View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0005479GNUnetGNSpublic2018-11-17 06:252019-02-28 10:17
Reporterlurchi Assigned Toschanzen Due Date
PrioritynormalSeveritymajorReproducibilityalways
Status closedResolutionfixed 
PlatformallOSall 
Product VersionGit master 
Target Version0.11.0Fixed in Version0.11.0 
Summary0005479: gnunet-gns-proxy should include SubjectAltName
Descriptiongnunet-gns-proxy only includes the CN (Common Name) in its certificates. Chrome/Chromium since version 58 doesn't like that. It requires a SAN (SubjectAltName) in the certificate or else will reject it with the ERR_CERT_COMMON_NAME_INVALID error message.

I'm not sure about Firefox. On my machine (NixOS, Firefox 62) it still works, others say it doesn't work.

In any case our certificates should include a SubjectAltName, too.
Additional Informationhttps://www.chromestatus.com/features/4981025180483584
TagsNo tags attached.

Activities

schanzen

2018-11-17 07:38

administrator   ~0013342

Added in 6de27e4884dcc1781f5a0611ebb1d8bc524619d3.
Not sure if it works, can you test it?

Chrome will be notoriously picky as AFAIK it does other out-of-band checks as well.

lurchi

2018-11-17 08:23

developer   ~0013343

It works! Thank you :-)

Issue History

Date ModifiedUsernameFieldChange
2018-11-17 06:25lurchiNew Issue
2018-11-17 06:25lurchiStatusnew => assigned
2018-11-17 06:25lurchiAssigned To => schanzen
2018-11-17 06:42lurchiDescription Updated
2018-11-17 07:38schanzenStatusassigned => feedback
2018-11-17 07:38schanzenNote Added: 0013342
2018-11-17 08:23lurchiNote Added: 0013343
2018-11-17 08:23lurchiStatusfeedback => assigned
2018-11-17 08:54schanzenStatusassigned => resolved
2018-11-17 08:54schanzenResolutionopen => fixed
2019-02-20 11:24Christian GrothoffFixed in Version => 0.11.0
2019-02-28 10:17Christian GrothoffStatusresolved => closed