Hacker News new | ask | show | jobs
by obahareth 2216 days ago
Anyone have any idea for a fix for this? Is the only solution to either upgrade the OS or recompile OpenSSL and anything that depends on it (e.g. interpreted languages)? Or is there a simpler fix I'm not seeing?
1 comments
adamsurak 2216 days ago
There is a simpler way by adding a different CA into the chain. You can add the version of USERTrust RSA CA that is signed by AAA Certificate Services (https://ssl-tools.net/subjects/cd30d24c343a82ab1f0570158ad7a...) and it will work.
link
jerrod 2216 days ago
Did anyone use this approach effectively yet? Our AAA Cert seems to also be expired.
link
jerrod 2216 days ago
Ok we were able to use this approach effectively.
link