Hi all,

I'm developing a small application on GAE that requires HTTPs, however
I'm having some trouble with the "*.appspot.com" certificate.

O Chrome, Safari and IE on Windows I get a certificate validation
error. This error appears to be related to the certificate validation
path, because the topmost authority is "Google Internet Authority" and
show as "Not found".

On Firefox there is no error, and the certificate chain correctly
shows Equifax as the root CA and "Google Internet Authority" as an
intermediate CA.

On the Mac both Firefox and Safari work without showing any errors.

Is there a way around this? I can't expect users to trust the
application if they get a certificate error on Windows in every
browser except Firefox.

So a summary of tested browsers:

  * Internet Explorer 8 (Windows): error
  * Safari (Windows): error
  * Safari (OS X): OK
  * Chrome (Windows): error
  * Firefox (Windows): OK
  * Firefox (OS X): OK

It appears that browsers which use the integrated certificate
infrastructure on Windows are affected, and others are not.

I know that Windows supports intermediate CAs because I've tested it.
But it seems to require that the website itself provides the
intermediate CAs certificate (for example, on Apache this would be the
"SSLCertificateChainFile /path/to/intermediate-ca.crt" option).

Google App Engine does not appear to do this.

Best regards,
   Carlos Rodrigues

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en.

Reply via email to