certificate

Any real downside to using self-issued certs when dealing with known agents?

Hello. I'm setting up a web service which will only be used by a limited number (< 100) of known agents (business partners etc.). Because I am not public facing, do I face any real downside to using self-issued certs as opposed to the much more costly route of using a known CA? Edit: I should clarify that the primary purpose we hope...

How to become MCT

Hi, Are there any MCTs here. Please let us know the path to it. I have done some research on it, but would be interesting to know that from first hands. Or may be someone also wants to pass for MCT can share some experience. I can see in requirements Meet MCT competency requirements for each course they deliver. Administer course ev...

perl Client-SSL-Warning: Peer certificate not verified

I am having trouble with a perl screenscraper to an HTTPS site. In debugging, I ran the following: print $res->headers_as_string; and in the output, I have the following line: Client-SSL-Warning: Peer certificate not verified Is there a way I can auto-accept this certificate, or is that not the problem? #!/usr/bin/perl use LWP::...

Setting Key Usage attributes with Makecert

Is it possible to set Key Usage attributes using makecert, or any other tool I can use to generate my own test certificates? The reason I'm interested is that certificates used for BizTalk Server AS2 transport require a key usage of Digital Signature for signing and Data Encipherment or Key Encipherment for encryption/decryption, and I ...

Load Java KeyStore for one alias?

Does anyone know if it is possible to load a KeyStore so that it only prompts for the password for the given alias? Example: In my key store i have two private keys: Alice's Encryption Certificate and Bob's Encryption Certificate. When i load my key store: keyStore = KeyStore.getInstance("Windows-MY", "SunMSCAPI"); keyStore.load(null...

Advantages of MCT?

Hi, I want to pass for some MS certificates. I found a lot of options. Most of them are clear to me as it was technical stuff. I am interested what you can say about MCT. What are the agvantages of MCT. ...

Certificates for SSL-enabled embedded systems

I have an embedded system that I expect to be in use for the next 15 years or so, and it has an https-based administration console. From what I understand: If I have a self-signed certificate, web browsers will complain. If I have a CA-signed certificate, it will expire fairly soon over the lifetime of the product, and web browsers wi...

Cannot find the X.509 certificate after publishing

I am building a WCF service as in this article and facing trouble with X.509 certificate. When I debug, everything is OK. When I publish and run the application, I receive the error: Cannot find the X.509 certificate using the following search criteria: StoreName 'My', StoreLocation 'CurrentUser', FindType 'FindBySubjectName', FindV...

The HTTP request was forbidden with client authentication scheme 'Anonymous'

I am trying to configure a WCF server\client to work with SSL I get the following exception: The HTTP request was forbidden with client authentication scheme 'Anonymous' I have a self hosted WCF server. I have run hhtpcfg both my client and server certificates are stored under Personal and Trusted People on the Local Machine Here is t...

SSLException: Received fatal alert: certificate_unknown - what does it mean?

Hi, I am getting the "javax.net.ssl.SSLException: Received fatal alert: certificate_unknown" error when attempting to send a HTTPS message. I believe the message is due to the endpoint not recognising the sent certificate or is rejecting it. But I want to be doubly sure this is a server issue and not a local client issue before I go b...

Procedure to renew SSL certificate for custom java web server

Does anyone know the process to renew SSL certificate for custom java web server? ...

Deploy a full trust wpf browser application (XBAP)

Hi everybody, I am building a XBAP application which required to run in a full trust environment. Thus, when using it on browser, the end-user have to install my .pfx file (to certificate my application) or receives the famous "Trust not granted" error. That make a inconvenience. So, I want that everytime the end-user access my xbap app...

Silently import a Certificate into a specific Certificate Store.

Hi. I am attempting to import a Certificate into the Current User -> Personal store using the command line: "importpfx -f [certificate name.p12] -p [password] -t USER -s Personal". It works, but for reasons I don't understand there are now two Personal stores under the Current User, and the imported certificate is in the new Persona...

Install a certficate on a Windows Mobile 5 device Silently

I need to install a certificate on a Windows Mobile device. I have tried creating a cab file to do it, but the cab file fails to run. I have a lot of devices that are not all physically near me that I am going to need to put this on, so any manual process is just not feasible (ie, if it needs active sync then it is not going to work). ...

X509Store.Open fails with "Access is denied" in ASP.NET/Windows 2008

Hi! I'm creating a web application which needs to enumerate certificates in CurrentUser's certificate store. Following is the code snippet I'm using: X509Store store = new X509Store(StoreName.My, StoreLocation.CurrentUser); try { // Open store. Fails with exception. store.Open(OpenFlags.ReadOnly); // Enumerate certificates...

How to generate a client certificate from configuration.svcinfo file

Hi, I am new to WCF and trying to create a WCF client. I created a project in VS 2008 and added the reference of WCF web service and it generated the WSDL,configuration.svcinfo and other relevant files. Now i would like to know how to create the client certificates based on these available files? In the .svcinfo file, i see that there a...

How to specifiy key size in the CertCreateSelfSignCertificate function

I am using the function CertCreateSelfSignCertificate (http://msdn.microsoft.com/en-us/library/aa376039(VS.85).aspx) to generate a certificate. I need to specify the key size to be 2048. I do not see how to provide this parameter. I would appreciate any help in this matter. Thanks. ...

Trusted certificates becomes invalid

In a Sun Glassfish server I have deployed an application that communicates with an external webservice over SSL. I have manually imported certificates in cacerts.jks with java keytool cli (keytool -import -trustcacerts -keystore cacerts.jks -alias somealias -file somecert.cer). I verify that everything works, but then after a longer wh...

Creating n Configuring Exchange n IIS client certificate

Hey Guys, I am trying to install client certificate on our exchange server. I really don't have any experience with client cert. Does anyone have a guide that can help me with setting up client cart? ...

Cheap Code signing to be "Windows 7 compatible"

Hi all, I am currently looking for "Windows 7 compatible" certification, and to get it, you need to implement code signing. Now I look for a cheap certificate, and I found in this thread some cheap alternatives to Verisign certificates. Somewhere one the net I found comments that Microsoft only accepts Verisign certificates. Is this t...