Fixed
Status Update
No update yet.
Comments
el...@chromium.org
Thanks for the report and the analysis!
Matt-- More fallout fromcrrev.com/4cede8d39db10321b053c0d9776cf6b23f290310 , I presume?
[Monorail components: Internals>Network>Certificate]
Matt-- More fallout from
[Monorail components: Internals>Network>Certificate]
el...@chromium.org
[Empty comment from Monorail migration]
bp...@gmail.com
Hi,
The last night beta update (59.0.3071.36) has not fixed the problem.
We get the same error in Chrome.
The last night beta update (59.0.3071.36) has not fixed the problem.
We get the same error in Chrome.
bp...@gmail.com
To add some context to this bug: if this issue still exists when Chrome 59 Release hits the streets (on Mac OS), there will be several thousands of healthcare professionals in France who will no longer be able to use their CPS smartcards in order to perform their work. Replacing their CPS smartcards containing new certificates is not something that be achieved in the space of a few weeks (or months even).
This is therefore a 'Critical' bug from the user perspective.
This is therefore a 'Critical' bug from the user perspective.
jo...@gmail.com
We have exactly the same issue.
We have got 1.000.000 certificates holders (smartcards for healthcare professionnals) and they are potentially impacted.
We have got 1.000.000 certificates holders (smartcards for healthcare professionnals) and they are potentially impacted.
jo...@gmail.com
Re #4: We understand that's a good solution for server certificates.
But all our certificates are available in secure readonly smartcards that are deployed. They are used every day by our users to access several web online applications.
It couldn't be a quick win to change all our PKI and issued smartcards.
But all our certificates are available in secure readonly smartcards that are deployed. They are used every day by our users to access several web online applications.
It couldn't be a quick win to change all our PKI and issued smartcards.
el...@chromium.org
#5, #6 - Thanks for your feedback!
[Monorail components: Enterprise]
[Monorail components: Enterprise]
at...@chromium.org
[Empty comment from Monorail migration]
at...@chromium.org
[Empty comment from Monorail migration]
ge...@chromium.org
[Empty comment from Monorail migration]
rs...@chromium.org
[Empty comment from Monorail migration]
ma...@chromium.org
[Empty comment from Monorail migration]
bu...@chromium.org
The following revision refers to this bug:
https://chromium.googlesource.com/chromium/src.git/+/788812f7788c07aa58487523ec70f9e921d78543
commit 788812f7788c07aa58487523ec70f9e921d78543
Author: mattm <mattm@chromium.org>
Date: Fri May 05 23:49:09 2017
X509NameAttribute::ValueAsString: Decode TeletexString as Latin1.
BUG=717905,715969
Review-Url:https://codereview.chromium.org/2865603002
Cr-Commit-Position: refs/heads/master@{#469812}
[modify]https://crrev.com/788812f7788c07aa58487523ec70f9e921d78543/net/BUILD.gn
[modify]https://crrev.com/788812f7788c07aa58487523ec70f9e921d78543/net/cert/internal/parse_name.cc
[modify]https://crrev.com/788812f7788c07aa58487523ec70f9e921d78543/net/cert/internal/parse_name_unittest.cc
[modify]https://crrev.com/788812f7788c07aa58487523ec70f9e921d78543/net/cert/x509_certificate_unittest.cc
[add]https://crrev.com/788812f7788c07aa58487523ec70f9e921d78543/net/data/parse_certificate_unittest/subject_t61string.pem
[add]https://crrev.com/788812f7788c07aa58487523ec70f9e921d78543/net/data/parse_certificate_unittest/subject_t61string_1-32.pem
[add]https://crrev.com/788812f7788c07aa58487523ec70f9e921d78543/net/data/parse_certificate_unittest/subject_t61string_126-160.pem
[add]https://crrev.com/788812f7788c07aa58487523ec70f9e921d78543/net/data/parse_certificate_unittest/subject_t61string_actual.pem
[modify]https://crrev.com/788812f7788c07aa58487523ec70f9e921d78543/net/data/parse_certificate_unittest/v3_certificate_template.txt
[modify]https://crrev.com/788812f7788c07aa58487523ec70f9e921d78543/net/test/test_data_directory.cc
[modify]https://crrev.com/788812f7788c07aa58487523ec70f9e921d78543/net/test/test_data_directory.h
commit 788812f7788c07aa58487523ec70f9e921d78543
Author: mattm <mattm@chromium.org>
Date: Fri May 05 23:49:09 2017
X509NameAttribute::ValueAsString: Decode TeletexString as Latin1.
BUG=717905,715969
Review-Url:
Cr-Commit-Position: refs/heads/master@{#469812}
[modify]
[modify]
[modify]
[modify]
[add]
[add]
[add]
[add]
[modify]
[modify]
[modify]
ma...@chromium.org
[Empty comment from Monorail migration]
sh...@chromium.org
Your change meets the bar and is auto-approved for M59. Please go ahead and merge the CL to branch 3071 manually. Please contact milestone owner if you have questions.
