沃通关闭免费 SSL 证书申请后两个月，我又申请到了一张免费的。 - V2EX
Home Sign Up Sign In
lslqtz
V2EX    SSL

沃通关闭免费 SSL 证书申请后两个月，我又申请到了一张免费的。

  •   
  •   lslqtz Dec 5, 2016 3579 views
    This topic created in 3445 days ago, the information mentioned may be changed or developed.

    今天签发的，那边的审核人员又是蒙着眼通过的...可惜只有一年。

    据说火狐拉黑了沃通，不清楚这张证书能不能用。

    -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgIQH6W3+xfuFD8074LcZJFjLjANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJDTjEaMBgGA1UEChMRV29TaWduIENBIExpbWl0ZWQxJDAiBgNV BAMMG0NBIOayg+mAmuWFjei0uVNTTOivgeS5piBHMjAeFw0xNjEyMDUwNTU4NDJa Fw0xNzEyMDUwNTU4NDJaMCQxCzAJBgNVBAYTAkNOMRUwEwYDVQQDDAxsb2xpd2lr aS5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtdPYBYZsX15zm Pb3GAcWYgLRZjTk/o/MfE1erTLUY8laPQLo1wYwoTWbTN1z6C0WRDcs23eoXZaJ9 PA1HUAnWCmoNOMDI1AfKcOPcPn4jbi/3U/CvYGPdbqXn7uuD0By6bi3JSsHNvmEZ NxKDeLuKLEJVeKzTUh99cRJc5Bsl/+zGnBFmv9nsgJnW17s3rhCyzPyUm5UvNlNn 8Oj+zk5ls29ZyaeSIc+wwHFKp2gqz2J+a4OIf5qhNPZSTxBhls2eaqSDln7Y0WBD y19R8OX6y4VgGupZMAfzbX1a1tApaUpDNHwLQs3zdSEhBoS0HfF6X1lkKjnR5C9k uGKxExiTAgMBAAGjggLCMIICvjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwIGCCsGAQUFBwMBMAkGA1UdEwQCMAAwHQYDVR0OBBYEFBLGE9J1gMQ9 ySkbZRU9/6mr3Gv2MB8GA1UdIwQYMBaAFDDadIbzKJBWntcxMcK9Wc2TEjkdMH8G CCsGAQUFBwEBBHMwcTA1BggrBgEFBQcwAYYpaHR0cDovL29jc3AyLndvc2lnbi5j bi9jYTJnMi9zZXJ2ZXIxL2ZyZWUwOAYIKwYBBQUHMAKGLGh0dHA6Ly9haWEyLndv c2lnbi5jbi9jYTJnMi5zZXJ2ZXIxLmZyZWUuY2VyMD4GA1UdHwQ3MDUwM6AxoC+G LWh0dHA6Ly9jcmxzMi53b3NpZ24uY24vY2EyZzItc2VydmVyMS1mcmVlLmNybDAp BgNVHREEIjAgggxsb2xpd2lraS5vcmeCEHd3dy5sb2xpd2lraS5vcmcwTwYDVR0g BEgwRjAIBgZngQwBAgEwOgYLKwYBBAGCm1EBAQIwKzApBggrBgEFBQcCARYdaHR0 cDovL3d3dy53b3NpZ24uY29tL3BvbGljeS8wggEDBgorBgEEAdZ5AgQCBIH0BIHx AO8AdgBBstwuieY85K8bp7spv2jG3ub58cwEfjDf+uOzuiWSYwAAAVjNpMAvAAAE AwBHMEUCIQCd5EZg2DiAaKXZoPtB/X6vuC+HBMSgpAnwA4/3q/kEVQIgCazYAFhk pL44t4Om6JqCFEi90qQqNzeO0rzIzJ11pisAdQCkuQmQtBhYFIe7E6LMZ3AKPDWY BPkb37jjd80OyA3cEAAAAVjNpMNmAAAEAwBGMEQCIDefIVxN6HxTm9zX72Mb9TbM jxdwKWzLg7qf8juX54/eAiAmqrlF0qlXuqYmQ+UnjHlT+8pODGw9m78jtCJiE+ct xTANBgkqhkiG9w0BAQsFAAOCAQEAAetL1ygxl83AAgRsCw3wwzRiXgSDAn8U6cVa LjmrQOnksi8PfepBvMiP8lJMsNVeOcXMTiSdIjyqeOR2eK1dzmdcuGTZvU/qVPv+ WY8VHzb9+4dB0QLPMCXH6ZI0V3x368fSsA6RzTuQETt28BkF7wo2UL524R5la9Rv vKlg7h09tuFlvdVy+YgY3jM4zTMejnW6w1kG2GlhJMIOewJK6X1kKMmdORmRx9rK yYEA6puiv9pbYmxCo9YBw4Zgvq6wpfSEtB/bxwU+flGpBwqIX9plk8iDDZGiDKRy f3s0fVrB7/8+0DxIv/vs/ug43TjCNIpCW03I+ijiwsR12XCk8w== -----END CERTIFICATE-----
  • 沃通
  • SSL
  • 申请
  • 签发
    22 replies    2016-12-06 11:04:21 +08:00
    Tink
        1
    Tink  
    PRO
       Dec 5, 2016
    chrome 和 apple 好像都拉黑了
    lslqtz
        2
    lslqtz  
    OP
       Dec 5, 2016
    @Tink 我喜欢老版 chrome ，不做评价。
