c6f6b029a1When tls client connects to the server with certification issued by either StartCom or WoSign listed in StartComAndWoSignData.inc, check notBefore of the server certificate and CERT_REVOKED error returns if it is after 00:00:00 on October 21, 2016. See for details in https://blog.mozilla.org/security/2016/10/24/distrusting-new-wosign-and-startcom-certificates/, https://security.googleblog.com/2016/10/distrusting-wosign-and-startcom.html and https://support.apple.com/en-us/HT204132 Fixes: https://github.com/nodejs/node/issues/9434 PR-URL: https://github.com/nodejs/node/pull/9469 Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Fedor Indutny <fedor.indutny@gmail.com> Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
46 lines
1.2 KiB
INI
46 lines
1.2 KiB
INI
[ ca ]
|
|
default_ca = CA_default
|
|
|
|
[ CA_default ]
|
|
dir = .
|
|
name_opt = CA_default
|
|
cert_opt = CA_default
|
|
default_crl_days = 999
|
|
default_md = sha256
|
|
database = fake-startcom-root-database.txt
|
|
serial = fake-startcom-root-serial
|
|
private_key = fake-startcom-root-key.pem
|
|
certificate = fake-startcom-root-cert.pem
|
|
new_certs_dir = fake-startcom-root-issued-certs
|
|
email_in_dn = no
|
|
policy = policy_anything
|
|
|
|
[ policy_anything ]
|
|
countryName = optional
|
|
stateOrProvinceName = optional
|
|
localityName = optional
|
|
organizationName = optional
|
|
organizationalUnitName = optional
|
|
commonName = supplied
|
|
emailAddress = optional
|
|
|
|
[ req ]
|
|
default_bits = 2048
|
|
days = 999
|
|
distinguished_name = req_distinguished_name
|
|
attributes = req_attributes
|
|
prompt = no
|
|
output_password = password
|
|
x509_extensions = v3_ca
|
|
|
|
[ req_distinguished_name ]
|
|
C = IL
|
|
O = StartCom Ltd.
|
|
OU = Secure Digital Certificate Signing
|
|
CN = StartCom Certification Authority
|
|
|
|
[ req_attributes ]
|
|
challengePassword = A challenge password
|
|
|
|
[ v3_ca ]
|
|
basicConstraints = CA:TRUE
|