FingerLiu
V2EX  ›  SSL

升级了 chrome 57, https 挂了,是沃通的锅吗

  •  
  •   FingerLiu · Mar 10, 2017 · 3351 views
    This topic created in 3376 days ago, the information mentioned may be changed or developed.

    如图: http://ac-HSNl7zbI.clouddn.com/TlHbnnuTUbgTJpC3zcvhBXlnCT1VH1ca18Tm8XEq.jpg

    沃通又被拉黑名单了吗?怎么破 正好证书快到期了,如果是沃通的锅,果断换。

    4 replies    2017-03-15 15:24:23 +08:00
    FingerLiu
        1
    FingerLiu  
    OP
       Mar 10, 2017
    honeycomb
        2
    honeycomb  
       Mar 10, 2017
    wosign 的证书不是早就被拉黑了吗?

    即时策略是立即停止 wosign 免费证书的信任,然后再主键停止信任所有 wosign 颁发证书。

    5 个月前的原话
    https://security.googleblog.com/2016/10/distrusting-wosign-and-startcom.html

    "Beginning with Chrome 56, certificates issued by WoSign and StartCom after October 21, 2016 00:00:00 UTC will not be trusted. Certificates issued before this date may continue to be trusted, for a time, if they comply with the Certificate Transparency in Chrome policy or are issued to a limited set of domains known to be customers of WoSign and StartCom."

    苹果则是在去年年底完全解除了 wosign 的信任
    https://support.apple.com/zh-cn/HT204873
    coosir
        3
    coosir  
       Mar 13, 2017
    他们自己的很多子站都打不开了,不过已同意更换证书。
    dremy
        4
    dremy  
       Mar 15, 2017
    自己的博客 CDN 还用的是 WoSign ,强制刷新了一下静态资源就全挂了,果然是 Chrome 不再认了。
    感谢楼主提醒,补证书去了。。。
    About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Solana   ·   2824 Online   Highest 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 33ms · UTC 09:01 · PVG 17:01 · LAX 02:01 · JFK 05:01
    ♥ Do have faith in what you're doing.