OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Frank Swiderski (fesstake.com)
Date: Wed Apr 24 2002 - 11:33:46 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Wed, 24 Apr 2002, David Wong wrote:

    > Does the tool come with a preconfigured key that is the same for ALL
    > users or is it dynamically generated during installation?

    The signing certificate is generated either:

    1) When you first navigate to an SSL-enabled site or
    2) You click the "Install WebProxy Certificate" button on the Admin
    screen

    The answer is dynamic, but post-install.

    You can dump it (from the certs/ directory) with:

    keytool -list -v -keystore wp_cacert

    Two installs should not have the same MD5 fingerprint.

    fes 

    -- 
Frank Swiderski
Security Consultant, stake, Inc.
fesstake.com