[OpenID] Login failure at openid.net

Eddy Nigg (StartCom Ltd.) eddy_nigg at startcom.org
Fri Feb 8 19:44:29 UTC 2008


Sorry for the spam, but the messages weren't coming through. I guess the 
queue was released now.

I'd like to suggest to all RPs and OPs making use of PHP to update the 
ca-bundle of cURL/libcurl, since the one shipped with cURL is from the 
year 2000!! extracted from Netscape 4.7. Replace it with the one from 
here: http://curl.haxx.se/ca/cacert.pem

See also http://curl.haxx.se/docs/sslcerts.html for more information. 
I'm currently actively trying to solve this issue directly with cURL and 
Mozilla concerning some licensing concerns.

Eddy Nigg (StartCom Ltd.) wrote:
> Trying to login at http://wiki.openid.net/ which fails however using 
> the StartSSL OP (http://www.startssl.com). The ID URIs are https only, 
> which could be the cause of the problem? Maybe libcurl needs updating 
> of the ca-bundle (a common cause with wordpress openid plugin, not 
> sure about this one..). I'd be glad if somebody can have a look at this...
>
> Basically I'd like to add the StartSSL provider to 
> http://wiki.openid.net/OpenIDServers#Identity_Providers or perhaps to 
> http://wiki.openid.net/OpenIDServers#Other_Services_Providing_Identity_Services 
> .
>
> StartSSL creates automatically an openid URI identity with every 
> account created. There are tens of thousands of accounts and 
> potentially more added every year via StartSSL. Not comparable to 
> providers like Yahoo or AOL in numbers, but still not bad. StartSSL 
> however implements phishing-resistant and multi-factor policies by 
> default, with multi-factor-physical upon user request in the near future.
>
> -- 
> Regards 
>  
> Signer:  	Eddy Nigg, StartCom Ltd. <http://www.startcom.org>
> Jabber:  	startcom at startcom.org <xmpp:startcom at startcom.org>
> Blog:  	Join the Revolution! <http://blog.startcom.org>
> Phone:  	+1.213.341.0390
>  
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general
>   

-- 
Regards 
 
Signer:  	Eddy Nigg, StartCom Ltd. <http://www.startcom.org>
Jabber:  	startcom at startcom.org <xmpp:startcom at startcom.org>
Blog:  	Join the Revolution! <http://blog.startcom.org>
Phone:  	+1.213.341.0390
 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20080208/cc1677d5/attachment-0002.htm>


More information about the general mailing list