[9.20rc2] ClientCert thumbprint stored partially

Please report only one bug per message!

Moderators: sheep, Hacker, Stefan2, white

Post Reply
User avatar
Flint
Power Member
Power Member
Posts: 3167
Joined: 2003-10-27, 09:25 UTC
Location: Moscow, Russia
Contact:

[9.20rc2] ClientCert thumbprint stored partially

Post by *Flint » 2018-06-20, 19:54 UTC

The newly added SHA1 thumbprint part of the ClientCert key contains only the first half of the actual thumbprint.

For example, when I choose some certificate I get:

Code: Select all

ClientCert=kxpndYZUqkSBfrIMBZAZSw==:0AC7658CBF903E84E7D6
while the full thumbprint looks like:

Code: Select all

0a c7 65 8c bf 90 3e 84 e7 d6 dc db 75 8c 46 c6 ab 0f e5 75
<Added>
Sorry, posted into wrong forum. Should be under "9.2x bug reports". :oops:
Flint's Homepage: Full TC Russification Package, VirtualDisk, NTFS Links, NoClose Replacer, and other stuff!
 
Using TC 9.21a / Win7 x64 SP1, Win10 x64

User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 37013
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Post by *ghisler(Author) » 2018-06-21, 09:26 UTC

Yes indeed I'm using only half the hash. This is fully sufficient to find the right certificate in the certificate store. Before this change I only used the serial number - this is something the certificate creator can set, and may be meaningless when using a self signed certificate.
Author of Total Commander
http://www.ghisler.com

Post Reply