TOFU, OK, but even with an expired certificate?

Stephane Bortzmeyer stephane at sources.org
Sun Dec 6 17:02:50 GMT 2020


The page <gemini://gemini.circumlunar.space/> lists a "Houston search
engine", whose certificate expired months ago. Is it supposed to be
accepted? Amfora rejects it.

% gnutls-cli -p 1965 houston.coder.town
...
- subject `EMAIL=k at kvn.dev,CN=houston.coder.town,O=Internet Widgits Pty Ltd,ST=CA,C=US', issuer `EMAIL=k at kvn.dev,CN=houston.coder.town,O=Internet Widgits Pty Ltd,ST=CA,C=US', serial 0x04a4388eea0fd69cb645ac15a6117912cdf35ca9, RSA key 2048 bits, signed using RSA-SHA1 (broken!), activated `2020-05-20 21 21:48:19 UTC', expires `2020-06-19 21:48:19 UTC'


More information about the Gemini mailing list