PKI – shell{&}co

Ansible – Read Certificate request file with the module openssl_csr_info

In this post, I will show you how to read a certificate request file and extract some informations. In the current case, the information is the Subject Alternate Name. If SAN have been specified in the CSR, it will be

List duplicated valid certificates on a MS PKI version 2

Description I have written another version of the script provided some weeks ago. This new version is looking for duplicated valid certificates based on both CommonName and Certificate template. The first version checked only the CommonName. All of this cmdlets

Automatically install and renew Let’s Encrypt certificates

Automatically install and renew Let’s Encrypt certificates The Electronic Frontier Foundation is the leading nonprofit organization defending civil liberties in the digital world. Founded in 1990, EFF champions user privacy, free expression, and innovation through impact litigation, policy analysis, grassroots

Configure HKPK on Apache

What is HKPK The Wikipedia explanation is the following: HTTP Public Key Pinning (HPKP),[1] sometimes incorrectly known as certificate pinning, is a security mechanism which allows HTTPS websites to resist impersonation by attackers using mis-issued or otherwise fraudulent certificates. For

PKI : x509 certificate verification process script

PKI : x509 certificate verification process script Description x509test is a software written in Python 3 that test the x509 certificate verification process of the target SSL/TLS client. The inspiration of this software comes from multiple reports on the insecurity