-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
hi
On 05/28/2011 07:06 PM, Hans-Christoph Steiner wrote:
Ok, since I'm going a lot of security stuff, I'm TLS wary. Could you post a PGP-signed email of the MD5 and SHA1 of the puredata.info cert onto pd-list or pd-announce?
sure,
MD5 : b84cf6b592ad888a1b9c3a3c88093a2f SHA1: f78bba07c44faae4d2e0e0c4932880d5b21a9f1f
however, note that: the puredata.info certificates are signed by cacert.org [1], so trusting the cacert.org authority would help establish a web of trust (similar to gpg) for free server certificates.
fgamsdr IOhannes
.hc
On Sat, 2011-05-28 at 21:14 +0200, IOhannes m zmölnig wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
hi
On 05/28/2011 07:06 PM, Hans-Christoph Steiner wrote:
Ok, since I'm going a lot of security stuff, I'm TLS wary. Could you post a PGP-signed email of the MD5 and SHA1 of the puredata.info cert onto pd-list or pd-announce?
sure,
MD5 : b84cf6b592ad888a1b9c3a3c88093a2f SHA1: f78bba07c44faae4d2e0e0c4932880d5b21a9f1f
however, note that: the puredata.info certificates are signed by cacert.org [1], so trusting the cacert.org authority would help establish a web of trust (similar to gpg) for free server certificates.
Thanks!
That I know, but TLS certs can be such a pain to install on some platforms that its worth it just verifying the fingerprint instead. Ever try to get the cacert signing cert to work with Chrome on GNU/Linux? Painful.
.hc
On May 28, 2011, at 3:14 PM, IOhannes m zmölnig wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
hi
On 05/28/2011 07:06 PM, Hans-Christoph Steiner wrote:
Ok, since I'm going a lot of security stuff, I'm TLS wary. Could you post a PGP-signed email of the MD5 and SHA1 of the puredata.info cert onto pd-list or pd-announce?
sure,
MD5 : b84cf6b592ad888a1b9c3a3c88093a2f SHA1: f78bba07c44faae4d2e0e0c4932880d5b21a9f1f
however, note that: the puredata.info certificates are signed by cacert.org [1], so
trusting the cacert.org authority would help establish a web of trust
(similar to gpg) for free server certificates.
I've tried from two different internet connections, and I get
different fingerprints:
.hc
'You people have such restrictive dress for women,’ she said, hobbling
away in three inch heels and panty hose to finish out another pink-
collar temp pool day. - “Hijab Scene #2", by Mohja Kahf
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
On May 28, 2011, at 3:14 PM, IOhannes m zmölnig wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
hi
On 05/28/2011 07:06 PM, Hans-Christoph Steiner wrote:
Ok, since I'm going a lot of security stuff, I'm TLS wary. Could you post a PGP-signed email of the MD5 and SHA1 of the puredata.info cert onto pd-list or pd-announce?
sure,
MD5 : b84cf6b592ad888a1b9c3a3c88093a2f SHA1: f78bba07c44faae4d2e0e0c4932880d5b21a9f1f
however, note that: the puredata.info certificates are signed by cacert.org [1], so
trusting the cacert.org authority would help establish a web of trust
(similar to gpg) for free server certificates.
And here's a signed text version:
puredata.info
Not Valid Before: April 18, 2011 6:59:44 AM EDT Not Valid After: April 17, 2013 6:59:44 AM EDT
SHA1 03:DB:DC:0B:AD:48:73:AF:2D:52:BE:75:3B:D7:F4:0F:18:B8:BA:A7 MD5 97:09:4F:C7:6F:61:72:CB:E2:E0:08:38:FA:2F:F0:52
.hc
¡El pueblo unido jamás será vencido!
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 2011-06-02 02:37, Hans-Christoph Steiner wrote:
however, note that: the puredata.info certificates are signed by cacert.org [1], so trusting the cacert.org authority would help establish a web of trust (similar to gpg) for free server certificates.
