Re: zc.ssl ca chain

"Senner, Talin" <[email protected]>
Newsgroups gmane.comp.web.zope.devel
Message-ID <CAJGA66syOWsu=aM8q7gbv0Y7_4-_c9tRG25+OjqNTxA+8=3VGw@mail.gmail.com>
It's that the current certs.pem doesn't contain the updated chain for
test.authorize.net/secure.authorize.net etc.  Using the current will throw
an ssl error.

I've fixed my local instance of this using the local system certificate
chain.

For the future i'll let the developers know that zc.ssl is deprecated.

Thanks again.

Talin

On Fri, Jan 25, 2013 at 11:16 AM, Jim Fulton <[email protected]> wrote:

> On Fri, Jan 25, 2013 at 12:00 PM, Jim Fulton <[email protected]> wrote:
> > On Fri, Jan 25, 2013 at 11:22 AM, Senner, Talin <[email protected]>
> wrote:
> >> Would someone that has access be able to update zc.ssl and release a new
> >> version:
> >>
> >> http://svn.zope.org/zc.ssl/trunk/src/zc/ssl/certs.pem
> >>
> >> with a new version of ca root certificates (something say from a latest
> >> linux release from /etc/ssl ). The current cert chain is over 5 years
>  old.
>
> The certificates in zc.ssl haven't changed.
>
> > I'll take care of this.  Note that we (ZC) will likely move to requests
> and
> > stop maintaining zc.ssl.
>
> There's nothing to do at this point.  If you want more root CAs, I suggest
> using requests, or forking zc.ssl and adding certs to your fork.
>
> Jim
>
> --
> Jim Fulton
> http://www.linkedin.com/in/jimfulton
> Jerky is better than bacon! http://zo.pe/Kqm
>

_______________________________________________
Zope-Dev maillist  -  [email protected]
https://mail.zope.org/mailman/listinfo/zope-dev
**  No cross posts or HTML encoding!  **
(Related lists -
 https://mail.zope.org/mailman/listinfo/zope-announce
 https://mail.zope.org/mailman/listinfo/zope )
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.