The DMZ

« first day (2206 days earlier) ← previous day next day → last day (2972 days later) »

deostroll

05:25

@AviD that is what I read...My question is how do software applications operate to validate or trust a certificate? Is it that the OS has some certificates and low-level API that running programs can call to do the "trusting"...OR...is it that programs itself has a list of certificates which it somehow internally manages...

Terry Chia

05:36

@deostroll It Depends™.

Operating systems have their own trust stores, many programs rely on them. Some programs like Firefox for example distribute their own trust stores.

deostroll

What do java programs usually do in this context?

12 hours later…

Stack Exchange

17:19

Things are looking good for the eclipse--Nate Silver says Earth will almost definitely still have a moon in August.

Limit

17:35

What is with so many secret hats?

Seems like most of the hats that I am earning are secret :P

Seems like a consolation prize for people who didn't earn many hats :P

Alan Watch

18:13

@Limit network admin won't be able to detect if you're using wireshark on their network. Have you checked what certificates you are getting for that website?

@deostroll which java program? Any C++ application can also use that trust store for certificate verification

@StackExchange How do you create these comics?

2 hours later…

Rory Alsop

20:07

@AlanWatch xkcd is just a room feed. the Stackexchange bot ust posts them for us.

@Limit because everyone demands them every year

4 hours later…

Gilles

23:51

Q: How to find which key exactly `dh key too small` OpenSSL error is about?

I'm trying to figure out why I'm getting the error 140079157163688:error:14082174:SSL routines:SSL3_CHECK_CERT_AND_ALGORITHM:dh key too small:s3_clnt.c:3435: when connecting to, in my case, a POP3 mail server. Here's an OpenSSL s_client dump when trying to connect. The error is right before the ...