Comment #2 on issue 27561 by [email protected]: No SSL interstitial warning  
for revoked certificate
http://code.google.com/p/chromium/issues/detail?id=27561

I found that the CRL at
http://chrometws.corp.google.com:8080/crl/atticus.crl
is a base64-encoded file:

-----BEGIN X509 CRL-----
MIIBYDCBygIBATANBgkqhkiG9w0BAQUFADByMQswCQYDVQQGEwJVUzETMBEGA1UE
CBMKQ2FsaWZvcm5pYTEWMBQGA1UEBxMNTW91bnRhaW4gVmlldzEUMBIGA1UEChML
R29vZ2xlIEluYy4xIDAeBgNVBAMTF2F0dGljdXMuY29ycC5nb29nbGUuY29tFw0w
ODA2MDUyMzI1NDJaFw0yMzA2MDIyMzI1NDJaMBQwEgIBBBcNMDcxMDExMDEyNDQz
WqAOMAwwCgYDVR0UBAMCAQMwDQYJKoZIhvcNAQEFBQADgYEAO1onBmPVH9Ze9f1D
ck3Xn1EenjX1PorBMOv/yoLdG2flXXQ/d2aFjos6euPHVH0xyjFFqO7CoQ61yOlU
Z/Dm9a4dGDPoYf9q16+E5Ue8MJp3d0u6P6UC8MeN6nUEzDiVRkgtsEZ7Ft+Fa/xz
WLWOwtKGEB7mrXBFesBNCm77wnU=
-----END X509 CRL-----

NSS can only handle a binary (DER-encoded) CRL.  When NSS decodes
this ASCII CRL as DER, it fails with the SEC_ERROR_BAD_DER (-8183)
error.  Still, I think Chrome should give an "unable to check
revocation" warning...

--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

-- 
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs

Reply via email to