Questions tagged [digital-signatures]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
0answers
87 views

Signed Installer Downloads Unsigned Executable

Context: I'm designing a deployment process for a Windows 10 desktop application that will run on client machines. There are two programs: an app and an installer which downloads and installs the app. ...
-1
votes
1answer
22 views

What is signature in a packet payload?

What is a signature in a packet payload? Why are they even necessary ? Also traffic classifiers use signature to detect the type of protocol of packet like there are regular expressions for http ...
2
votes
1answer
59 views

Install not signed driver in Windows 2019 with no prompt

I want to install the not signed driver in the Azure DevOps pipeline (windows-2019 image). Driver is in the form of the .inf file. On the local machine i am using the following command: pnputil -i -a ...
1
vote
1answer
138 views

extract timestamp from p7s(signature file)

I am looking to find out how to extract the time stamp information (when the file is signed) from p7s file. I am currently extracting the time stamp through asn1parse and using the string (id-smime-aa-...
0
votes
1answer
81 views

number of crl certificate(s) or pem certificate(s) present in p7s file

Q. How can we find out the number of CRL files or number of PEM files that can be generated from a P7S file? I understand ( from here ) that the data that is contained in a P7S file is nothing but the ...
0
votes
1answer
196 views

powershell signed script does not run in different domain

so I managed to sign a powershell script using this nice tutorial https://www.darkoperator.com/blog/2013/3/5/powershell-basics-execution-policy-part-1.html I have one script signed and it works fine ...
0
votes
0answers
45 views

Simplest way to sign headers with a shared secret?

I have a situation where we usually use CIDR block based allow-listing in an application config, but recently we've onboarded some clients whose IPs can't be static (or confined to a particular range, ...
0
votes
0answers
110 views

Use Signature verification Certificate for ADFS SSO in .net 4.5 application

We are developing and hosting a .net application that is required by our client to use SSO with ADFS. The application is claims-aware and we have configured it to use the ADFS server provided by the ...
0
votes
1answer
552 views

Requirements for certificates to sign PDFs in Adobe Reader?

I'm trying to set up PDF digital signatures using certificates generated by openssl. I have generated a CA certificate, and used that to sign end user certificates, which I archive in PKCS#12 format. ...
0
votes
0answers
40 views

Convert mycert.cer root.cer and ca.cer into p12 file with openssl

I purchase a certificate to sign PDF from a supplier. They delivered 3 files: mycert.cer, ca.cer and root.cer. I need to create a p12 file from it. But i have no success doing this. I tried: openssl ...
0
votes
1answer
25 views

Can MS AD Certificate Services maintain both public and private keys in active directory?

Is there enough control over AD user properties to have custom fields (one with only SELF having read permissions) and with Certificate Services to automatically maintain/auto-renew certificates and ...
0
votes
1answer
2k views

gpg: no valid OpenPGP data found [closed]

I am trying to make sense of the following two serverfault posts: How to verify a file using an asc signature file? and gpg --import bind-9.9.4.tar.gz.sha1.asc fails with no valid OpenPGP data ...
1
vote
2answers
77 views

Digital Signatures Using Entreprise PKI

We are a global entreprise with thousands of employees worldwide. We have our own PKI infrastructure which is trusted internally by our systems but unknown externally. We sign contrats with our ...
0
votes
0answers
72 views

Azure - disable all web server signatures

We recently had a penetration test and they recommended that we disable all web server signatures. We have one external facing IP address and all our servers running in Azure. I am new to azure ...
0
votes
0answers
272 views

Digital signing certificate for SOAP

I'm calling a third-party Web Service with SOAP requests. This service requires me to to sign my SOAP requests digitally. Regarding to How to buy a X.509 certificate for signing digital payloads ...
0
votes
1answer
713 views

What are the best practices for providing S/MIME-Certificates in Outlook?

I got some questions regarding S/MIME in Outlook and certificates in general. Some questions arrised about the possibility to digitally sign emails in my company. As I'm new to the topic I had to do ...
2
votes
1answer
1k views

What is the best practice for logs integrity and authenticity?

