TLS Certificate Validation on Linux · Ivan Tomica
www.tomica.net
We all know the drill. You type https:// into the browser, a padlock shows up, and everyone collectively agrees not to think about what just happened. That works fine right up until the moment some application on your server starts throwing certificate verify failed while curl against the same endpoint works perfectly. Or the other way around. That’s usually the point where people discover that “the system trusts the certificate” is a much less well-defined statement than it sounds.
  • echo@lemmy.todayEnglish
    1·
    22 days ago

    What point are they trying to make here? SSL certs are awesome if properly used.

    • Kimjongtooill@sh.itjust.worksEnglish
      1·
      22 days ago

      It looks like the main point of criticism is that most applications ship with their own CAs, and that makes things confusing when you run into trust issues.