RE: Why public key SHA1 is not same as Subject key Identifier

2014-11-05 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Jerry OELoo Sent: Wednesday, November 05, 2014 03:11 But when I go to www.google.com website, I find the leaf certificate and intermediate certificate is ok, but root CA certificate (GeoTrust Global CA) is not. snip Public Key SHA1:

Re: Why public key SHA1 is not same as Subject key Identifier

2014-11-05 Thread Jakob Bohm
On 05/11/2014 09:11, Jerry OELoo wrote: Hi All: As I know, When calculate Public key in certificate, it's SHA1 value is equal to Subject Key Identifier in certificate, and I verify this, and found that some websites are follow this. But when I go to www.google.com website, I find the leaf

RE: Why public key SHA1 is not same as Subject key Identifier

2014-11-05 Thread Salz, Rich
Right, that’s the main point. SKI is just an opaque identifier. It “used to” “mostly” be SHA1 of the key, but there was never any requirement that it MUST be so. -- Principal Security Engineer, Akamai Technologies IM: rs...@jabber.memailto:rs...@jabber.me Twitter: RichSalz