Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
System is using my local self-signed certs in many external
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
fincoop
Tux's lil' helper
Tux's lil' helper


Joined: 02 Feb 2004
Posts: 131

PostPosted: Fri Aug 21, 2015 6:12 pm    Post subject: System is using my local self-signed certs in many external Reply with quote

Here's a weird one.

I tried to use WGET to fetch configuration files from the VPN provider and I saw another certificate error. This time, WGET reported that the server certificate was signed by my local CA, and that the hostname didn't match. It was comparing the common name of the server (correct) to the common name of a wildcard cert that my local CA had signed recently.

Any ideas why the system is using these certs? Does that get configured somewhere??

Code:
>>> wget https://<vpnprovider>/openvpn/openvpn.zip
--2015-08-21 14:04:09--  https://<vpnprovider>/openvpn/openvpn.zip
Resolving <vpnprovider>... <ipaddress>
Connecting to <vpnprovider>|<ipaddresss>|:443... connected.
ERROR: cannot verify <vpnprovider>'s certificate, issued by '<myRootCA>':
  Self-signed certificate encountered.
    ERROR: certificate common name '<myWildcardCert> doesn't match requested host name '<vpnprovider>'.
To connect to <vpnprovider> insecurely, use `--no-check-certificate'.
Back to top
View user's profile Send private message
Ant P.
Watchman
Watchman


Joined: 18 Apr 2009
Posts: 5592

PostPosted: Sat Aug 22, 2015 10:25 pm    Post subject: Reply with quote

You can try using `gnutls-cli` to see what the other end of the connection is actually sending.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum