A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN (rename) operation uses an attribute's schema alias name (such as "commonName") instead of its canonical name (such as "cn") as the new relative distinguished name. An authenticated attacker with the ModifyDN (rename) permission on the …

Google has been actively trying to ensure certificate security especially in the last months. Sometimes this created quite some buzz in the IT World, e.g. when Symantecs policies came into the focus. Current version 58 of Google Chrome has again adjusted the certificate policy. Certificates provide two ways to store hostnames: CommonName and SubjectAltName (SAN). RFC 2818 specified in 2000 that CommonName should be deprecated, which Chrome now complies to. Other browsers are currently still accepting the CommonName, which is mostly used by selfsigned certificates, as in our case :/ Users who wanted to access our internal sites encountered error messages and were forced to use quick and dirty workarounds, such as using a Windows registry „hack“: Open a cmd-Shell as Administrator and enter: reg add HKEY_LOCAL_MACHINESOFTWAREPoliciesGoogleChrome /v EnableCommonNameFallbackForLocalAnchors /t REG_DWORD /d 1 /f which reactivates the fallback to CommonName As this is just a temporary „solution“, you should issue an RFC 2818 conform certificate. This can be realized by using a complete and compliant certificate signing request (CSR). You can either use a specially designed *.conf File for this or simply adapt the following shell command: openssl req -new-key endpoint.com.key -sha256 -nodes  -subj '/C=US/ST=New York/L=New York/O=End Point/OU=Hosting Team/CN=www.endpoint.com/          emailAddress=administrative-not-existent-address@our-awesome-domain.com/ […]

Frage: Hallo, auf unserem CA Server haben wir eine Aufgabe laufen, die über den Befehl certutil –view –out RequesterName,CommonName,EMail,CertificateTemplate,NotAfter,Request.RevokedWhen CSV Informationen zur Fälligkeit der Zertifikate liefert.... 1 Kommentar, 124 mal gelesen.