[Webinar] Streamline your web hosting managementRegister Today

x
?
Solved

Creating a Certificate Request File

Posted on 2004-08-05
6
Medium Priority
?
610 Views
Last Modified: 2010-05-18
How do I generate a key pair and certificate request file to send to someone to sign for Windows. this certificate is for client authentication NOT for a website.
0
Comment
Question by:vinny45
  • 4
  • 2
6 Comments
 
LVL 4

Expert Comment

by:alikoank
ID: 11733244
you can use openssl or ssleay (they both are unix programs)

or:

http://java.sun.com/docs/books/tutorial/security1.2/sigcert/

as a further step:

if you want your clients to sign their e-mails
http://www.verisign.com/products-services/security-services/pki/pki-application/email-digital-id/index.html

if you want to sign your clieant applications (code signing)
http://www.verisign.com/products-services/security-services/code-signing/index.html

0
 

Author Comment

by:vinny45
ID: 11733594
this client cert is for an asp.net application in windows 2003, sorry i should've mentioned that. will your links work? the cert request is for a specific someone.
0
 
LVL 4

Expert Comment

by:alikoank
ID: 11734505
yes, they will work. certificates are standart. But .NET package should contain a tool for this. I am not familiar with .NET but a quick google search turned out tools like

signcode.exe
makecert.exe

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cptools/html/cpgrfCertificateCreationToolMakeCertExe.asp
0
KuppingerCole Reviews AlgoSec in Executive Report

Leading analyst firm, KuppingerCole reviews AlgoSec's Security Policy Management Solution, and the security challenges faced by companies today in their Executive View report.

 

Author Comment

by:vinny45
ID: 11737708
does makecert create a key pair and Certificate Request File? thanks for all the suggetions though
0
 
LVL 4

Accepted Solution

by:
alikoank earned 2000 total points
ID: 11737830
no, you use strong name tool (sn.exe) to create key pair. After you created your key pair go to verisign and apply for digital id.

csr (certificate signing request is not needed for code signing, you cast fill out an online form)

for details please follow the links in my previous comment.
0

Featured Post

SMB Security Just Got a Layer Stronger

WatchGuard acquires Percipient Networks to extend protection to the DNS layer, further increasing the value of Total Security Suite.  Learn more about what this means for you and how you can improve your security with WatchGuard today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

It's not just another paperwork submission. Serious planning and rigour to managing the whole thought processes need to be put in place. The intent is not on drilling into the details, but to share tips in getting the first thing right to kick-start…
Native ability to set a user account password via AD GPO was removed because the passwords can be easily decrypted by any authenticated user in the domain. Microsoft recommends LAPS as a replacement and I have written an article that does something …
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…
Get the source code for a fully functional Access application shell with several popular security features that Access VBA application developers desire, but find difficult or impossible to figure out how to code. You get the source code for managi…
Suggested Courses

591 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question