Re: Certificate Patrol error (or malformed ssl certificate?)
On 2010-04-11 22:36 PST, Kurt Seifried wrote: Kurt, I suggest you try posting this again, without the image, but WITH the certificate that caused Certificate Patrol to complain. As it is, there's no information in this posting with which anyone can help you. That would be the PEM file I placed in the directory. https://www.seifried.org/tmp/certificate-patrol/easyweb36x.tdcanadatrust.com.pem That certificate contains two dates, both encoded as UTC Time fields. Both are strings. The strings are: 10031500Z 110419235959Z which are of the form yymmddhhmmssZONE UTC Time fields have only a 2 digit year. IIRC, numbers less than 50 are presumed to be nn+2000 and numbers greater than 49 are presumed to be nn+1900. So, those dates above are 2010-03-15 00:00:00 UTC and 2011-04-19 23:59:59 UTC. I'm pretty sure Mozilla software handles that just fine. Evidently that add-on can't handle them. :-/ There is another preferred syntax for dates in certificates, known as the GeneralizedTime. Its format is ccyymmddhhmmssZONE. It MUST be used to represent dates past 2049 or before 1950. So, it sounds like this is not a complaint about any Mozilla software, e.g. Firefox or Thunderbird, but rather a complaint about an add-on named Certificate Patrol (of which I'd never heard before reading your message). If so, I suspect this mailing list/newsgroup is the wrong place for your complaint. The people who run the addons server don't participate in this list/newsgroup. Right but I can't find any contact info for certificate patrol and I figured if anyone knew about it, they're probably on this list. That and I couldn't find an add-ons mailing list (how does on get on contact with them?). The word contact doesn't occur at https://addons.mozilla.org/en-US/firefox/ and so on. Maybe you should take that up on mozilla.governance. If you know how to contact the add-ons people that'd be nice to know. Alas, I don't. Sorry. Some people who develop addons hang out in mozilla.dev.extensions. Maybe the people who run addons.m.o are there, too. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
Re: Certificate Patrol error (or malformed ssl certificate?)
On 12.04.2010 07:36, Kurt Seifried wrote: Right but I can't find any contact info for certificate patrol and I figured if anyone knew about it, they're probably on this list. That and I couldn't find an add-ons mailing list (how does on get on contact with them?). The word contact doesn't occur at https://addons.mozilla.org/en-US/firefox/ and so on. If you know how to contact the add-ons people that'd be nice to know. Kurt, I found http://patrol.psyced.org/ Scroll down to section about us, which links to a webchat and an IRC room. Kai -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
Re: Certificate Patrol error (or malformed ssl certificate?)
On 12.04.2010 16:22, Kai Engert wrote: On 12.04.2010 07:36, Kurt Seifried wrote: Right but I can't find any contact info for certificate patrol and I figured if anyone knew about it, they're probably on this list. That and I couldn't find an add-ons mailing list (how does on get on contact with them?). The word contact doesn't occur at https://addons.mozilla.org/en-US/firefox/ and so on. If you know how to contact the add-ons people that'd be nice to know. Kurt, I found http://patrol.psyced.org/ Scroll down to section about us, which links to a webchat and an IRC room. I talked to them, they said the bug should have been fixed already, but the updated version is not yet available on addons.mozilla.org If you want to test, you could get it from https://psyced.org/mozilla/certpatrol.xpi (use at your own risk) (The link is also contained on the page I quoted above, search for If you can't wait for the Mozilla staff review, you can preview the next CertPatrol version right here.) Kai PS: I'm not involved in creating the above addon, just forwarding some communication. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
Re: Certificate Patrol error (or malformed ssl certificate?)
On 2010-04-10 18:33 PST, Kurt Seifried wrote: So I logged in to a bank today and Certificate Patrol threw up a warning I haven't seen before (see attached image). Kurt, I suggest you try posting this again, without the image, but WITH the certificate that caused Certificate Patrol to complain. As it is, there's no information in this posting with which anyone can help you. What is wrong with this you ask? Look at the dates on the certificates. When is 204/19/2010 exactly? So I downloaded the certificate and ran it through openssl, the text output looks ok, and it looks ok in Firefox's certificate screen. I can't find a way to contact certificate patrol to report a bug though: https://addons.mozilla.org/en-US/firefox/addon/6415 So, it sounds like this is not a complaint about any Mozilla software, e.g. Firefox or Thunderbird, but rather a complaint about an add-on named Certificate Patrol (of which I'd never heard before reading your message). If so, I suspect this mailing list/newsgroup is the wrong place for your complaint. The people who run the addons server don't participate in this list/newsgroup. This is the first time I have seen Certificate Patrol do this. If anyone knows how to contact them if you could forward this on I'd appreciate it, or let me know how to contact them that'd work to. CC'ing Joe Schiavo as well just in case the certificate is broken in a subtle manner (although as best I can tell it's ok). It might be a good idea to require some sort of contact info (i.e. email address) or a website with useful information for add-ons so people can get in contact with authors to report bugs/etc. -Kurt -- 12345678901234567890123456789012345678901234567890123456789012345678901234567890 0112233445566778 -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
Re: Certificate Patrol error (or malformed ssl certificate?)
Kurt, I suggest you try posting this again, without the image, but WITH the certificate that caused Certificate Patrol to complain. As it is, there's no information in this posting with which anyone can help you. That would be the PEM file I placed in the directory. https://www.seifried.org/tmp/certificate-patrol/easyweb36x.tdcanadatrust.com.pem So, it sounds like this is not a complaint about any Mozilla software, e.g. Firefox or Thunderbird, but rather a complaint about an add-on named Certificate Patrol (of which I'd never heard before reading your message). If so, I suspect this mailing list/newsgroup is the wrong place for your complaint. The people who run the addons server don't participate in this list/newsgroup. Right but I can't find any contact info for certificate patrol and I figured if anyone knew about it, they're probably on this list. That and I couldn't find an add-ons mailing list (how does on get on contact with them?). The word contact doesn't occur at https://addons.mozilla.org/en-US/firefox/ and so on. If you know how to contact the add-ons people that'd be nice to know. -Kurt -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
