[OpenID] Login failure at openid.net

[Scott Kveton]

I asked Trevor Johns (who has been helping with the wiki on
openid.net) and he had this to say:

Scott,

As was predicted, the problem was an out of date list of SSL authorities.



The list installed is up to date with Debian's latest official version.

However, Debian gets their list of authorities from Mozilla, and apparently

it's been a while since Debian pulled a fresh copy. This is currently open

as Debian Bug #447062.



Since that bug doesn't look like it's going to get resolved anytime soon, I

just manually installed the StartCom root certificate file. My preliminary

testing suggests that this should be resolved now. Please ask Eddy to try

signing in again.



--

Trevor Johns

http://tjohns.net




On Feb 8, 2008 1:38 AM, Eddy Nigg (StartCom Ltd.)
<eddy_nigg at startcom.org> wrote:
>
>  Trying to login at http://wiki.openid.net/ which fails however using the
> StartSSL OP (http://www.startssl.com). The ID URIs are https only, which
> could be the cause of the problem? Maybe libcurl needs updating of the
> ca-bundle (a common cause with wordpress openid plugin, not sure about this
> one..). I'd be glad if somebody can have a look at this...
>
>  Basically I'd like to add the StartSSL provider to
> http://wiki.openid.net/OpenIDServers#Identity_Providers or perhaps to
> http://wiki.openid.net/OpenIDServers#Other_Services_Providing_Identity_Services
> .
>
>  StartSSL creates automatically an openid URI identity with every account
> created. There are tens of thousands of accounts and potentially more added
> every year via StartSSL. Not comparable to providers like Yahoo or AOL in
> numbers, but still not bad. StartSSL however implements phishing-resistant
> and multi-factor policies by default, with multi-factor-physical upon user
> request in the near future.
>
>
> --
>
>  Regards
>
>  Signer:  Eddy Nigg, StartCom Ltd.
>  Jabber:  startcom at startcom.org
>  Blog:  Join the Revolution!
>  Phone:  +1.213.341.0390
>
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general
>
>