Questions tagged [digital-signatures]
The digital-signatures tag has no usage guidance.
52
questions
0
votes
0
answers
36
views
Logging hash of signed PowerShell-Scripts
I use signed PowerShell scripts within my infrastructure and log all PowerShell activity via Windows EventLog. Sadly it seem that windows does not log a hash or fingerprint of signed scripts or even ...
1
vote
1
answer
2k
views
Broken Signature Prevents Update of the Firmware on HPE Gen10
A HPE Gen10 server could not update from ILO 5 version 2.10 to the current one.
I tried the ILO webinterface and the local update function.
The signature was not correct. Even after manually ...
- 406
0
votes
1
answer
561
views
Missing "Proceed without enrollment policy" When Generating Certificate Enrollment Policy
I am trying to follow the instructions listed here. But when I get to the step:
Select the option to Proceed without enrollment policy > Click Next.
I see:
No "Proceed without enrollment ...
- 215
0
votes
1
answer
49
views
How does one configure Windows not to execute tampered binaries on Windows 10
Similar to the question here, how do you configure this for a windows 10 machine so that you can configure Windows not to execute tampered binaries?
How does one configure Windows not to execute ...
- 1
0
votes
1
answer
129
views
Outlook: Invalid signature of mixed HTML/Plaintext E-Mails
while testing new security GPOs, i've found the problem that with E-Mails that contain HTML and Plaintext, Outlook always complains about invalid signatures or tempered messages, even though with the ...
1
vote
2
answers
1k
views
How to get DKIM to sign for both, a subdomain and the root domain addresses?
I'm using latest versions of DKIM + Postfix on Ubuntu 20.04
I got the DKIM to sign the e-mails [email protected]. However it refuses to sign e-mails that originate from @mydomain.com. Is it ...
- 23
1
vote
0
answers
198
views
Signed Installer Downloads Unsigned Executable
Context:
I'm designing a deployment process for a Windows 10 desktop application that will run on client machines. There are two programs: an app and an installer which downloads and installs the app. ...
- 111
-1
votes
1
answer
315
views
What is signature in a packet payload?
What is a signature in a packet payload?
Why are they even necessary ?
Also traffic classifiers use signature to detect the type of protocol of packet like there are regular expressions for http ...
2
votes
1
answer
927
views
Install not signed driver in Windows 2019 with no prompt
I want to install the not signed driver in the Azure DevOps pipeline (windows-2019 image).
Driver is in the form of the .inf file. On the local machine i am using the following command:
pnputil -i -a ...
- 21
2
votes
1
answer
1k
views
extract timestamp from p7s(signature file)
I am looking to find out how to extract the time stamp information (when the file is signed) from p7s file.
I am currently extracting the time stamp through asn1parse and using the string (id-smime-aa-...
- 125
0
votes
1
answer
620
views
number of crl certificate(s) or pem certificate(s) present in p7s file
Q. How can we find out the number of CRL files or number of PEM files that can be generated from a P7S file?
I understand ( from here ) that the data that is contained in a P7S file is nothing but the ...
- 125
0
votes
1
answer
441
views
powershell signed script does not run in different domain
so I managed to sign a powershell script using this nice tutorial
https://www.darkoperator.com/blog/2013/3/5/powershell-basics-execution-policy-part-1.html
I have one script signed and it works fine ...
- 147
0
votes
1
answer
1k
views
Requirements for certificates to sign PDFs in Adobe Reader?
I'm trying to set up PDF digital signatures using certificates generated by openssl. I have generated a CA certificate, and used that to sign end user certificates, which I archive in PKCS#12 format. ...
0
votes
0
answers
2k
views
Convert mycert.cer root.cer and ca.cer into p12 file with openssl
I purchase a certificate to sign PDF from a supplier. They delivered 3 files: mycert.cer, ca.cer and root.cer. I need to create a p12 file from it. But i have no success doing this.
I tried:
openssl ...
- 179
0
votes
1
answer
31
views
Can MS AD Certificate Services maintain both public and private keys in active directory?
Is there enough control over AD user properties to have custom fields (one with only SELF having read permissions) and with Certificate Services to automatically maintain/auto-renew certificates and ...
- 152
2
votes
1
answer
5k
views
gpg: no valid OpenPGP data found [closed]
I am trying to make sense of the following two serverfault posts:
How to verify a file using an asc signature file?
and
gpg --import bind-9.9.4.tar.gz.sha1.asc fails with no valid OpenPGP data ...
- 198
1
vote
2
answers
91
views
Digital Signatures Using Entreprise PKI
We are a global entreprise with thousands of employees worldwide. We have our own PKI infrastructure which is trusted internally by our systems but unknown externally.
