5117 shaares
1 résultat
taggé
ssl_porn
How to validate the Subject Key Identifier (SKI) from a X509 certificate
Some days ago I received an odd complain that some of the Root CAs we use had the wrong Subject Key Identifier (SKI). I knew that the claim was false but I also knew that I'll have to prove it. The guy did dig on our own specifications and calculated the SKI as we required, the hash of the certificate public key but unfortunately the identifiers did not match.