Owners: amineer@(Android), cmasso@(iOS), gkihumba@(ChromeOS), Abdul Syed@(Desktop)
For more details visithttps://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Owners: amineer@(Android), cmasso@(iOS), gkihumba@(ChromeOS), Abdul Syed@(Desktop)
For more details visit
ma...@chromium.org
[Empty comment from Monorail migration]
bu...@chromium.org
The following revision refers to this bug:
https://chromium.googlesource.com/chromium/src.git/+/8a4fb425dc1e081b5942975f0d1c852aae2819e6
commit 8a4fb425dc1e081b5942975f0d1c852aae2819e6
Author: Matt Mueller <mattm@chromium.org>
Date: Mon May 08 20:20:42 2017
X509NameAttribute::ValueAsString: Decode TeletexString as Latin1.
BUG=717905,715969
Review-Url:https://codereview.chromium.org/2865603002
Cr-Commit-Position: refs/heads/master@{#469812}
(cherry picked from commit 788812f7788c07aa58487523ec70f9e921d78543)
Review-Url:https://codereview.chromium.org/2866063003 .
Cr-Commit-Position: refs/branch-heads/3071@{#461}
Cr-Branched-From: a106f0abbf69dad349d4aaf4bcc4f5d376dd2377-refs/heads/master@{#464641}
[modify]https://crrev.com/8a4fb425dc1e081b5942975f0d1c852aae2819e6/net/BUILD.gn
[modify]https://crrev.com/8a4fb425dc1e081b5942975f0d1c852aae2819e6/net/cert/internal/parse_name.cc
[modify]https://crrev.com/8a4fb425dc1e081b5942975f0d1c852aae2819e6/net/cert/internal/parse_name_unittest.cc
[modify]https://crrev.com/8a4fb425dc1e081b5942975f0d1c852aae2819e6/net/cert/x509_certificate_unittest.cc
[add]https://crrev.com/8a4fb425dc1e081b5942975f0d1c852aae2819e6/net/data/parse_certificate_unittest/subject_t61string.pem
[add]https://crrev.com/8a4fb425dc1e081b5942975f0d1c852aae2819e6/net/data/parse_certificate_unittest/subject_t61string_1-32.pem
[add]https://crrev.com/8a4fb425dc1e081b5942975f0d1c852aae2819e6/net/data/parse_certificate_unittest/subject_t61string_126-160.pem
[add]https://crrev.com/8a4fb425dc1e081b5942975f0d1c852aae2819e6/net/data/parse_certificate_unittest/subject_t61string_actual.pem
[modify]https://crrev.com/8a4fb425dc1e081b5942975f0d1c852aae2819e6/net/data/parse_certificate_unittest/v3_certificate_template.txt
[modify]https://crrev.com/8a4fb425dc1e081b5942975f0d1c852aae2819e6/net/test/test_data_directory.cc
[modify]https://crrev.com/8a4fb425dc1e081b5942975f0d1c852aae2819e6/net/test/test_data_directory.h
commit 8a4fb425dc1e081b5942975f0d1c852aae2819e6
Author: Matt Mueller <mattm@chromium.org>
Date: Mon May 08 20:20:42 2017
X509NameAttribute::ValueAsString: Decode TeletexString as Latin1.
BUG=717905,715969
Review-Url:
Cr-Commit-Position: refs/heads/master@{#469812}
(cherry picked from commit 788812f7788c07aa58487523ec70f9e921d78543)
Review-Url:
Cr-Commit-Position: refs/branch-heads/3071@{#461}
Cr-Branched-From: a106f0abbf69dad349d4aaf4bcc4f5d376dd2377-refs/heads/master@{#464641}
[modify]
[modify]
[modify]
[modify]
[add]
[add]
[add]
[add]
[modify]
[modify]
[modify]
ma...@chromium.org
Fix is in current canary, and should go out in next dev and beta builds as well.
jo...@gmail.com
[Comment Deleted]
sa...@chromium.org
As per the duped https://crbug.com/chromium/715969 in C#17, I was able to repro on the reported version(59.0.3071.25). This now works fine on the latest M-59(59.0.3071.47) on Mac OS 10.12.4. Hence adding the TE- Verified label
is...@google.com
This issue was migrated from crbug.com/chromium/717905?no_tracker_redirect=1
[Auto-CCs applied]
[Multiple monorail components: Enterprise, Internals>Network>Certificate]
[Monorail mergedwith:crbug.com/chromium/715969 ]
[Monorail components added to Component Tags custom field.]
[Auto-CCs applied]
[Multiple monorail components: Enterprise, Internals>Network>Certificate]
[Monorail mergedwith:
[Monorail components added to Component Tags custom field.]
Description
Steps to reproduce the problem:
1. install the Chrome 59 beta browser on a Mac platform (macOS Sierra or El Capitan for example)
2. open Chrome browser on
3. click on the https link
What is the expected behavior?
After clicking the HTTPS link, the browser should show a list of client certificates in order to select one (requires a specific smart-card - "Carte de Professional de Santé")
What went wrong?
No certificate list presented to the end user.
The browser displays the error status ERR_BAD_SSL_CLIENT_AUTH_CERT instead.
Did this work before? Yes 58 Release
Chrome version: 59.0.3071.29 Channel: beta
OS Version: OS X 10.12.4
Flash Version:
After numerous tests, we have observed the following:
- Certificates are valid (not expired at the time of test).
- Certificates having a subjectDN with Teletext encoded text containing French accented characters don't work anymore.
- Certificates having a subjectDN with Teletext encoded text NOT containing any French accented characters are OK.
Certificates having a subjectDN with UTF-8 encoded text containing French accented characters are OK too.