Why are there still preinstalled MD2 Root Certs from verisign with FF3,4,5 ?
Hi,
i added a verisign root certificate in the troubleshooting section. This cert is signed with an md2 hashing algorithm, as mentioned on the 26c3 in berlin 2009.
It's still enabled by default for WEB, Email and other.
I strongly suggest to remove it, like anyone else did.
Interesstingly, the cryto shell extention from windows says sha1 , but openssl does not mention sha1 at all. I think openssl is right :)
Hi,
i added a verisign root certificate in the troubleshooting section.
This cert is signed with an md2 hashing algorithm, as mentioned on the 26c3 in berlin 2009.
It's still enabled by default for WEB, Email and other.
I strongly suggest to remove it, like anyone else did.
Interesstingly, the cryto shell extention from windows says sha1 , but openssl does not mention sha1 at all. I think openssl is right :)
Tất cả các câu trả lời (3)
See:
- Cert Viewer Plus: https://addons.mozilla.org/firefox/addon/1964
Nice tool, but it doesn't answere or help with this problem/question.
Do those certificates have a SHA1 fingerprint?
I do not think that Firefox will use the MD5 (MD2?) fingerprint if that is the case.