Questions tagged [digital-signatures]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
12 views

Use Signature verification Certificate for ADFS SSO in .net 4.5 application

We are developing and hosting a .net application that is required by our client to use SSO with ADFS. The application is claims-aware and we have configured it to use the ADFS server provided by the ...
0
votes
0answers
7 views

dpkg-sig a debian/ubuntu package with multiple keys possible?

Is it possible to sign a debian/ubuntu package with multiple keys via dpkg-sig calls? I got the task to setup a signed binary repository for ubuntu. As far as I have seen info, dpkg-sig is used ...
0
votes
0answers
29 views

Will a Qualified Digital Certificate work with existing digital signature applications?

One of my company's products generates a report containing a digital signature. Recently I was asked if the signature can be generated using a European Qualified Digital Certificate without any ...
0
votes
1answer
72 views

Requirements for certificates to sign PDFs in Adobe Reader?

I'm trying to set up PDF digital signatures using certificates generated by openssl. I have generated a CA certificate, and used that to sign end user certificates, which I archive in PKCS#12 format. ...
0
votes
0answers
14 views

Embed e-signature programmatically and generate reports automatically signed

I got a request from my manager to search for any tool that inserts signatures automatically in any generated report from any software. Platforms: We have many softwares developed using multiple ...
0
votes
0answers
19 views

Code Signing Verification Fails for an Application

When I try to verify code signing certificate of an application using Signtool I receive this error: SignTool Error: Signature did not pass crypto policy. I could not find any explanation regarding ...
1
vote
0answers
82 views

How can I purchase a document signing certificate to sign/certify PDFs on AWS? [closed]

I'm working a service that fills/generates/signs PDF documents. Users will draw their signature (or type their name) on a web interface, and then my servers will generate the signed PDF. I would like ...
0
votes
0answers
31 views

Convert mycert.cer root.cer and ca.cer into p12 file with openssl

I purchase a certificate to sign PDF from a supplier. They delivered 3 files: mycert.cer, ca.cer and root.cer. I need to create a p12 file from it. But i have no success doing this. I tried: openssl ...
0
votes
1answer
25 views

Can MS AD Certificate Services maintain both public and private keys in active directory?

Is there enough control over AD user properties to have custom fields (one with only SELF having read permissions) and with Certificate Services to automatically maintain/auto-renew certificates and ...
0
votes
1answer
821 views

gpg: no valid OpenPGP data found [closed]

I am trying to make sense of the following two serverfault posts: How to verify a file using an asc signature file? and gpg --import bind-9.9.4.tar.gz.sha1.asc fails with no valid OpenPGP data ...
0
votes
0answers
102 views

Freeradius ECDSA OpenSSL Configuration

I am trying to use ECDSA cipher suites with my EAP-TLS radius controller, but I have two problems: the server answers fall always in a no common cipher suites; the client certificate is installed on ...
1
vote
1answer
60 views

Digital Signatures Using Entreprise PKI

We are a global entreprise with thousands of employees worldwide. We have our own PKI infrastructure which is trusted internally by our systems but unknown externally. We sign contrats with our ...
0
votes
0answers
47 views

Azure - disable all web server signatures

We recently had a penetration test and they recommended that we disable all web server signatures. We have one external facing IP address and all our servers running in Azure. I am new to azure ...
0
votes
0answers
84 views

Digital signing certificate for SOAP

I'm calling a third-party Web Service with SOAP requests. This service requires me to to sign my SOAP requests digitally. Regarding to How to buy a X.509 certificate for signing digital payloads ...
0
votes
1answer
444 views

What are the best practices for providing S/MIME-Certificates in Outlook?

I got some questions regarding S/MIME in Outlook and certificates in general. Some questions arrised about the possibility to digitally sign emails in my company. As I'm new to the topic I had to do ...
2
votes
1answer
670 views

What is the best practice for logs integrity and authenticity?

