"Invalid" certificate false positive

Print Thread

#258656 07/08/16 09:17 PM

Joined: Jan 2004

Posts: 1,361

Loki12583

Hoopy frood

Loki12583

Hoopy frood

Joined: Jan 2004

Posts: 1,361

Attempting to connect to https://www.yahoo.com from within a socket I get a warning prompt that the certificate is expired, but the valid range displayed by mIRC should be acceptable. Connecting to yahoo with Chrome I receive the same certificate (matching fingerprint) which Chrome accepts as valid, I've exported it below. I'm not using any switches so mIRC should be using the internal ssl library.

Warning: http://i.imgur.com/0evzBgv.png

I'm able to reproduce on a fresh portable installation with just a sockopen: /sockopen -e yahoo www.yahoo.com 443

//echo -ag $sslready $sslversion $ssldll $ssllibdll :: $version $os $md5($mircexe,2) $file($mircexe).sig $dll(0) $script(0) $asctime
$true 1.0.2.8 C:\Program Files (x86)\mIRC\mirc.exe C:\Program Files (x86)\mIRC\mirc.exe :: 7.46 10 0589fe3d339c7f1fc213ff9e099f2c9f ok 1 14 Sun Aug 07 17:11:17 2016

Additional version info:
Had an old installer around, 7.34 1.0.1h does not produce a warning.
Setting load=1 under [ssl] on 7.46 still produces the warning with an older library: 1.0.1.8 C:\WINDOWS\SYSTEM32\ssleay32.dll C:\WINDOWS\SYSTEM32\libeay32.dll

Quote:

Summary
Certificate has expired

Issuer
Organization: Symantec Corporation
Host: Symantec Class 3 Secure Server CA - G4
Country: US

Subject
Organization: Yahoo Inc.
Host: www.yahoo.com
Dns: www.yahoo.com, yahoo.com, hsrd.yahoo.com, us.yahoo.com, fr.yahoo.com, uk.yahoo.com, za.yahoo.com, ie.yahoo.com, it.yahoo.com, es.yahoo.com, de.yahoo.com, ca.yahoo.com, qc.yahoo.com, br.yahoo.com, ro.yahoo.com, se.yahoo.com, be.yahoo.com, fr-be.yahoo.com, ar.yahoo.com, mx.yahoo.com, cl.yahoo.com, co.yahoo.com, ve.yahoo.com, espanol.yahoo.com, pe.yahoo.com, in.yahoo.com, sg.yahoo.com, id.yahoo.com, malaysia.yahoo.com, ph.yahoo.com, vn.yahoo.com, maktoob.yahoo.com, en-maktoob.yahoo.com, ca.my.yahoo.com, gr.yahoo.com, att.yahoo.com, au.yahoo.com, nz.yahoo.com, tw.yahoo.com, hk.yahoo.com, brb.yahoo.com, my.yahoo.com, add.my.yahoo.com, frontier.yahoo.com, verizon.yahoo.com, ca.rogers.yahoo.com, fr-ca.rogers.yahoo.com, tatadocomo.yahoo.com, tikona.yahoo.com, ideanetsetter.yahoo.com, mtsindia.yahoo.com, smartfren.yahoo.com, *.att.yahoo.com, *.people.yahoo.com, *.celebrity.yahoo.com, *.vida-estilo.yahoo.com, *.style.yahoo.com, *.movies.yahoo.com, *.stars.yahoo.com, *.kino.yahoo.com, *.cine.yahoo.com, *.cinema.yahoo.com, *.celebridades.yahoo.com, *.live.yahoo.com, *.beauty.yahoo.com
Country: US

Valid from 31/10/2015 to 30/10/2017

SHA1 fingerprint:
41:30:72:F8:03:CE:96:12:10:E9:A4:5D:10:DA:14:B0:D2:D4:85:32

Bubble-babble:
xibef-bysiz-mubas-vohuc-dygiv-nanyh-teget-pyhar-bigut-gycef-daxux

Code:

Last edited by Loki12583; 07/08/16 10:28 PM.

Re: "Invalid" certificate false positive Loki12583 #258658 08/08/16 08:23 AM
Joined: Dec 2015 Posts: 148 Finland Dazuz Vogon poet
Dazuz Vogon poet Joined: Dec 2015 Posts: 148 Finland	Tried it on mIRC 7.46 running on Windows 10 64-bit and it worked just fine. Freshly installed mIRC and the one I normally use.

Re: "Invalid" certificate false positive Loki12583 #258661 08/08/16 06:41 PM
Joined: Dec 2002 Posts: 5,524 London, UK Khaled Hoopy frood
Khaled Hoopy frood Joined: Dec 2002 Posts: 5,524 London, UK	I too have not been able to reproduce this here. When I execute the command, mIRC connects without any SSL warnings. Running under Windows 10 64-bit.

Link Copied to Clipboard

Forums Bug Reports "Invalid" certificate false positive