client-certificates

Spring Security X.509 authentication without user-service

由 血红的双手。 提交于 2021-02-19 02:23:30
问题 I'm using Spring Security (v3.1.3) for X.509 authentication in my web-application. Users and roles are stored in the Database, but I don't actually need to do it, as CNs of client certificates conform to "[ROLE] - [USERNAME]" schema, which means I already have username and role from the certificate itself. So how to eliminate the database without too much effort? Should I write my own implementation of user-service, which will populate UserDetails, or is there more graceful method? 回答1: Yes,

How to use ssl client certificate (p12) with Scrapy?

由 我与影子孤独终老i 提交于 2021-02-18 10:42:07
问题 I need to use client certificate file in format p12 (PKCS12) to talk to a webserver with scrapy, is there a way to do that ? 回答1: I can't offer you a tested and complete solution here, but I know a few places where some adjustments might give you what you need. The starting point is scrapy's ContextFactory object which defines the SSL/TLS configuration. The standard implementation ScrapyClientContextFactory doesn't use client certificates and also doesn't do any server certificate

Nifi: how to make ListenHTTP work with SSL

由 。_饼干妹妹 提交于 2021-02-10 06:59:40
问题 Objective Because of Nifi integration with other tools through HTTP, I have to make ListenHTTP processor public facing. API Gateway on all 3 environments is too expensive for me. So I closed all VM ingress ports (except the one needed for ListenHTTP ) for outer networks. Issue My configuration of ListenHTTP with StandardRestrictedSSLContextService doesn't work. Without SSL it worked, but was unsecure. user$ curl -X POST -H "Content-Type: application/json" --data "test" https://localhost:7070

Converting a Certificate Revocation List (CRL) file from .crl to .pem extension - Python 3

由 折月煮酒 提交于 2021-02-08 11:38:45
问题 I am developing a Python 3.4 application component which checks if a URL's certificate exists in the CRL provided by its CA. I am using a cryptography package to load a certificate as well as the CRL. Below is the section of the code; from cryptography import x509 from cryptography.hazmat.backends import default_backend from cryptography.x509.oid import ExtensionOID from cryptography.x509.oid import NameOID import urllib.request URL = "www.xxx.com" cert_str = ssl.get_server_certificate((URL

Converting a Certificate Revocation List (CRL) file from .crl to .pem extension - Python 3

由 て烟熏妆下的殇ゞ 提交于 2021-02-08 11:37:00
问题 I am developing a Python 3.4 application component which checks if a URL's certificate exists in the CRL provided by its CA. I am using a cryptography package to load a certificate as well as the CRL. Below is the section of the code; from cryptography import x509 from cryptography.hazmat.backends import default_backend from cryptography.x509.oid import ExtensionOID from cryptography.x509.oid import NameOID import urllib.request URL = "www.xxx.com" cert_str = ssl.get_server_certificate((URL

How to use p12 client certificate with spring feign client

由 匆匆过客 提交于 2021-02-07 17:03:19
问题 I have a Spring Boot application that calls a remote service. This remote web service provided me a p12 file that should authenticate my application. How do I configure my feign client to use the p12 certificate ? I've tried settings these properties: -Djavax.net.ssl.keyStore=path_to_cert.p12 -Djavax.net.ssl.keyStorePassword=xxx -Djavax.net.ssl.keyStoreType=PKCS12 But it doesn't change anything, I still get this error: sun.security.provider.certpath.SunCertPathBuilderException: unable to find

IE is not sending Client certificate in TLS mutual authentication

由 故事扮演 提交于 2021-01-27 02:48:52
问题 I am trying to establish a TLS mutual authentication with third party API. Client certificate is configured fine and when I try to access the end point url through Chrome it works fine(Chrome asks to confirm the certificate in a message box and when I does it the page displays with its content). Same thing when I try to do with IE it is not working and showing this message Cannot securely connect to this page This might be because the site uses outdated or unsafe TLS security settings. If

Custom nginx error page for “The SSL certificate error”

由 六月ゝ 毕业季﹏ 提交于 2021-01-22 03:45:26
问题 If the customer will choose the expired certificate, the nginx server will show the built-in error page. <html> <head><title>400 The SSL certificate error</title></head> <body bgcolor="white"> <center><h1>400 Bad Request</h1></center> <center>The SSL certificate error</center> <hr><center>nginx</center> </body> </html> How can I catch the error and show the client a different page? 回答1: Please refer to http://nginx.org/en/docs/http/ngx_http_ssl_module.html#errors Define an error page for code

Custom nginx error page for “The SSL certificate error”

由 感情迁移 提交于 2021-01-22 03:42:05
问题 If the customer will choose the expired certificate, the nginx server will show the built-in error page. <html> <head><title>400 The SSL certificate error</title></head> <body bgcolor="white"> <center><h1>400 Bad Request</h1></center> <center>The SSL certificate error</center> <hr><center>nginx</center> </body> </html> How can I catch the error and show the client a different page? 回答1: Please refer to http://nginx.org/en/docs/http/ngx_http_ssl_module.html#errors Define an error page for code

Custom nginx error page for “The SSL certificate error”

由 喜你入骨 提交于 2021-01-22 03:41:28
问题 If the customer will choose the expired certificate, the nginx server will show the built-in error page. <html> <head><title>400 The SSL certificate error</title></head> <body bgcolor="white"> <center><h1>400 Bad Request</h1></center> <center>The SSL certificate error</center> <hr><center>nginx</center> </body> </html> How can I catch the error and show the client a different page? 回答1: Please refer to http://nginx.org/en/docs/http/ngx_http_ssl_module.html#errors Define an error page for code
订阅 client-certificates