Bug #6165
closed
Captive portal - SSL Extended Validation Certificates
Added by Jacek Kozłowski over 9 years ago.
Updated over 6 years ago.
Affected Architecture:
amd64
Description
Captive portal with normal SSL certificate has green icon in Chrome, Firefox, IE and Edge.
With SSL EV certificate only IE and Egde has green bar with organization name.
Firefox has only green icon and Chrome has not even green icon.
- Status changed from New to Feedback
this is probably not something we can do anything with unless you can do some more leg work. Might be an issue with having an improper cert chain, in which case it's a config problem. You need the proper chain in the CA certificate.
I don't think there's anything in the nginx config (assuming you're on 2.3, if you're not, upgrade to test there first) that would do anything like described.
I have now 2.3 version with nginx.
Nginx require only 2 files certificate and key file, but certificate file must contains CA chain.
I have do all steps from manual https://www.digicert.com/ssl-certificate-installation-nginx.htm
On debian jessie and nginx/1.6.2 the same certificate work in Chrome, Firefox, IE and Edge with no problem, all browsers has green bar.
I have resolve this issue alone.
In Chrome help clear all browsing data and grean bar now appear.
In Firefox is a little bit harder.
https://wiki.mozilla.org/CA:EV_Revocation_Checking
Browser want check certiticate status on ocsp server.
I add to allowed hostnames in Captive-Portal "ocsp.digicert.com" and now i have green bar in Firefox too.
- Assignee set to Chris Buechler
Assigned to cmb for resolution
- Status changed from Feedback to Not a Bug
- Affected Version deleted (
All)
those are all to be expected. Config issue
- Assignee deleted (
Chris Buechler)
Also available in: Atom
PDF
Updated by 
Updated by 
Updated by