Chromium extension suffers Certificate error on Bank of America site

[tclfan]

It appears that Chromium, at least TCL extension of Chromium does not recognize the Bank of America certificate. This means an error screen on www.bankofamerica.com. Other browsers extensions (Opera, Firefox, Shiretoko, Minefield) appear to work. Standalone chromium browser browser - Iron - is working fine too, not speaking of Chrome. Looks like this problem appears specific to Chromium extension.

[Arslan S.]

what do you mean by error screen on www.bankofamerica.com ?

i don't see any error

[tclfan]

It might be just me then. Now it makes me think if there is any connection with TC backup problem with Chromium. Fact is that (usb instlled) in my case Chromium connecting to Bank of America was resulting in certificate error. Testing the same Chromium connecting to Chase appeared fine.
Other browser extensions connecting to Bank of America were fine too.
I will try to dig further into this tonight...

[althalus]

No certificate error for me on that bank...

I have however, noticed that chromium thinks the certificates used by launchpad have been revoked, and a couple of other sites. Looking through the bug tracker for chromium, it appears to be an NSS bug.

These bugs all seem related to our SSL problems:
http://code.google.com/p/chromium/issues/detail?id=13336
https://bugs.launchpad.net/launchpad/+bug/429546
http://code.google.com/p/chromium/issues/detail?id=22796

[tclfan]

Sounds like the same problem. Certificate error in my case was specifically reporting certificate as revoked, while the certificate of Bank of America is perfectly fine and accepted by other browsers. What puzzles me that not all users experience this problem, possibly difference in extension version?

[althalus]

Sounds like the same problem. Certificate error in my case was specifically reporting certificate as revoked, while the certificate of Bank of America is perfectly fine and accepted by other browsers. What puzzles me that not all users experience this problem, possibly difference in extension version?

Chromium is still very much a beta software. It's a pain how it refuses to let you access a site using a certificate that it believes is revoked. Are you running with the latest NSS and Chromium extensions? As for me, Bank of America's certificate is valid with those extensions but not bugs.launchpad.net. It would be interesting to compare results, particularly if we're running the same extension versions and getting different results.

It would be nice to have nightly builds of the latest "good" rev.

[tclfan]

Althalus, sorry for my delayed reply, being very busy these days...
I am using the current Chromium extension from the TCL repository. I do not have the build version at hand right now, but this was freshly installed from repository, so whatever version is there now...

[baz]

By the way the solution to get past that is:

Tools > Options > Under The Hood > UN-CHECK "Check for server certificate revocation" (bottom of page)

[althalus]

you know, that's a really BAD workaround. That is a security feature after all.

[baz]

I gotta be able to access my gmail until a fix comes around...

[althalus]

It's generally bad form to reply to a topic that hasn't been touched in 4 months. And anyway, this is a bug that was fixed roughly 4 months ago. You won't see it in current versions of Chromium.

[^thehatsrule^]

[removed spam between #9 and #10]