Latest Chrome on Mac doesn't allow forcing through self signed certificate #1637

Activity

1. nhooyr

   added

   enhancementSome improvement that isn't a featureSome improvement that isn't a feature

   on May 14, 2020
2. nhooyr

   changed the title [-]Chrome doesn't allow forcing through self signed certificate[/-] [+]Latest Chrome on Mac doesn't allow forcing through self signed certificate[/+] on May 14, 2020
3. nhooyr commented on May 14, 2020

   

   nhooyr

   on May 14, 2020

   ContributorAuthor

   More actions

   Works in Safari btw, I can force through.
4. keiththomps commented on Jun 8, 2020

   

   keiththomps

   on Jun 8, 2020

   More actions

   I was running into this a few months ago when running on a CentOS 7 server and trying to connect from Catalina. You need a new enough version of OpenSSL (I used 1.1.1). The following will generate a cert that meets the requirements in case this is useful for anyone else:

   /usr/local/ssl/bin/openssl req -newkey rsa:2048 -nodes \
     -x509 -days 365 \
     -out cert.pem \
     -keyout key.pem \
     -config /etc/pki/tls/openssl.cnf \
     -subj "/C=US/ST=Ohio/L=Columbus/O=Business./CN=Server" \
     -addext extendedKeyUsage=serverAuth \
     -addext subjectAltName=DNS:localhost
   

   👍React with 👍1Reacted by Asher
5. nhooyr commented on Jun 9, 2020

   

   nhooyr

   on Jun 9, 2020

   ContributorAuthor

   More actions

   Awesome!

   Let's add this to the FAQ or make code-server automatically generate it correctly.
6. nhooyr commented on Jun 9, 2020

   

   nhooyr

   on Jun 9, 2020

   ContributorAuthor

   More actions

   Related to https://7402.org/blog/2019/new-self-signed-ssl-cert-ios-13.html
7. nhooyr commented on Dec 2, 2020

   

   nhooyr

   on Dec 2, 2020

   ContributorAuthor

   More actions

   I ended up fixing this in #2255
8. nhooyr

   closed this as completedon Dec 2, 2020