Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Chromium throws NET::ERR_CERTIFICATE_TRANSPARENCY_REQUIRED [closed]

Started working today and Chromium on Ubuntu suddenly throws

NET::ERR_CERTIFICATE_TRANSPARENCY_REQUIRED on a well known host.

Already tried deleting .pki/nssdb/*, but nothing changed.

like image 657
Thomas Venturini Avatar asked Nov 14 '16 12:11

Thomas Venturini


People also ask

What does Err_certificate_transparency_required mean?

ERR_CERTIFICATE_TRANSPARENCY_REQUIRED” message occurs when you try to visit HTTPS websites that is having SSL/TLS certificate errors and creates issues with the connection between your device and the remote server. Most frequently, it is the result of an SSL certificate being corrupted, expired, or misconfigured.

Is certificate transparency REQUIRED?

Certificate Transparency is now mandatory as of April 30, 2018. Today is the first day that Google is requiring all Certificate Authorities to log the SSL certificates they issue in certificate transparency logs.

What is certificate SCT?

When someone submits a valid certificate to a log, the log responds with a signed certificate timestamp (SCT), which is simply a promise to add the certificate to the log within some time period. The time period is known as the maximum merge delay (MMD).


2 Answers

I have the same problem. This is what I found out so far:

https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1641380 https://bugs.chromium.org/p/chromium/issues/detail?id=664177 https://knowledge.symantec.com/support/ssl-certificates-support/index?page=content&id=ALERT2160

Are you also using Version 53.0.2785.143?

Looks like it is important when the build happened: https://chromium.googlesource.com/chromium/src/net/+/master/cert/ct_policy_enforcer.cc#44

Looks like the best workaround is to upgrade to 54.x, wait for a patch or use another browser.

Update: A new version of chromium, that fixes the problem, was just released (at least for ubuntu).

like image 74
Andreas Wenger Avatar answered Nov 08 '22 21:11

Andreas Wenger


quick tip: set system date a few days back

like image 27
occ Avatar answered Nov 08 '22 22:11

occ