Comment #2 on issue 27561 by [email protected]: No SSL interstitial warning for revoked certificate http://code.google.com/p/chromium/issues/detail?id=27561
I found that the CRL at http://chrometws.corp.google.com:8080/crl/atticus.crl is a base64-encoded file: -----BEGIN X509 CRL----- MIIBYDCBygIBATANBgkqhkiG9w0BAQUFADByMQswCQYDVQQGEwJVUzETMBEGA1UE CBMKQ2FsaWZvcm5pYTEWMBQGA1UEBxMNTW91bnRhaW4gVmlldzEUMBIGA1UEChML R29vZ2xlIEluYy4xIDAeBgNVBAMTF2F0dGljdXMuY29ycC5nb29nbGUuY29tFw0w ODA2MDUyMzI1NDJaFw0yMzA2MDIyMzI1NDJaMBQwEgIBBBcNMDcxMDExMDEyNDQz WqAOMAwwCgYDVR0UBAMCAQMwDQYJKoZIhvcNAQEFBQADgYEAO1onBmPVH9Ze9f1D ck3Xn1EenjX1PorBMOv/yoLdG2flXXQ/d2aFjos6euPHVH0xyjFFqO7CoQ61yOlU Z/Dm9a4dGDPoYf9q16+E5Ue8MJp3d0u6P6UC8MeN6nUEzDiVRkgtsEZ7Ft+Fa/xz WLWOwtKGEB7mrXBFesBNCm77wnU= -----END X509 CRL----- NSS can only handle a binary (DER-encoded) CRL. When NSS decodes this ASCII CRL as DER, it fails with the SEC_ERROR_BAD_DER (-8183) error. Still, I think Chrome should give an "unable to check revocation" warning... -- You received this message because you are listed in the owner or CC fields of this issue, or because you starred this issue. You may adjust your issue notification preferences at: http://code.google.com/hosting/settings -- Automated mail from issue updates at http://crbug.com/ Subscription options: http://groups.google.com/group/chromium-bugs
