"DST Root CA X3" expiry workaround for OpenSSL 1.0.1, 1.0.0 and 0.9.8 client applications

s://letsencrypt.org/2020/12/21/extending-android-compatibility.html [4] https://crt.sh/?id=3958242236 [5] https://github.com/openssl/openssl/commit/1e53b797f65ef6d3c2eb1052797683fec27a9ff5 [6] https://github.com/openssl/openssl/commit/9a1f59cd3128ddac73d3e0721ecd55935f53ba8b -- Rob Stradling Senior Research & Development Scientist Sectigo Limited

Re: ECC Certificate with certificate chain in RSA format

that actually enforce this rule though. -- Rob Stradling Senior Research Development Scientist COMODO - Creating Trust Online __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: whichever certificate loading first wins

On 02/05/14 15:38, foxtrot wrote: snip 3) Here is the new cert we are trying to introduce (sales.1d.qb.com) Certificate: Data: Version: 1 (0x0) X.509v1 rather than X.509v3. Could that be the problem? -- Rob Stradling Senior Research Development Scientist COMODO - Creating

Re: OpenSSL Security Advisory

: The same issue when I tried to port over to windows, the ssl3_write_bytes is not exposed in the library. There doesn't seem to be an easy workaround that I can see. Steve... On Fri, Apr 11, 2014 at 7:40 AM, Walter H. walte...@mathemainzel.infowrote: On 10.04.2014 13:16, Rob Stradling wrote: On 09

Re: OpenSSL Security Advisory

(TLS Heartbeat extension not supported by the server) $ ./heartbleed secure.comodo.net:443 NOT VULNERABLE (TLS Heartbeat extension supported by the server) $ ./heartbleed mail.visservansolkema.nl:443 VULNERABLE! -- Rob Stradling Senior Research Development Scientist COMODO - Creating Trust

Re: ECDHE-ECDSA Support

On 27/03/14 13:17, Rob Stradling wrote: Hi Thomas. I was told a while ago that Google's servers will only negotiate ECDHE-ECDSA if the client i) sends the SNI extension and ii) does _not_ offer any compression methods. IINM, s_client always offers zlib compression if zlib support is compiled

Re: ECDHE-ECDSA Support

mailto:openssl-users@openssl.org Automated List Manager majord...@openssl.org mailto:majord...@openssl.org -- Rob Stradling Senior Research Development Scientist COMODO - Creating Trust Online Office Tel: +44.(0)1274.730505 Office Fax: +44.(0)1274.730909 www.comodo.com COMODO CA Limited

Re: Bad OIDs

? __ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org mailto:openssl-users@openssl.org Automated List Manager majord...@openssl.org mailto:majord...@openssl.org -- Rob Stradling Senior Research

Re: Verification error, weird cert chain for portfolio.iguw.tuwien.ac.at

+tkLiECEeFfyIvGh1IMNZMCNg3GWcyK+tc0LL8blefBDVekAB+EcfeEyrN pG1FJseIVqDwavfY5/wnfmcI0L36tsNhAgFlubgvz1o= -END CERTIFICATE- snip -- Rob Stradling Senior Research Development Scientist COMODO - Creating Trust Online __ OpenSSL Project

Re: issue with p12 creation and network solutions EV SSL

SSL CA --- On Mon, Apr 25, 2011 at 6:16 PM, Rob Stradling rob.stradl...@comodo.com mailto:rob.stradl...@comodo.comwrote: On Monday 25 Apr 2011 20:07:03 James Chase wrote: I simplified the issue a bit in order to try and understand

Re: issue with p12 creation and network solutions EV SSL

' option. '-chain' is if you want OpenSSL to build the chain for you. --Crypto.Sal -- Beware of all enterprises that require new clothes. -- Henry David Thoreau -- Beware of all enterprises that require new clothes. -- Henry David Thoreau Rob Stradling Senior Research

Re: issue with p12 creation and network solutions EV SSL

=One Park St/O=A Company International Ltd/OU=Book Sales/OU=Secure Link EV SSL/CN=www.example.com i:/C=US/O=Network Solutions L.L.C./CN=Network Solutions EV SSL CA --- On Mon, Apr 25, 2011 at 6:16 PM, Rob Stradling rob.stradl...@comodo.comwrote: On Monday 25 Apr 2011 20

Re: 4485:error:27069070:OCSP routines:OCSP_basic_verify:root ca not trusted:ocsp_vfy.c:148:

this thread any longer. ;-) -- Konrads Smelkovs Applied IT sorcery. On Wed, Mar 24, 2010 at 2:38 PM, Rob Stradling rob.stradl...@comodo.comwrote: On Wednesday 24 March 2010 12:01:51 you wrote: snip Well it would typically require giving a public responder access to a CA key

Re: 4485:error:27069070:OCSP routines:OCSP_basic_verify:root ca not trusted:ocsp_vfy.c:148:

://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org Rob Stradling Senior Research Development Scientist C·O·M·O·D·O - Creating Trust Online

Re: 4485:error:27069070:OCSP routines:OCSP_basic_verify:root ca not trusted:ocsp_vfy.c:148:

...@openssl.org Rob Stradling Senior Research Development Scientist C·O·M·O·D·O - Creating Trust Online Office Tel: +44.(0)1274.730505 Office Fax: +44.(0)1274.730909 www.comodo.com Comodo CA Limited, Registered in England No. 04058690 Registered Office: 3rd Floor, 26 Office Village, Exchange Quay

Re: Spam on this list

Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org -- Rob Stradling Senior Research Development Scientist Comodo - Creating Trust Online Office Tel: +44.(0)1274.730505 Fax Europe: +44.(0)1274.730909 www.comodo.com Comodo

Re: CSR has invalid signature

CSR with the wrong private key? -- Rob Stradling Senior Research Development Scientist Comodo - Creating Trust Online Office Tel: +44.(0)1274.730505 Fax Europe: +44.(0)1274.730909 www.comodo.com Comodo CA Limited, Registered in England No. 04058690 Registered Office: 3rd Floor, 26 Office

Re: CSR has invalid signature

- Please help! Jacob -- Rob Stradling Senior Research Development Scientist Comodo - Creating Trust Online Office Tel: +44.(0)1274.730505 Fax Europe: +44.(0)1274.730909 www.comodo.com Comodo CA Limited, Registered in England No. 04058690 Registered Office: 3rd Floor, 26 Office Village, Exchange