Tiny Core Linux

Tiny Core Extensions => TCE Bugs => Topic started by: tclfan on January 11, 2010, 08:39:30 AM

Title: Chromium extension suffers Certificate error on Bank of America site
Post by: tclfan on January 11, 2010, 08:39:30 AM
It appears that Chromium, at least TCL extension of Chromium does not recognize the Bank of America certificate. This means an error screen on www.bankofamerica.com. Other browsers extensions (Opera, Firefox, Shiretoko, Minefield) appear to work. Standalone chromium browser browser - Iron - is working fine too, not speaking of Chrome. Looks like this problem appears specific to Chromium extension.
Title: Re: Chromium extension suffers Certificate error on Bank of America site
Post by: Arslan S. on January 11, 2010, 08:58:39 AM
what do you mean by error screen on www.bankofamerica.com (http://www.bankofamerica.com) ?

i don't see any error
Title: Re: Chromium extension suffers Certificate error on Bank of America site
Post by: tclfan on January 11, 2010, 11:40:20 AM
It might be just me then. Now it makes me think if there is any connection with TC backup problem with Chromium. Fact is that (usb instlled) in my case Chromium connecting to Bank of America was resulting in certificate error. Testing the same Chromium connecting to Chase appeared fine.
Other browser extensions connecting to Bank of America were fine too.
I will try to dig further into this tonight...
Title: Re: Chromium extension suffers Certificate error on Bank of America site
Post by: althalus on January 11, 2010, 02:46:42 PM
No certificate error for me on that bank...

I have however, noticed that chromium thinks the certificates used by launchpad have been revoked, and a couple of other sites. Looking through the bug tracker for chromium, it appears to be an NSS bug.

These bugs all seem related to our SSL problems:
http://code.google.com/p/chromium/issues/detail?id=13336
https://bugs.launchpad.net/launchpad/+bug/429546
http://code.google.com/p/chromium/issues/detail?id=22796
Title: Re: Chromium extension suffers Certificate error on Bank of America site
Post by: tclfan on January 11, 2010, 03:46:47 PM
Sounds like the same problem. Certificate error in my case was specifically reporting certificate as revoked, while the certificate of Bank of America is perfectly fine and accepted by other browsers. What puzzles me that not all users experience this problem, possibly difference in extension version?
Title: Re: Chromium extension suffers Certificate error on Bank of America site
Post by: althalus on January 11, 2010, 06:55:34 PM
Sounds like the same problem. Certificate error in my case was specifically reporting certificate as revoked, while the certificate of Bank of America is perfectly fine and accepted by other browsers. What puzzles me that not all users experience this problem, possibly difference in extension version?
Chromium is still very much a beta software. It's a pain how it refuses to let you access a site using a certificate that it believes is revoked. Are you running with the latest NSS and Chromium extensions? As for me, Bank of America's certificate is valid with those extensions but not bugs.launchpad.net. It would be interesting to compare results, particularly if we're running the same extension versions and getting different results.

It would be nice to have nightly builds of the latest "good" rev.
Title: Re: Chromium extension suffers Certificate error on Bank of America site
Post by: tclfan on January 13, 2010, 08:33:46 AM
Althalus, sorry for my delayed reply, being very busy these days...
I am using the current Chromium extension from the TCL repository. I do not have the build version at hand right now, but this was freshly installed from repository, so whatever version is there now...
Title: Re: Chromium extension suffers Certificate error on Bank of America site
Post by: baz on February 28, 2010, 06:42:33 AM
By the way the solution to get past that is:

Tools > Options > Under The Hood > UN-CHECK "Check for server certificate revocation" (bottom of page)
Title: Re: Chromium extension suffers Certificate error on Bank of America site
Post by: althalus on February 28, 2010, 02:47:57 PM
you know, that's a really BAD workaround. That is a security feature after all.
Title: Re: Chromium extension suffers Certificate error on Bank of America site
Post by: baz on February 28, 2010, 06:38:37 PM
I gotta be able to access my gmail until a fix comes around...
Title: Re: Chromium extension suffers Certificate error on Bank of America site
Post by: althalus on June 22, 2010, 10:29:32 PM
It's generally bad form to reply to a topic that hasn't been touched in 4 months. And anyway, this is a bug that was fixed roughly 4 months ago. You won't see it in current versions of Chromium.
Title: Re: Chromium extension suffers Certificate error on Bank of America site
Post by: ^thehatsrule^ on September 30, 2010, 03:51:47 PM
[removed spam between #9 and #10]