Re: [Sks-devel] hkps pool

[Kristian Fiskerstrand]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 06/25/2013 10:57 PM, Kristian Fiskerstrand wrote:
> On 06/25/2013 10:51 PM, Daniel Austin wrote:
>> Hi Kristian,
> 
> ...
> 
> 
>> If it helps... running openssl with -servername to trigger SNI 
>> also comes back that a few hosts in the pool are not returning
>> the correct CA signed cert.
> 
> 
> Yeah thanks.. seems something is funky with my setup atm. Thanks
> for reporting,  I'm investigating it. (I know since I never issued
> a cert for the VT server, so it certainly shouldn't be part of the
> pool)
> 
> 

Thanks for reporting the issue Daniel, I've just forced an update of
the pool that should hopefully fix this. Seems a recent upgrade of
libraries had re-added the root CA bundle to my system.

Adding to TODO to check the SNI hostname response to my scripts....

- -- 
- ----------------------------
Kristian Fiskerstrand
Twitter: @krifisk
- ----------------------------
Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
- ----------------------------
Qui audet vincit
Who dares wins
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.1.0-beta210 (GNU/Linux)
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=r8VX
-----END PGP SIGNATURE-----