We have hundreds of workstations, tens of servers, sending logs to a syslog server or Windows Event Collector server whether they come from Linux or Windows machines. At this point, logs integrity and ...
0
votes
1answer
167 views

rhel7 yum repository metadata GPG signatures

I'm trying to sign yum repo metadata using GPG, as part of a Jenkins job. This is proving more difficult than I first imagined, but I'm sure lots of people must have done this already. I've worked ...
0
votes
1answer
66 views

How to view signatures fulfilling the “Authroized Signatures” option in a Smart Card Logon certificate from a Windows CA

I'm playing with the Windows Server CA role and Smart Card logons. We have a working PKI setup and smart card issuance/logon working. What I'm curious about is the "Require this number of authorized ...
1
vote
1answer
106 views

Word document signing - extremely long wait verifying signatures

Our users all have Office 2016 (365 subscription version). We have our own internal MS certificate authority with signing certificates issued to each user. I have a document in Word with 2 signature ...
27
votes
2answers
32k views

How to verify a file using an asc signature file?

As an example, this project offers an *.asc file with a PGP signature to verify the contents of the download (as opposed to a checksum, you can see the empty column): https://ossec.github.io/downloads....
4
votes
2answers
4k views

How to verify signature on a file using OpenSSL with custom engine

Update Dec 28, 2017 – 3: The author of OpenSSL DSTU module kindly provided patch to OpenSSL+DSTU implementation with a fix for the issue, and assisted further. I was able to accomplish what I need ...
4
votes
1answer
1k views

Let's Encrypt: Why is DNS challenge static? [closed]

To my understanding, LetsEncrypt DNS verification works by setting a static TXT record into DNS (basically just a nonce) which is then checked by the LetsEncrypt servers. When I first heard about it ...
1
vote
2answers
933 views

Opendkim doesn't sign emails sending from external clients

I've setup opendkim with my sendmail and it looks like everything works correctly, but it signs only those messages that sent locally (from webmail client or automatic subscriptions). when I try to ...
2
votes
0answers
77 views

How can I get the new, stricter driver signing policy from Windows 10 1607 to apply to upgraded installations?

In Windows 10 1607 (Anniversary Update), Microsoft rolled out a new, stricter driver signing policy that requires drivers to be signed by Microsoft through the Dev Portal. Cross-signed drivers are no ...
7
votes
2answers
304 views

How to ensure integrity and security enforcing signed unmodified RPM package?

There is a way to verify files related to specific package against original RPM content: # Verify `vsftpd` package. rpm -V vsftpd How to complete the chain and verify that rpm command itself hasn't ...
0
votes
1answer
623 views

Central Digital ID O365 (Exchange Online)

Is there any way to define and deploy a Digital ID for all users centrally? We`re using Exchange Online. As of now I only see the possibility to open Outlook for every user and apply for a Digital ID....
4
votes
2answers
2k views

How do I identify an Authenticode timestamp vs. an RFC 3161 compliant timestamp?

When signing code with Microsoft's Signtool, there are a couple different options when specifying a timestamp URL, /t and /tr. /t can specify an Authenticode timestamp URL and /tr is supposed to be ...
0
votes
1answer
223 views

Easy way of checking signature of a source package from the other release of debian

I'm trying to backport nanomsg from jessie to squeeze. But when I run: dget http://http.debian.net/debian/pool/main/n/nanomsg/nanomsg_0.4~beta+dfsg-3.dsc It says: dscverify: nanomsg_0.4~beta+dfsg-3....
-4
votes
2answers
59 views

About digital signatures. Are they really secure? [closed]

Let's suppose I want to send you an encrypted and signed message, to demonstrating authenticity and integrity, together with the natural security of asymmetric key cryptography. The procedure is, if I'...
6
votes
1answer
15k views

Bad signatures or NOKEY errors on RPMs I just signed

I'm having serious problems getting RPM signing working for RHEL / CentOS 5 hosts. TL;DR: RPM signing isn't working, and it's working in a variety of insane and erratic ways depending on the exact ...
3
votes
2answers
536 views

Does Hyper-V support digital signatures with VHD disk files?

Does Hyper-V provide a mechanism (like ESX/vSphere) to identify digitally signed VHD files? Is it even possible to sign a VHD file? Background: I am trying to provide a virtual appliance to my ...
-2
votes
1answer
2k views

Using DKIM in my server for multiple domains (websites)

As I couldn't find this exact tutorial in Stack, I share my findings with al of you. I always get things solved thanks to this comunity. Thanks! Original question: I've read the tutorial posted by ...
5
votes
1answer
4k views

How does one configure Windows not to execute tampered binaries?

To illustrate the benefits of digitally signing certificates, I wrote an .NET executable "demo.exe" which calls a function in "demo.core.dll". I digitally signed both executables. When executed, it ...
0
votes
1answer
379 views

.NET Window Service won't start when Signed with PFX file Windows Server 2012

I've successfully installed my Windows Service on a Server 2012 environment. It starts and works without issue when the Service executable is not signed. When I apply a PFX signing to the Service, it ...
2
votes
1answer
2k views

Code signing certificate not available to sign macros

We are trying to give one of our user the ability to sign his macros in Excel with a certificate issued by Certficate Authority. The Certificate Authority role is installed on the Domain Controller ...
2
votes
1answer
848 views

How to disable signature prompt for third-party provider in Microsoft Word?

In Microsoft Word if you click on Insert> SignatureLine, you will see this message: We provided our client the ability to sign their document via certificates automatically genereated using our ...
-1
votes
2answers
3k views

how to sign a binary in Linux? [closed]

I have a Linux device that needs to be able to perform a software update of some binaries that may be coming from an insecure source I'd like to find a way to sign these binaries using a public/...
4
votes
1answer
2k views

RemoteApp shows no certificate available but RD Session host finds it fine

I am trying to set up remote app for a internal domain. I have a Root CA that is trusted my all of the end computers, that cert has signed a wildcard cert I am trying to use for the server. I added ...
0
votes
4answers
3k views

Is it possible to sign email with digital signature on server side?

I have nice iRedMail server (postfix, dovecot, policyd). One of my client apps sends email via this server. And client want to sign it with digital signature on server side. Is it even possible to do ...
0
votes
2answers
94 views

Support by Microsoft on Unsigned Driver

What is the support of Microsoft about unsigned drivers? They support a System with them? I'm looking for a document with the Windows Policy support and what they said about not drivers.
3
votes
1answer
673 views

Digitally signed FreeBSD package

In nasty world of Windows you can digitally sign installation package (exe) and during installation check if its authentic or not. Any idea how to check same under FreeBSD(preferably in conjunction ...
13
votes
4answers
8k views

Validating signature trust with gpg?

We would like to use gpg signatures to verify some aspects of our system configuration management tools. Additionally, we would like to use a "trust" model where individual sysadmin keys are signed ...
1
vote
1answer
210 views

Digital Certificate - changing encryption algorithm

Sorry if this is a silly question, but I'm new to all these certificates stuff :) Let's say I have a digital certificate issued by my company (for email) with: Signature algorithm: md5RSA Public Key:...
1
vote
2answers
528 views

RPM issues after signing JDK 1.6 64-bit

I'm trying to sign the Java JDK 1.6u21 64-bit RPM on CentOS 5.5 for use with Spacewalk and I'm running into problems. It seems to sign okay, but then when I check the signature it seems to be missing ...
6
votes
2answers
4k views

What are the advantages of DKIM?

After making my server sign outgoing email I started to wonder what the benefits are. This is the opposite of a previously asked question. Naively I see two benefits: We can throw away all emails ...
4
votes
2answers
568 views

Digital signatures and encryption in GMail

I just wonder if there is a way to use SSL certificates or PGP keys for signing my email. At the moment I have to setup S/MIME in Outlook (or another thick client) to send signed messages via SMTP. ...
0
votes
2answers
930 views

Digital signature service for individual users (signing documents)?

The environment is a Windows domain. Windows Server 2003 is the controller and all clients are running WinXP or better. Office 2003 (2007 soon) is used to create most documents. What I'm looking ...