    apple 之前的都拉黑了，似乎只有 firefox 之后的才拉黑，我已经部署到站点上了，一会试试看。
    lslqtz
        3
    lslqtz  
    OP
       Dec 5, 2016
    @Tink Firefox 50.0.2 表示正常访问。。
    Showfom
        4
    Showfom  
    PRO
       Dec 5, 2016 via iPhone
    楼主网址发一下 手机不方便解密
    lslqtz
        5
    lslqtz  
    OP
       Dec 5, 2016
    @Showfom 证书的网址吗~
    http://233.dog/f_70383605.rar
    lslqtz
        6
    lslqtz  
    OP
       Dec 5, 2016
    @Showfom 然而 rar 感人。。
    我重新上传 crt 的吧。
    http://233.dog/f_61075439.crt
    Showfom
        7
    Showfom  
    PRO
       Dec 5, 2016 via iPhone
    @lslqtz 233 快去 Google Group 发帖
    lslqtz
        8
    lslqtz  
    OP
       Dec 5, 2016
    @Showfom 翻墙太麻烦，英文捉急，不去了 _(:3 」∠)_
    lslqtz
        9
    lslqtz  
    OP
       Dec 5, 2016
    @Showfom 我翻译后去发帖了，=w=，不知道翻译会不会太捉急。
    https://groups.google.com/forum/#!forum/mozilla.dev.security.policy
    我发到这里了，没玩过 Google Group 。
    Showfom
        10
    Showfom  
    PRO
       Dec 5, 2016
    @lslqtz 老外能看懂就行，等版主审核咯
    xuan880
        11
    xuan880  
       Dec 5, 2016
    申请页面不是关闭了么，你咋申请的？
    dailiip
        12
    dailiip  
       Dec 5, 2016
    处罚规定不能继续签发免费证书了？
    xuan880
        13
    xuan880  
       Dec 5, 2016
    我查了一下这个域名的 ct 信息，沃通的证书有两个，第一个是五月份申请的，现在看信息已经注销了第二个就是你现在申请的，难道是通过证书吊销或续期进行重新申请的？
    wdd2007
        14
    wdd2007  
       Dec 5, 2016
    @xuan880 怎么查询的呀
    xuan880
        15
    xuan880  
       Dec 5, 2016
    @wdd2007 这个网址上输入域名信息查询。 https://crt.sh/?
    lslqtz
        16
    lslqtz  
    OP
       Dec 5, 2016
    @xuan880 不是，是因为和沃通合作的某厂没有做校验，然后沃通自己又没做校验，再加上人工审核形同虚设，三重都被绕过了。
    lslqtz
        17
    lslqtz  
    OP
       Dec 5, 2016
    @xuan880 对了，跟你说一下，另一张沃通的证书被吊销了，也是漏洞。
    他们的系统中有个 bug ，倒填年限还是什么东西可以无需付款，我随机生成了 100 个域名，然后获得了 100 万。。
    然后签发了这张证书作为测试，人工审核也形同虚设。。
    后面我反馈后修复了，但后面又曝出倒填日期可以签发 SHA-1 ，我都不知道说什么好了。。
    证书如下，在 ocsp 中已被吊销：
    -----BEGIN CERTIFICATE-----
    MIID0zCCArugAwIBAgIQKkU3gMKthcaAX/iPWgGuQTANBgkqhkiG9w0BAQsFADBS
    MQswCQYDVQQGEwJDTjEaMBgGA1UEChMRV29TaWduIENBIExpbWl0ZWQxJzAlBgNV
    BAMTHldvU2lnbiBDbGFzcyAxIERWIFNlcnZlciBDQSBHMjAeFw0xNjA1MjUyMjE2
    NDZaFw0xOTA1MjUyMjE2NDZaMBcxFTATBgNVBAMMDGxvbGl3aWtpLm9yZzBZMBMG
    ByqGSM49AgEGCCqGSM49AwEHA0IABGUZhke09Dpi3UUljaGZeUKc96a7sjVzwSoG
    stLoJbgz0F01CfeSBXGrmNTtzHN0fSt6vS3K3BHrLjoNLguUhFajggGpMIIBpTAO
    BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMAkG
    A1UdEwQCMAAwHQYDVR0OBBYEFBu7owrKk7gJaCWnjK7p3AzdodtJMB8GA1UdIwQY
    MBaAFCVj1cFjzeZB4+9lcMETuo0jdIvxMHMGCCsGAQUFBwEBBGcwZTAvBggrBgEF
    BQcwAYYjaHR0cDovL29jc3AxLndvc2lnbi5jb20vY2E2L3NlcnZlcjEwMgYIKwYB
    BQUHMAKGJmh0dHA6Ly9haWExLndvc2lnbi5jb20vY2E2LnNlcnZlcjEuY2VyMDgG
    A1UdHwQxMC8wLaAroCmGJ2h0dHA6Ly9jcmxzMS53b3NpZ24uY29tL2NhNi1zZXJ2
