implementation of the global public key infrastructure service

Hello world

With clientless SSL VPN to support external clients we need to use the global PKI service?

Concerning

MAhesh

It is recommended but not mandatory. As long as customers have trust the certificate of the SAA, it will work.

With a global PKI that uses a public CA well known (such as Verisign, Thawte, Entrust, GoDaddy etc) to issue certificates to your ASA, almost every customer will have these predefined as CAs root of trust. In this case, they will not see any warning messages when browsing the ASA.

If you use a self-signed certificate or internal PKI, your customers need either a. install the ASA or the internal PKI root certificate in their certificate root trust or b. store always accept the certificate not approved each time.

Most people don't want to present their customers with one of the two the latter choice so the recommendation to use a public certification authority.

Tags: Cisco Security

Similar Questions

  • Certificate of loading error: could not create the EC public key

    Hello

    I'm trying to set up a development environment for Android applications.

    When you run the wizard of BlackBerry deployment configuration, I have this error in the record of signature:

    "Certificate of loading error: java.io.IOException: subject to key, not able to create the EC public key.

    I'm under Eclipse 3.8 on Linux Ubuntu 64-bit.

    Any help is welcome.

    Thank you!

    Patrick

    Thanks to some more troubleshooting, Patrick and I have reduced the question up to 1.7 Java incompatibility.

    To all readers, our nos exigences requirements of system for BlackBerry plugin reconditioning says a requirement of Java 1.6.

    https://developer.BlackBerry.com/Android/documentation/sys_requirements_1848536_11.html

    I hope this can help some other developers with a similar problem.

    Justin

  • Implementation of the Global Navigation in OBIEE

    Hello Guru

    Could someone please tell me what is global navigation and and how to configure it in OBIEE.

    Thank you

    Hello

    Global navigation is excellent technique for the aggregated values in reports
    You can check this link that will completely explain the creation of the global table, setting up aggregation & troubleshooting

    http://www.rittmanmead.com/2006/11/aggregate-navigation-using-Oracle-BI-server/
    http://hiteshbiblog.blogspot.com/2010/04/OBIEE-aggregate-navigation-not-hitting.html

    You can get this Oracle site in the part of the documentation

    Thank you
    K.Babu

  • How to export the public key / certificate of OUD?

    Hi all

    Maybe it's to export the public key of a unified directory of Oracle?

    I.e. I have Setup SSL on port 636.

    I had created a new certificate self-signed and added to the LDAP server following the guide of SSL to get up and running fast - Oracle Fusion Middleware Oracle Administration Guide unified directory.

    But the certificate for the LDAP server sends when the connection to this is some other certificate and not my certificate.

    CN = computer name, O = Oracle unified the self-signed certificate directory

    Instead of

    CN = Company.com, o = company, c is AU

    that I had created. Because when I created this certificate I exported public key in a text file as per step 4.

    Any guidance would be great.

    Hello

    You want to assign a new SSL certificate to the OUD instance or you just want to export the existing one so that you can import it into a truststore customer?

    To export the cert public key OUD, follow these steps:

    JAVA_HOME/bin/keytool - export - keystore /OUD/config/keystore-alias server-cert-file mycert.cer

    You will be asked the password store which is located in OUD_INSTANCE_DIR>/OUD/config/keystore.pin

    -Sylvain

    ------

    When closing a thread as answered don't forget to mark the messages correct and useful to make it easier for others to find their

  • How to get the public key using modulus and exponent

    Dear Sir
    I modulo and exp of the public key, how can I combine the GE the full public key, in the host application. These values are coming from the java card?
    I get these as follows:
                      rAPDU = channel.transmit(new CommandAPDU(getPublicKeyModCommand));
                      if (rAPDU.getSW() != 0x9000)
                      {  
                           System.out.println("Could not get the modulus");
                      }
                      if (rAPDU.getSW() == 0x9000)
                      {  
                           modulus = new BigInteger(rAPDU.getData());
                           arrayPrint(rAPDU.getData());
                      } 
                      
                      rAPDU = channel.transmit(new CommandAPDU(getPublicKeyExpCommand));
                      if (rAPDU.getSW() != 0x9000)
                      {  
                           System.out.println("Could not get exp");
                      }
                      System.out.println();
                      if (rAPDU.getSW() == 0x9000)
                      {
                           exponent = new BigInteger(rAPDU.getData());
                           arrayPrint(rAPDU.getData());
                      } 

    EJP wrote:

    In fact, I was using a deprecated function where the problem arose.

