6 reputation
1
bio website
location United States
age
visits member for 1 year, 1 month
seen Jan 6 at 5:34

Long-time linux fan


Jan
6
answered Glib error when trying to open Firefox and Thunderbird
Mar
9
comment How do we get Canonical to fix their certificates? I can't access Ubuntu Wiki
Key quotation: "Implementations MUST be capable of verifying that the IP address presented in ID matches via bitwise comparison the IP address present in the certificate's iPAddress field of the SubjectAltName extension. Implementations MUST perform this verification by default. When comparing the contents of ID with the iPAddress field in the SubjectAltName extension for equality, binary comparison MUST be performed. Note that certificates may contain multiple address identity types -- in which case, at least one must match the source IP. "
Mar
9
comment How do we get Canonical to fix their certificates? I can't access Ubuntu Wiki
I think this is the RFC that describes why this is a problem and a security error. RFC Doc: tools.ietf.org/rfc/rfc4945.txt
Mar
9
comment How do we get Canonical to fix their certificates? I can't access Ubuntu Wiki
URL: wiki.ubuntu.com... Cert Sbj: *.canonical.com
Mar
9
awarded  Student
Mar
9
comment How do we get Canonical to fix their certificates? I can't access Ubuntu Wiki
It appears that the hostname and the subject don't match. This is a source of suspicion of invalid certs. In essence I'd hope that Canonical would produce certificates with a subject specifying Ubuntu not Canonical. That would clear up these errors.
Mar
9
comment How do we get Canonical to fix their certificates? I can't access Ubuntu Wiki
Really? It is my understanding that if the URL matches the certificate Subject, which is one of the purposes of a Certificate Subject, these errors won't pop up. Note: True this is not a date issue, but there are other aspects of certs that may suggest inappropriate sources like the error here.
Mar
9
asked How do we get Canonical to fix their certificates? I can't access Ubuntu Wiki