x
This website is using cookies. We use cookies to ensure that we give you the best experience on our website. More info. That's Fine
HPC:Factor Logo 
 
Latest Forum Activity

Is it possible to update CE 5's root certificates?

I dunk for bananas Page Icon Posted 2023-05-11 10:23 AM
#
Avatar image of I dunk for bananas
H/PC Elite

Posts:
704
Location:
Europe
Status:
With almost all of CE 5's integrated certificates being expired, is there a way to import new certificates somehow?
 Top of the page
I dunk for bananas Page Icon Posted 2023-05-11 11:53 AM
#
Avatar image of I dunk for bananas
H/PC Elite

Posts:
704
Location:
Europe
Status:
I found this: https://github.com/JohnTHaller/RootCertificateUpdatesForLegacyWindows/releases - though is it possible to import these into CE? I definitely know CE supports .p7b
 Top of the page
C:Amie Page Icon Posted 2023-05-11 1:07 PM
#
Avatar image of C:Amie
Administrator
H/PC Oracle

Posts:
18,007
Location:
United Kingdom
Status:
Yes, you can, but it won't support SHA2 as, to my knowledge, this was only released as a CryptoAPI QFE for CE6 R3. So there is practically no point in doing it as all modern web TLS uses SHA2.
 Top of the page
torch Page Icon Posted 2023-05-11 3:29 PM
#
Avatar image of torch
Subscribers
H/PC Guru

Posts:
5,755
Location:
United States 
Status:
I know that the Npopuk Beta Soju did for us, they generated new root certificates for us. They should be in the main download in that beta thread.
 Top of the page
C:Amie Page Icon Posted 2023-05-11 5:01 PM
#
Avatar image of C:Amie
Administrator
H/PC Oracle

Posts:
18,007
Location:
United Kingdom
Status:
That's using OpenSSL, not SChannel.
 Top of the page
I dunk for bananas Page Icon Posted 2023-05-11 9:25 PM
#
Avatar image of I dunk for bananas
H/PC Elite

Posts:
704
Location:
Europe
Status:
C:Amie - 2023-05-11 1:07 PM


Yes, you can, but it won't support SHA2 as, to my knowledge, this was only released as a CryptoAPI QFE for CE6 R3. So there is practically no point in doing it as all modern web TLS uses SHA2.


I appreciate it, that's a bummer
 Top of the page
C:Amie Page Icon Posted 2023-05-12 10:56 AM
#
Avatar image of C:Amie
Administrator
H/PC Oracle

Posts:
18,007
Location:
United Kingdom
Status:
We need someone to stub the SChannel API with OpenSSL. That would give all devices the opportunity to use modern crypto. While I'd love to see a 320 crunch some SHA256 long primes, I don't think I'd like to wait for it to load a web page
 Top of the page
torch Page Icon Posted 2023-05-15 8:02 PM
#
Avatar image of torch
Subscribers
H/PC Guru

Posts:
5,755
Location:
United States 
Status:
Off topic: has anyone ever gotten OpenSSL running in any fashion on CE2.0? Or does CE2.0 just lack the APIs to do so?
 Top of the page
Jump to forum:
Seconds to generate: 0.187 - Cached queries : 66 - Executed queries : 8