test-certs-site

test-certs-site 简介 这是一个专门构建的 Web 服务器，用于托管 CA/浏览器论坛基线要求所需的测试页面。这些页面包含以下要求： CA 应当托管测试网页，供应用软件供应商使用链接到每个公开信任根证书的订阅者证书来测试其软件。CA 至少应使用有效、已吊销和已过期的订阅者证书托管单独的网页。 它使用 ACME 协议获取证书。它提供一个简单的网站，包含一些解释该测试站点用途的信息。 来自 CA/浏览器论坛 TLS 基线要求： 虽然这是为 Let's Encrypt 构建的，但其他 ACME CA 应该也能使用。 运行 test-certs-site 这是一个独立的 Go 程序...

SSL/TLS: Server Certificate / Certificate in Chain with RSA keys less than 2048 bits

The remote SSL/TLS server certificate and/or any of the certificates in the certificate chain is using a RSA key with less than 2048 bits. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

IoT Security Principles

The BSA -- also known as the Software Alliance, formerly the Business Software Alliance which explains the acronym -- is an industry lobbying group. They just published "Policy Principles for Building a Secure and Trustworthy Internet of Things." They call for: Distinguishing between consumer and...

Mozilla Asks CAs for Details on Subordinate Certificate Controls

Mozilla has warned certificate authorities included in its root CA Certificate Program that they only have a few weeks left to comply with the company’s new policy, which requires CAs to adhere to the CA/Browser Forum Baseline Requirements and provide proof of audits of their subordinate...

Google, Mozilla Considering Limiting Certificate Validity to 60 Months

In the wake of a parade of problems with certificate authorities and attackers using stolen digital certificates, both Google and Mozilla are poised to enforce new rules in their browsers for how long end-entity certificates should be trusted. The changes will begin taking effect at the beginning...