-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 06/25/2013 10:57 PM, Kristian Fiskerstrand wrote: > On 06/25/2013 10:51 PM, Daniel Austin wrote: >> Hi Kristian, > > ... > > >> If it helps... running openssl with -servername to trigger SNI >> also comes back that a few hosts in the pool are not returning >> the correct CA signed cert. > > > Yeah thanks.. seems something is funky with my setup atm. Thanks > for reporting, I'm investigating it. (I know since I never issued > a cert for the VT server, so it certainly shouldn't be part of the > pool) > >
Thanks for reporting the issue Daniel, I've just forced an update of the pool that should hopefully fix this. Seems a recent upgrade of libraries had re-added the root CA bundle to my system. Adding to TODO to check the SNI hostname response to my scripts.... - -- - ---------------------------- Kristian Fiskerstrand Twitter: @krifisk - ---------------------------- Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3 - ---------------------------- Qui audet vincit Who dares wins -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.1.0-beta210 (GNU/Linux) iQIcBAEBCAAGBQJRygYeAAoJEJjgB+fVz3puGyoQAIPzA43btIWwQT0LXZ6ReqIN ApTTHFYEfFQh9jBq2KUm+nsLVT3fdeAbUKYsGjWa2SlffyNSzZbxDx/LGynZ7RyD ePTKMa1YY6QLr+Ddmo0nOS/kvluoWnjVN7ZY51vIXGxFZApCvNQ89fA33Q37MDwI 8p/xL7iC3fu95v/tnuQr+lgxlkSfu/bV3wKhuzPRyIh2GVrJEYZqnDWXJQEJA/vG ylVR8Mn5fEbB7jgGNVZajyy/k8PKmkMYJ/CQeYankRPwVhIHGrXu040/PZqac0Qz 2AgTUZcQ4no0Gs4BojDl9pwRUrKXsvCj3YCXBd4CUU/vpoxpsIrDTPfziAt4HDuT rD0b6FtIWeQWX8dBRwZyZhTgtBWsUvosRvhxYDr+3FgVz/9p4icVdQLJTzKehwDT CV32zG2yHrA1+/TwMj4SP6dcr5vgng1lfE+GkRkJhNbGXLcMbHDlDlpdYkzcDImO yC0cA4IhQ6/BjcSwRPIknbrfKKri9GkGQFssM0LdNTp/A+9yIpWWFSwbRks8KJef Cs4OVI2b4CVNb4+WfgX7YiKLQRpEh+qmLTWVn+4oA1lQikfFYvEWDXwDi/UlzfdH qlqTvQRdIqzw5WLDM/UoGDyFyraS16dfjJlKednti04AHIRD7hxGJMiF8xY448qn ZY1VJeWyf/q93FT+Vh/3 =r8VX -----END PGP SIGNATURE----- _______________________________________________ Sks-devel mailing list Sks-devel@nongnu.org https://lists.nongnu.org/mailman/listinfo/sks-devel
