InMotion Hosting Support Center

Default trust CAs - Verisign G5

Category: Ssl

giftja
Asked:
2015-09-20 6:07 pm EST

Hits: 111
Are the Verisign G5 root CAs installed in the trust chain for the shared hosting service? Several APIs (like PayPal) are moving from the Verisign G2 to the Verisign G5 for signing their SSL certs.

You must login before you can ask a follow up question.

You must login before you can submit an answer.

OTHER ANSWERS

0

scott
Staff
43,761 Points
2015-09-21 9:11 am EST
Hello giftja,

Thank you for your question on the default trust CA. We use Comodo SSLs so Verisign is not in our particular chain. In speaking with our Admin, it appears that this applies to those using Verisign. Any security changes that need to be made within our own SSLs are always done in a timely manner to avoid any issues with our customers using them, so they do stay up to date.

Kindest Regards,
Scott M

You must login before you can post a comment about this answer.

I'm sorry the initial question wasn't clear about this - this is not about the CAs used by InMotion to sign certificates, but rather about making sure the CAs in the default trust store used by openssl/cURL/php/etc (typically stored somewhere like /etc/ssl/certs) have the up-to-date Verisign G5 cert in them. That way, when an HTTPS get request is made from a php application hosted on an InMotion server, php/cURL is able to validate the trust chain for the API that it is calling out to. Paypal (among others) are updating their SSL certs such that they are now signed by the Verisign G5 CA instead of the Verisign G2 CA, so unless the default trust store has been updated on the InMotion hosts to include the Verisign G5 cert, calls from php applications like ZenCart to PayPal's APIs will fail SSL cert validation.
giftja
8 Points
2015-09-21 3:48 pm EST
Hello giftja,

I had a Systems person take a look at this question and they say you should be good to go as we should be G5 compliant.

Kindest Regards,
Scott M
scott
43,761 Points
Staff
2015-09-22 10:05 am EST
Like this Question?

Forum Login

You are NOT logged in. You can still browse our Support Center.

To participate within our Community Support Forum:

Need more Help?

Ask the Community!

Get help with your questions from our community of like-minded hosting users and InMotion Hosting Staff.

Current Customers

Chat: Click to Chat Now E-mail: support@InMotionHosting.com
Call: 888-321-HOST (4678) Ticket: Submit a Support Ticket

Not a Customer?

Get web hosting from a company that is here to help. Sign up today!