www.openssh.com certificate misconfiguration

Stuart Henderson stu at spacehopper.org
Sat Sep 4 06:45:13 AEST 2021

On 2021/09/03 18:24, Brian Candler wrote:
> On 03/09/2021 17:51, Thomas Dwyer III wrote:
> > There is nothing broken on*www.openssh.com*. There*is*  something broken
> > onwww.openssh.org  which redirects towww.openssh.com.
> www.openssh.org is a CNAME to www.openssh.com, so it's the same server. 
> It's just missing the .org SAN.

I believe it's still the case that openssh.org is not under the control
of the openssh project and should not be used..

More information about the openssh-unix-dev mailing list