| View previous topic :: View next topic |
| Author |
Message |
dlmalloc
n00b
Joined: 21 Jun 2009
Posts: 40
Location: UK
|
 Posted: Fri Apr 29, 2011 4:44 pm Post subject: Invalid SSL certificates |
 |
|
The Gentoo forums have invalid SSL certificates, which is annoying for those of us that browse https and constantly have to manually accept the certs.
Surely this is a problem that can be fixed?
This goes for the rest of *.gentoo.org too.
_________________
$ ./lurk;
dlmalloc@irc.freenode.net |
|
| Back to top |
|
 |
NeddySeagoon
Administrator
Joined: 05 Jul 2003
Posts: 54578
Location: 56N 3W
|
| Posted: Fri Apr 29, 2011 5:33 pm Post subject: |
|
|
dlmalloc,
They are not invalid.
Gentoo uses CACert as the certificate authority. Unfortunately, the CACert root certificate is not distributed with browsers.
You need to manually add the CACert Root Certificate to your browser(s). Only ff you trust it of course.
Have you verified all the pre installed certificates ?
_________________
Regards,
NeddySeagoon
Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail. |
|
| Back to top |
|
|
aidanjt
Veteran
Joined: 20 Feb 2005
Posts: 1118
Location: Rep. of Ireland
|
| Posted: Fri Apr 29, 2011 5:40 pm Post subject: |
|
|
Yeah I've been meaning to raise this point, why doesn't Gentoo add CAcert to the system CA list?
_________________
| juniper wrote: | | you experience political reality dilation when travelling at american political speeds. it's in einstein's formulas. it's not their fault. |
|
|
| Back to top |
|
|
dlmalloc
n00b
Joined: 21 Jun 2009
Posts: 40
Location: UK
|
| Posted: Fri Apr 29, 2011 6:16 pm Post subject: |
|
|
Ah fantastic! :)
Though I agree with AidanJT, why not include CACert?
_________________
$ ./lurk;
dlmalloc@irc.freenode.net |
|
| Back to top |
|
|
NeddySeagoon
Administrator
Joined: 05 Jul 2003
Posts: 54578
Location: 56N 3W
|
| Posted: Fri Apr 29, 2011 7:49 pm Post subject: |
|
|
Gentoo has a policy of sticking as close to upstream as possible.
I suppose it could be an ebuild ...
_________________
Regards,
NeddySeagoon
Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail. |
|
| Back to top |
|
|
aidanjt
Veteran
Joined: 20 Feb 2005
Posts: 1118
Location: Rep. of Ireland
|
| Posted: Fri Apr 29, 2011 7:57 pm Post subject: |
|
|
| NeddySeagoon wrote: | | Gentoo has a policy of sticking as close to upstream as possible. |
It's also one of the things which endears Gentoo to me. Although sometimes practical reality on little things like this are nice polishing touches.
| NeddySeagoon wrote: | | I suppose it could be an ebuild ... |
Yeah, and add an 'extraca' useflag to ssl, or something would be helpful. I would be happy with that.
_________________
| juniper wrote: | | you experience political reality dilation when travelling at american political speeds. it's in einstein's formulas. it's not their fault. |
|
|
| Back to top |
|
|
Amity88
Apprentice
Joined: 03 Jul 2010
Posts: 265
Location: Third planet from the Sun
|
| Posted: Tue Aug 02, 2011 3:53 pm Post subject: |
|
|
This topic just opened my eyes to something related.... how do I verify the ssl certificates preinstalled on the system? I just attempted to check gmail's certificate fingerprint, I can view the local sha fingerprint... but what do I compare it against, googling didn't yield any results
_________________
| Ant P. wrote: | | The enterprise distros sell their binaries. Canonical sells their users. |
Also... Be ignorant... Be happy!  |
|
| Back to top |
|
|
|
Gentoo Forums Feedback
