ERR_INSECURE_RESPONSE while accessing http sites

nerves-web-kiosk / kiosk_system_rpi3

Nerves QtWebEngine Kiosk system for Raspberry Pi 3

Apache License 2.0

67 stars 25 forks source link

ERR_INSECURE_RESPONSE while accessing http sites #22

Closed abraude closed 5 years ago

abraude commented 6 years ago

Hello, While accessing ssl sites, I am getting ERR_INSECURE_RESPONSE and "sad page" icon displayed in the browser. Example: https://test.cdp.cc/index.html There is no problem with https://github.com and https://google.com.

Thanks, Alex Braude

mobileoverlord commented 6 years ago

We experienced this in the past with cloud front domains. What we discovered is that there is a file that chromium keeps with known log servers for use with Certificate Transparency. I think it would be ideal if we were to figure out a way to synchronize this file.

Here is the patch we currently hold for the missing digicert log server https://github.com/LeToteTeam/kiosk_system_rpi3/blob/master/patches/buildroot/qt5webengine/0001-Add-DigiCert-Log-Server-2.patch

mobileoverlord commented 6 years ago

It appears that the latest version of this file is the one located here: https://www.gstatic.com/ct/log_list/log_list.json

mobileoverlord commented 5 years ago

Would you give this a go with the latest version and see if it is still a problem? Upstream chrome was updated to include the full list of logs.

mobileoverlord commented 5 years ago

closing due to inactivity