Re: etax 2010 failure to validate remote ssl certificate properl

看板Bugtraq作者時間15年前 (2010/09/10 03:32), 編輯推噓0(000)
留言0則, 0人參與, 最新討論串2/2 (看更多)
On 8 September 2010 05:17, dave b <db.pub.mail@gmail.com> wrote: > On 8 September 2010 05:09, dave b <db.pub.mail@gmail.com> wrote: >> etax 2010[0] > > Minor edit :) > "> (note: you need a certificate for _any_ domain signed by a CA" > should be: > "> (note: you need a certificate for a domain that has been signed by > a signed by a CA installed on the client pc" > i.e. a certificate for https://foo.com that works on the client :) On a re-test with a fresh vm I found that it will accept any ssl cert, regardless of being signed by $ca or not. Sorry for the numerous lame emails :) -- The naked truth of it is, I have no shirt. -- William Shakespeare, "Love's Labour's Lost"
文章代碼(AID): #1CYJOrB2 (Bugtraq)
文章代碼(AID): #1CYJOrB2 (Bugtraq)