|  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #65965 * uses revoked SSL certificate
Submitted: 2013-10-25 09:43 UTC Modified: 2013-10-27 02:01 UTC
From: thoger at redhat dot com Assigned: bjori (profile)
Status: Closed Package: Website problem
PHP Version: Irrelevant OS:
Private report: No CVE-ID: None
View Add Comment Developer Edit
Anyone can comment on a bug. Have a simpler test case? Does it work for you on a different platform? Let us know!
Just going to say 'Me too!'? Don't clutter the database with that please !
Your email address:
Solve the problem:
26 - 6 = ?
Subscribe to this entry?

 [2013-10-25 09:43 UTC] thoger at redhat dot com
SSL certificates used by sites that use https (e.g. bugs or wiki) has been revoked by issuing CA.

Test script:
Connect to or with a browser with OCSP checks enabled (e.g. in Firefox, see Preferences -> Advanced -> Certificates -> Validation).  Firefox reports:

  Peer's Certificate has been revoked.
  (Error code: sec_error_revoked_certificate)


$ openssl x509 -in -subject -issuer -serial -dates -noout
subject= /OU=Domain Control Validated/OU=PositiveSSL Wildcard/CN=*
issuer= /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=PositiveSSL CA 2
notBefore=Jun  3 00:00:00 2013 GMT
notAfter=Jun  2 23:59:59 2016 GMT

$ wget

$ openssl crl -in PositiveSSLCA2.crl -inform DER -text | grep -A1 8F7A08C3AACA243CE107AC4842C1E89F
    Serial Number: 8F7A08C3AACA243CE107AC4842C1E89F
        Revocation Date: Oct 25 01:11:59 2013 GMT

$ openssl ocsp -issuer PositiveSSLCA2.pem.crt -cert -url revoked
	This Update: Oct 25 01:13:02 2013 GMT
	Next Update: Oct 29 01:13:02 2013 GMT
	Revocation Time: Oct 25 01:11:59 2013 GMT


Add a Patch

Pull Requests

Add a Pull Request


AllCommentsChangesGit/SVN commitsRelated reports
 [2013-10-25 10:12 UTC] thoger at redhat dot com
Sorry, I missed this:
 [2013-10-26 11:33 UTC] dyctator at hotmail dot com

"We are in the process of getting a new certificate, and expect to restore access to sites that require SSL (including and" is also affected (Only Firefox).
 [2013-10-27 02:01 UTC]
-Status: Open +Status: Closed -Assigned To: +Assigned To: bjori
 [2013-10-27 02:01 UTC]
Yes, the certificate was revoked by our request.
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Sun Apr 21 11:01:27 2024 UTC