function readOnly(count){ }
Sign Up ›
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
Learn More

Browse by Topic
ShowAll Questionssorted byDate Posted
+ Start a Discussion
ZhiliZhili 

X509Certificates Version

Salesforce.com security experts:

 

Salesforce's certificate with serial number 3D:6C:C7:4E:C3:DF:B1:EE:25:D6:DE:D5:43:C3:C2:65 is issued as part of a chain starting with Certificate version 1. We are using Entrust as SSL provider. The latest Entrust's Toolkit (7.2 SP1 patch 160686) excludes by default  Version 1 X509 certificates as Certificate Authority (CA).  (Entrust's Security Bulletin e10-002; issue 1-82788901).

 

To enable such certificates as roots of trust (CA certificates) when using the Entrust provider, we have to set the property java.property.com.entrust.toolkit.x509.CertVerifier.ForceV1CertAsCA=true to workaround the version 1 issue.

 

Does Salesforce.com have plan to change certificate to version 3?

 

Thanks

 

 

ZhiliZhili

Can anyone from Salesforce.com provide a response to this question please?