WelcomeWelcome | FAQFAQ | DownloadsDownloads | WikiWiki

Author Topic: Chromium extension suffers Certificate error on Bank of America site  (Read 4591 times)

Offline tclfan

  • Sr. Member
  • ****
  • Posts: 286
It appears that Chromium, at least TCL extension of Chromium does not recognize the Bank of America certificate. This means an error screen on www.bankofamerica.com. Other browsers extensions (Opera, Firefox, Shiretoko, Minefield) appear to work. Standalone chromium browser browser - Iron - is working fine too, not speaking of Chrome. Looks like this problem appears specific to Chromium extension.

Offline Arslan S.

  • Hero Member
  • *****
  • Posts: 825
Re: Chromium extension suffers Certificate error on Bank of America site
« Reply #1 on: January 11, 2010, 05:58:39 AM »
what do you mean by error screen on www.bankofamerica.com ?

i don't see any error

Offline tclfan

  • Sr. Member
  • ****
  • Posts: 286
Re: Chromium extension suffers Certificate error on Bank of America site
« Reply #2 on: January 11, 2010, 08:40:20 AM »
It might be just me then. Now it makes me think if there is any connection with TC backup problem with Chromium. Fact is that (usb instlled) in my case Chromium connecting to Bank of America was resulting in certificate error. Testing the same Chromium connecting to Chase appeared fine.
Other browser extensions connecting to Bank of America were fine too.
I will try to dig further into this tonight...

Offline althalus

  • Sr. Member
  • ****
  • Posts: 351
Re: Chromium extension suffers Certificate error on Bank of America site
« Reply #3 on: January 11, 2010, 11:46:42 AM »
No certificate error for me on that bank...

I have however, noticed that chromium thinks the certificates used by launchpad have been revoked, and a couple of other sites. Looking through the bug tracker for chromium, it appears to be an NSS bug.

These bugs all seem related to our SSL problems:
http://code.google.com/p/chromium/issues/detail?id=13336
https://bugs.launchpad.net/launchpad/+bug/429546
http://code.google.com/p/chromium/issues/detail?id=22796

Offline tclfan

  • Sr. Member
  • ****
  • Posts: 286
Re: Chromium extension suffers Certificate error on Bank of America site
« Reply #4 on: January 11, 2010, 12:46:47 PM »
Sounds like the same problem. Certificate error in my case was specifically reporting certificate as revoked, while the certificate of Bank of America is perfectly fine and accepted by other browsers. What puzzles me that not all users experience this problem, possibly difference in extension version?

Offline althalus

  • Sr. Member
  • ****
  • Posts: 351
Re: Chromium extension suffers Certificate error on Bank of America site
« Reply #5 on: January 11, 2010, 03:55:34 PM »
Sounds like the same problem. Certificate error in my case was specifically reporting certificate as revoked, while the certificate of Bank of America is perfectly fine and accepted by other browsers. What puzzles me that not all users experience this problem, possibly difference in extension version?
Chromium is still very much a beta software. It's a pain how it refuses to let you access a site using a certificate that it believes is revoked. Are you running with the latest NSS and Chromium extensions? As for me, Bank of America's certificate is valid with those extensions but not bugs.launchpad.net. It would be interesting to compare results, particularly if we're running the same extension versions and getting different results.

It would be nice to have nightly builds of the latest "good" rev.

Offline tclfan

  • Sr. Member
  • ****
  • Posts: 286
Re: Chromium extension suffers Certificate error on Bank of America site
« Reply #6 on: January 13, 2010, 05:33:46 AM »
Althalus, sorry for my delayed reply, being very busy these days...
I am using the current Chromium extension from the TCL repository. I do not have the build version at hand right now, but this was freshly installed from repository, so whatever version is there now...

Offline baz

  • Full Member
  • ***
  • Posts: 216
Re: Chromium extension suffers Certificate error on Bank of America site
« Reply #7 on: February 28, 2010, 03:42:33 AM »
By the way the solution to get past that is:

Tools > Options > Under The Hood > UN-CHECK "Check for server certificate revocation" (bottom of page)

Offline althalus

  • Sr. Member
  • ****
  • Posts: 351
Re: Chromium extension suffers Certificate error on Bank of America site
« Reply #8 on: February 28, 2010, 11:47:57 AM »
you know, that's a really BAD workaround. That is a security feature after all.

Offline baz

  • Full Member
  • ***
  • Posts: 216
Re: Chromium extension suffers Certificate error on Bank of America site
« Reply #9 on: February 28, 2010, 03:38:37 PM »
I gotta be able to access my gmail until a fix comes around...

Offline althalus

  • Sr. Member
  • ****
  • Posts: 351
Re: Chromium extension suffers Certificate error on Bank of America site
« Reply #10 on: June 22, 2010, 07:29:32 PM »
It's generally bad form to reply to a topic that hasn't been touched in 4 months. And anyway, this is a bug that was fixed roughly 4 months ago. You won't see it in current versions of Chromium.

Offline ^thehatsrule^

  • Administrator
  • Hero Member
  • *****
  • Posts: 1726
Re: Chromium extension suffers Certificate error on Bank of America site
« Reply #11 on: September 30, 2010, 12:51:47 PM »
[removed spam between #9 and #10]