    ZXIxLmNybDApBgNVHREEIjAgggxsb2xpd2lraS5vcmeCEHd3dy5sb2xpd2lraS5v
    cmcwTwYDVR0gBEgwRjAIBgZngQwBAgEwOgYLKwYBBAGCm1EBAQIwKzApBggrBgEF
    BQcCARYdaHR0cDovL3d3dy53b3NpZ24uY29tL3BvbGljeS8wDQYJKoZIhvcNAQEL
    BQADggEBAIYb0S4RQxchIA3idwbo5GpRRHCXe8/XHw+r4mEQx0laVnsCT0JUd0rO
    jQdS73KdQc8gdUORkA6W/1nLz0qmyWzuZw79QlmYZGSO84KmROQNwWd433Q6nIgX
    2YWVIq5+jXkERlgc0Hh7B0bgbkvUd1ZPDbNcEhnsEAeZ1dDmvutCPah2x9ziP7Is
    oQ0WBewcsCu0inKYPBMGwJc0NlSx0i+VHZUGAy5aNc3V+UvMO9LDAM/KtHA5p5Ql
    J9Ilbftv+wR32wteymzn4G1+7G1R/idhvhJFlhFVhAEXh7X9Z993StP5dnH2NMo6
    wQTOjcRHcI89XWCJQKriGCLB9zDI6SI=
    -----END CERTIFICATE-----
    jimages
        18
    jimages  
       Dec 5, 2016 via Android
    @lslqtz 100 万？
    lslqtz
        19
    lslqtz  
    OP
       Dec 6, 2016
    @jimages 我上下截图。。
    http://233.dog/f_10966796.png
    lslqtz
        20
    lslqtz  
    OP
       Dec 6, 2016
    @Showfom 他们认为这不是一个错误。。:v
    This is not a issue.
    You finished the domain validation that we can issue the cert.
    lslqtz
        21
    lslqtz  
    OP
       Dec 6, 2016
    我想看看 SHA-1 ，结果被沃通拉黑了。
    Showfom
        22
    Showfom  
    PRO
       Dec 6, 2016 via iPhone
    @hqfzone WoSign 自己说九月份就已经停止签发免费证书 现在又在自己打自己脸 真是 醉了
    About     Help     Advertise     Blog     API     FAQ     Solana     3437 Online   Highest 6679       Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 65ms UTC 12:11 PVG 20:11 LAX 05:11 JFK 08:11
    Do have faith in what you're doing.
    ubao msn snddm index pchome yahoo rakuten mypaper meadowduck bidyahoo youbao zxmzxm asda bnvcg cvbfg dfscv mmhjk xxddc yybgb zznbn ccubao uaitu acv GXCV ET GDG YH FG BCVB FJFH CBRE CBC GDG ET54 WRWR RWER WREW WRWER RWER SDG EW SF DSFSF fbbs ubao fhd dfg ewr dg df ewwr ewwr et ruyut utut dfg fgd gdfgt etg dfgt dfgd ert4 gd fgg wr 235 wer3 we vsdf sdf gdf ert xcv sdf rwer hfd dfg cvb rwf afb dfh jgh bmn lgh rty gfds cxv xcv xcs vdas fdf fgd cv sdf tert sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf shasha9178 shasha9178 shasha9178 shasha9178 shasha9178 liflif2 liflif2 liflif2 liflif2 liflif2 liblib3 liblib3 liblib3 liblib3 liblib3 zhazha444 zhazha444 zhazha444 zhazha444 zhazha444 dende5 dende denden denden2 denden21 fenfen9 fenf619 fen619 fenfe9 fe619 sdf sdf sdf sdf sdf zhazh90 zhazh0 zhaa50 zha90 zh590 zho zhoz zhozh zhozho zhozho2 lislis lls95 lili95 lils5 liss9 sdf0ty987 sdft876 sdft9876 sdf09876 sd0t9876 sdf0ty98 sdf0976 sdf0ty986 sdf0ty96 sdf0t76 sdf0876 df0ty98 sf0t876 sd0ty76 sdy76 sdf76 sdf0t76 sdf0ty9 sdf0ty98 sdf0ty987 sdf0ty98 sdf6676 sdf876 sd876 sd876 sdf6 sdf6 sdf9876 sdf0t sdf06 sdf0ty9776 sdf0ty9776 sdf0ty76 sdf8876 sdf0t sd6 sdf06 s688876 sd688 sdf86