[PLUG] Untrusted web sites

[Russell Senior]

>>>>> "Dan" == Dan Young <danielmyoung at gmail.com> writes:

Dan> dyoung$ openssl s_client -connect www.dmdc.osd.mil:443 | head
Dan> depth=2 C = US, O = U.S. Government, OU = DoD, OU = PKI, CN = DoD
Dan> Root CA 2 verify error:num=19:self signed certificate in
Dan> certificate chain verify return:0 CONNECTED(00000003) ---
Dan> Certificate chain 0
Dan> s:/C=US/O=U.S. Government/OU=DoD/OU=PKI/OU=OSD/CN=www.dmdc.osd.mil
Dan> i:/C=US/O=U.S. Government/OU=DoD/OU=PKI/CN=DOD CA-21 1
Dan> s:/C=US/O=U.S. Government/OU=DoD/OU=PKI/CN=DOD CA-21
Dan> i:/C=US/O=U.S. Government/OU=DoD/OU=PKI/CN=DoD Root CA 2 2
Dan> s:/C=US/O=U.S. Government/OU=DoD/OU=PKI/CN=DoD Root CA 2
Dan> i:/C=US/O=U.S. Government/OU=DoD/OU=PKI/CN=DoD Root CA 2 ---

I was amused to discover that tunnelbroker.net (allegedly, the
hurricane electric ipv6 provider) used a self-signed cert too.


-- 
Russell Senior, President
russell at personaltelco.net