New issue
Advanced search Search tips

Issue 620431 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner:
Closed: Jun 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 3
Type: Bug



Sign in to add a comment

Office 365 Outlook Error HSTS

Reported by cbcirca1...@gmail.com, Jun 15 2016

Issue description

Chrome Version       : 51.0.2704.84
OS Version: 6.1 (Windows 7, Windows Server 2008 R2)
URLs (if applicable) :
Other browsers tested:
  Add OK or FAIL after other browsers where you have tested this issue:
     Safari 5:
  Firefox 4.x:
     IE 7/8/9:

What steps will reproduce the problem?
1. attempt to log into Office 365 and access the "Mail" app
2. receive error due to HSTS error
3.

What is the expected result?

-access Outlook  WebApp

What happens instead of that?

-Privacy Error

Please provide any additional information below. Attach a screenshot if
possible.

UserAgentString: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36



 
net-internals-log_Outlook.json
147 KB View Download
Components: Internals>Network>SSL
Cc: rsleevi@chromium.org
Labels: Needs-Feedback
It appears that, for whatever reason, Windows doesn't like that certificate, though, at a glance, it doesn't look like a MITM cert or anything weird. (Though I didn't actually check the signatures on it.) +rsleevi, do you know what might be up here?

cbcirca1987: Does the same site work in IE or Edge for you?
Thanks for the quick reply.  The computer is running Windows 7 Enterprise
Service Pack 1, and Chrome Version 51.0.2704.84 m (64-bit).  this is a
government computer and has tons of security protocols in place....just
spoke to some coworkers who are running the same OS and hardware, but
they're not having the same problems.  It has been a couple weeks since I
was able to connect to the government network so maybe I am missing some
security updates?  Thanks.

-Cameron
Sorry, forgot to include the attachments of the IE screenshots.
The screenshots didn't seem to come through. Though I mostly just want to know yes or no, does it work on IE?

(We use the same certificate verifier as IE, so it's a first-order check for seeing if we're calling the certificate verifier wrong or if the machine is misconfigured external to Chrome.)
Yes it works on IE, but I receive cert errors warning me to not continue to
the site.  when I do get through all the errors the cert error notification
is in the address bar and some of the site functions do not work properly.
 attached PDF of the screen shots this time.  Thanks.
Screenshots indicate it's not working in IE.

Looks like the machine's got a corrupted database. Downloading http://download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/rootsupd.exe may be sufficient to restore things.
Unfortunately I can't download anything because I don't have Admin rights,
only my network Admin can since it's a government computer.  Is there
another way? thanks.
Disregard.  A coworker emailed me the updated root cert which i imported
into Chrome and it solved the issues.   thanks for your support!
Project Member

Comment 10 by sheriffbot@chromium.org, Jun 16 2016

Labels: -Needs-Feedback Needs-Review
Owner: davidben@chromium.org
Thank you for providing more feedback. Adding requester "davidben@chromium.org" for another review and adding "Needs-Review" label for tracking.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Status: WontFix (was: Unconfirmed)
Closing as this is an issue on the machine, not Chrome, and has since been resolved.
Agreed, issue with the machine and not Chrome.  Issue was resolved by
importing the recent cert.  Thanks for the great support, wouldn't expect
anything less from the Chrome Team!
Happy to help! Yeah, it turns out a remarkable number of Chrome networking issues turn out to be issues with the machine, so we're decently good at spotting them. :-) (Not all of them though! I certainly cannot claim Chrome is bug-free by a long shot.)

Sign in to add a comment