Delivery-Date: Wed, 02 Jul 2014 00:27:04 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.9 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED,
	RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 549221E0CB9
	for <archiver@seul.org>; Wed,  2 Jul 2014 00:27:02 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id BB41D2FC76;
	Wed,  2 Jul 2014 04:26:57 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 786E12FC5C
 for <tor-talk@lists.torproject.org>; Wed,  2 Jul 2014 04:16:51 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id rYkPzrsvc8NF for <tor-talk@lists.torproject.org>;
 Wed,  2 Jul 2014 04:16:51 +0000 (UTC)
Received: from mari.romanrm.net (mari.romanrm.net
 [IPv6:2400:8500:1301:801:157:7:203:202])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by eugeni.torproject.org (Postfix) with ESMTPS id 3A1992FAAD
 for <tor-talk@lists.torproject.org>; Wed,  2 Jul 2014 04:16:51 +0000 (UTC)
Received: from natsu (unknown [IPv6:fd39::a60:6eff:fef3:b5b3])
 by mari.romanrm.net (Postfix) with ESMTPS id D64F826B47;
 Wed,  2 Jul 2014 04:16:13 +0000 (UTC)
Date: Wed, 2 Jul 2014 10:16:10 +0600
From: Roman Mamedov <rm@romanrm.net>
To: tor-talk@lists.torproject.org
Message-ID: <20140702101610.4dd37ec8@natsu>
In-Reply-To: <53B3029F.8000907@tunnel19.com>
References: <53B3029F.8000907@tunnel19.com>
X-Mailer: Claws Mail 3.8.1 (GTK+ 2.24.10; x86_64-pc-linux-gnu)
Mime-Version: 1.0
Subject: Re: [tor-talk] StartCom certs untrusted
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============7482754713076516557=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

--===============7482754713076516557==
Content-Type: multipart/signed; micalg=PGP-SHA1;
 boundary="Sig_/XQWvS2LGDjOJhYvke/AtPWs"; protocol="application/pgp-signature"

--Sig_/XQWvS2LGDjOJhYvke/AtPWs
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

On Tue, 01 Jul 2014 11:49:03 -0700
Garth Patil <garth@tunnel19.com> wrote:

> Hi,
> I'm using Tor Browser 3.6.2-MacOS. I have a site that uses a free class
> 1 SSL cert from StartCom <https://www.startssl.com/>. Recent versions of
> Chrome and Firefox don't seem to have this problem, but Tor Browser
> gives the untrusted error. Is there a reason this CA isn't included?

I've just tested with TBB on Windows, and it does recognize such certs
properly. Which website are you talking about? Post the URL if it's not
sensitive. Maybe they don't attach StartCom's intermediate certs (as I think
StartCom's instructions recommend to do).

--=20
With respect,
Roman

--Sig_/XQWvS2LGDjOJhYvke/AtPWs
Content-Type: application/pgp-signature; name=signature.asc
Content-Disposition: attachment; filename=signature.asc

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlOzh4oACgkQTLKSvz+PZwgaRACeJSi1tjjT1C4BNcAOE1FhfNMT
YQEAn2w/pGenAHf+aC0ktNmDj5hly7S8
=VrrB
-----END PGP SIGNATURE-----

--Sig_/XQWvS2LGDjOJhYvke/AtPWs--

--===============7482754713076516557==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

--===============7482754713076516557==--