    N ° with the help of an obsolete method does not cause this problem. In fact:

    The stack trace is from this line:

    X509Certificate userCert = createClientCert( user_PublicKey, CA_PrivateKey, CA_PublicKey );
    

    The code for this method has not been demonstrated, so he's probably trying to use BC. The factory key code must have worked very well to get to this day.

    See you soon,.
    Shane

  • There are 2 versions of Oracle.DataAccess on the system with the same public token

    Hello
    can someone please explain this
    1 Oracle.DataAccess... x 86... 2.112.1.0... 89b483f429c47342
    2 Oracle.DataAccess... x 86... 2.112.2.0... 89b483f429c47342

    I have a reference in Visual Studio to one of these DLLs. My question:
    (1) what are the differences?
    2. what assembly is loaded by my application?

    greetings and thanks
    Ellen

    Hi Ellen,.

    All versions of the ODP assemblies have the same public key token. The difference is your case is you two versions (2.112.1.0 and 2.112.2.0) installed, and the difference between new features, bug fixes, etc.

    ODP also installs policy files by default that can come into play here, but it depends on which version you installed last. If you have installed 2.112.2.0 last, then the policy file would automatically redirect apps looking for 2.112.1.0 to use 2.112.2.0 instead.

    If you have installed 2.112.1.0 last, then the file 2.112 strategy would only redirect apps more 2.112.1.0 to use 2.112.1.0.

    If you're wondering how to determine what your application assembly IS actually responsible, the best way is via a tool like Process Explorer, which will allow that see you what libraries are loaded into a process.

    Greg

  • Repeatable encryption with RSA public key encryption

    Hello

    I have the following problem: I try to encrypt a byte array with an RSA public key encryption and want to get the same byte array encrypted for every call to doFinal().

    Object*.
    Two people (a and b) may share the same secret. Yet they don't trust each other until what they have confirmed that they share the same secret. To check if both share the same secret the following protocol apply (via a communication channel not secure assistance from person c they don't trust either). Also, there is no one which may help to establish trust (i.e. building confidence channels).

    (1) generates the public key / private RSA
    (2) a figure his secret with the RSA public key
    (3) one sends the secret encrypted with its public RSA key for b
    (4) b uses the RSA a public key to encrypt his secret
    (5) in the case of the encrypted secret of a matches the secret encrypted b, then make (6), if a and b do not share the same secret, as they are in conversatzion
    (6) b generates his own public key / private RSA
    (7) b figure (not encrypted) secret with its private key
    (8) b figure his secret (encrypted with its private key), as well as his public key with the public key of a
    (9) b sends his secret (encrypted with its private key) and its public key in a
    (10) one decrypts the secret and b public key with its private key
    (11) one decrypts the secret with the public key of b
    (12) checks if the secret received b acually meets that one knows = > trust established, finishing


    So, I want to achieve is that the following code prints "true":
    byte[] potentialSecret = new byte[]{1, 2, 3, 4, 5};
    KeyPairGenerator kpg = KeyPairGenerator.getInstance(RSA);
    kpg.initialize(512);
    KeyPair kp = kpg.generateKeyPair();
    PublicKey key = kp.getPublic();
    Cipher c = Cipher.getInstance(RSA);
    c.init(Cipher.ENCRYPT_MODE, key);
    System.out.println(Arrays.equals(c.doFinal(xy), c.doFinal(xy)));
    I tried to 'tinker' with initialization vectors, but still finished with the exceptions of various type.


    Thank you very much
    Bjoern


    How can PS: btw, I markup code? It is my first assignment in the Oracle forums.

    If your security is based on a secret that can be 8bits then you only 8bits of security. An attacker could send a request with their own key pair with all the data. The other party would return the text key and the encryption algorithm and then after less than 256 RSA cryptographic operations you have the secret (if it's 1 byte). You can then send the request with the correct secret.

    See you soon,.
    Shane

  • When you try to join my key, the option "Attach my public key" is deleted so I can't use it.

    This is a reference to the "Digital Signature and encryption of Messages. When you try to send my key by e-mail, the option "Attach my public key" is deleted so I can't use it. I have a work around, but it's a little embarrassing.

    Any ideas?

    Thank you very much

    Kevin

    When your issue has been resolved can mark this thread as "solved" Please?
    Thank you.

  • I have a MacBook Pro.  Is there a way to implement a rarely used keyboard key that - WHENEVER - it is pressed the computer will insert the string, predetermined character at the cursor position?

    I have a MacBook Pro.  Is there a way to implement a rarely used keyboard key that - WHENEVER - it is pressed the computer will insert the string, predetermined character at the cursor position?

    Yes. You can add in system preferences > keyboard > text.

