Difference between revisions of "X.509"

From wikieduonline
Jump to navigation Jump to search
 
(One intermediate revision by the same user not shown)
Line 30: Line 30:
 
* <code>E1207 14:22:57.502748      1 scraper.go:140] "[[Failed to scrape node]]" err="Get \"https://172.30.2.2:10250/metrics/resource\": [[x509]]: [[cannot validate certificate]] for 172.30.2.2 because it doesn't contain any IP SANs" node="node01"</code>
 
* <code>E1207 14:22:57.502748      1 scraper.go:140] "[[Failed to scrape node]]" err="Get \"https://172.30.2.2:10250/metrics/resource\": [[x509]]: [[cannot validate certificate]] for 172.30.2.2 because it doesn't contain any IP SANs" node="node01"</code>
 
* [[Subject Alternative Name (SAN)]]
 
* [[Subject Alternative Name (SAN)]]
 +
* <code>[[/etc/ssl/certs/]]</code>
 +
* [[ SSL certificate problem: unable to get local issuer certificate]]
  
 
== See also ==
 
== See also ==

Latest revision as of 10:36, 8 March 2024

wikipedia:X.509 standard format for Public key certificate used in TLS.

Tools: openssl, keytool, certinfo (Cloudflare) https://github.com/cloudflare/cfssl/blob/master/certinfo/certinfo.go[1]


Examples[edit]

Errors[edit]

Security[edit]

  • ASN.1 and x509 parsers in the kernel have historically been quite problematic (CVE-2008-1673, CVE-2016-2053),

Activities[edit]

Related terms[edit]

See also[edit]

  • https://prefetch.net/blog/2019/12/10/converting-x509-certificates-to-json-objects/
  • Advertising: