[Bug] Microsoft Edge on Mac OS X reports certificate as ERR_CERT_REVOKED

%3CLINGO-SUB%20id%3D%22lingo-sub-1210333%22%20slang%3D%22en-US%22%3E%5BBug%5D%20Microsoft%20Edge%20on%20Mac%20OS%20X%20reports%20certificate%20as%20ERR_CERT_REVOKED%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1210333%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22cert.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F175265i8FCD368F7D1C1B00%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22cert.png%22%20alt%3D%22cert.png%22%20%2F%3E%3C%2FSPAN%3E%26nbsp%3B%3C%2FP%3E%3CUL%3E%3CLI%3EThe%20certificate%20is%20still%20valid.%3C%2FLI%3E%3CLI%3EThe%20certificate's%20root%20is%20NOT%20installed%20on%20the%20system.%3C%2FLI%3E%3CLI%3EThe%20URL%20looks%20like%3A%20%3CA%20href%3D%22https%3A%2F%2F****.home.lan%3A8443%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2F****.home.lan%3A8443%3C%2FA%3E%3C%2FLI%3E%3C%2FUL%3E%3CP%3EWhile%20it%20shouldn't%20be%20trusted%2C%20it%20shouldn't%20be%20reported%20as%20revoked%20I%20believe%2C%20and%20still%20allow%20me%20to%20continue%20to%20the%20website.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1210999%22%20slang%3D%22en-US%22%3ERe%3A%20%5BBug%5D%20Microsoft%20Edge%20on%20Mac%20OS%20X%20reports%20certificate%20as%20ERR_CERT_REVOKED%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1210999%22%20slang%3D%22en-US%22%3EHi%2C%3CBR%20%2F%3Eis%20your%20CA%20an%20offline%20one%3F%3CBR%20%2F%3Eif%20it%20it%20isn't%20an%20offline%20one%2C%20you%20need%20to%20install%20the%20root%20certificate.%20also%20provide%20a%20way%20like%20OCSP%20for%20programs%20to%20get%20the%20CRL.%3CBR%20%2F%3Ethe%20certificate's%20date%20doesn't%20mean%20anything.%20because%20the%20CA%20can%20revoke%20it%20at%20any%20time.%20I'm%20sure%20you%20know%20this%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1242317%22%20slang%3D%22en-US%22%3ERe%3A%20%5BBug%5D%20Microsoft%20Edge%20on%20Mac%20OS%20X%20reports%20certificate%20as%20ERR_CERT_REVOKED%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1242317%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F574774%22%20target%3D%22_blank%22%3E%40ChristopherEittam%3C%2FA%3E%26nbsp%3BThanks%20for%20sharing%20this%2C%20and%20welcome%20to%20the%20MS%20Edge%20Insiders%20community.%20For%20some%20initial%20troubleshooting%3B%20does%20this%20also%20happen%20on%20other%20Chromium-based%20browsers%2C%20and%2For%20other%20channels%20in%20Microsoft%20Edge%3F%20And%20if%20it%20doesn't%20happen%20in%20other%20places%2C%20can%20you%20please%20submit%20detailed%20feedback%20and%20diagnostics%20through%20the%20browser%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CI%3EFawkes%20(they%2Fthem)Project%20%26amp%3B%20Community%20Manager%20-%20Microsoft%20Edge%3CI%3E%3C%2FI%3E%3C%2FI%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1245203%22%20slang%3D%22en-US%22%3ERe%3A%20%5BBug%5D%20Microsoft%20Edge%20on%20Mac%20OS%20X%20reports%20certificate%20as%20ERR_CERT_REVOKED%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1245203%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F484598%22%20target%3D%22_blank%22%3E%40fawkes%3C%2FA%3E%26nbsp%3BSo%20couple%20of%20things%3A%3C%2FP%3E%3CP%3E1)%20Weirdly%20enough%20this%20did%20not%20happen%20in%20Safari%20(when%20I%20opened%20this%20thread).%20It%20does%20now%2C%20why%2C%20I%20don't%20know...%2C%20maybe%20I%20accepted%20it%20even%20before)%3C%2FP%3E%3CP%3E2)%20The%20error%20still%20stands%2C%20but%20I%20managed%20to%20trace%20it%20down.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20issue%20is%20that%20the%20certificate%20was%20valid%20for%20longer%20than%20825%20days.%20Since%20this%20is%20all%20in%20my%20local%20network%20I%20did%2010%20years%20and%20Mac%20OS%20X%20does%20not%20like%20that.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENow%2C%20I%20don't%20know%20whether%20Edge%2FChrome%20go%20THROUGH%20the%20same%20engine%2C%20or%20whether%20they%20have%20a%20different%20engine%20with%20the%20same%20rules%2C%20but%20at%20the%20moment%20I%20am%20error%20free%20and%20I%20will%20need%20to%20renew%20the%20certificate%20in%20824%20days!%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFeature%20request%3A%20is%20there%20a%20certificate%20validator%20somewhere%20for%20local%20certificates%3F%20Like%20something%20that%20goes%20over%20it%20line%20by%20line%20and%20says%20what's%20wrong%3F%20The%20error%20that%20I%20got%20was%20really%20non-descriptive%2C%20in%20fact%2C%20it%20was%20even%20wrong.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20for%20checking%20in.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1248168%22%20slang%3D%22en-US%22%3ERe%3A%20%5BBug%5D%20Microsoft%20Edge%20on%20Mac%20OS%20X%20reports%20certificate%20as%20ERR_CERT_REVOKED%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1248168%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F574774%22%20target%3D%22_blank%22%3E%40ChristopherEittam%3C%2FA%3E%26nbsp%3BGlad%20to%20hear%20it%20worked%20out!%20And%20yes%2C%20we'll%20make%20a%20note%20of%20this.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CI%3EFawkes%20(they%2Fthem)%3CBR%20%2F%3EProject%20%26amp%3B%20Community%20Manager%20-%20Microsoft%20Edge%3CI%3E%3C%2FI%3E%3C%2FI%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

cert.png 

  • The certificate is still valid.
  • The certificate's root is NOT installed on the system.
  • The URL looks like: https://****.home.lan:8443

While it shouldn't be trusted, it shouldn't be reported as revoked I believe, and still allow me to continue to the website.

4 Replies
Highlighted
Hi,
is your CA an offline one?
if it it isn't an offline one, you need to install the root certificate. also provide a way like OCSP for programs to get the CRL.
the certificate's date doesn't mean anything. because the CA can revoke it at any time. I'm sure you know this
Highlighted

@ChristopherEittam Thanks for sharing this, and welcome to the MS Edge Insiders community. For some initial troubleshooting; does this also happen on other Chromium-based browsers, and/or other channels in Microsoft Edge? And if it doesn't happen in other places, can you please submit detailed feedback and diagnostics through the browser?

 

Fawkes (they/them)
Project & Community Manager - Microsoft Edge

Highlighted

@fawkes So couple of things:

1) Weirdly enough this did not happen in Safari (when I opened this thread). It does now, why, I don't know..., maybe I accepted it even before)

2) The error still stands, but I managed to trace it down. 

 

The issue is that the certificate was valid for longer than 825 days. Since this is all in my local network I did 10 years and Mac OS X does not like that. 

 

Now, I don't know whether Edge/Chrome go THROUGH the same engine, or whether they have a different engine with the same rules, but at the moment I am error free and I will need to renew the certificate in 824 days! 

 

Feature request: is there a certificate validator somewhere for local certificates? Like something that goes over it line by line and says what's wrong? The error that I got was really non-descriptive, in fact, it was even wrong.

 

Thanks for checking in. 

Highlighted

@ChristopherEittam Glad to hear it worked out! And yes, we'll make a note of this.

 

Fawkes (they/them)
Project & Community Manager - Microsoft Edge