1
vote
2answers
156 views

s_client not failing on revoked certifcate?

I'm running Firefox with with the EFF's HTTPS Everywhere. I recently visited Lavabit's site to see if its accepting donations: The revocation is expected considering the history.... However, I'm ...
2
votes
0answers
64 views

SSL cert owner != localhost after creating SSH tunnel

I use an SSH tunnel to connect to my work's mail server, then tell my mail client to connect to server "localhost" on port "1993" (the port I chose for the tunnel). I have two different Ubuntu Precise ...
2
votes
2answers
231 views

Primary 'common name' in subjectAltName?

I have my own X.509 CA. When issuing certificates for hosts, if I have Subject: .../CN=foobox.grawity.tld and subjectAltName: DNS:foobox.local, do I still have to put DNS:foobox.grawity.tld as a ...