New issue
Advanced search Search tips

Issue 602673 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner:
Closed: May 2016
Cc:
EstimatedDays: ----
NextAction: ----
OS: iOS
Pri: 3
Type: Bug



Sign in to add a comment

Increasing feedback on ERR_SSL_PROTOCOL_ERROR

Project Member Reported by hongchic...@chromium.org, Apr 12 2016

Issue description

Version: <49.0.2623.109>
OS: <iOS>

What steps will reproduce the problem?
There is increasing feedback on seeing "SSL protocol error" when users try to log in to legit portals like bank portal, school portal, or Google Play


Link to feedback report:
https://hotsauce.corp.google.com/product/282/neutron?lView=td&lRSort=1&lROrder=2&lRFilter=1&lTagId=a11:69647b14:930385&lReportSearch=tag:%23label%3Eblingm49 

Please use labels and text to provide additional information.

 
Cc: pkl@chromium.org eugene...@chromium.org pinkerton@chromium.org
Eugene, Peter: Please triage accordingly. 
Cc: -eugene...@chromium.org
Owner: eugene...@chromium.org
Status: Assigned (was: Untriaged)
I will take a look at metrics.
According to UMA there is a tiny percentage or certs rejected by Chrome for iOS which were previously accepted by UIWebView app: https://goo.gl/0cqhPF. These certs are fail under "Accepted only by NSS (rejected by iOS)." category.

I've seen a couple of bugs where users stated that cert is not accepted by Chrome after WKWebView rollout. All those cases had incomplete cert chain which is tolerated by NSS (UIWebView app) but rejected by iOS (WKWebView app). Also in all those cases Safari did nit accept the cert as well. WebSite owners can and should fix server certificate chain to make their site work in Chrome and Safari.

Having said that I think we need concrete bug reports, because UMA data says that the issue is not common. 
Cc: rsleevi@chromium.org
Status: WontFix (was: Assigned)
Marking as won't fix as according to UMA metrics the difference is insignificant. Starting with M51 CertVerifier now uses SecTrust API so we will not have UMA to track NSS vs. SecTrust difference.

Sign in to add a comment