New issue
Advanced search Search tips

Issue 810348 link

Starred by 2 users

Issue metadata

Status: Duplicate
Merged: issue 809754
Owner: ----
Closed: Feb 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Mac
Pri: 2
Type: Bug



Sign in to add a comment

Symantec Invalid certs still showing as valid in certificate viewer

Reported by alexandr...@gmail.com, Feb 8 2018

Issue description

UserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3343.0 Safari/537.36

Steps to reproduce the problem:
1. Go to alternate.de 

What is the expected behavior?
Site opens normally

What went wrong?
Privacy error: Your connection is not private. Site won't open

Did this work before? Yes 

Chrome version: 66.0.3343.0  Channel: canary
OS Version: OS X 10.13.3
Flash Version: 

Clicking on the "Not Secure" button next to the address field it will say "Certificate (Invalid)". Click on that and then it says this certificate is valid.

Screenshot for example. Other sites affected as well.
 
Screen Shot 2018-02-08 at 13.13.05.png
105 KB View Download
Cc: elawrence@chromium.org
Components: Internals>Network>Certificate UI>Browser>CertificateViewer
Labels: -Type-Bug-Security -Restrict-View-SecurityTeam Type-Bug
Summary: Symantec Invalid certs still showing as valid in certificate viewer (was: Mistaking site certificates as invalid)
This certificate is invalid and must be replaced by the site:  https://security.googleblog.com/2017/09/chromes-plan-to-distrust-symantec.html?m=1

Certificate folks: I assume there's not a way for us to override the text/analysis in the OS viewer?
Mergedinto: 809754
Status: Duplicate (was: Unconfirmed)
Correct. We use the OS viewer for reasons such as integrating with OS trust settings, but this means we cannot change that UI.

That UI can also show different results for other cases (differences in hostname validation, differences in revocation checking, differences in extensions)
 Issue 810462  has been merged into this issue.

Sign in to add a comment