News for hackers. Stuff that matters.

A comment on Running one’s own root Certificate Authority in 2023.

Re:Running one’s own root Certificate Authority in 2023 by morpheuskafka on Saturday September 16, 2023 @04:32PM (#37538429)
Doesn't the first Apple link specifically say the 398-day limit doesn't apply to self-signed CAs?

> This change will affect only TLS server certificates issued from the Root CAs preinstalled with iOS, iPadOS, macOS, watchOS, and tvOS.

> This change will not affect certificates issued from user-added or administrator-added Root CAs.

The second link about the other restrictions (including <=825 days validity) does appear to apply to all CAs.

[ Parent | on HN ]
Re:Running one’s own root Certificate Authority in 2023 by wejn on Saturday September 16, 2023 @04:35PM (#37538447)
And yet, my homegrown root CA cert with 3650 days of validity hums along just fine...
[ Parent | on HN ]
Re:Running one’s own root Certificate Authority in 2023 by pxeboot on Saturday September 16, 2023 @04:49PM (#37538540)
I am not sure if the same rules apply to 802.1x authentication, but we use self signed certs with 2 year validity for EAP-TLS and have never had any issues on iOS devices
[ Parent | on HN ]