[tor-talk] (solved) "Invalid Server Certificate" accessing torproject.org on Chrome/Windows

[Ondrej Mikle]

On 01/05/12 17:52, Greg wrote:
> Hey Ondrej,
> Here's some info from msinfo32:
>
> OS Name	Microsoft(R) Windows(R) Server 2003, Enterprise
> EditionVersion	5.2.3790 Service Pack 2 Build 3790OS
> Manufacturer	Microsoft Corporation
> System Manufacturer	MSI
> System Model	MS-7350System Type	X86-based PCProcessor	x86 Family 6
> Model 15 Stepping 11 GenuineIntel ~3000 MhzProcessor	x86 Family 6
> Model 15 Stepping 11 GenuineIntel ~3000 MhzHardware Abstraction
> Layer	Version = "5.2.3790.3959 (srv03_sp2_rtm.070216-1710)"

Problem solved: Windows Server 2003 and WinXP before SP3 do not support SHA256 
hash (and other SHA-2 family hashes), that's why the cert validation fails. 
(Well, CryptoAPI could have given a more meaningful error...)

See for details: http://www.pkware.com/documents/CertificateInteroperability.pdf

Ondrej