News for hackers. Stuff that matters.

A comment on Google pulling China CNNIC CA from its products. Parent comment

Re:Google pulling China CNNIC CA from its products by Laforet on Wednesday April 01, 2015 @10:56PM (#9308407)
You can't just "wipe" a Root CA on Windows - you have to explicitly untrust it.
[ Parent | on HN ]
Re:Google pulling China CNNIC CA from its products by yuhong on Thursday April 02, 2015 @12:36AM (#9308694)
Open certmgr.msc and put the certificate into the "Untrusted Certificates" store.
[ Parent | on HN ]
Re:Google pulling China CNNIC CA from its products by zaroth on Thursday April 02, 2015 @02:35AM (#9308978)
I don't remember deleting it, but also can't find one that seems to be from CNNIC.

Does anyone keep a list of ones they personally like to mark as Untrusted, which doesn't break [too many] sites?

[ Parent | on HN ]
Re:Google pulling China CNNIC CA from its products by svenfaw on Thursday April 02, 2015 @04:49AM (#9309363)
Look for "China Internet Network Information Center EV Certificates Root" and "China Internet Network Information Center (CNNIC)" (thumbprints 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E and ‎8baf4c9b1df02a92f7da128eb91bacf498604b6f)
[ Parent | on HN ]
Re:Google pulling China CNNIC CA from its products by mike_hearn on Thursday April 02, 2015 @05:29AM (#9309495)
Windows downloads root certs just in time.
[ Parent | on HN ]
Re:Google pulling China CNNIC CA from its products by zaroth on Friday April 03, 2015 @02:10AM (#9314580)
Yes, of course! So now I need to figure out how I can add a thumbprint to a Untrusted Cert store...
[ Parent | on HN ]
Re:Google pulling China CNNIC CA from its products by unluckier on Friday April 03, 2015 @10:20AM (#9315996)
And why exactly do they do this?
[ Parent | on HN ]