2 ms·
If the G2 CA is signed by their other CAs which are in the trust root, you can just add it to the chain you're serving, right?
by mappu 12y ago
If the G2 CA is signed by their other CAs which are in the trust root, you can just add it to the chain you're serving, right?
- Alupis 12y agomappu no, G2 is it's own root, but there are ways to get it to work -- but it's rather impractical for deployed applications to public users, etc. They expect it to "just work". So, as the post mentions... the current only work-around is to get a SHA-1 cert from Godaddy's Class 2 CA server (which sings all SHA-1 certs). I really think people need to dog on Godaddy more about this. It's not really excusable to be a half-assed CA today...