[MacTUG] Skype for Business (Mac only) cert problem

[Dani Roloson]

So that security command is supposed to add the certs as Always Trust

and I've confirmed the command from a second source but I get


This certificate is marked as not trusted for all users.


Apparently trustAsRoot instead of just trustRoot.


I deleted all the "common" stuff such as MAU since I get that from my Office package.

I left the MeetingJoinPlugin.


The certs are put into /Users/Shared and then installed with a postinstall script.


http://www.math.uwaterloo.ca/~daroloso/SkypeForBusiness-16.26.0.19.pkg


________________________________
From: Mike Patterson
Sent: June 3, 2019 14:25
To: Dani Roloson
Cc: Trevor Bain; MacTUG ‎[mactug at mailman.uwaterloo.ca]‎
Subject: Re: [MacTUG] Skype for Business (Mac only) cert problem

"""
Description:     External Access Certificate Renewal

Date: (YYYY-MM-DD)     2019-06-05

Start Time:              22:00

End Time: 07:15 (2019-06-06)

Submitted By: p2dietri at uwaterloo.ca<mailto:p2dietri at uwaterloo.ca>

Comment:        The external access certificate for Skype will be updated starting at 10pm on Wednesday night.  When the servers are updated they will require a restart which will force anyone connected to each affected Edge server to be disconnected and reconnected to the next available Edge server while the work is in progress.  This behaviour is expected to last 1 hour between both systems.

At 7am on Thursday the certificate will be updated on the F5 load balancer which will not cause any outage.

Notice Submitted:    Mon Jun 3 14:12:51 EDT 2019

Follow us on twitter https://twitter.com/UWNetworkAlert

Note:   If you have any questions or concerns please contact the IST Service Desk at ext: 44357 or helpdesk at uwaterloo.ca<mailto:helpdesk at uwaterloo.ca>
"""

I guess I R'd Cly. :)

Mike

--
Mike Patterson - pronouns he/him - Manager, Information Security Operations
Information Security Services, University of Waterloo
+1 519-888-4567, x47178 / mike.patterson at uwaterloo.ca<mailto:mike.patterson at uwaterloo.ca>
Security Operations Centre x41125 / soc at uwaterloo.ca<mailto:soc at uwaterloo.ca>

On Jun 3, 2019, at 1:42 PM, Mike Patterson <mike.patterson at uwaterloo.ca<mailto:mike.patterson at uwaterloo.ca>> wrote:

IIRC from a conversation a couple of weeks ago (I've been off a week and a half so forgive me), Paul intends to flip those certs back to publics because of issues like this..

But I would strongly recommend distributing those certificates anyway, as best/much as you can.

Mike

--
Mike Patterson - pronouns he/him - Manager, Information Security Operations
Information Security Services, University of Waterloo
+1 519-888-4567, x47178 / mike.patterson at uwaterloo.ca<mailto:mike.patterson at uwaterloo.ca>
Security Operations Centre x41125 / soc at uwaterloo.ca<mailto:soc at uwaterloo.ca>

On Jun 3, 2019, at 1:35 PM, Dani Roloson <daroloso at uwaterloo.ca<mailto:daroloso at uwaterloo.ca>> wrote:

If this is going to be an on-going problem, I probably would have packaged S4B with the certs and make it available.

I would have also have put the pointers directly to the certs rather than to the page which seems intimidating to general users.

GlobalSign Non-Public SHA1 Chain > GlobalSign Non-Public SHA1 CA - G3 SHA1 • RSA • 2048

http://secure.globalsign.com/cacert/gsintranetsslg3.crt
<http://secure.globalsign.com/cacert/gsintranetsslg3.crt>
GlobalSign Non-Public SHA256 Chain > GlobalSign Non-Public SHA256 CA - G3 > SHA256 • RSA • 2048

http://secure.globalsign.com/cacert/gsintranetsslsha256g3.crt
<http://secure.globalsign.com/cacert/gsintranetsslsha256g3.crt>
________________________________
From: Trevor Bain
Sent: June 3, 2019 12:29
To: Dani Roloson; MacTUG ‎[mactug at mailman.uwaterloo.ca<mailto:mactug at mailman.uwaterloo.ca>]‎
Subject: RE: Skype for Business (Mac only) cert problem

Have had that a while back (link below) but was on Skype for Business on my Mac earlier today with no issues.

https://uwaterloo.ca/information-systems-technology/news/skype-business-s4b-login-issue-macs-march-15

Trevor


From: mactug-bounces at lists.uwaterloo.ca<mailto:mactug-bounces at lists.uwaterloo.ca> <mactug-bounces at lists.uwaterloo.ca<mailto:mactug-bounces at lists.uwaterloo.ca>> On Behalf Of Dani Roloson
Sent: June 3, 2019 12:21 PM
To: MacTUG ‎[mactug at mailman.uwaterloo.ca<mailto:mactug at mailman.uwaterloo.ca>]‎ <mactug at mailman.uwaterloo.ca<mailto:mactug at mailman.uwaterloo.ca>>
Subject: [MacTUG] Skype for Business (Mac only) cert problem

Others getting this?



<image001.png>
_______________________________________________
MacTUG mailing list
MacTUG at lists.uwaterloo.ca<mailto:MacTUG at lists.uwaterloo.ca>
https://lists.uwaterloo.ca/mailman/listinfo/mactug


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.uwaterloo.ca/pipermail/mactug/attachments/20190603/ff631637/attachment-0001.html>