[tor-talk] (solved) "Invalid Server Certificate" accessing torproject.org on Chrome/Windows

[Greg]

Great! I will try this out when I get home today.  That link says to
install the hotfix located here:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;938397

Thanks,
Greg

2012/1/5 Ondrej Mikle <ondrej.mikle at gmail.com>:
> On 01/05/12 17:52, Greg wrote:
>>
>> Hey Ondrej,
>> Here's some info from msinfo32:
>>
>> OS Name Microsoft(R) Windows(R) Server 2003, Enterprise
>> EditionVersion  5.2.3790 Service Pack 2 Build 3790OS
>> Manufacturer    Microsoft Corporation
>> System Manufacturer     MSI
>> System Model    MS-7350System Type      X86-based PCProcessor   x86 Family
>> 6
>> Model 15 Stepping 11 GenuineIntel ~3000 MhzProcessor    x86 Family 6
>> Model 15 Stepping 11 GenuineIntel ~3000 MhzHardware Abstraction
>> Layer   Version = "5.2.3790.3959 (srv03_sp2_rtm.070216-1710)"
>
>
> Problem solved: Windows Server 2003 and WinXP before SP3 do not support
> SHA256 hash (and other SHA-2 family hashes), that's why the cert validation
> fails. (Well, CryptoAPI could have given a more meaningful error...)
>
> See for details:
> http://www.pkware.com/documents/CertificateInteroperability.pdf
>
> Ondrej
> _______________________________________________
> tor-talk mailing list
> tor-talk at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk