Bug #6165
closed
Captive portal - SSL Extended Validation Certificates
0%
Description
Captive portal with normal SSL certificate has green icon in Chrome, Firefox, IE and Edge.
With SSL EV certificate only IE and Egde has green bar with organization name.
Firefox has only green icon and Chrome has not even green icon.
Updated by Chris Buechler over 9 years ago
- Status changed from New to Feedback
this is probably not something we can do anything with unless you can do some more leg work. Might be an issue with having an improper cert chain, in which case it's a config problem. You need the proper chain in the CA certificate.
I don't think there's anything in the nginx config (assuming you're on 2.3, if you're not, upgrade to test there first) that would do anything like described.
Updated by Jacek Kozłowski over 9 years ago
I have now 2.3 version with nginx.
Nginx require only 2 files certificate and key file, but certificate file must contains CA chain.
I have do all steps from manual https://www.digicert.com/ssl-certificate-installation-nginx.htm
On debian jessie and nginx/1.6.2 the same certificate work in Chrome, Firefox, IE and Edge with no problem, all browsers has green bar.
Updated by Jacek Kozłowski over 9 years ago
I have resolve this issue alone.
In Chrome help clear all browsing data and grean bar now appear.
In Firefox is a little bit harder.
https://wiki.mozilla.org/CA:EV_Revocation_Checking
Browser want check certiticate status on ocsp server.
I add to allowed hostnames in Captive-Portal "ocsp.digicert.com" and now i have green bar in Firefox too.
Updated by Jim Thompson over 9 years ago
- Assignee set to Chris Buechler
Assigned to cmb for resolution
Updated by Chris Buechler over 9 years ago
- Status changed from Feedback to Not a Bug
- Affected Version deleted (
All)
those are all to be expected. Config issue