New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 622075 link

Starred by 1 user
Status: WontFix
Owner:
█ dskaram@chromium.org
Last visit > 30 days ago
Closed: Jun 2016
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 2
Type: Bug-Security



Sign in to add a comment

Trusted roots broken in M53 / enterprise pushed certs are not functioning

Reported by eric.kuf...@kohls.com, Jun 21 2016 
UserAgent: Mozilla/5.0 (X11; CrOS x86_64 8459.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2768.0 Safari/537.36
Platform: Platform 8459.0.0 (Official Build) dev-channel chell

Steps to reproduce the problem:
1. Enroll a chromebook in enterprise cPanel
2. Go to SETTINGS | ADVANCED | MANAGE CERTIFICATES
3. Look in each of the tabs. Your Certificates|Authorities
4. ((there is nothing listed))

5. Go to https://www.yahoo.com/

6. Get a certificate / privacy warning

This leads me to believe my proxy server SSL certificate is not working. Even though it is in our configuration to be pushed down to Chromebooks.

What is the expected behavior?
Certificates are shown.

Enterprise managed authority certificates are present on the device delivered and operational.

What went wrong?
Certificate are not show.

Plus it sees enterprise managed certs are not operating correctly.

Did this work before? Yes M52

Chrome version: 53.0.2768.0  Channel: dev
OS Version: 8459.0.0
Flash Version: Shockwave Flash 22.0 r0

Comment 1 by dominickn@chromium.org, Jun 22 2016

Owner: dskaram@chromium.org
Can you attach a screenshot of the particular error that you get? And can you confirm that this works with an otherwise identical setup on M52?

Assigning to dskaram to take a look and help identify if this is a security risk.

Comment 2 by dominickn@chromium.org, Jun 22 2016

Components: Enterprise
Project Member

Comment 3 by ClusterFuzz, Jun 22 2016

Status: Assigned (was: Unconfirmed)

Comment 4 by eric.kuf...@kohls.com, Jun 22 2016 

What I was seeing yesterday was that all of the tabs within the personal certificates & authorities screens were empty.

What triggered me even looking in there - I was seeing our transparent SSL proxy certificate as being invalid when I went to the internet. 

Having trouble reproducing the issue this morning. :(

Comment 5 by dominickn@chromium.org, Jun 22 2016 

Do you mean that the issue has gone away for now?

Comment 6 by dominickn@chromium.org, Jun 24 2016

Labels: Needs-Feedback

Comment 7 by eric.kuf...@kohls.com, Jun 24 2016 

I have been unable to reproduce the issue since 7/21.

I believe this issue can be considered unverified or closed. I cannot reproduce it.
Project Member

Comment 8 by ClusterFuzz, Jun 25 2016

Labels: Missing_Severity-1 Missing_Impact-1

Comment 9 by dominickn@chromium.org, Jun 25 2016

Labels: -Missing_Severity-1 -Missing_Impact-1 Security_Impact-Head Security_Severity-Low

Comment 10 by sleevi@google.com, Jun 27 2016

Components: Internals>Network>Certificate
Status: WontFix (was: Assigned)
Marking WontFix for cannot Reproduce.
Project Member

Comment 11 by sheriffbot@chromium.org, Oct 4 2016

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment