Options

12.6.4 build-in certificates

rv@kaufmann.dkrv@kaufmann.dk
in Firebox - Certificates

Hi,
I have upgraded a couple of M370 to 12.6.4 and see the fireware image contains quite a few expired certificates from Thawte, Microsoft and others.

Please remove these absolete certificates from the images.

Regards
Robert

Comments

  • Options
    greggmh123greggmh123

    Nice catch!

    I checked my T20 running 12.6.3, and it had the following expired certs. I deleted all of them, then upgraded to 12.6.4, and the exact same expired certs came back. So, an image clean up is well overdue!

    Expired certs in 12.6.3 Fireware

    Expired 2020-12-15 17:54 Trusted CA for Proxies RSA c=ZA st=Western Cape l=Cape Town o=Thawte Consulting ou=Certification Services Division cn=Thawte Personal Freemail CA email=personal-freemail@thawte.com
    Expired 2020-12-15 17:54 Trusted CA for Proxies RSA c=ZA st=Western Cape l=Cape Town o=Thawte Consulting cc ou=Certification Services Division cn=Thawte Premium Server CA email=premium-server@thawte.com
    Expired 2020-12-15 17:54 Trusted CA for Proxies RSA c=ZA st=Western Cape l=Cape Town o=Thawte Consulting ou=Certification Services Division cn=Thawte Personal Premium CA email=personal-premium@thawte.com
    Expired 2020-12-15 17:54 Trusted CA for Proxies RSA c=ZA st=Western Cape l=Durbanville o=Thawte ou=Thawte Certification cn=Thawte Timestamping CA
    Expired 2020-12-15 17:54 Trusted CA for Proxies RSA ou=Copyright (c) 1997 Microsoft Corp. cn=Microsoft Root Authority
    Expired 2020-12-15 17:54 Trusted CA for Proxies RSA c=ZA st=Western Cape l=Cape Town o=Thawte Consulting cc ou=Certification Services Division cn=Thawte Server CA email=server-certs@thawte.com
    Expired 2020-12-15 17:53 Trusted CA for Proxies RSA c=VE st=Miranda l=Chacao o=Sistema Nacional de Certificacion Electronica ou=Proveedor de Certificados PROCERT cn=PSCProcert email=contacto@procert.net.ve
    Expired 2020-12-15 17:53 Trusted CA for Proxies RSA c=ZA st=Western Cape l=Cape Town o=Thawte Consulting cc ou=Certification Services Division cn=Thawte Premium Server CA email=premium-server@thawte.com
    Expired 2020-12-15 17:53 Trusted CA for Proxies RSA c=FR st=France l=Paris o=PM/SGDN ou=DCSSI cn=IGC/A email=igca@sgdn.pm.gouv.fr
    Expired 2020-12-15 17:53 Trusted CA for Proxies RSA c=si o=state-institutions ou=sigov-ca
    Expired 2020-12-15 17:53 Trusted CA for Proxies RSA c=ZA st=Western Cape l=Cape Town o=Thawte Consulting ou=Certification Services Division cn=Thawte Personal Basic CA email=personal-basic@thawte.com
    Expired 2020-12-15 17:53 Trusted CA for Proxies RSA c=ZA st=Western Cape l=Cape Town o=Thawte Consulting ou=Certification Services Division cn=Thawte Personal Basic CA email=personal-basic@thawte.com
    Expired 2020-12-15 17:53 Trusted CA for Proxies RSA c=ZA st=Western Cape l=Cape Town o=Thawte Consulting ou=Certification Services Division cn=Thawte Personal Premium CA email=personal-premium@thawte.com
    Expired 2020-12-15 17:53 Trusted CA for Proxies RSA c=ZA st=Western Cape l=Cape Town o=Thawte Consulting cc ou=Certification Services Division cn=Thawte Server CA email=server-certs@thawte.com
    Expired 2020-12-15 17:53 Trusted CA for Proxies RSA c=ZA st=Western Cape l=Durbanville o=Thawte ou=Thawte Certification cn=Thawte Timestamping CA
    Expired 2020-12-15 17:53 Trusted CA for Proxies RSA c=ZA st=Western Cape l=Cape Town o=Thawte Consulting ou=Certification Services Division cn=Thawte Personal Freemail CA email=personal-freemail@thawte.com

    Gregg Hill

Sign In to comment.