NET::ERR_CERT_REVOKED OSX Catalina and Chrome

Security-Onion-Solutions / security-onion

Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management

https://securityonion.net

3.06k stars 521 forks source link

NET::ERR_CERT_REVOKED OSX Catalina and Chrome #1705

Closed TOoSmOotH closed 4 years ago

TOoSmOotH commented 4 years ago

When connecting to SO from OSX and Chrome you get NET::ERR_CERT_REVOKED and are unable to use SO. This is because Catalina enforces the latest standards. The cert expiration can't be longer than 825 days.

TOoSmOotH commented 4 years ago

@dougburks I also had to add this as well to make it compliant for HH:

extendedKeyUsage: serverAuth

dougburks commented 4 years ago

In Hybrid Hunter, we generate our own SSL certificate and this is already fixed there. In the current platform, we don't generate our own SSL certificate, we simply use the default Ubuntu cert. We're not going to make any code changes for this in the current platform. I've created a new page in the documentation and added some workarounds there: https://securityonion.readthedocs.io/en/latest/browser.html#mac-os-x-catalina