into DNS (basically just a nonce) which is then checked by the LetsEncrypt servers. When I first heard about it ...
user avatar
  • 538
2 votes
2 answers
1k views

Opendkim doesn't sign emails sending from external clients

I've setup opendkim with my sendmail and it looks like everything works correctly, but it signs only those messages that sent locally (from webmail client or automatic subscriptions). when I try to ...
user avatar
  • 175
2 votes
0 answers
79 views

How can I get the new, stricter driver signing policy from Windows 10 1607 to apply to upgraded installations?

In Windows 10 1607 (Anniversary Update), Microsoft rolled out a new, stricter driver signing policy that requires drivers to be signed by Microsoft through the Dev Portal. Cross-signed drivers are no ...
user avatar
  • 4,285
7 votes
2 answers
324 views

How to ensure integrity and security enforcing signed unmodified RPM package?

There is a way to verify files related to specific package against original RPM content: # Verify `vsftpd` package. rpm -V vsftpd How to complete the chain and verify that rpm command itself hasn't ...
user avatar
  • 847
0 votes
1 answer
671 views

Central Digital ID O365 (Exchange Online)

Is there any way to define and deploy a Digital ID for all users centrally? We`re using Exchange Online. As of now I only see the possibility to open Outlook for every user and apply for a Digital ID....
user avatar
4 votes
2 answers
2k views

How do I identify an Authenticode timestamp vs. an RFC 3161 compliant timestamp?

When signing code with Microsoft's Signtool, there are a couple different options when specifying a timestamp URL, /t and /tr. /t can specify an Authenticode timestamp URL and /tr is supposed to be ...
user avatar
0 votes
1 answer
253 views

Easy way of checking signature of a source package from the other release of debian

I'm trying to backport nanomsg from jessie to squeeze. But when I run: dget http://http.debian.net/debian/pool/main/n/nanomsg/nanomsg_0.4~beta+dfsg-3.dsc It says: dscverify: nanomsg_0.4~beta+dfsg-3....
user avatar
  • 1,755
-4 votes
2 answers
60 views

About digital signatures. Are they really secure? [closed]

Let's suppose I want to send you an encrypted and signed message, to demonstrating authenticity and integrity, together with the natural security of asymmetric key cryptography. The procedure is, if I'...
user avatar
6 votes
1 answer
16k views

Bad signatures or NOKEY errors on RPMs I just signed

I'm having serious problems getting RPM signing working for RHEL / CentOS 5 hosts. TL;DR: RPM signing isn't working, and it's working in a variety of insane and erratic ways depending on the exact ...
user avatar
  • 10.5k
3 votes
2 answers
603 views

Does Hyper-V support digital signatures with VHD disk files?

Does Hyper-V provide a mechanism (like ESX/vSphere) to identify digitally signed VHD files? Is it even possible to sign a VHD file? Background: I am trying to provide a virtual appliance to my ...
user avatar
  • 33
-2 votes
1 answer
2k views

Using DKIM in my server for multiple domains (websites)

As I couldn't find this exact tutorial in Stack, I share my findings with al of you. I always get things solved thanks to this comunity. Thanks! Original question: I've read the tutorial posted by ...
user avatar
  • 145
6 votes
1 answer
5k views

How does one configure Windows not to execute tampered binaries?

To illustrate the benefits of digitally signing certificates, I wrote an .NET executable "demo.exe" which calls a function in "demo.core.dll". I digitally signed both executables. When executed, it ...
user avatar
  • 462
0 votes
1 answer
397 views

.NET Window Service won't start when Signed with PFX file Windows Server 2012

I've successfully installed my Windows Service on a Server 2012 environment. It starts and works without issue when the Service executable is not signed. When I apply a PFX signing to the Service, it ...
user avatar
  • 101
2 votes
1 answer
2k views

Code signing certificate not available to sign macros

We are trying to give one of our user the ability to sign his macros in Excel with a certificate issued by Certficate Authority. The Certificate Authority role is installed on the Domain Controller ...
user avatar
2 votes
1 answer
880 views

How to disable signature prompt for third-party provider in Microsoft Word?

In Microsoft Word if you click on Insert> SignatureLine, you will see this message: We provided our client the ability to sign their document via certificates automatically genereated using our ...
user avatar
-1 votes
2 answers
3k views

how to sign a binary in Linux? [closed]

I have a Linux device that needs to be able to perform a software update of some binaries that may be coming from an insecure source I'd like to find a way to sign these binaries using a public/...
user avatar
  • 657
4 votes
1 answer
2k views

RemoteApp shows no certificate available but RD Session host finds it fine

I am trying to set up remote app for a internal domain. I have a Root CA that is trusted my all of the end computers, that cert has signed a wildcard cert I am trying to use for the server. I added ...
user avatar
0 votes
4 answers
4k views

Is it possible to sign email with digital signature on server side?

I have nice iRedMail server (postfix, dovecot, policyd). One of my client apps sends email via this server. And client want to sign it with digital signature on server side. Is it even possible to do ...
user avatar
  • 5,110
0 votes
2 answers
97 views

Support by Microsoft on Unsigned Driver

What is the support of Microsoft about unsigned drivers? They support a System with them? I'm looking for a document with the Windows Policy support and what they said about not drivers.
user avatar
3 votes
1 answer
704 views

Digitally signed FreeBSD package

In nasty world of Windows you can digitally sign installation package (exe) and during installation check if its authentic or not. Any idea how to check same under FreeBSD(preferably in conjunction ...
user avatar
14 votes
4 answers
8k views

Validating signature trust with gpg?

We would like to use gpg signatures to verify some aspects of our system configuration management tools. Additionally, we would like to use a "trust" model where individual sysadmin keys are signed ...
user avatar
  • 40.4k
1 vote
1 answer
215 views

Digital Certificate - changing encryption algorithm

Sorry if this is a silly question, but I'm new to all these certificates stuff :) Let's say I have a digital certificate issued by my company (for email) with: Signature algorithm: md5RSA Public Key:...
user avatar
  • 123
1 vote
2 answers
533 views

RPM issues after signing JDK 1.6 64-bit

I'm trying to sign the Java JDK 1.6u21 64-bit RPM on CentOS 5.5 for use with Spacewalk and I'm running into problems. It seems to sign okay, but then when I check the signature it seems to be missing ...
user avatar
6 votes
2 answers
4k views

What are the advantages of DKIM?

After making my server sign outgoing email I started to wonder what the benefits are. This is the opposite of a previously asked question. Naively I see two benefits: We can throw away all emails ...
user avatar
  • 63
4 votes
2 answers
574 views

Digital signatures and encryption in GMail

I just wonder if there is a way to use SSL certificates or PGP keys for signing my email. At the moment I have to setup S/MIME in Outlook (or another thick client) to send signed messages via SMTP. ...
user avatar
  • 720
0 votes
2 answers
1k views

Digital signature service for individual users (signing documents)?

The environment is a Windows domain. Windows Server 2003 is the controller and all clients are running WinXP or better. Office 2003 (2007 soon) is used to create most documents. What I'm looking ...
user avatar
  • 4,928