Re: Network security manager

[Lars Magne Ingebrigtsen]

Lars Magne Ingebrigtsen <address@hidden> writes:

> It already does.  Does anybody know of https sites with interesting
> types of un-verifiable certificates so that I can test?  Self-signed or
> expired certificates would be nice...

Found one.  And it just works:

-------
Issuer: O=Cybertrust Inc,CN=Cybertrust Public SureServer SV CA
Host informasjon: C=US,ST=MA,L=Cambridge,O=Akamai Technologies\, 
Inc.,CN=a248.e.akamai.net
Public key: RSA, signature: RSA-SHA1, security level: Low
Valid from: 2014-06-12, valid to: 2015-06-12

The TLS connection to tv.eurosport.com:443 is insecure
for the following reason:

certificate host does not match hostname

Continue connecting? (No, Session only, Always)
------

The issuer and host information has to be formatted prettier, though.
And is it at all interesting to display the "Public key: RSA, signature:
RSA-SHA1" bits?

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no