brave / brave-browser

Brave browser for Android, iOS, Linux, macOS, Windows.
https://brave.com
Mozilla Public License 2.0
17.85k stars 2.33k forks source link

Semi-Frequent ERR_CERT_COMMON_NAME_INVALID errors #20793

Open TheFeelTrain opened 2 years ago

TheFeelTrain commented 2 years ago

Description

I somewhat frequently encounter ERR_CERT_COMMON_NAME_INVALID errors where the SSL certificate is not for the same domain I'm trying to connect to. It happens seemingly randomly, with no discernible pattern. Sometimes I go for weeks without seeing it, sometimes it can happen multiple times on the same day. And the domains seem unrelated to each other as far as I can tell. Restarting Brave fixes the problem for that domain, until it happens again for a different one.

Steps to Reproduce

  1. Browse the web
  2. Occasionally get the wrong SSL certificate for the domain you're trying to connect to
  3. Restart Brave and the second attempt works as intended

Actual result:

Screenshot_20220131_001751

From searching Google, forum.duolingo.com and education.medtronic.com seemingly have no relation to each other. This is just one of many examples, it happens with different domains each time. I don't think any have ever repeated so it doesn't seem to be a server misconfiguration from a specific website (but that doesn't rule out it being a certain hosting company or CDN provider I suppose)

Expected result:

The SSL certificate for the correct domain is loaded the first time.

Reproduces how often:

Intermittent issue

Desktop Brave version:

Brave: 1.34.81 Chromium: 97.0.4692.99 (Official Build) (64-bit) Revision: d740da257583289dbebd2eb37e8668928fac5ead-refs/branch-heads/4692@{#1461} OS: Linux

Version/Channel Information:

This is the stable channel. It is too random / infrequent to check other channels or actual Google Chrome. I would have to daily drive them for weeks and just wait for it to happen. I should note that I can open the problematic domain in other browsers without issue when Brave can't, which leads me to believe the problem is localized to Brave itself (and not the certs being intercepted/swapped/etc. somewhere else in the network chain)

TheFeelTrain commented 2 years ago

Happened again.

Screenshot_20220203_020157