I updated the server certificate to one signed with RSA+SHA256 to make chrome ha... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		ryan-c on May 9, 2015 \| parent \| context \| favorite \| on: Stupid certificate tricks I updated the server certificate to one signed with RSA+SHA256 to make chrome happy, but the new one has the same thing done to it.

wolf550e on May 10, 2015 [–]

Is the private key from the blog post valid to impersonate your server?

mithras on May 10, 2015 | [–]

Depends on whether he revoked it or not.

ryan-c on May 10, 2015 | | [–]

The private key in the article was generated specifically for the article as an example - there's no CA-signed certificate that used it.

Also, certificate revocation is very unreliable.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact