News for hackers. Stuff that matters.

A comment on Mozilla shipping SSL root certificate, has no idea how it got there.

Re:Mozilla shipping SSL root certificate, has no idea how it... by ilitirit on Tuesday April 06, 2010 @11:14AM (#1244761)
It seems that the problem is that the certificate file name does not match its contents.

http://www.mail-archive.com/[email protected]...

[ Parent | on HN ]
Re:Mozilla shipping SSL root certificate, has no idea how it... by _delirium on Tuesday April 06, 2010 @01:01PM (#1245047)
Hmm, it looks like that bug's still open with no responses, 4 yrs later: http://bugs.debian.org/351745
[ Parent | on HN ]
Re:Mozilla shipping SSL root certificate, has no idea how it... by mbrubeck on Tuesday April 06, 2010 @02:44PM (#1245287)
Actually, that Debian bug is about a different CA file "RSA_Root_Certificate_1.pem" that is owned by Valicert but contains "RSA" in the filename, probably because it uses the RSA-SHA signature algorithm.

The Debian bug also refers to "RSA_Security_1024_v3.pem" which is the one Mozilla is discussing, and whose filename and contents refer to RSA Security, Inc. But the Debian bug offers that as an example of a good certificate!

[ Parent | on HN ]