search

ssllabs / ssllabs-scan

A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.
https://www.ssllabs.com/projects/ssllabs-apis/
Apache License 2.0
1.7k stars 241 forks source link

Root CA reported as 'Not in trust store' in Windows #866

Open valentitony opened 2 years ago

valentitony commented 2 years ago

The Root CA 'Autoridade Certificadora Raiz Brasileira v10' is reported as 'Not in trust store' in Windows even it was included in Microsoft's CA Certificate list.

Evidence of SSL Report v2.1.8 showing 'Not in trust store' in Windows image

Evidence of Root CA included in 'MICROSOFT Included CA Certificate List' image

MICROSOFT Included CA Certificate List - https://ccadb-public.secure.force.com/microsoft/IncludedCACertificateReportForMSFT

Autoridade Certificadora Raiz Brasileira v10 Fingerprint SHA256: 6e0bff069a26994c15de2c4888cc54af84882e5495b7fbf66be9ccffec7489f6

Domain tested: siscoaf.coaf.gov.br

benwilsonusa commented 2 years ago

How often does SSL Labs update its list of trusted root CA certificates?

naumanshah03 commented 2 years ago

Hi @benwilsonusa,

With each release we update the trust store. Since this time we didn't make any releases hence it was not updated. Today we have deployed a new version of ssllabs on dev.ssllabs.com so please verify it over there and soon the changes will be available on www.ssllabs.com

Thank you for your patience.

Regards, Nauman Shah