[OTDev] [HEADS UP] SSL certificate for ambit.uni-plovdiv.bg has been replaced

Luchesar V. ILIEV luchesar.iliev at gmail.com
Mon Feb 14 11:42:17 CET 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Dear Colleagues,

New SSL certificate for the services on ambit.uni-plovdiv.bg has been
deployed last night. The new certificate is issued by StartCom Ltd., and
as such should be inherently trusted in all current browsers.

Here are the fingerprints for completeness (you shouldn't need them):
MD5 : 34:8C:E0:C6:D9:03:AA:6F:D2:9E:84:BE:06:7B:49:83
SHA1: F0:BA:09:34:DD:99:65:5D:4A:FD:00:06:8C:EC:5E:FA:6B:A5:F5:00

Programmatic access might require update of the relevant trusted root
certificates if StartCom's Root CA certificate is not already present
there. It can be downloaded directly from StartCom's website:

http://www.startssl.com/certs/ca.pem

MD5 : 22:4D:8F:8A:FC:F7:35:C2:BB:57:34:90:7B:8B:22:16
SHA1: 3E:2B:F7:F2:03:1B:96:F3:8C:E6:C4:D8:A8:5D:3E:2D:58:47:6A:0F

For Java, importing would typically involve the following command:

keytool -importcert \
 -file /path/to/startcom/ca.pem \
 -keystore $JRE_HOME/lib/security/cacerts \
 -alias startcomrootca # Whatever you like here.

You might (read: will) also need to update jssecacerts in the same way.

Please let me know if you face any problems with the new certificate.

Cheers,
Luchesar

- -- 
Luchesar V. ILIEV
Operations & Information Security Officer
IDEAconsult Ltd. | www.ideaconsult.net

PGP Key ID 0x9A1FEEFF
https://cert.acad.bg/pgp-keys/

icq ......... 13261897
skype/yim ... luchesar_iliev
jabber ...... luchesariliev at jabber.org
gtalk ....... luchesar.iliev at gmail.com
msnm ........ l_iliev at hotmail.com
aim ......... luchesariliev

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBCAAGBQJNWQbuAAoJENvaS4iaH+7/GVMH/iSe7a+1UxxgeH4IXLgyGMRS
VQrm7yK+AKfnRigKCU/vEEr84fYzffM/E2WaC4RMlXYsB0EYjATqWRbO4LPSkzLu
zgm+TnBrxZPLee1PAYS3nxvKPHC7Ns+TvOPhkjllsAHluuCb628VWPV7LO8fbtQK
1qlWZmK2wEDhgehBTJQK/KGYZsMfrP7yLTSmUWRZdOwKNFpaa5PwmcnlS0+aEhu2
h1KlRgS4nO3Z6Tw0/wULhfAquUEQZMXRw/KxyPU4RBtDONdO54ZQOMmLk/zgs85o
PCtqdwMmCAyM8JyevwqGYSCWbm9HGLRJAoDhvxY+BOGBMqp4Oa6md/WzrWqpryA=
=g245
-----END PGP SIGNATURE-----



More information about the Development mailing list