We sign contrats with our ...
- 881
0
votes
0
answers
104
views
Azure - disable all web server signatures
We recently had a penetration test and they recommended that we disable all web server signatures. We have one external facing IP address and all our servers running in Azure.
I am new to azure ...
- 1
0
votes
0
answers
472
views
Digital signing certificate for SOAP
I'm calling a third-party Web Service with SOAP requests. This service requires me to to sign my SOAP requests digitally. Regarding to How to buy a X.509 certificate for signing digital payloads ...
0
votes
1
answer
2k
views
What are the best practices for providing S/MIME-Certificates in Outlook?
I got some questions regarding S/MIME in Outlook and certificates in general. Some questions arrised about the possibility to digitally sign emails in my company. As I'm new to the topic I had to do ...
- 3
3
votes
1
answer
2k
views
What is the best practice for logs integrity and authenticity?
We have hundreds of workstations, tens of servers, sending logs to a syslog server or Windows Event Collector server whether they come from Linux or Windows machines. At this point, logs integrity and ...
- 141
0
votes
1
answer
311
views
rhel7 yum repository metadata GPG signatures
I'm trying to sign yum repo metadata using GPG, as part of a Jenkins job. This is proving more difficult than I first imagined, but I'm sure lots of people must have done this already.
I've worked ...
0
votes
1
answer
103
views
How to view signatures fulfilling the "Authroized Signatures" option in a Smart Card Logon certificate from a Windows CA
I'm playing with the Windows Server CA role and Smart Card logons. We have a working PKI setup and smart card issuance/logon working. What I'm curious about is the "Require this number of authorized ...
1
vote
1
answer
138
views
Word document signing - extremely long wait verifying signatures
Our users all have Office 2016 (365 subscription version). We have our own internal MS certificate authority with signing certificates issued to each user.
I have a document in Word with 2 signature ...
- 17.9k
37
votes
2
answers
59k
views
How to verify a file using an asc signature file?
As an example, this project offers an *.asc file with a PGP signature to verify the contents of the download (as opposed to a checksum, you can see the empty column): https://ossec.github.io/downloads....
- 483
5
votes
2
answers
5k
views
How to verify signature on a file using OpenSSL with custom engine
Update Dec 28, 2017 – 3:
The author of OpenSSL DSTU module kindly provided patch to OpenSSL+DSTU implementation with a fix for the issue, and assisted further.
I was able to accomplish what I need ...
- 231
5
votes
1
answer
1k
views
Let's Encrypt: Why is DNS challenge static? [closed]
To my understanding, LetsEncrypt DNS verification works by setting a static TXT record into DNS (basically just a nonce) which is then checked by the LetsEncrypt servers.
When I first heard about it ...
- 568
2
votes
2
answers
1k
views
Opendkim doesn't sign emails sending from external clients
I've setup opendkim with my sendmail and it looks like everything works correctly, but it signs only those messages that sent locally (from webmail client or automatic subscriptions). when I try to ...
- 175
2
votes
0
answers
82
views
How can I get the new, stricter driver signing policy from Windows 10 1607 to apply to upgraded installations?
In Windows 10 1607 (Anniversary Update), Microsoft rolled out a new, stricter driver signing policy that requires drivers to be signed by Microsoft through the Dev Portal. Cross-signed drivers are no ...
- 4,430
7
votes
2
answers
370
views
How to ensure integrity and security enforcing signed unmodified RPM package?
There is a way to verify files related to specific package against original RPM content:
# Verify `vsftpd` package.
rpm -V vsftpd
How to complete the chain and verify that rpm command itself hasn't ...
- 897
0
votes
1
answer
733
views
Central Digital ID O365 (Exchange Online)
Is there any way to define and deploy a Digital ID for all users centrally?
We`re using Exchange Online.
As of now I only see the possibility to open Outlook for every user and apply for a Digital ID....
- 1
5
votes
2
answers
3k
views
How do I identify an Authenticode timestamp vs. an RFC 3161 compliant timestamp?
When signing code with Microsoft's Signtool, there are a couple different options when specifying a timestamp URL, /t and /tr.
/t can specify an Authenticode timestamp URL and /tr is supposed to be ...
- 328
0
votes
1
answer
282
views
Easy way of checking signature of a source package from the other release of debian
I'm trying to backport nanomsg from jessie to squeeze. But when I run:
dget http://http.debian.net/debian/pool/main/n/nanomsg/nanomsg_0.4~beta+dfsg-3.dsc
It says:
dscverify: nanomsg_0.4~beta+dfsg-3....
