New issue
Advanced search Search tips

Issue 704359 link

Starred by 2 users

Issue metadata

Status: WontFix
Merged: issue 700595
Owner: ----
Closed: Mar 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug



Sign in to add a comment

Viewing https site youtube errors with NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM

Reported by gr...@tassiechat.com, Mar 23 2017

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.110 Safari/537.36

Steps to reproduce the problem:
1. https://youtube.com
2. 
3. 

What is the expected behavior?
Expected youtube to load like other sites. 

Sites loading normal example:
https://onedrive.live.com
https://yahoo.com

What went wrong?
When visting a major https site errors with:
NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM

We run webwasher filtering I suspect the latest Google Chrome requires some changes to our filtering system to be compatibable

Version 56. of chrome doesnt error. IE11 doesnt error.

Did this work before? Yes 56.

Chrome version: 57.0.2987.110  Channel: stable
OS Version: 10.0
Flash Version:
 

Comment 1 by rsesek@chromium.org, Mar 23 2017

Components: Internals>Network>SSL
Labels: -Type-Bug-Security -Restrict-View-SecurityTeam Type-Bug
Mergedinto: 700595
Status: Duplicate (was: Unconfirmed)
Correct, Chrome 57 has deprecated SHA-1 certificates.

 Issue 700595  contains further details.
Ryan: That looks like the CN bug, not the SHA-1 one. :-)
Status: WontFix (was: Duplicate)
Ah, dang it, you're right. https://security.googleblog.com/2016/11/sha-1-certificates-in-chrome.html has further details.

Sign in to add a comment