Opened 7 years ago
Closed 7 years ago
#6689 closed defect (fixed)
patchwork.ffmpeg.org uses untrusted StartCom HTTPS/SSL/TLS certificate
| Reported by: | Kevin Mark | Owned by: | |
|---|---|---|---|
| Priority: | normal | Component: | website |
| Version: | unspecified | Keywords: | |
| Cc: | Blocked By: | ||
| Blocking: | Reproduced by developer: | no | |
| Analyzed by developer: | no |
Description
https://patchwork.ffmpeg.org produces a NET::ERR_CERT_REVOKED error on Chrome 63 (back to 61, I believe) due to Google blacklisting StartCom certificates. I remember this issue was discussed over IRC this past summer and the main website and git have moved to Let's Encrypt. Patchwork remains on StartCom. I'm not sure to what degree the Patchwork instance is in use but I figured I'd create this ticket to track the issue.
References:
- https://www.ssllabs.com/ssltest/analyze.html?d=patchwork.ffmpeg.org
- https://blog.qualys.com/ssllabs/2017/04/05/ssl-labs-distrusts-wosign-and-startcom-certificates
- https://security.googleblog.com/2016/10/distrusting-wosign-and-startcom.html
- https://security.googleblog.com/2017/07/final-removal-of-trust-in-wosign-and.html
Note:
See TracTickets
for help on using tickets.
Fixed yesterday by Reimar Doeffinger. Thanks for the report/reminder.