[dns-operations] OARC's Open DNSSEC Validating Resolver project

Joe St Sauver joe at oregon.uoregon.edu
Wed Nov 5 15:24:00 UTC 2008


Dave mentioned:

#Is there any reason you chose not to include the keys for the reverse  
#zones published by RIPE (https://www.ripe.net/projects/disi/keys/index.html)? 

When I try to visit that page with Firefox, I get "Alert: Error establishing 
an encrypted connection to www.ripe.net. Error Code: -8048." with an OK 
button.

www.mozilla.org/projects/security/pki/nss/ref/ssl/sslerr.html says that
a -8048 is "Invalid OCSP signing certificate in OCSP response." for what
that may be worth. 

Are others also seeing that error?

Regards,

Joe



More information about the dns-operations mailing list