Forum Discussion
Sharepoint Online and SHA-1
Today clients started having problems with Sharepoint Online and latest Chrome 55 browser - site flagged as unsecure. Twitter is also buzzing about the same SHA-1 problem:
Is Microsoft solving this? Is there any workaround at the moment?
Really not sure why this only started showing today as the blog they reference is from 2015 and says Chrome has been doing this over the last year. We just started having the issue starting on Saturday.
- I submitted an incident to Microsoft regarding this. Here is the information I got back. Typical response of we're aware of it, but don't know when a solution will be available. "Based on the details in your request, I understand you are receiving a not secure certificate message when navigating to SharePoint Online using the Chrome browser. I was able to find the following article, which goes over changes that are occurring with Chrome: An update on SHA-1 certificates in Chrome https://security.googleblog.com/2015/12/an-update-on-sha-1-certificates-in.html In this article, it states that SHA-1 certificates are no longer going to be seen as secure by Google Chrome. This means that only Chrome does not see the current certificates within the SharePoint Site as secure. This in no way indicates that the site is not secure, and all other browsers do not experience this behavior. Microsoft is currently aware of this issue, and we have seen other customers affected as well. We are working on resolving this on our end, but this process may take some time and we do not have an estimated time as to when it will be resolved."
- Interesting taking into account Microsoft is supposed to deprecate SHA1 support in Office 365 https://technet.microsoft.com/en-us/library/dn569286.aspx
I'm saying they're right just relaying what support said.
