www-infrastructure-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "David Nalley (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (INFRA-7579) Self-signed cert for SMTPS on people.apache.org has wrong CN
Date Fri, 13 Jun 2014 15:15:03 GMT

     [ https://issues.apache.org/jira/browse/INFRA-7579?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel

David Nalley updated INFRA-7579:

    Assignee: Joe Schaefer

> Self-signed cert for SMTPS on people.apache.org has wrong CN
> ------------------------------------------------------------
>                 Key: INFRA-7579
>                 URL: https://issues.apache.org/jira/browse/INFRA-7579
>             Project: Infrastructure
>          Issue Type: Bug
>            Reporter: Shawn Heisey
>            Assignee: Joe Schaefer
>             Fix For: Apr 2013
> The self-signed certificate on people.apache.org:465 (SMTP/SSL) says that it's for mail.apache.org
... except that mail.apache.org is a completely different machine that's not listening on
port 465 or 587.
> Chances are that I can accept this certificate without fear, but I'm only going to do
so on a temporary basis, and only if INFRA provides a fingerprint and says it's OK to accept
a cert with that fingerprint.
> I believe that the certificate should reflect the actual name that gets used to connect
to the machine.  Only then will I feel comfortable with a permanent security exception.

This message was sent by Atlassian JIRA

View raw message