Search squid archive

Re: net err cert validity too long - chrome/safari

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Thanks Alex 😊 

On Thu, 23 Sep 2021, 15:46 Alex Rousskov, <rousskov@xxxxxxxxxxxxxxxxxxxxxxx> wrote:
On 9/23/21 9:49 AM, L.P.H. van Belle wrote:
> sadly yes..
> https://chromium.googlesource.com/chromium/src/+/HEAD/net/docs/certificate_lifetimes.md

AFAICT, the above article says that Chrome only applies the 398-day
restriction to certificates signed by CAs that are trusted in a
_default_ installation of Chrome (i.e. the so called "publicly trusted
CAs"). Rob's custom CA is not one of those publicly trusted CAs.

Evidently, either the 398-day restriction is now applied to more
situations than those described in the article OR Rob has circumvented
Crhome's idea of "publicly trusted CAs".

Alex.

>     ------------------------------------------------------------------------
>     *Van:* squid-users
>     [mailto:squid-users-bounces@xxxxxxxxxxxxxxxxxxxxx] *Namens *robert k
>     Wild
>     *Verzonden:* donderdag 23 september 2021 14:53
>     *Aan:* squid-users@xxxxxxxxxxxxxxxxxxxxx
>     *Onderwerp:* net err cert validity too long -
>     chrome/safari
>
>     hi all,
>
>     i get this error on chrome and safari, when i access the same
>     website on firefox i get the proxy error page as i havnt whitelisted
>     this site, when i whitelist it, i can get on the website on all
>     three diff browsers and when i take it off the whitelist exactly the
>     same before
>
>     i have googled and its because my cert is too long age, i made it
>     999 days and i find out now it should be longer than 397 days
>
>     is this correct?
>
>     thanks,
>     rob
>
>     --
>     Regards,
>
>     Robert K Wild.
>
>
> _______________________________________________
> squid-users mailing list
> squid-users@xxxxxxxxxxxxxxxxxxxxx
> http://lists.squid-cache.org/listinfo/squid-users
>

_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux