ssl certificate chain

Find a bug? Report it here.

ssl certificate chain

Postby Shoru » Thu Mar 10, 2016 6:35 pm

especially sonarr

cert on desktop chrome is shown as valid
cert on mobile chrome is shown as invalid cause of android ways

on nzb360 i can connect without warning

are you verifying the ssl cert and chain? it does not seem so.
This is a very important issue, since even if it is a ssl connection, there is a mitm attack possible if you do not verify the cert...

plz add a verify option and discard the connection if the cert is not valid
Shoru
 
Posts: 18
Joined: Wed Jul 30, 2014 7:36 am

Re: ssl certificate chain

Postby Nexonic » Wed May 24, 2017 5:45 pm

Hi I'm wondering about this too.

Unlike the OP my self-signed cert is working fine in mobile chrome but how do I know it's working in nzb360?

I can confirm that invalid certs are not generating a warning. It would be nice to know for sure my connections are secure.
Nexonic
 
Posts: 1
Joined: Wed May 24, 2017 5:41 pm


Return to Bug Reports