what does "Failed to load resource: net::ERR_CERT_DATABASE_CHANGED" mean

Question

Saw this error a few times today in Chrome's developer tools, and trying to figure out what it means / what we can do to avoid it.

"Failed to load resource: net:: ERR_CERT_DATABASE_CHANGED"

This was causing some image urls to fail to load in our testing. Fwiw I just checked the cert for the site in question, and it was issued over a year ago and is valid until the end of 2016, so it doesn't look like any changed serverside.

Google search turns up pretty much nothing for this error message, so hoping Stack Overflow will have more answers.

Answer 1

So the best I've been able to discover is this: https://chromium.googlesource.com/chromium/src/net/+/master/spdy/spdy_session_pool.cc and a few related tickets in Chromium about this code. It would appear that when the system cert database changes - in my case, potentially just a crappy puppet policy double checking that only trusted certs are in our store - Chrome reacts by closing down all existing connections and returning network errors to any outstanding request.