Yo Amar!

On Sat, 11 Jun 2016 02:02:37 +0000
Amar Takhar <v...@darkbeer.org> wrote:

> On 2016-06-10 18:16 -0700, Gary E. Miller wrote:
> > Yo Webmaster!
> > 
> > Soemthing marginal about the ntpsec.org SSL cert, as seen by
> > Wheezy:  
> 
> I have no idea what's going on.  Our certificate is signed by
> GlobalSign.  I checked from multiple hosts it works fine.

Here are three test sites that agree with me:

    https://www.sslshopper.com/ssl-checker.html#hostname=ntpsec.org

"One of the root or intermediate certificates has expired (115 days ago)"

Ditto:

    https://www.digicert.com/help/

Qualys give the site an F:

    https://www.ssllabs.com/ssltest/analyze.html?d=ntpsec.org

"Chain issues   Incorrect order, Extra certs"

Cert 2: 

Valid until     Wed, 17 Feb 2016 16:05:02 UTC (expired 3 months and 24 days 
ago)   EXPIRED

DROWN (experimental):   Vulnerable (same key with SSL v2)




RGDS
GARY
---------------------------------------------------------------------------
Gary E. Miller Rellim 109 NW Wilmington Ave., Suite E, Bend, OR 97703
        g...@rellim.com  Tel:+1 541 382 8588

Attachment: pgpswDHI_D9ZM.pgp
Description: OpenPGP digital signature

_______________________________________________
devel mailing list
devel@ntpsec.org
http://lists.ntpsec.org/mailman/listinfo/devel

Reply via email to