Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Distrust certs issued after 00:00:00 Oct. 21, 2016 by StartCom and WoSign #9469

Closed
wants to merge 2 commits into from
Closed

Distrust certs issued after 00:00:00 Oct. 21, 2016 by StartCom and WoSign #9469

wants to merge 2 commits into from

Commits on Feb 3, 2017

  1. crypto: add cert check issued by StartCom/WoSign 

    When tls client connects to the server with certification issued by
either StartCom or WoSign listed in StartComAndWoSignData.inc, check
notBefore of the server certificate and CERT_REVOKED error returns if
it is after 00:00:00 on October 21, 2016.

See for details in
https://blog.mozilla.org/security/2016/10/24/distrusting-new-wosign-and-startcom-certificates/,
https://security.googleblog.com/2016/10/distrusting-wosign-and-startcom.html
and
https://support.apple.com/en-us/HT204132
    @shigeki
    shigeki committed Feb 3, 2017
    Configuration menu
    Copy the full SHA
    a8a4a4c View commit details
    Browse the repository at this point in the history

  2. crypto: Remove expired certs from CNNIC whitelist 

    CNNIC Whitelist was updated with removing expired certificates.
    @shigeki
    shigeki committed Feb 3, 2017
    Configuration menu
    Copy the full SHA
    651b3a9 View commit details
    Browse the repository at this point in the history