kudelskisecurity / chainoffools Goto Github PK

The result certificate from the code is not fully trusted on Windows 10. The root certificate is trusted on the test machine but the generated client certificate is not. The generated certificate does not have enough information to build the trust chain. e.g. AIA or AKI.

Edit: The spoofed CA certificate needs to be included in the chain/bundle.

0x00 Format error ?

test on python2.7.12 and python3.5

>>> privkey = unhexlify(f'{privkey:x}'.encode())
  File "<stdin>", line 1
    privkey = unhexlify(f'{privkey:x}'.encode())
                                     ^
SyntaxError: invalid syntax
>>> 
>>> rogueG = privkey_inv * Q
>>> rogueG = unhexlify(b"04" + f'{rogueG.x:x}'.encode() + f'{rogueG.y:x}'.encode())
  File "<stdin>", line 1
    rogueG = unhexlify(b"04" + f'{rogueG.x:x}'.encode() + f'{rogueG.y:x}'.encode())
                                             ^
SyntaxError: invalid syntax

Hi Guys, great job done with this PoC, thanks for that.

Followed the steps you mentioned, however I am getting "The issuer of this certificate could not be found."

Used Apache2 on Centos7:
SSLCertificateKeyFile .../prime256v1-privkey.pem
SSLCertificateFile .../client-cert.pem

Could you please give a hint what is wrong with my config?

Thanks in advance.