[SSL Observatory] www.torproject.org certificate chain fails to validate in Chrome on Windows

[Ondrej Mikle]

On 01/05/12 20:12, Adam Langley wrote:
> On Thu, Jan 5, 2012 at 1:42 PM, Ondrej Mikle<ondrej.mikle at nic.cz>  wrote:
>> Windows version: WinXP SP2 (very unpatched virtual machine I keep for
>> debugging and testing compatibility stuff; sorry, should've mentioned it
>> right away).
>
> XP SP2 can't handle SHA256 signatures and the signature on the
> www.torproject.org leaf certificate is signed with SHA256. Windows
> 2003 is likewise.
>
> http://www.pkware.com/documents/CertificateInteroperability.pdf

Ah, thanks. Suspected it would be some little detail. I'll tell the folks who 
brought the issue up.

May I suggest that system requirements for Chrome state WinXP SP3 as minimum 
version for WinXP (or add the note that some things may break) on following 
page: http://support.google.com/chrome/bin/answer.py?hl=en&answer=95411


Thanks for your time.

Ondrej