This is a terrible answer (not very secure), but appears to be the current Microsoft official answer. Use “http.proxyStrictSSL”: false in your settings.json file. This should work to get around the issue of installing extensions inside a corporate network, but I’d recommend disabling the setting if you are going to be working from home/coffee shop … Read more
RHEL: /etc/pki/tls/openssl.cnf
Interesting question. I don’t know for sure, but the #ifndef at the top of evp.h is: #ifndef HEADER_ENVELOPE_H So, I’m guessing Envelope.
(Based on Nilesh’s answer) In the default configuration, openssl will keep copies of all signed certificates in /etc/ssl/newcerts, named by its index number. So grep /etc/ssl/index.txt to obtain the serial number of the key to be revoked, e.g. 1013, then execute the following command: openssl ca -revoke /etc/ssl/newcerts/1013.pem #replacing the serial number The -keyfile and … Read more
There are at least two problems with OnionProtocol: The innermost TLSMemoryBIOProtocol becomes the wrappedProtocol, when it should be the outermost; ProtocolWithoutConnectionLost does not pop any TLSMemoryBIOProtocols off OnionProtocol‘s stack, because connectionLost is only called after a FileDescriptors doRead or doWrite methods return a reason for disconnection. We can’t solve the first problem without changing the … Read more
It depends on the tools you can use. I doubt there is a JavaScript too that could do it directly within the browser. It also depends if it’s a one-off (always the same key) or whether you need to script it. Command-line / OpenSSL If you want to use something like OpenSSL on a unix … Read more
Try using following command. I haven’t tried it but I think it should work. openssl pkcs8 -topk8 -inform PEM -outform DER -in filename -out filename -nocrypt
I realize that this is a very late (and long) answer. But considering how well this question seems to rank in search engine results, I figured it might be worth writing a decent answer for. A lot of what you will read below is borrowed from this demo and the OpenSSL docs. The code below … Read more
To get the Subject Alternative Names (SAN) for a certificate, use the following command: openssl s_client -connect website.example:443 </dev/null 2>/dev/null | openssl x509 -noout -text | grep DNS: First, this command connects to the site we want (website.example, port 443 for SSL): openssl s_client -connect website.example:443 Then pipe (|) that into this command: openssl x509 … Read more
The openssl documentation says that file supplied as the -in argument must be in PEM format. Turns out that, contrary to the CA’s manual, the certificate returned by the CA which I stored in myCert.cer is not PEM format rather it is PKCS7. In order to create my .p12, I had to first convert the … Read more