SSL Cerftificate Error: "website sent scrambled credentials"

6,617 views
Skip to first unread message

Morgan Humes

unread,
Jan 11, 2016, 10:06:20 AM1/11/16
to Chromium-dev
I've got some vendor provided equipment and I am uncertain how to proceed getting an error fixed. I am provided with an SSL error which is expected since it is self signed. However, instead of the usual proceed option I am told the "website sent scrambled credentials" and I am unclear as to how to proceed. After testing this on Chromium (admittedly I did not build from source but rather installed from Ubuntu's repository) and Google Chrome (Version 47.0.2526.106 (64-bit)) it seems to only happen on Ubuntu and not Windows or OSX using the same versions.  Any help is appreciated.  The full error I see is below.


example.com normally uses encryption to protect your information. When Chromium tried to connect to example.com this time, the website sent back unusual and incorrect credentials. Either an attacker is trying to pretend to be example.com, or a Wi-Fi sign-in screen has interrupted the connection. Your information is still secure because Chromium stopped the connection before any data was exchanged.
You cannot visit example.com right now because the website sent scrambled credentials that Chromium cannot process. Network errors and attacks are usually temporary, so this page will probably work later.

Thanks,

Morgan 

Ryan Sleevi

unread,
Jan 11, 2016, 12:03:10 PM1/11/16
to mor...@lanaddict.com
bcc chromium-dev

It means your vendor-provided equipment is likely violating one or more of the specifications for how certificates are supposed to work, and that's causing issue for Chrome. For security reasons, we try to follow the specifications, as not following them has a long history of introducing security bugs that can allow communications to be intercepted.

Filing a bug at https://crbug.com/new - and including a chrome://net-internals log as described at https://dev.chromium.org/for-testers/providing-network-details - is the best way to proceed. chromium-dev@ is not a good place for bug reports :)

--
--
Chromium Developers mailing list: chromi...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-dev

Reply all
Reply to author
Forward
0 new messages