Friday, September 1, 2017

Chrome OSX SSL This certificate has an invalid issuer

Leave a Comment

I am getting an 'invalid issuer' error when trying to access a local site. As can be seen in the screenshot, the root CA certificate has been imported and trusted. So, why do I still get this error?

The certificate works correctly in Firefox after importing the CA cert.

Root cert

Server cert

1 Answers

Answers 1

Mac OS does not support Name Constraints. Removing this property from the root certificate solved this issue in our case. For background see: https://security.stackexchange.com/questions/95600/are-x-509-nameconstraints-on-certificates-supported-on-os-x

(You don't appear to be using this property according to the screenshots, but I'm still posting this as it might be a valid solution for others)

If You Enjoyed This, Take 5 Seconds To Share It

0 comments:

Post a Comment