VeriSign dead cert causes net instability
NAV gets lost in translation
Posted in Security, 10th January 2004 02:13 GMT
Free whitepaper – Dell PowerEdge servers 2009 - Memory
The expiration of one of VeriSign's master digital certificates on Wednesday created confusion for Net users and glitches to the operation of some applications, notably Norton Anti-Virus (NAV).
After the cert VeriSign used to sign other certs expired, the chain of trust was broken, leaving some aps unable to set up a secure connection. These apps then defaulted to trying to access Verisign's certificate revocation list server (crl.verisign.com) which, faced with a huge extra load, buckled under the pressure.
Verisign has posted an advisory on the problem here, detailing server updates needed to resolve application instability. Essentially where there are problems traffic needs to be directed to a new Global Server Intermediate Root CA.
Users of Java aps and older IE browsers were affected by the issue but (judging by our postbag) NAV users were worst affected. NAV Users saw their computers slow to a crawl and Microsoft office apps not starting properly because of the problem.
Symantec has posted an explanatory note on the problem which echoes Verisign's advice. ®
Free whitepaper – SPECjbb2005 performance and power consumption on Dell, HP, and IBM blade servers

Analyst Keynote: The Register Agile Data Center Summit
Enabling The Agile Data Center
Breaching Fort Apache.org - What went wrong?
Snow Leopard security - The good, the bad and the missing
US Dems fill inboxes with 419 scams
BlockMaster SafeStick hardware-encrypted USB drive