helpGna! Administration - Support: sr #1697, Wrong CN (common name) in Gna's...

 
 
Show feedback again

sr #1697: Wrong CN (common name) in Gna's SSL certificate

Submitted by:  Volker Grabsch <vog>
Submitted on:  Fri 27 Jul 2007 06:57:37 PM UTC  
 
Category: OtherPriority: 3 - Low
Severity: 6 - SecurityStatus: Done
Privacy: PublicAssigned to: None
Open/Closed: ClosedOperating System: Any / Non-Specific

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Sat 25 Aug 2007 02:49:34 PM UTC, comment #3:

Thank you!

Volker Grabsch <vog>
Mon 06 Aug 2007 02:33:32 PM UTC, comment #2:

Hello,

We'll fix that asap.

Mathieu Roy <yeupou>
Site Administrator
Mon 06 Aug 2007 08:18:29 AM UTC, comment #1:

This bug has been ignored for more than a week.

Is there anything I can do to speed it up? May I help you?

Volker Grabsch <vog>
Fri 27 Jul 2007 06:57:37 PM UTC, original submission:

The SSL certificate of https://gna.org/ has the CN (common name) entry:

Gna!

instead of:

gna.org

Thus, any SSL capable browser always warns because of the mismatch between the shown site (gna.org) and the CN of the SSL certificate (Gna!). It is therefore impossible to make the browser quiet and to get warnings only when the certificate suddenly changed.

This is not only very annoying to us, the users. It also voids the certificate's protection against MITM attacks.

For security reasons, I strongly recomment to fix the certificate as soon as possible!

Volker Grabsch <vog>

 

(Note: upload size limit is set to 1024 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by yeupou (Posted a comment)
  • -unavailable- added by mwolson
  • -unavailable- added by vog (Submitted the item)
  • -unavailable- added by vog
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 7 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Sat 25 Aug 2007 11:01:31 AM UTCyeupouStatusConfirmed=>Done
      Open/Closed-Automatic update due to transitions settings-=>Closed
    Mon 06 Aug 2007 02:33:32 PM UTCyeupouPriority9 - Immediate=>3 - Low
      StatusNone=>Confirmed
    Tue 31 Jul 2007 11:25:15 PM UTCmwolsonCarbon-Copy-=>Added -unavailable-
    Fri 27 Jul 2007 06:57:37 PM UTCvogPriority-Automatic update due to transitions settings-=>9 - Immediate
      Carbon-Copy-=>Added vog
    Show feedback again

    Back to the top


    Powered by Savane 3.1-cleanup