  • I get an error, "the executable file that this service is configured to run does not implement the service" when I try to synchronize the time in Windows XP.

    After trying to fix the error of time synchronization by typing net start w32time that receipt of the message in the title.  In addition, type net stop w32time responded that the service was not working.

    Original title: the executable that this service is configured to run does not implement the service

    After checking the configuration in the registry and check or update if necessary from the link below:

    Then the time errors that I got from the command prompt window:
    Order--> net stop w32time & net start w32time
    Response--> The Windows Time service is not started.

    Order--> net start w32time
    Response--> system error 1083.
    The executable program that this service is configured to run in does not implement the service.

    --> Command w32tm/Resync /rediscover
    Response--> sending command to local computer resync...
    The following error occurred: the RPC server is unavailbale. (0x800706BA)

    Hi Mitchell_G,

    Thank you for keeping us posted.

    The steps of items offered in the previous post?

    We know if you need help. We will be happy to help you.

    Thank you.

  • Implementation of the Web Service on Blackberry

    Hello

    I am new to web services so now I want to know how you can hit the web services via the blackberry app?

    Y at - there no web service sample I can use to test the object.

    In fact, I want to know the implementation of the web service on blackberry.

    Please provice me useful links and resources.

    What is KSOAP2 in blackberry?

    I think there are 2 ways to use web services

    1 http

    2 SOAP

    I want to know the two tests.

    Please help me.

    Sorry for non trivial stuff like this there is nothing like "sample code" of my side - I work in a business environment, not as a developer open source.

  • Public keys on the Modules of Code

    Greetings,

    I would like to know how to extract the public key modules are already installed on the BlackBerry.

    I know there is the CodeSignigKey.getPublicKey () method, which is what I guess you would be able to extract the public key.  I do the following:

    ...
    int handle = CodeModuleManager.getModuleHandle("Argle");
    byte[] pubKey = CodeSigningKey.get(handle,CodeSigningKey.RRT_SIGNER_ID).getPublicKey();
    ...
    

    My assumptions are that each single program (considering third-party applications) should have a signature RRT.  It's what you do when you sign your apps (three signatures RRT, RBB, CPR).

    What I don't understand is this:

    Is CodeSigningKey.RRT_SIGNER_ID id signatory for the pair of keys to the RIM and so that's the reason why I always get a key public zero for third-party applications?

    Are the public key embedded in the modules or can they be extracted of the modules?

    Thank you

    Sheran

    Okay, I was incorrectly assuming that the CodeSigningKey would allow me to extract the public key from the developer who signed the module.  Thank you for that clarification.

  • Remove the key management Service Message

    Is it still on windows 7 to delete a message indicating "key management service has not enough computers registered at this time."

    I have a problem that I think related to the duplication of SID and before I can get that fixed I would delete the message.

    Hello

    Thanks for the reply.

    You can post your request in the TechNet forums because they have more expertise on this issue. Then, please follow the link below to do the same.

    Forums TechNet for Windows 7
    http://social.technet.Microsoft.com/forums/Windows/en-us/home?Forum=w7itpronetworking

    I hope this helps.

    Thank you

  • How to create the public key to VM

    I'm new to the cloud and have seen VM public key option, can someone tell me how to create this key to go forward.

    Kind regards

    http://docs.Oracle.com/cloud/latest/dbcs_dbaas/CSDBI/GUID-4285B8CF-A228-4B89-9552-FE6446B5A673.htm#CSDBI3349

  • How to authenticate using the credential key external services?

    Hello

    I developed a bpel webservice that uses external Web services that is protected by user name and password.

    So in my composite.xml, I put the 2 lines within the reference tag to this service.

    < name = "oracle.webservices.auth.username property" many = "false" type = "xs: String" > ssa.gen < / property > "

    < name = "oracle.webservices.auth.password property" many = "false" type = "xs: String" > * < / property > "

    But as password continues to change, I need some other way to authenticate this webservice without giving the password.

    We use csf - key here? as below:

    < property name = "csf - key" type = "xs: String" much = "false" > ssa.gen < / property >

    How to register a new name of user and password for this key? I need the proper code syntax to be all in composite.xml and also how to map a user to a key?

    Kindly help.

    You can configure the keys to the csf as follows.

    Console EM-> select the SOA domain (under the WebLogic domain name), click right-> select Security-> credentials.

    Create map-> name: oracle.wsm.security (if it does already exist).

    Select the map-> create a key.

    Specify the key name that you want to use (for example, "usernamekey" for example), choose the Type of password and enter the password and save.

    Now you can use this key in the key property of csf for the obligatory corresponding reference in composite.xml - usernamekey.

Maybe you are looking for