From owner-freebsd-security@FreeBSD.ORG Wed May 13 17:13:51 2015 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id E24DDC93 for ; Wed, 13 May 2015 17:13:51 +0000 (UTC) Received: from eu1sys200aog103.obsmtp.com (eu1sys200aog103.obsmtp.com [207.126.144.115]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 523941A49 for ; Wed, 13 May 2015 17:13:50 +0000 (UTC) Received: from mail-wi0-f169.google.com ([209.85.212.169]) (using TLSv1) by eu1sys200aob103.postini.com ([207.126.147.11]) with SMTP ID DSNKVVOGOHSTsSL6ecf3CiXvFc+SivGpa1KS@postini.com; Wed, 13 May 2015 17:13:51 UTC Received: by mail-wi0-f169.google.com with SMTP id k4so207649319wiz.1 for ; Wed, 13 May 2015 10:13:28 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc :content-type; bh=9mFhpah3u06nMYRpVTYEvNO2t5kqRCH2yVg+aflLazg=; b=PHwz100ot7LEJpwYN+uSYmsDuiR1ZhZ9vxnooCOhfEbjv5UkRELIDOoj3/cDEQRk5i X09zXFVa7A2+2YuQI6BpygnvgzDNaTcNvOj5s6Na7K1t1l84d4pKKHy11ytisiZTNQ/r 1aVUqQmOtVVG6+ztsubr9AWNvpbpzQPd4b+vQP0kzzFxme986a2VI5jaaYqbRroQILzO R5dPWg8Z2KNgVRfww6rmT0zXL/hnBPape028uoNFS0GHTtyNJEphIt7z8ekGky2Kh7Fo DlNeKA4tIyneQc7oQtppFop+yS1TGR76RqNt/AtFXhpdhKetm69Uf4TkprbFpHZmisfp 2wyg== X-Received: by 10.194.89.130 with SMTP id bo2mr39703889wjb.17.1431527370057; Wed, 13 May 2015 07:29:30 -0700 (PDT) X-Gm-Message-State: ALoCoQkENdFNE/v+m9TdCtthWaLvimKNKKcCcblrETNes6y6JqwGnaHxpcopV6CupPohf2Pd5Gp/vgfAuI04RgO+CBxulNdjF9xNqzuy9Cl6zXGnjl2AI7Vpo/gFWgzVPNgzOHyi5dXliK2pNnjq8MrHV4ybF4sMcF1F2/8AQmbjtJVDLiz+4Vc= X-Received: by 10.194.89.130 with SMTP id bo2mr39703859wjb.17.1431527369848; Wed, 13 May 2015 07:29:29 -0700 (PDT) MIME-Version: 1.0 Received: by 10.194.14.161 with HTTP; Wed, 13 May 2015 07:29:09 -0700 (PDT) From: Paul Franklin Date: Wed, 13 May 2015 15:29:09 +0100 Message-ID: Subject: Re: Forums.FreeBSD.org - SSL Issue? To: freebsd-security@freebsd.org Cc: james.c.elstone@ntlworld.com Content-Type: text/plain; charset=ISO-8859-1 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 May 2015 17:13:52 -0000 Hi James, Yes I agree, it looks like the wrong intermediate cert has been used... Certificate: Subject: CN=forums.freebsd.org Issuer: CN=Gandi Standard SSL CA 2 Intermediate: Subject: CN=Gandi Standard SSL CA The certificate issuer CN doens't match the intermediate subject CN (note the missing 2) Regards, Paul. This e-mail message including any attachment(s) is intended for the addressee only and may be confidential. If you are not the intended addressee, we request that you notify us immediately and delete this e-mail including any attachment(s), without copying, forwarding, disclosing or using this (these) in any other way. Registered Name: The Grass Roots Group UK Ltd Place of Incorporation: England & Wales Registered Office: Pennyroyal Court, Station Road, Tring, Herts. HP23 5QY Registered No.: 4155659