NETANN-L Archives

- NETANN-L - Networkmaine Network Announcement List

NETANN-L@LISTS.MAINE.EDU

Options: Use Forum View

Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Irelann Anderson <[log in to unmask]>
Reply To:
- NETANN-L - Networkmaine Network Announcement List <[log in to unmask]>
Date:
Tue, 10 Dec 2013 11:28:16 -0500
Content-Type:
text/plain
Parts/Attachments:
text/plain (30 lines)
Due to some critical software in use that does not properly handle SSL CA
stores (instead trusting a particular certificate or only one root), we are
forced to change NameP and NameO to a CA2 signed cert for a hopefully short
time while these are fixed.   This should take care of that software that
trusts CA2, it will not fix that that trusts a particular certificate since
the old one has expired.

Unfortunately, those who have fixed their software since this morning to
trust InCommmon instead of CA2 or the particular certs installed will break
again.

This is a temporary work around and the certs will be switched back to
InCommon during a future maintenance window.

We apologize for the inconvenience.

For those who'd auth broke, please work to use the new InCommon certs or
update the software to use a CA trust store.




-- 
Irelann Kerry Anderson          phone:    (207)561-3508
Systems and Operations
Information Technology Services
University of Maine System
5752 Neville Hall
Orono, Maine 04469-5752

ATOM RSS1 RSS2