Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #235442
| From | Celejar <celejar@gmail.com> |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: Missing SSL/https root cert(s)? |
| Date | 2021-05-21 14:00 +0200 |
| Message-ID | <ChbYR-1Ro-5@gated-at.bofh.it> (permalink) |
| References | <CgPlD-4RD-3@gated-at.bofh.it> <CgPYl-5pB-1@gated-at.bofh.it> <CgR46-626-7@gated-at.bofh.it> <ChbYR-1Ro-7@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
On Fri, 21 May 2021 06:02:10 +0000 Bonno Bloksma <b.bloksma@tio.nl> wrote: > Hi Celejar, > > >>> Although everything works properly for actual (human) users, a > >>> coworker has informed me that some of his automated tests are > >>> failing with invalid https certificate errors. I checked and, sure > >>> enough, it's not just his tests: > > > To elaborate on / add to this: there's also something called Authority Information Access (AIA), which allows the client to locate a missing intermediate certificate on its own: > > https://www.thesslstore.com/blog/aia-fetching/ > > Thanks for answering this post as full as you did. I did not know about > AIA fetching and it now solves something I had noticed before but never > found out why. > Now I know. :-) Hey, I had never heard of it either - I was just intrigued by the puzzle the OP presented, so I dug around a bit ;) > I understand finding the balance between a proper configured (web) > server and trying to make users don't have problems with misconfigured > servers. The same discussion has been going on with what a mail > server/client should accept and try to interpret when the sender does > not follow the proper rules. > > Met vriendelijke groet, > Bonno Bloksma > senior systeembeheerder Celejar
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Missing SSL/https root cert(s)? dave@sherohman.org - 2021-05-20 13:50 +0200
Re: Missing SSL/https root cert(s)? Darac Marjal <mailinglist@darac.org.uk> - 2021-05-20 14:30 +0200
Re: Missing SSL/https root cert(s)? Celejar <celejar@gmail.com> - 2021-05-20 15:40 +0200
Re: Missing SSL/https root cert(s)? Celejar <celejar@gmail.com> - 2021-05-21 14:00 +0200
Re: Missing SSL/https root cert(s)? (RESOLVED) dave@sherohman.org - 2021-05-21 17:20 +0200
csiph-web