- 2,171
-4
votes
2
answers
63
views
About digital signatures. Are they really secure? [closed]
Let's suppose I want to send you an encrypted and signed message, to demonstrating authenticity and integrity, together with the natural security of asymmetric key cryptography. The procedure is, if I'...
- 499
8
votes
1
answer
17k
views
Bad signatures or NOKEY errors on RPMs I just signed
I'm having serious problems getting RPM signing working for RHEL / CentOS 5 hosts.
TL;DR: RPM signing isn't working, and it's working in a variety of insane and erratic ways depending on the exact ...
- 11.1k
3
votes
2
answers
693
views
Does Hyper-V support digital signatures with VHD disk files?
Does Hyper-V provide a mechanism (like ESX/vSphere) to identify digitally signed VHD files? Is it even possible to sign a VHD file?
Background:
I am trying to provide a virtual appliance to my ...
- 33
-2
votes
1
answer
2k
views
Using DKIM in my server for multiple domains (websites)
As I couldn't find this exact tutorial in Stack, I share my findings with al of you. I always get things solved thanks to this comunity. Thanks!
Original question:
I've read the tutorial posted by ...
- 145
6
votes
1
answer
6k
views
How does one configure Windows not to execute tampered binaries?
To illustrate the benefits of digitally signing certificates, I wrote an .NET executable "demo.exe" which calls a function in "demo.core.dll". I digitally signed both executables. When executed, it ...
- 462
0
votes
1
answer
425
views
.NET Window Service won't start when Signed with PFX file Windows Server 2012
I've successfully installed my Windows Service on a Server 2012 environment.
It starts and works without issue when the Service executable is not signed. When I apply a PFX signing to the Service, it ...
- 101
2
votes
1
answer
2k
views
Code signing certificate not available to sign macros
We are trying to give one of our user the ability to sign his macros in Excel with a certificate issued by Certficate Authority.
The Certificate Authority role is installed on the Domain Controller ...
- 165
2
votes
1
answer
905
views
How to disable signature prompt for third-party provider in Microsoft Word?
In Microsoft Word if you click on Insert> SignatureLine, you will see this message:
We provided our client the ability to sign their document via certificates automatically genereated using our ...
- 61
-1
votes
2
answers
3k
views
how to sign a binary in Linux? [closed]
I have a Linux device that needs to be able to perform a software update of some binaries that may be coming from an insecure source
I'd like to find a way to sign these binaries using a public/...
- 697
4
votes
1
answer
2k
views
RemoteApp shows no certificate available but RD Session host finds it fine
I am trying to set up remote app for a internal domain. I have a Root CA that is trusted my all of the end computers, that cert has signed a wildcard cert I am trying to use for the server.
I added ...
- 1,455
0
votes
4
answers
4k
views
Is it possible to sign email with digital signature on server side?
I have nice iRedMail server (postfix, dovecot, policyd). One of my client apps sends email via this server. And client want to sign it with digital signature on server side. Is it even possible to do ...
- 5,198
0
votes
2
answers
98
views
Support by Microsoft on Unsigned Driver
What is the support of Microsoft about unsigned drivers?
They support a System with them?
I'm looking for a document with the Windows Policy support and what they said about not drivers.
- 2,039
3
votes
1
answer
743
views
Digitally signed FreeBSD package
In nasty world of Windows you can digitally sign installation package (exe) and during installation check if its authentic or not.
Any idea how to check same under FreeBSD(preferably in conjunction ...
- 161
14
votes
4
answers
8k
views
Validating signature trust with gpg?
We would like to use gpg signatures to verify some aspects of our
system configuration management tools. Additionally, we would like to
use a "trust" model where individual sysadmin keys are signed ...
- 43.8k
1
vote
1
answer
218
views
Digital Certificate - changing encryption algorithm
Sorry if this is a silly question, but I'm new to all these certificates stuff :)
Let's say I have a digital certificate issued by my company (for email) with:
Signature algorithm: md5RSA
Public Key:...
- 123
1
vote
2
answers
540
views
RPM issues after signing JDK 1.6 64-bit
I'm trying to sign the Java JDK 1.6u21 64-bit RPM on CentOS 5.5 for use with Spacewalk and I'm running into problems. It seems to sign okay, but then when I check the signature it seems to be missing ...
- 1,071
6
votes
2
answers
4k
views
What are the advantages of DKIM?
After making my server sign outgoing email I started to wonder what the benefits are.
This is the opposite of a previously asked question.
Naively I see two benefits:
We can throw away all emails ...
- 63