certificates

PKCS11 certificate

Does Dot NET supports PKCS11 certificates for HSM devices. If not, are there any other third party utilities available which supports pkcs11 certificates? ...

iPhone certificate and provisioning...etc on new mac machine?

I had an older mac mini that I had used to register the certifications and....etc. I never really got to the stage for actually using them since i only tested on the iPhone simulator. Today I have a new mac mini, and i am trying to deploy to a device. Is there any gotchas here that im missing with this new mac mini? When i Build & Go t...

Problem registering Push Notifications. HELP!!!

Hello, I've recently started developing iphone applications for a project at school and I've been having some problems testing push notifications. I've read I need to get some SSL certificate from the program portal, but I cannot find the link AppID where I am supposed to get them. Is it really necesary even though I am just starting out...

Looking to build a WPF XBap with full trust, can a purchased certificate get past some of the security issues?

We are developing an application that needs to talk to some hardware (serial port) on the machine, and most of what we do is WPF and .net, so an xbap seems logical. My concern is with the certifcates. I have seen a bunch of people showing how to create and self sign applications, but then the user is required to install that to their m...

Converting a PKCS12 certificate to PEM certificate in .NET and vice versa?

PKCS12 certificate is stored in binary format while PEM certificate is an ASCII file which can be opened and viewed in a text editor. Q1. How can I convert a PEM ceritificate of the form below to a PKCS12 certificate programmatically? -----BEGIN CERTIFICATE----- *****CERTIFICATE DATA***** -----END CERTIFICATE----- -----BEGIN RSA PRIV...

Code signing certificate

Where can I get a free code signing certificate for signing my applications? Ascertia used to give them out for free but apparently they don't anymore. Mine just expired and I'm looking to get another one? Any ideas? ...

Validating a CAcert certificate in C#

I'm currently creating a C# program which will be fetching some data over https from my server. The server in question is using a CAcert certificate (http://www.cacert.org/), and I need a way of validating the servers certificate (checking the Subject and that it is signed by the cacert root certificate). I'd like to do this without hav...

QuickBooks Online Edition - Integration with ASP.NET using client certificate

I want to integrate QuickBooks Online Edition (QBOE) with my web application. I have been able to subscribe, get connection/temp session ticket etc but the only problem is that I am unable to setup the server to use the certificate required by Intuit. It has been almost 3 weeks but I could not find the exact steps to install and POST a Q...

Convert certificate .pem to .der/.cer

Hi, I'm trying convert .pem to .cer using OpenSSL... openssl x509 -inform PEM -in root.pem -outform DER -out root.cer But, I don't know how to install the certificate on IIS 7.0 over Win Server 2008. I read some tutorials about it and tried to install the cert in IIS 7.0 Server Certificates -> complete certificate request -> T...

WSE3003: The certificate's trust chain could not be verified

I am writing a system that consumes a public web service. I'm consuming the web service using VS2008 and classic .NET Framework 2.0 Web Services technology. My problem is not consuming the web service or calling it's operations. The problem is when I get the response back from the operation it is signed and behind-the-scenes the generat...

How do I tell Ruby's OpenSSL library to ignore a self-signed certificate error?

I'm trying to use Ruby's SOAP support as follows: SERVICE_URL = 'https://...' ... def create_driver ::SOAP::WSDLDriverFactory.new(SERVICE_URL).create_rpc_driver driver.options['protocol.http.ssl_config.verify_mode'] = OpenSSL::SSL::VERIFY_NONE driver.options['protocol.http.ssl_config.client_cert'] = @certificate_path driver en...

Could not create SSL/TLS secure channel - Could the problem be a proxy server?

I have a c# app that calls a web service method that authenticates using a certificate. The code works, because when it is installed on server A (without a proxy) it authenticates. When I install the code on server B, at client site, its installed behind a proxy. I've really tried almost everything but I keep getting this error: Coul...

ColdFusion CFHTTP I/O Exception: peer not authenticated - even after adding certs to Keystore

I'm currently working with a payment processor. I can browse to the payment URL from our server, so it's not a firewall issue, but when I try to use CFHTTP I get a I/O Exception: peer not authenticated. I've downloaded and installed their latest security cert into cacerts keystore and restarted CF and am still getting the same error. Not...

Using client certificate not in certificate store

Hello, I'm trying to authenticate myself against WebService using my client certificate, but, for some reasons (I explain), I don't want to load certificate from store, rather read it from disc. The following: // gw is teh WebService client X509Certificate cert = new X509Certificate(PathToCertificate); _gw.ClientCertificates.Add(Clien...

Certificates permission issue

I have certificates stored in the "Personal" section. I guess this ends up being stored in the registry somewhere. Our IIS app gets installed with its own App Pool running under NETWORK SERVICES. What permissions do I need to give NETWORK SERVICES for it to be able to read the certificate? ...

Get list of certificate issuers in Firefox on Linux

I need the ability to automatically check if the current user has a certificate installed from a specific issuer in the Firefox certificate store on Linux. Ideally I'd like to be able to this from outside of Firefox however doing it from a plugin is also an option. The best I've come up with so far involves chaining certutil and grep bu...

WCF client certificate signing : how to?

So I have a WCF service where I have various parts of the service contract with a ProtectionLevel of Sign. I set the credentials on the client side by choosing a certificate from the certificate store. This is fine. However .... Does this client certificate need to be in the 3rd party certificate store on the server for this to work? ...

Converting .PFX to .PEM programmatically ?

I need to programmatically extract certificates and their private keys from a MS certificate store, and get them to the .PEM format somehow. I don't want to use OpenSSL at the command line, as I would like to keep everything in memory, avoiding files. I can export them from Windows to a PFX-format blob using PFXExportCertStoreEx(). I ...

How to find out if user's certificate is about to expire

I have a WebForms app on IIS7 with clients authenticating via certificates. Is there a way to read from client certificate (one on the server or the one that client supplies) to find out when it will expire? How can this be done? I want to prevent user from seeing 403 when it expires and give them the new certificate on time. I underst...

What instructional toy programs do you suggest writing to understand certificates?

I understand better some concepts when I write toy programs for isolated aspects of the problem at hand. For instance, for encryption you can write a program to encrypt and then decrypt a string.. and see that you get the initial string. What toy programs do you suggest that I write to understand certificates? (server/client interaction...