Google pulling China CNNIC CA from its products

Re:Google pulling China CNNIC CA from its products by MarkG509 on Wednesday April 01, 2015 @10:27PM (#9308314)

Thanks for the reminder to recheck my certs. I manually wiped CNNIC (among others) when the news first broke, and with today's Firefox update, I'll check again.

[ Parent | on HN ]

Re:Google pulling China CNNIC CA from its products by Laforet on Wednesday April 01, 2015 @10:56PM (#9308407)

You can't just "wipe" a Root CA on Windows - you have to explicitly untrust it.

[ Parent | on HN ]

Re:Google pulling China CNNIC CA from its products by yuhong on Thursday April 02, 2015 @12:36AM (#9308694)

Open certmgr.msc and put the certificate into the "Untrusted Certificates" store.

[ Parent | on HN ]

Re:Google pulling China CNNIC CA from its products by zaroth on Thursday April 02, 2015 @02:35AM (#9308978)

I don't remember deleting it, but also can't find one that seems to be from CNNIC.

Does anyone keep a list of ones they personally like to mark as Untrusted, which doesn't break [too many] sites?

[ Parent | on HN ]

Re:Google pulling China CNNIC CA from its products by svenfaw on Thursday April 02, 2015 @04:49AM (#9309363)

Look for "China Internet Network Information Center EV Certificates Root" and "China Internet Network Information Center (CNNIC)" (thumbprints 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E and ‎8baf4c9b1df02a92f7da128eb91bacf498604b6f)

[ Parent | on HN ]

Re:Google pulling China CNNIC CA from its products by mike_hearn on Thursday April 02, 2015 @05:29AM (#9309495)

Windows downloads root certs just in time.

[ Parent | on HN ]

Re:Google pulling China CNNIC CA from its products by zaroth on Friday April 03, 2015 @02:10AM (#9314580)

Yes, of course! So now I need to figure out how I can add a thumbprint to a Untrusted Cert store...

[ Parent | on HN ]

Re:Google pulling China CNNIC CA from its products by unluckier on Friday April 03, 2015 @10:20AM (#9315996)

And why exactly do they do this?

[ Parent | on HN ]