Subj : Re: Chromium and self-signed certificates
To   : bp@www.zefox.net
From : Richard Kettlewell
Date : Sat Aug 31 2024 10:22:37

<bp@www.zefox.net> writes:
> The reference to "scrambled credentials" implies a syntax error, some
> kind of credential checker would be a useful tool at this point.

I see nothing about “scrambled credentials” above. If the browser got as
far as displaying the certificate subject then it is certainly
syntactically well-formed, your browser just doesn’t like the contents.

You will probably need at least a subjectAltName extension containing
the DNS name of your server. This has been a cabforum.org requirement
for real certificates for a long time and I don’t know of any reason it
wouldn’t apply to self-signed certificates too.

--
https://www.greenend.org.uk/rjk/

--- SoupGate-Win32 v1.05
 * Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)

.