* [Ondrej.Caletka@cesnet.cz: [sourceware root] Broken TLSA record for sourceware.org]
@ 2016-02-17 16:18 Christopher Faylor
0 siblings, 0 replies; only message in thread
From: Christopher Faylor @ 2016-02-17 16:18 UTC (permalink / raw)
To: overseers
----- Forwarded message from Ondřej Caletka <Ondrej.Caletka@cesnet.cz> -----
From: Ondřej Caletka <Ondrej.Caletka@cesnet.cz>
To: root@sourceware.org
Subject: [sourceware root] Broken TLSA record for sourceware.org
Date: Wed, 17 Feb 2016 14:30:43 +0100
Hello,
I've just spotted that the TLSA DNS record does not match the TLS
certificate offered by your server:
$ python2 ./swede verify sourceware.org
Received the following record for name _443._tcp.sourceware.org.:
Usage: 3 (End-Entity)
Selector: 0 (Certificate)
Matching Type: 1 (SHA-256)
Certificate for Association:
2a6f3a07349657f6b7f3575c12b7137b7e29e5494f9601b65775d0045a951ead
This record is valid (well-formed).
Attempting to verify the record with the TLS service...
Got the following IP: 209.132.180.131
FAIL (Usage 3): The certificate offered by the server does not match the
TLSA record
--
Best regards,
Ondřej Caletka
CESNET z.s.p.o.
----- End forwarded message -----
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2016-02-17 16:18 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2016-02-17 16:18 [Ondrej.Caletka@cesnet.cz: [sourceware root] Broken TLSA record for sourceware.org] Christopher Faylor
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).