New issue
Advanced search Search tips

Issue 600495 link

Starred by 1 user

Issue metadata

Status: Archived
Owner: ----
Closed: Jul 2016
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug



Sign in to add a comment

certificate-based authentication failed

Reported by jwright1...@gmail.com, Apr 4 2016

Issue description

UserAgent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.110 Safari/537.36

Steps to reproduce the problem:
1. Opened Chrome
2. Attempted to connect to gmail, facebook
3. Received Error Page - "This site can’t provide a secure connection

www.facebook.com didn’t accept your login certificate, or your login certificate may have expired.
ERR_BAD_SSL_CLIENT_AUTH_CERT"

What is the expected behavior?
Page Loads as normal

What went wrong?
Unsure - Checked settings & system clock, cleared cache / history, tried to create a new browser profile, no change.  Ability to access Google Calendar and Drive, etc., but not gmail.  Able to access LinkedIn and Twitter, but not Facebook.  

Did this work before? Yes This morning

Chrome version: 49.0.2623.110  Channel: stable
OS Version: 6.1 (Windows 7, Windows Server 2008 R2)
Flash Version: Shockwave Flash 21.0 r0

I don't believe so.
 
Components: Internals>Network>SSL
Labels: -Type-Bug-Security -Restrict-View-SecurityTeam Type-Bug
Labels: Needs-Feedback
Can you please provide a net-internals log ( https://dev.chromium.org/for-testers/providing-network-details ) demonstrating the issue? Note  you need to open chrome://net-internals before you reproduce the problem.

Neither GMail nor Facebook make use of client certificates, so it's likely that there are one or more network intermediaries, such as a corporate proxy. A net-internals may assist in further diagnosing.
Ping jwright1984@

Comment 4 by ronjun...@gmail.com, Apr 30 2016

I'm running into the same problem when I try to go to https://groupme.com/

This is a new problem. I use this site often and it always worked before.

If I close all of my Chrome tabs and open chrome again, it will work. Is there anything I can do so I don't have to close all tabs?

Thanks,
Ron
net-internals-log.json
589 KB View Download

Comment 5 by mge...@chromium.org, May 12 2016

Labels: -Needs-Feedback
Status: Untriaged (was: Unconfirmed)
Labels: Needs-Feedback
Odd. This seems to keep coming up for some reason.

The connection to groupme.com is immediately failing with the access_denied alert, which we map to ERR_SSL_BAD_CLIENT_AUTH_CERT, so the error is confusing. The response is coming back immediately, so this is definitely local.

It seems you have some kind of firewall or antivirus software on your machine (or malware) that's trying to filter connections and doing it badly. Could you check if one of those has the wrong settings? In issue #599188, it was ESET. Do you have that installed?


The error mapping is confusing, although the spec is quite clear on what access_denied means:

   access_denied
      A valid certificate was received, but when access control was
      applied, the sender decided not to proceed with negotiation.  This
      message is always fatal.

Evidently, no one realizes this... :-/
ping ronjuneau, can you respond to #6?
Status: Archived (was: Untriaged)
Closing due to lack of response. If you're still having issues, feel free to file a new bug.

Sign in to add a comment