We have hundreds of workstations, tens of servers, sending logs to a syslog server or Windows Event Collector server whether they come from Linux or Windows machines. At this point, logs integrity and ...
0
votes
1answer
125 views

rhel7 yum repository metadata GPG signatures

I'm trying to sign yum repo metadata using GPG, as part of a Jenkins job. This is proving more difficult than I first imagined, but I'm sure lots of people must have done this already. I've worked ...
0
votes
1answer
39 views

How to view signatures fulfilling the “Authroized Signatures” option in a Smart Card Logon certificate from a Windows CA

I'm playing with the Windows Server CA role and Smart Card logons. We have a working PKI setup and smart card issuance/logon working. What I'm curious about is the "Require this number of authorized ...
1
vote
1answer
80 views

Word document signing - extremely long wait verifying signatures

Our users all have Office 2016 (365 subscription version). We have our own internal MS certificate authority with signing certificates issued to each user. I have a document in Word with 2 signature ...
16
votes
1answer
20k views

How to verify a file using an asc signature file?

As an example, this project offers an *.asc file with a PGP signature to verify the contents of the download (as opposed to a checksum, you can see the empty column): https://ossec.github.io/downloads....
4
votes
2answers
3k views

How to verify signature on a file using OpenSSL with custom engine

Update Dec 28, 2017 – 3: The author of OpenSSL DSTU module kindly provided patch to OpenSSL+DSTU implementation with a fix for the issue, and assisted further. I was able to accomplish what I need ...
4
votes
1answer
940 views

Let's Encrypt: Why is DNS challenge static? [closed]

To my understanding, LetsEncrypt DNS verification works by setting a static TXT record into DNS (basically just a nonce) which is then checked by the LetsEncrypt servers. When I first heard about it ...
1
vote
2answers
693 views

Opendkim doesn't sign emails sending from external clients

I've setup opendkim with my sendmail and it looks like everything works correctly, but it signs only those messages that sent locally (from webmail client or automatic subscriptions). when I try to ...
2
votes
0answers
76 views

How can I get the new, stricter driver signing policy from Windows 10 1607 to apply to upgraded installations?

In Windows 10 1607 (Anniversary Update), Microsoft rolled out a new, stricter driver signing policy that requires drivers to be signed by Microsoft through the Dev Portal. Cross-signed drivers are no ...
7
votes
2answers
285 views

How to ensure integrity and security enforcing signed unmodified RPM package?

There is a way to verify files related to specific package against original RPM content: # Verify `vsftpd` package. rpm -V vsftpd How to complete the chain and verify that rpm command itself hasn't ...
0
votes
1answer
538 views

Central Digital ID O365 (Exchange Online)

Is there any way to define and deploy a Digital ID for all users centrally? We`re using Exchange Online. As of now I only see the possibility to open Outlook for every user and apply for a Digital ID....
3
votes
2answers
1k views

How do I identify an Authenticode timestamp vs. an RFC 3161 compliant timestamp?

When signing code with Microsoft's Signtool, there are a couple different options when specifying a timestamp URL, /t and /tr. /t can specify an Authenticode timestamp URL and /tr is supposed to be ...
0
votes
1answer
169 views

Easy way of checking signature of a source package from the other release of debian

I'm trying to backport nanomsg from jessie to squeeze. But when I run: dget http://http.debian.net/debian/pool/main/n/nanomsg/nanomsg_0.4~beta+dfsg-3.dsc It says: dscverify: nanomsg_0.4~beta+dfsg-3....
-4
votes
2answers
57 views

About digital signatures. Are they really secure? [closed]

Let's suppose I want to send you an encrypted and signed message, to demonstrating authenticity and integrity, together with the natural security of asymmetric key cryptography. The procedure is, if I'...
6
votes
1answer
14k views

Bad signatures or NOKEY errors on RPMs I just signed

I'm having serious problems getting RPM signing working for RHEL / CentOS 5 hosts. TL;DR: RPM signing isn't working, and it's working in a variety of insane and erratic ways depending on the exact ...
3
votes
2answers
485 views

Does Hyper-V support digital signatures with VHD disk files?

