Avatar for Username

Pesquisar no apoio

Evite burlas no apoio. Nunca iremos solicitar que telefone ou envie uma mensagem de texto para um número de telefone ou que partilhe informações pessoais. Por favor, reporte atividades suspeitas utilizando a opção "Reportar abuso".

Saber mais

Esta discussão foi arquivada. Se precisar de ajuda, por favor, coloque uma nova questão.

Why are there still preinstalled MD2 Root Certs from verisign with FF3,4,5 ?

  • 3 respostas
  • 2 têm este problema
  • 187 visualizações
  • Última resposta por cor-el

rootbash
rootbash
more options

Hi,

i added a verisign root certificate in the troubleshooting section. This cert is signed with an md2 hashing algorithm, as mentioned on the 26c3 in berlin 2009.

It's still enabled by default for WEB, Email and other.

I strongly suggest to remove it, like anyone else did.

Interesstingly, the cryto shell extention from windows says sha1 , but openssl does not mention sha1 at all. I think openssl is right :)

Hi, i added a verisign root certificate in the troubleshooting section. This cert is signed with an md2 hashing algorithm, as mentioned on the 26c3 in berlin 2009. It's still enabled by default for WEB, Email and other. I strongly suggest to remove it, like anyone else did. Interesstingly, the cryto shell extention from windows says sha1 , but openssl does not mention sha1 at all. I think openssl is right :)

Todas as respostas (3)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

See:

rootbash
rootbash Proprietário da pergunta
more options

Nice tool, but it doesn't answere or help with this problem/question.

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Do those certificates have a SHA1 fingerprint?

I do not think that Firefox will use the MD5 (MD2?) fingerprint if that is the case.