OpenWrt Forum Archive

Topic: Impending WoSign TLS Certificate Authority revocation

The content of this topic has been archived on 2 May 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

It is still true.
Right now, I can not access dev.openwrt.org in Chrome.
This browser block completely WoSign signed certificates.

https://dev.openwrt.org/ is definitely not working for me in Chrome V62.0.3202.94 on Windows.

The Register confirmed that Google and others are blocking WoSign certificates in a phased rollout:

https://www.theregister.co.uk/2017/07/0 … wo_months/

Is there a plan to replace the HTTPS certificate with one from a reputable source? (i.e. one that hasn't been proven to have issued an illegal fake certificate for GitHub!)

(Last edited by mfirth on 15 Nov 2017, 16:28)

Yes, Chrome will ban the dev.openwrt.org with [NET::ERR_CERT_REVOKED]
and Safari will also ban dev.openwrt.org with Invalid CA.
Please check it.

The discussion might have continued from here.