Does Hyper-V provide a mechanism (like ESX/vSphere) to identify digitally signed VHD files? Is it even possible to sign a VHD file? Background: I am trying to provide a virtual appliance to my ...
-1
votes
1answer
2k views

Using DKIM in my server for multiple domains (websites)

As I couldn't find this exact tutorial in Stack, I share my findings with al of you. I always get things solved thanks to this comunity. Thanks! Original question: I've read the tutorial posted by ...
3
votes
1answer
2k views

How does one configure Windows not to execute tampered binaries?

To illustrate the benefits of digitally signing certificates, I wrote an .NET executable "demo.exe" which calls a function in "demo.core.dll". I digitally signed both executables. When executed, it ...
0
votes
1answer
369 views

.NET Window Service won't start when Signed with PFX file Windows Server 2012

I've successfully installed my Windows Service on a Server 2012 environment. It starts and works without issue when the Service executable is not signed. When I apply a PFX signing to the Service, it ...
2
votes
1answer
1k views

Code signing certificate not available to sign macros

We are trying to give one of our user the ability to sign his macros in Excel with a certificate issued by Certficate Authority. The Certificate Authority role is installed on the Domain Controller ...
2
votes
1answer
792 views

How to disable signature prompt for third-party provider in Microsoft Word?

In Microsoft Word if you click on Insert> SignatureLine, you will see this message: We provided our client the ability to sign their document via certificates automatically genereated using our ...
-2
votes
2answers
2k views

how to sign a binary in Linux? [closed]

I have a Linux device that needs to be able to perform a software update of some binaries that may be coming from an insecure source I'd like to find a way to sign these binaries using a public/...
4
votes
1answer
2k views

RemoteApp shows no certificate available but RD Session host finds it fine

I am trying to set up remote app for a internal domain. I have a Root CA that is trusted my all of the end computers, that cert has signed a wildcard cert I am trying to use for the server. I added ...
0
votes
4answers
3k views

Is it possible to sign email with digital signature on server side?

I have nice iRedMail server (postfix, dovecot, policyd). One of my client apps sends email via this server. And client want to sign it with digital signature on server side. Is it even possible to do ...
0
votes
2answers
93 views

Support by Microsoft on Unsigned Driver

What is the support of Microsoft about unsigned drivers? They support a System with them? I'm looking for a document with the Windows Policy support and what they said about not drivers.
4
votes
1answer
648 views

Digitally signed FreeBSD package

In nasty world of Windows you can digitally sign installation package (exe) and during installation check if its authentic or not. Any idea how to check same under FreeBSD(preferably in conjunction ...
13
votes
4answers
7k views

Validating signature trust with gpg?

We would like to use gpg signatures to verify some aspects of our system configuration management tools. Additionally, we would like to use a "trust" model where individual sysadmin keys are signed ...
1
vote
1answer
208 views

Digital Certificate - changing encryption algorithm

Sorry if this is a silly question, but I'm new to all these certificates stuff :) Let's say I have a digital certificate issued by my company (for email) with: Signature algorithm: md5RSA Public Key:...
1
vote
2answers
528 views

RPM issues after signing JDK 1.6 64-bit

I'm trying to sign the Java JDK 1.6u21 64-bit RPM on CentOS 5.5 for use with Spacewalk and I'm running into problems. It seems to sign okay, but then when I check the signature it seems to be missing ...
6
votes
2answers
4k views

What are the advantages of DKIM?

After making my server sign outgoing email I started to wonder what the benefits are. This is the opposite of a previously asked question. Naively I see two benefits: We can throw away all emails ...
4
votes
2answers
560 views

Digital signatures and encryption in GMail

I just wonder if there is a way to use SSL certificates or PGP keys for signing my email. At the moment I have to setup S/MIME in Outlook (or another thick client) to send signed messages via SMTP. ...
0
votes
2answers
831 views

Digital signature service for individual users (signing documents)?

The environment is a Windows domain. Windows Server 2003 is the controller and all clients are running WinXP or better. Office 2003 (2007 soon) is used to create most documents. What I'm looking ...