search

chromium / badssl.com

:lock: Memorable site for testing clients against bad SSL configs.
https://badssl.com
Apache License 2.0
2.78k stars 186 forks source link

Certificate https://revoked.badssl.com/ has expired #515

Closed mjeffrey closed 1 month ago

mjeffrey commented 1 year ago

The certificate above has now expired. Could it be replaced? Thanks!

natluqwerty commented 1 year ago

please!!! 🙏

drauch commented 11 months ago

Also the CRL for this certificate is empty? So it is not really revoked anymore?!

szhu25 commented 11 months ago

Also the CRL for this certificate is empty? So it is not really revoked anymore?!

Because the issuer certificate (intermediate certificate by RapidSSL/Digicert) also expired on May 31st, 2023...

popeanga94 commented 11 months ago

Any updates on this issue? It would be very helpful if the certificate for https://revoked.badssl.com/ would be replaced with one that is not expired. Thx!

levon-vardevanyan-solarwinds commented 6 months ago

Happy New Year! It's 2024 already - no plans to bring it back to life? This resource was actually tremendously helpful, looks like back in 2021 some amazing folks managed to fix it https://github.com/chromium/badssl.com/issues/477 maybe @BenWilson-Mozilla and @christhompson still have some knowledge/connection to resurrect it?

Meanwhile if anyone's wondering you can try using https://www.digicert.com/kb/digicert-root-certificates.htm

gamer191 commented 2 months ago

I understand that this issue might not be worth fixing. However, please at least remove that domain, because currently it's misleading, since it suggests that every tested program that blocks expired certificates is capable of checking certificate revokation status

christhompson commented 1 month ago

Apologies for the long-expired cert here. The revoked test case was particularly painful to renew because we previously were manually issuing and revoking it, and then manually adding it to Chrome's certificate blocklist. I've switched this test case over to be included in our automated certificate renewal system using Lets Encrypt + ACME -- this means that it will just be marked as revoked in the CRLs, which may have different behavior across browsers, but it does mean it will automatically be kept renewed along with the other main certs for the site.