Here’s some code for the new non-deprecated BouncyCastle API. You’ll need both bcmail and bcprov distributions. X509Certificate cert = …; X500Name x500name = new JcaX509CertificateHolder(cert).getSubject(); RDN cn = x500name.getRDNs(BCStyle.CN)[0]; return IETFUtils.valueToString(cn.getFirst().getValue());
The x509Certificate was introduced in .NET v1.0/1.1 and was (comparatively) limited in its functionality. It can be used to get information about an existing certificate (valid dates, issuer, etc.). It had simple methods/operations (i.e. reading a cert from disk). The x509Certificate2 is a subclass of x509Certificate with additional functionality. It represents an actual X509 certificate. … Read more
I mean if it’s a “good” thing then why it is not “on” by default and why is it there after all? IIS 6 never loaded user profiles. I would assume this is off by default to keep the behavior consistent, and an administrator has to opt-in to it. I tried to enable LoadUserProfile for … Read more
Can someone help me with the exact syntax? It’s a three-step process, and it involves modifying the openssl.cnf file. You might be able to do it with only command line options, but I don’t do it that way. Find your openssl.cnf file. It is likely located in /usr/lib/ssl/openssl.cnf: $ find /usr/lib -name openssl.cnf /usr/lib/openssl.cnf /usr/lib/openssh/openssl.cnf … Read more
Yes. ‘Z’ stands for Zulu time, which is also GMT and UTC. From http://en.wikipedia.org/wiki/Coordinated_Universal_Time: The UTC time zone is sometimes denoted by the letter Z—a reference to the equivalent nautical time zone (GMT), which has been denoted by a Z since about 1950. The letter also refers to the “zone description” of zero hours, which … Read more
Relating to ‘SSL certificate problem: unable to get local issuer certificate’ error. It is important to note that this applies to the system sending the CURL request, and NOT the server receiving the request. Download the latest cacert.pem from https://curl.se/ca/cacert.pem Add the ‘–cacert /path/to/cacert.pem’ option to the curl command to tell curl where the local … Read more
You can do that in one command: openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -sha256 -days 365 You can also add -nodes (short for “no DES”) if you don’t want to protect your private key with a passphrase. Otherwise it will prompt you for “at least a 4 character” password. The days parameter … Read more