IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [serial]

Either a serial port (physical) or an identifying number (digital), such as laptop's serial number or a certificate's serial number. For licensing, use the tag product-key.

15 questions
5
votes
2 answers

Why does the RFC 5280 dictate the CAs not to issue certificates with negative serial numbers?

I have tried to issue a certificate beginning with 8 to F but I have found it is impossible, mostly due to the RFC: The serial number MUST be a positive integer assigned by the CA to each certificate. It MUST be unique for each certificate issued…
kiBytes
  • 3,450
  • 15
  • 26
5
votes
1 answer

Should or shouldn't I show a serial number, MAC address and other product ID when I sell it online?

I want to sell online some of the electronic stuff that I don't need anymore, such as my ASUS Wi-Fi router, and I'm wondering when I upload photos of it should I leave its serial number, MAC address, and pin code written on the back of the device…
Trueman
  • 51
  • 2
5
votes
1 answer

Can I revoke a client certificate using only it's serial number (not it's crt/pem)?

I've signed and issued some client certificates with my CA. I can now revoke them like so: openssl ca -name ${CA_NAME} -revoke ${USERS_DIR}/${USERNAME}.crt -keyfile $SSL_PRIVATE_DIR/ca.key -cert $SSL_CERTS_DIR/ca.crt (from here) However this…
Dave
  • 153
  • 1
  • 4
3
votes
2 answers

Is there any way to determine the location of a laptop based on its MAC address or serial number?

If I have the MAC address and S/N of a Lenovo 3000 Laptop, is there some way for me to find exact street location of this laptop ? This machine was stolen from me last year and was my back up machine . Contained all my personal info prior to 2009,…
user77141
  • 41
  • 2
1
vote
0 answers

Compiler that adds machine info to binary

Wanted to ask if there is any compiler (any known programming language) that is actually encoding machine data into binary, so it is possible to detect the machine where the program has been compiled (e.g. serial, MAC etc.)?
Bojan Vukasovic
  • 109
  • 1
1
vote
1 answer

Can you exfiltrate data over a serial connection from the client?

When you manage some device over serial the connection is in general bidirectional. But usually the host manages the client by sending commands over the serial connection. Is there some easy way for some kind of reverse management? Can attackers…
hadnolunchyet
  • 11
  • 2
1
vote
1 answer

Can two different Root certificates have the same serial number?

Can two different Root certificates and their intermediate certs have the same serial number? I issue two root certificates: Organization: My Example Organization: My Example Organization Root Certificate Authority (serial number is 00) ----- My…
Example person
  • 163
  • 9
1
vote
1 answer

X509 "Serial Number of certificate" vs serial number attribute in Issuer and Subject?

Is the serial number attribute of an X509 certificate Issuer or Subject, as defined in RFC5280, required to be the same as the Serial Number of the issuing or subject certificate? It seems quite potentially confusing to have it otherwise, but I…
Scott
  • 163
  • 1
  • 8
1
vote
0 answers

How get serial number (or SHA1 Hash) certificate without private key?

I'm trying to get a serial number ( like $ssl_client_serial in nginx ) certificate without the private key and I don't know how to do it. I have drawn a scheme: client <- HTTPS -> HAproxy or Nginx without private key <- HTTPS -> server application…
Anton Patsev
  • 111
  • 3
1
vote
1 answer

openssl serial number error "SEC_ERROR_REUSED_ISSUER_AND_SERIAL"

I've been experimenting a bit with self-issued certificates. I set up a certificate authority, issued a certificate, and installed it on a webserver. I later deleted that certificate without bothering to revoke it, and decremented the number in the…
SauceCode
  • 628
  • 6
  • 16
0
votes
1 answer

When I run this command in OpenSSL, it also creates a file called `serial_number.pem`

Note that 00 in 00.pem is the serial number of the certificate. When I run this command, it also creates a file called 00.pem in the new certs directory. The 00.pem has the same content as enduser-example.com.crt. Here is the command: openssl ca…
Example person
  • 163
  • 9
0
votes
0 answers

How to securely generate a License tied to 1 Computer for each user

This question is related to my first question: How secure is this schema for Online Licensing System? I'm trying to sell a subscription based software and I can't find a good way to generate a serial key for this case. What is this key for? When the…
Roberto Carlos
  • 23
  • 4
0
votes
1 answer

How secure is a serial/terminal/console server, from the serial side?

I'm upgrading my home lab, and one of the things I'm planning on introducing this time is out-of-band management through a Raspberry Pi console server similar to this: https://www.packet6.com/configuring-your-raspberry-pi-as-a-console-server/ I've…
TBridges42
  • 223
  • 2
  • 10
0
votes
0 answers

Feasibility of using serial port/cable to act as a simple data diode?

I'm trying to determine the feasibility of using a serial port/cable to act as a simple and cheap data diode. I'll be connecting 2 Windows PCs (1 of which is on a secured network) using a 1-way null modem serial cable. I have physically removed pin…
Joshua
  • 101
-1
votes
1 answer

want to know best way to encrypt the UART communication channel?

I have device connected to scooter it’s 4- wire uart communication. My fear is some can read the ascii data and send the at commands and unlock my scooter and steal the scooter. I want to secure the uart communication between the scooter and…
danglingpointer
  • 101
  • 6