And here's a signed text version:
puredata.info
Not Valid Before: April 18, 2011 6:59:44 AM EDT Not Valid After: April 17, 2013 6:59:44 AM EDT
SHA1 03:DB:DC:0B:AD:48:73:AF:2D:52:BE:75:3B:D7:F4:0F:18:B8:BA:A7 MD5 97:09:4F:C7:6F:61:72:CB:E2:E0:08:38:FA:2F:F0:52
this is indeed true, and the reason for the mismatch is, that i was generating completely nonsense fingerprints (just running "md5sum" resp. "sha1sum" on the certificate...oops, seems i was tired...)
so here go the correct fingerprints as generated from: $ openssl x509 -noout -fingerprint -sha1 -in /path/to/pd.cert SHA1 Fingerprint=03:DB:DC:0B:AD:48:73:AF:2D:52:BE:75:3B:D7:F4:0F:18:B8:BA:A7 $ openssl x509 -noout -fingerprint -md5 -in /path/to/pd.cert MD5 Fingerprint=97:09:4F:C7:6F:61:72:CB:E2:E0:08:38:FA:2F:F0:52
now these seem to be more correct :-) sorry for the confusion in such a delicate matter.
fgasmdr IOhannes
PS: and her are the instructions for getting cacert.org to play nicely with google chrome: http://wiki.cacert.org/BrowserClients#Google_Chrome
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
On Jun 6, 2011, at 5:49 AM, IOhannes m zmoelnig wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 2011-06-02 02:37, Hans-Christoph Steiner wrote:
however, note that: the puredata.info certificates are signed by cacert.org [1], so
trusting the cacert.org authority would help establish a web of trust
(similar to gpg) for free server certificates.And here's a signed text version:
puredata.info
Not Valid Before: April 18, 2011 6:59:44 AM EDT Not Valid After: April 17, 2013 6:59:44 AM EDT
SHA1 03:DB:DC:0B:AD:48:73:AF:2D:52:BE:75:3B:D7:F4:0F:18:B8:BA:A7 MD5 97:09:4F:C7:6F:61:72:CB:E2:E0:08:38:FA:2F:F0:52
this is indeed true, and the reason for the mismatch is, that i was generating completely nonsense fingerprints (just running "md5sum"
resp. "sha1sum" on the certificate...oops, seems i was tired...)so here go the correct fingerprints as generated from: $ openssl x509 -noout -fingerprint -sha1 -in /path/to/pd.cert SHA1 Fingerprint=03:DB:DC:0B:AD:48:73:AF:2D:52:BE:75:3B:D7:F4:0F: 18:B8:BA:A7 $ openssl x509 -noout -fingerprint -md5 -in /path/to/pd.cert MD5 Fingerprint=97:09:4F:C7:6F:61:72:CB:E2:E0:08:38:FA:2F:F0:52
now these seem to be more correct :-) sorry for the confusion in such a delicate matter.
Yup, looks like everything matches, thanks.
.hc
Looking at things from a more basic level, you can come up with a more
direct solution... It may sound small in theory, but it in practice,
it can change entire economies. - Amy Smith
On May 28, 2011, at 3:14 PM, IOhannes m zmölnig wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
hi
On 05/28/2011 07:06 PM, Hans-Christoph Steiner wrote:
Ok, since I'm going a lot of security stuff, I'm TLS wary. Could you post a PGP-signed email of the MD5 and SHA1 of the puredata.info cert onto pd-list or pd-announce?
sure,
MD5 : b84cf6b592ad888a1b9c3a3c88093a2f SHA1: f78bba07c44faae4d2e0e0c4932880d5b21a9f1f
however, note that: the puredata.info certificates are signed by cacert.org [1], so
trusting the cacert.org authority would help establish a web of trust
(similar to gpg) for free server certificates.
Here its the same signature as the one I just posted verified by
cacert. Ok enough with the fingerprints ;)
¡El pueblo unido jamás será vencido!
-
Hans-Christoph Steiner -
IOhannes m zmoelnig -
IOhannes m zmölnig