Re: [tor-talk] "Invalid Server Certificate" accessing torproject.org on Chrome/Windows

[Koh Choon Lin <2choonlin@xxxxxxxxx>]

Hi

On Fri, Jan 6, 2012 at 10:18 AM, Greg <Greg@xxxxxxxxxxxxxxxx> wrote:
> Great! I will try this out when I get home today.  That link says to
> install the hotfix located here:
> http://support.microsoft.com/default.aspx?scid=kb;EN-US;938397
>
> Thanks,
> Greg
>
> 2012/1/5 Ondrej Mikle <ondrej.mikle@xxxxxxxxx>:
>> On 01/05/12 17:52, Greg wrote:
>>>
>>> Hey Ondrej,
>>> Here's some info from msinfo32:
>>>
>>> OS Name Microsoft(R) Windows(R) Server 2003, Enterprise
>>> EditionVersion  5.2.3790 Service Pack 2 Build 3790OS
>>> Manufacturer    Microsoft Corporation
>>> System Manufacturer     MSI
>>> System Model    MS-7350System Type      X86-based PCProcessor   x86 Family
>>> 6
>>> Model 15 Stepping 11 GenuineIntel ~3000 MhzProcessor    x86 Family 6
>>> Model 15 Stepping 11 GenuineIntel ~3000 MhzHardware Abstraction
>>> Layer   Version = "5.2.3790.3959 (srv03_sp2_rtm.070216-1710)"
>>
>>
>> Problem solved: Windows Server 2003 and WinXP before SP3 do not support
>> SHA256 hash (and other SHA-2 family hashes), that's why the cert validation
>> fails. (Well, CryptoAPI could have given a more meaningful error...)
>>
>> See for details:
>> http://www.pkware.com/documents/CertificateInteroperability.pdf
>>
>> Ondrej

Will be trying this over the weekend too. Hopefully I can get a server
edition to experiment too. Thanks for the link.


-- 
Regards
Koh Choon Lin
_______________________________________________
tor-talk mailing list
tor-talk@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk