Hacker News Reader

Anyone have any idea for a fix for this? Is the only solution to either upgrade the OS or recompile OpenSSL and anything that depends on it (e.g. interpreted languages)? Or is there a simpler fix I'm not seeing?

View on HN

There is a simpler way by adding a different CA into the chain. You can add the version of USERTrust RSA CA that is signed by AAA Certificate Services (https://ssl-tools.net/subjects/cd30d24c343a82ab1f0570158ad7a...) and it will work.

Did anyone use this approach effectively yet? Our AAA Cert seems to also be expired.

Ok we were able to use this approach effectively.

Reply on news.ycombinator.com