Reputation
1,748
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
2 13 30
Impact
~118k people reached

Apr
28
awarded  Nice Question
Mar
5
awarded  Famous Question
Dec
10
awarded  Necromancer
Nov
16
comment Do client certificates need to be trusted by the client?
@JAB: I think it was external source. API compatibility was officially broken by the upstream OpenSSL project between 0.9.x and 1.0.x branches. Just like it will be broken with the future 1.1.0 and the currently newest 1.0.2 version. It mostly is stuff that majority of apps don't care about, but it's a break none the less.
Nov
16
comment Do client certificates need to be trusted by the client?
@dave_thompson_085: yes, and correctly configured server will send a list of CAs it trusts limited to just few entries, preferably just one - the one intermediate it expects its clients to have certificates from. Configuring a server to send a list of all CAs in its trust store is wasteful at best (as that balloons the server response by few dozen kilobytes).
Nov
11
comment Do client certificates need to be trusted by the client?
@MarkKelly: Then note that El Capitan completely deprecated OpenSSL: lists.apple.com/archives/macnetworkprog/2015/Jun/msg00025.html
Nov
11
comment Do client certificates need to be trusted by the client?
@SteffenUllrich: Yes, the certification creation library doesn't matter (you can use GnuTLS to create than and use them with OpenSSL). But I somehow doubt that Mark has pulled out the old version of OpenSSL just to show the problem he's having. Finally, while new OpenSSL does check if your private key matches the cert (don't know about 0.9.8), the protocol itself doesn't care - you can sign the message with any key you want.
Nov
11
revised Do client certificates need to be trusted by the client?
fixed grammar
Nov
11
answered Do client certificates need to be trusted by the client?
Jul
29
awarded  Notable Question
Jul
11
awarded  Yearling
Jun
23
awarded  Nice Question
May
11
awarded  Popular Question
Mar
24
awarded  Notable Question
Feb
2
awarded  Popular Question
Jan
24
revised How does changing your password every 90 days increase security?
added 1 character in body
Jan
24
comment How does changing your password every 90 days increase security?
@user2529583: problem is, users in general don't care for security. It's a burden for them - something many of them consider to be established by nerds just to torment them.
Oct
28
awarded  Good Question
Jul
11
awarded  Yearling
Jul
2
awarded  Curious