From owner-freebsd-security@FreeBSD.ORG Wed May 13 19:28:45 2015 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id E468883A for ; Wed, 13 May 2015 19:28:45 +0000 (UTC) Received: from eu1sys200aog123.obsmtp.com (eu1sys200aog123.obsmtp.com [207.126.144.155]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 53CDB1ADA for ; Wed, 13 May 2015 19:28:44 +0000 (UTC) Received: from mail-wi0-f175.google.com ([209.85.212.175]) (using TLSv1) by eu1sys200aob123.postini.com ([207.126.147.11]) with SMTP ID DSNKVVOl1nsrhQCzisKRGym140VrtmzCf3N5@postini.com; Wed, 13 May 2015 19:28:45 UTC Received: by mail-wi0-f175.google.com with SMTP id di4so68311865wid.0 for ; Wed, 13 May 2015 12:28:22 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc :content-type; bh=tUJwB6Q5W+K+uqJGC2tEfjvkkG0tGMaxuVZEgDAYzwY=; b=UkjStnrVxVhLEIc0RJfp9HuQOFV0OjEsOoJz0RyRoKbDcYGHCdUEbVr06OcTNh+iEi OiUKnZHGcrEGAmqXmACH5Bd7cnsjwhhXI7QjNfhtqow9d+bMRbsd9iAZ0KFPPbsq/YI8 dykicRqm8NuIntJnUUzcp1ucDusE9j14AoTVyPiVIvnov0MK5b1I1hrKnrjFFcEXWrO/ 3J2MLfmvV1/hTlJvO2vbqNeqopZcJ2wq8UbYRSMvfxwrKYq/qM6iJQimvd/aPxSnGNVT JfuaWeAmgBdOVpW8mtT91mBCJDQkt9XhOlj1GmF99CcQRTILma/i6SS1/j9f7Kiqllq9 xCUQ== X-Received: by 10.180.14.135 with SMTP id p7mr15441140wic.8.1431531094984; Wed, 13 May 2015 08:31:34 -0700 (PDT) X-Gm-Message-State: ALoCoQm3zqu7FlsLRia5RVHVFdN6eFbPm9ioss8Ban9ZYtyN4gDGW+ABhBQ7TbYfSXcsgcTksCi3y8ouyLj7vvKtrJSjxlVE+3zjvmXJ7Ubpqfn4zd44JclddjyHxRKpekY+sYJ/SoKGb+/GgrG+6QzjeMqr0V+kaXOLlj7Lo0Dntmlj4J84J4s= X-Received: by 10.180.14.135 with SMTP id p7mr15441066wic.8.1431531094434; Wed, 13 May 2015 08:31:34 -0700 (PDT) MIME-Version: 1.0 Received: by 10.194.14.161 with HTTP; Wed, 13 May 2015 08:31:14 -0700 (PDT) From: Paul Franklin Date: Wed, 13 May 2015 16:31:14 +0100 Message-ID: Subject: Forums.FreeBSD.org - SSL Issue? To: freebsd-security Cc: "james.c.elstone" Content-Type: text/plain; charset=ISO-8859-1 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 May 2015 19:28:46 -0000 >> Hi All, >> Can anyone confirm if the SSL key chain on forums.freebsd.org is OK? >> I'm getting a number of key chain errors with the Gandi key chain lacking >> intermediate CAs... >> Kr, >> James. > > > Hi James, > Yes I agree, it looks like the wrong intermediate cert has been used... > Certificate: > Subject: CN=forums.freebsd.org > Issuer: CN=Gandi Standard SSL CA 2 > Intermediate: > Subject: CN=Gandi Standard SSL CA > The certificate issuer CN doens't match the intermediate subject CN > (note the missing 2) > Regards, > Paul. Hi all, This seems to have been resolved now James, please can you also confirm that you're no longer seeing the errors? It looks good to me Thanks, Paul. This e-mail message including any attachment(s) is intended for the addressee only and may be confidential. If you are not the intended addressee, we request that you notify us immediately and delete this e-mail including any attachment(s), without copying, forwarding, disclosing or using this (these) in any other way. Registered Name: The Grass Roots Group UK Ltd Place of Incorporation: England & Wales Registered Office: Pennyroyal Court, Station Road, Tring, Herts. HP23 5QY Registered No.: 4155659