New issue
Advanced search Search tips

Issue 774249 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Oct 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: Mac
Pri: 2
Type: Bug-Security



Sign in to add a comment

Chrome seems not to be checking SSL revocation correctly

Reported by es.n...@gmail.com, Oct 12 2017

Issue description

UserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36

Steps to reproduce the problem:
1. go to https://revoked-isrgrootx1.letsencrypt.org/
2. 
3. 

What is the expected behavior?
it's supposed to issue a warning saying that cert was revoked

What went wrong?
It goes into a site with a revoked cert directly and considers it secure

Did this work before? N/A 

Chrome version: 61.0.3163.100  Channel: stable
OS Version: OS X 10.12.6
Flash Version: 

it seems to be working correctly on chrome for windows 61.0.3163.100
 
Components: Internals>Network>Certificate
Labels: -Restrict-View-SecurityTeam allpublic
Status: WontFix (was: Unconfirmed)
Chrome's policy on Certificate revocation is described here: https://chromium.googlesource.com/chromium/src/+/master/docs/security/faq.md#What_s-the-story-with-certificate-revocation

Sign in to add a comment