- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
Self signed certificate error in Chrome 58
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Google have changed cert validation in Chrome 58 to use SAN rather than Common Name
https://alexanderzeitler.com/articles/Fixing-Chrome-missing_subjectAltName-selfsigned-cert-openssl/
This is causing my 316's with self signed certs to throw SSL errors and the admin panel fails to load. Not a problem - I just use IE to access but you may want to change the SSL Cert generation code to populate SAN as well as CN to clear the error.
Running 6.7.1 - and I've tried regenerating the cert as well.
Solved! Go to Solution.
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Perfect - Chrome 58 working again.
Obviously I needed to regen the certificate (needed to change SSL Key host twice, away from current value and back again - second time lucky 🙂 ) - and then remove old cert from certificate store and reinstall new one.
One other gotcha for others to be aware of - you can't use IP address for SSL Key host - needs to be a name
Thanks to @Skywalker
Kevin
All Replies
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Self signed certificate error in Chrome 58
Hello kevin_marchant,
We apologize for this inconvenience. I think this is best to be posted as a suggestion at the idea exchange board.
Regards,
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Self signed certificate error in Chrome 58
Thanks Jenn
You need to support Chrome changes as they come out. Can you forward this to Skywalker so he can fix it. Suggestions on the OpenSSL changes needed to ensure the self-signed cert the OS generates includes the hostname in the SAN are included in my bug report.
This is not an idea - you regularly have changed the firmware to support new browser releases, and this scuppers the use of Chrome completely.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Self signed certificate error in Chrome 58
PS Skywalker just PM'd me to say it'll hopefully be fixed in 6.7.3 for any others interested.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Self signed certificate error in Chrome 58
Hello kevin_marchant,
Thanks for letting me know. I've also reported this to the higher tier of support team I've found no issue ticket from them regarding this SSL error on Chrome 58.
Regards,
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Self signed certificate error in Chrome 58
Please try ReadyNAS OS 6.7.3 which is now available!
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Perfect - Chrome 58 working again.
Obviously I needed to regen the certificate (needed to change SSL Key host twice, away from current value and back again - second time lucky 🙂 ) - and then remove old cert from certificate store and reinstall new one.
One other gotcha for others to be aware of - you can't use IP address for SSL Key host - needs to be a name
Thanks to @Skywalker
Kevin
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Self signed certificate error in Chrome 58
PROBLEM UPDATING SECOND RND316
First one went perfectly. Second one with EDA500 attached giving
Checking root FS
Err: Could not properly extract ..
lcd_panic_handle
r+7d
HELP !!
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Self signed certificate error in Chrome 58
Just a quick thanks to @skywalker for sorting my problem out - potentially nothing to do with the new firmware but rather lack of free space that he's looking at separately.
Kevin