[Pkg-chromium-maint] Bug#745646: chromium: certificate revocation is not checked

Vincent Lefevre vincent at vinc17.net
Wed Apr 23 21:18:22 UTC 2014

Control: retitle -1 CRLSet (for certificate revocation checking) silently remains outdated

On 2014-04-23 20:07:34 +0200, Vincent Lefevre wrote:
> Certificate revocation is not checked: chromium gives no errors on
>   https://www.cloudflarechallenge.com/
> contrary to Iceweasel. See attached snapshot.

The problem is that the CRLSet silently remains outdated. Here
chrome://components/ says 1572 while the latest version is 1595.


Though it seems that the user can check for updates, most users are
probably not aware of this, and for those who know:
  * it can be tedious to check regularly;
  * it is too easy to forget to check.

Iceweasel does up-to-date certificate revocation checking automatically.
This shows that one can do better...

Vincent Lefèvre <vincent at vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

More information about the Pkg-chromium-maint mailing list