ca

SocketTimeoutException after converting from http to https in android app

旧时模样 提交于 2019-12-06 14:52:30
I am getting some problems after trying to convert my android app to use SSL to transport information between my android app and web server. (SocketTimeOutException) I have bought a Positive SSL certificate from a Certificate Authority (CA) and configured my server to work with it correctly. I have tested it in my web browser and its working correctly. Now I am trying to modify my android app to use https instead of http but as this is the first time I have used https myself, I am a little confused as to what steps I need to implement in the java code. Currently I am working on my settings

Use a particular CA for a SSL connection

房东的猫 提交于 2019-12-06 10:34:52
I'm reading through Support Certificates In Your Applications With The .NET Framework 2.0 trying to determine how to set a CA for a SSL connection. Around half-way down the article under Validating Certificates , MSDN presents some code: static void ValidateCert(X509Certificate2 cert) { X509Chain chain = new X509Chain(); // check entire chain for revocation chain.ChainPolicy.RevocationFlag = X509RevocationFlag.EntireChain; // check online and offline revocation lists chain.ChainPolicy.RevocationMode = X509RevocationMode.Online | X509RevocationMode.Offline; // timeout for online revocation list

Git Clone Fails: Server Certificate Verification Failed

喜欢而已 提交于 2019-12-05 08:18:56
I've been unable to git clone just about any github repo because of this error fatal: unable to access 'github_url': server certificate verification failed. CAfile: /home/ubuntu/.ssh/rel3_dodroot_2048.crt CRLFile: none I've noticed a few other people have had a similar error, but with the certificate in the .ssl folder. I've never seen anyone have this problem with the certificate in the .ssh though, and I have no idea how to fix it. Environment: Nvidia Jetson TX1 running Ubuntu 14.04 Specific Github of Interest (although it happens with all of them) https://github.com/rbgirshick/fast-rcnn.git

Sign new certificates in Rails application

前提是你 提交于 2019-12-04 19:23:09
I have a Rails application with a public REST API which authenticates API clients using SSL client certificates. I would like the app to act as a simple CA. Admin users should be able to visit a page on the site and request a new certificate. The application should generate a new SSL cert, signed with the application's private key, and return it in some form to the admin user. The admin user will then install this cert in client apps. These apps will then be able to use the new cert to access the REST API. What is the easiest way of implementing this? The only way I know of generating and

How to add an enterprise certificate authority (CA) to git on cygwin (and some linux distros)

↘锁芯ラ 提交于 2019-12-04 08:01:01
问题 When fetching with git on Cygwin you get: Fetching origin fatal: unable to access 'https://.../...git': SSL certificate problem: self signed certificate in certificate chain error: Could not fetch origin The certificate was added to /etc/ssl/certs/ca-bundle.crt and other bundle files, but on the next Cygwin update the problem reappeared. 回答1: git-remote-https will read the following files for ca certificates: /etc/ssl/certs/ca-bundle.crt /etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt

R Peer certificate cannot be authenticated with given CA certificates, Windows

故事扮演 提交于 2019-12-04 07:01:08
When trying to import a google sheet using the gs_read() function, I get the following error message: Error in curl::curl_fetch_memory(url, handle = handle) : Peer certificate cannot be authenticated with given CA certificates I am following this vignette and get the error when using the code: oceania <- gap %>% gs_read(ws = "Oceania") I have found similar issues for Ubuntu and php , but nothing that has been able to help me. Does anyone know why I am getting this error and how to fix it? I am using R 3.3.2 and Windows 7. My colleague had the same issue and I stumbled on this post on R

Is there a way to check if the SSL digital certificate is valid without installing on the web server?

▼魔方 西西 提交于 2019-12-04 04:10:52
Are there any tools or mechanism(s) which can help validate a CA issued SSL certificate before installing it on the target web server? Yes, you can use openssl to create a test server for your certificate with the s_server command. This creates a minimal SSL/TLS server that responds to HTTP requests on port 8080: openssl s_server -accept 8080 -www -cert yourcert.pem -key yourcert.key -CAfile chain.pem yourcert.pem is the X.509 certificate, yourcert.key is your private key and chain.pem contains the chain of trust between your certificate and a root certificate. Your CA should have given you

How to set ca-bundle path for OpenSSL in ruby

本秂侑毒 提交于 2019-12-04 00:04:31
I am experiencing a problem in ruby, where an SSL cert could not be validated by OpenSSL. I think this is caused by the ca-bundle.pem not being known by the script. Is there a possibility to configure the path of the ca-bundle.pem manually? OpenSSL uses the SSL_CERT_FILE environment variable. You can set it in your ruby script using something like before the first require which pulls in OpenSSL: ENV['SSL_CERT_FILE'] = '/path/to/ca-bundle.pem' or, if you prefer, you can set the SSL_CERT_FILE environment variable in your OS environment, web server configuration etc depending on your situation.

Import CA signed certificates to JKS

随声附和 提交于 2019-12-03 22:47:44
问题 I got 4 .crt files from a CA as follows, AddTrustExternalCARoot.crt COMODORSADomainValidationSecureServerCA.crt COMODORSAAddTrustCA.crt demo_site_domain.crt second and third are intermediate certificates. I want to import .crt file(s) to wso2carbon.jks store and replace it with the existing jks of a wso2 server as documented here. My problem is, document wants wso2carbon as the alias, but I can import only one certificate using that alias, therefore which .crt file should I import? Or should

How to create own self-signed root certificate and intermediate CA to be imported in Java keystore?

本小妞迷上赌 提交于 2019-12-03 13:03:55
问题 How to create self-signed root certificate and intermediate CA to be imported in Java keystore? We will use this for SSL and TLS, and later for Client certificate based CLIENT-AUTH authentication. Using OpenSSL and KeyTool. 回答1: Just a side note for anyone wanting to generate a chain and a number of certificates. Refining @EpicPandaForce's own answer, here's a script that creates a root CA in root-ca/ , an intermediate CA in intermediate/ and three certificates to out/ , each signed with the