New issue
Advanced search Search tips

Issue 811750 link

Starred by 6 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Feb 2018
EstimatedDays: ----
NextAction: ----
OS: Mac
Pri: 2
Type: Bug-Security



Sign in to add a comment

NET::ERR_CERT_AUTHORITY_INVALID when connecting to some domains with valid certs

Reported by j...@externl.com, Feb 13 2018

Issue description

UserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3343.3 Safari/537.36

Steps to reproduce the problem:
1. Go to https://discussions.apple.com/
2. See "Privacy error"

What is the expected behavior?
Page will load

What went wrong?
Privacy error page is shown.

discussions.apple.com normally uses encryption to protect your information. When Google Chrome tried to connect to discussions.apple.com this time, the website sent back unusual and incorrect credentials.

Did this work before? N/A 

Chrome version: 66.0.3343.3  Channel: dev
OS Version: OS X 10.13.3
Flash Version: 

Cert is valid and works with other browsers. I've encountered this with a few domains over the past few days.
 
Screen Shot 2018-02-13 at 9.38.24 AM.png
41.4 KB View Download

Comment 1 by rsesek@chromium.org, Feb 13 2018

Labels: -Restrict-View-SecurityTeam
Status: WontFix (was: Unconfirmed)
Chrome is distrusting that certificate, as announced here: https://security.googleblog.com/2017/09/chromes-plan-to-distrust-symantec.html 

Comment 2 by j...@externl.com, Feb 13 2018

Ah, makes sense. It's unfortunate that the cert inspector still shows as valid. Not sure how much of that is macOS and how much is Chrome. 

Comment 3 by j...@externl.com, Feb 13 2018

I assume https://www.apple.com/ is fine because of its later expiration?

Comment 4 by rsesek@chromium.org, Feb 13 2018

Yeah, the mismatch between the address bar state and the certificate dialog is unfortunate. The certificate dialog is an OS-level component, and Chrome can't display its own certificate policies there. For more information you can view  issue 88003 .

Comment 5 by j...@externl.com, Feb 13 2018

The UI could really do more to help the user out here. The cert showing as trusted in the inspector and giving a vague error message is not great. Should I open an new issue in UI?

Comment 6 by rsesek@chromium.org, Feb 13 2018

I think  issue 88003  is still the authoritative answer on this (i.e. this UI is not likely to be changed).
 Issue 814602  has been merged into this issue.
 Issue 823016  has been merged into this issue.

Sign in to add a comment