New issue
Advanced search Search tips

Issue 646563 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Sep 2016
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 3
Type: Bug



Sign in to add a comment

Misleading error text shown on expired certificate warning

Reported by rocz...@gmail.com, Sep 13 2016

Issue description

Chrome Version       : 51.0.2704.79 (Developer Build) Ubuntu 14.04 (64-bit)
URLs (if applicable) : e.g. https://expired.badssl.com/
Other browsers tested:
  Add OK or FAIL, along with the version, after other browsers where you
have tested this issue:
     Safari:
    Firefox: OK
         IE:

What steps will reproduce the problem?
(1) Launch Chromium
(2) Go to https://expired.badssl.com/ (or any other webpage with expired ssl-certificate)

What is the expected result?

An error code that hints me to the fact that the certificate is expired.

What happens instead?

The displayed error code is NET::ERR_CERT_DATE_INVALID, which can lead to the thought, that there is a date in the certificate which is an invalid date, whereas the certificate has just expired.

Please provide any additional information below. Attach a screenshot if
possible.

Firefox for example show the error code SEC_ERROR_EXPIRED_CERTIFICATE together with the actual expiration date and the current system time/date.
 
Components: Security>UX
Status: Untriaged (was: Unconfirmed)
Summary: Misleading error text shown on expired certificate warning (was: Misleading error code is used on expired certificate warning)
I assume we'd get the same error if any certificate in the chain wasn't yet valid too. The interstitial could choose to show a more friendly string here rather than the underlying error constant, whose name we almost certainly can't change.

Comment 2 by f...@chromium.org, Sep 16 2016

Status: WontFix (was: Untriaged)
The "details" text already says whether it's expired or not yet valid. From the example: "Its security certificate expired 523 days ago."
Components: -Security>UX
Labels: Team-Security-UX
Security>UX component is deprecated in favor of the Team-Security-UX label

Sign in to add a comment