Require X.509 key usage extension for RSA certificates chaining to local roots
X.509 certificates used for HTTPS should contain a key usage extension that declares how the key in a certificate may be used. Such instructions ensure certificates are not used in an unintended context, which protects against a class of cross-protocol attacks on HTTPS and other protocols. For this to work, HTTPS clients must check that server certificates match the connection's TLS parameters, specifically that the key usage flag for “digitalSignature” and possibly “keyEncipherment” (depending on TLS ciphers in use) are asserted when using RSA.
Chrome 117 will begin enforcing that the key usage extension is set properly on RSA certificates chaining to local roots. Key usage is already required for ECDSA certificates, and for publicly trusted certificates. Enterprises can test and temporarily disable key usage enforcement using the RSAKeyUsageForLocalAnchorsEnabled policy (available in Chrome 116). "
We can not access orbilogin.com local site anymore. While waiting for Netgear developers fix this problem, we will do step by step:
So navigating to HKEY_LOCAL_MACHINE\SOFTWARE\Policies in regedit on my Windows11 23h2 machine and there is no \Google folder/path no chrome folder/path and under Microsoft, no Edge folder/path.
Manually adding them and then adding the registry values to them does not fix this either.
This is already an ongoing issue and there is a patch firmware that fixes this. The official firmware is on its way but we do not have ETA on it. Please download the beta firmware on the link provided below and load it to your router and satellite. You can use a firefox browser to login to your GUI and load the firmware provided. After loading the firmware, a full factory default is necessary on the router, then you test if you can use Chrome or Edge after.
Trying to enter the menu of the Orbi-Pro-router using Edge or Chrome can lead to the message:
It looks like the webpage at https://.... ight be having issues, or it may have moved permanently to a new web address.
ERR_SSL_KEY_USAGE_INCOMPATIBLE
If it is only about being able to enter the Orbi-menu of the Orbi-router, please use an alternative browser as a quick fix, for example: Firefox. That worked for me very well to ignore the error message and to enter the Orbi menu/interface.
