New issue
Advanced search Search tips

Issue 808611 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Feb 2018
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug-Security



Sign in to add a comment

NET::ERR_CERT_AUTHORITY_INVALID at https://login.salesforce.com

Reported by deep...@gmail.com, Feb 2 2018

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36

Steps to reproduce the problem:
1. Navigate to https://login.salesforce.com on Chrome Canary 66.0.3336.5
2. NET::ERR_CERT_AUTHORITY_INVALID

What is the expected behavior?
Site loads with valid certificate.

What went wrong?
NET::ERR_CERT_AUTHORITY_INVALID and can't bypass. This happens on an incognito window as well.

This is currently not an issue on both Chrome Beta and Chrome Standard.

Did this work before? Yes It was working last week. I don't know the version at that time.

Chrome version: 66.0.3336.5  Channel: canary
OS Version: 10.0
Flash Version: 

Please fix. =]
 
ValidCertificate.PNG
18.1 KB View Download

Comment 1 by deep...@gmail.com, Feb 2 2018

CertAuthorityInvalid.PNG
46.7 KB View Download
Components: Internals>Network>Certificate
Labels: -Restrict-View-SecurityTeam allpublic
Status: WontFix (was: Unconfirmed)
Yes. In earlier builds, you'll see this notice in the console:

The SSL certificate used to load resources from https://login.salesforce.com will be distrusted in M66. Once distrusted, users will be prevented from loading these resources. See https://g.co/chrome/symantecpkicerts for more information.

The site needs to update their certificate.
Salesforce is in the process of transitioning their certificates. Their current certificate expires in June, but they already have a new DigiCert certificate that does not cause this error that is in the process of being rolled out in advance of Chrome 66.

Comment 5 by deep...@gmail.com, Feb 2 2018

Looks like this will be fixed on February 11, 2018 at 1:00am US Pacific.
https://help.salesforce.com/articleView?id=Salesforce-certificates-change-from-Symantec-to-DigiCert-in-2018&language=en_US&type=1

Thanks everyone!
 Issue 809568  has been merged into this issue.

Sign in to add a comment