Hi On Mon, Nov 15, 2021 at 07:57:36PM +0000, Henrik Morsing via GLLUG wrote: <snip> > Server: irc.aachat.net > Port: 6697 > SSL: Yes, enforced > Channel: #a&a
Which is signed by Let's Encrypt CA certificates:
---
Certificate chain
0 s:CN = irc.aachat.net
i:C = US, O = Let's Encrypt, CN = R3
1 s:C = US, O = Let's Encrypt, CN = R3
i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
2 s:C = US, O = Internet Security Research Group, CN = ISRG Root X1
i:O = Digital Signature Trust Co., CN = DST Root CA X3
---
Verification reports OK on my machine (Ubuntu 20.04).
The "ISRG Root X1" CA certificate should be in Debian 8 and above:
https://letsencrypt.org/docs/certificate-compatibility/
https://letsencrypt.org/certificates/
On Ubuntu (and probably also Debian) this CA certificate is
/etc/ssl/certs/ISRG_Root_X1.pem which is a symlink to
/usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt
So you may want to check that those files still exist and have not
been altered (assuming location is same/similar on Debian).
For info the SHA1 sums on my machine are:
$ sha1sum /etc/ssl/certs/ISRG_Root_X1.pem
/usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt
4de9627fe9ace4acce27eaa1a0837cd3db55704b /etc/ssl/certs/ISRG_Root_X1.pem
4de9627fe9ace4acce27eaa1a0837cd3db55704b
/usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt
Which match the PEM file on Let's Encrypt site:
https://letsencrypt.org/certs/isrgrootx1.pem.txt
--
#---------------------------------------------------------#
| John Edwards Email: [email protected] |
#---------------------------------------------------------#
signature.asc
Description: PGP signature
-- GLLUG mailing list [email protected] https://mailman.lug.org.uk/mailman/listinfo/gllug
