Hi all,

when accessing https://gerrit.wireshark.org/ with Chromium 65.0.3325.146, I
get the following error message:

> Your connection is not private
> Attackers might be trying to steal your information from gerrit.wireshark.org 
> (for example, passwords, messages, or credit cards). Learn more
> gerrit.wireshark.org normally uses encryption to protect your information. 
> When Chromium tried to connect to gerrit.wireshark.org this time, the website 
> sent back unusual and incorrect credentials. This may happen when an attacker 
> is trying to pretend to be gerrit.wireshark.org, or a Wi-Fi sign-in screen 
> has interrupted the connection. Your information is still secure because 
> Chromium stopped the connection before any data was exchanged.
> You cannot visit gerrit.wireshark.org right now because the website uses 
> HSTS. Network errors and attacks are usually temporary, so this page will 
> probably work later.

The Certificate I'm receiving is issued to CN=staging.wireshark.org and it has 
SubjectAltNames besides staging.wireshark.org.  It's SHA256 fingerprint is

F0 63 E6 64 FD A6 67 41 40 8C 02 2F FD 43 91 E2
C8 44 87 3D AC 87 8A E4 13 32 EA 8C EB 0D 69 DD

Unless there's something odd (MITM) happening on the internet between 
and myself, or Chromium is somehow b0rked, I would expect the gerrit web 
to be unusable for everyone at the moment.

Can somebody confirm and/or report to the respective sysadmin?



- Harald Welte <lafo...@gnumonks.org>           http://laforge.gnumonks.org/
"Privacy in residential applications is a desirable marketing option."
                                                  (ETSI EN 300 175-7 Ch. A6)
Sent via:    Wireshark-dev mailing list <wireshark-dev@wireshark.org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev

Reply via email to