Re: LetsEncrypt certificate is not recognized by Chrome Android 6.0.1/5.0.2

From: Daniel Jeffery <danjj@xxxxxxxxxxxxxxx>
To: Jeroen de Neef <jeroen52@xxxxxxxxx>
CC: Daniel Reynolds <daniel7reynolds@xxxxxxxxx>, Timothy Holborn <timothy.holborn@xxxxxxxxx>, Melvin Carvalho <melvincarvalho@xxxxxxxxx>, 蔡崴丞 <danny8376@xxxxxxxxx>, Kaiduan Xie <kaiduanx@xxxxxxxxx>, Josh Aas <josh@xxxxxxxxxxxxxxx>, "Let's Encrypt CA Development" <ca-dev@xxxxxxxxxxxxxxx>, "Let's Encrypt Client Development" <client-dev@xxxxxxxxxxxxxxx>
Date: Sun, 15 May 2016 11:54:28 -0600
Why ads?
As danny8376 pointed out https://helloworld.letsencrypt.org is currently
NOT using the intermediate cross-signed by IdenTrust. As a result the site
will come up as untrusted if the ISRG root has not been manually added to a
browser cache. This is intentional as Let's Encrypt is jumping through
hoops with some root programs to get their roots accepted.

On Sun, May 15, 2016 at 10:22 AM, Jeroen de Neef <jeroen52@xxxxxxxxx> wrote:

It doesn't work for me on Windows 7, Google Chrome version 50.0.2661.102
m.

2016-05-15 17:44 GMT+02:00 Daniel Reynolds <daniel7reynolds@xxxxxxxxx>:

It works on Chrome for iOS for me.


On Sun, May 15, 2016 at 8:17 AM, Timothy Holborn <
timothy.holborn@xxxxxxxxx> wrote:

doesn't work on my android device.

On Sun, 15 May 2016 8:58 PM Melvin Carvalho <melvincarvalho@xxxxxxxxx>
wrote:

On 15 May 2016 at 07:24, 蔡崴丞 <danny8376@xxxxxxxxx> wrote:

It's using X1 signed by ISRG Root,which isn't included in most browser.

Works for me on chrome, firefox, opera (desktop)


Kaiduan Xie <kaiduanx@xxxxxxxxx> 於 2016年5月15日 週日 下午1:07 寫道:

Josh,

I suddenly found that https://helloworld.letsencrypt.org was
determined by not private on Chrome on Android 6.0.1/5.0.2 today. This is a
very big nasty surprise :(

What has changed on Android side?

Thanks for help,

/Kaiduan

--
You received this message because you are subscribed to the Google
Groups "Let's Encrypt Client Development" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to client-dev+unsubscribe@xxxxxxxxxxxxxxx.
To post to this group, send email to client-dev@xxxxxxxxxxxxxxx.
To view this discussion on the web visit
https://groups.google.com/a/letsencrypt.org/d/msgid/client-dev/CACKRbQeS3MPr_p8EASsJ_LaQgQ6bx4td5f8DjjW_qHVYkpqFng%40mail.gmail.com
<https://groups.google.com/a/letsencrypt.org/d/msgid/client-dev/CACKRbQeS3MPr_p8EASsJ_LaQgQ6bx4td5f8DjjW_qHVYkpqFng%40mail.gmail.com?utm_medium=email&utm_source=footer>
.

--
You received this message because you are subscribed to the Google
Groups "Let's Encrypt CA Development" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to ca-dev+unsubscribe@xxxxxxxxxxxxxxx.

--
You received this message because you are subscribed to the Google
Groups "Let's Encrypt CA Development" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to ca-dev+unsubscribe@xxxxxxxxxxxxxxx.

--
You received this message because you are subscribed to the Google Groups
"Let's Encrypt Client Development" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to client-dev+unsubscribe@xxxxxxxxxxxxxxx.
To post to this group, send email to client-dev@xxxxxxxxxxxxxxx.
To view this discussion on the web visit
https://groups.google.com/a/letsencrypt.org/d/msgid/client-dev/CAM1Sok2L8vEe0ZfnkOy8f6u2d-9V1vGwQErVu5PZAJXYV0UyjQ%40mail.gmail.com
<https://groups.google.com/a/letsencrypt.org/d/msgid/client-dev/CAM1Sok2L8vEe0ZfnkOy8f6u2d-9V1vGwQErVu5PZAJXYV0UyjQ%40mail.gmail.com?utm_medium=email&utm_source=footer>
.

--
You received this message because you are subscribed to the Google Groups
"Let's Encrypt Client Development" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to client-dev+unsubscribe@xxxxxxxxxxxxxxx.
To post to this group, send email to client-dev@xxxxxxxxxxxxxxx.
To view this discussion on the web visit
https://groups.google.com/a/letsencrypt.org/d/msgid/client-dev/1463327087957-469b8133-11e51891-52c8c840%40gmail.com
<https://groups.google.com/a/letsencrypt.org/d/msgid/client-dev/1463327087957-469b8133-11e51891-52c8c840%40gmail.com?utm_medium=email&utm_source=footer>
.





-- 
Daniel Jeffery
e. danjj@xxxxxxxxxxxxxxx
e. djeffery@xxxxxxxxxxxxxxxxxxx
m. 801.769.6767
https://keybase.io/danjeffery ;| https://danjeffery.youcanbook.me/

-- 
You received this message because you are subscribed to the Google Groups "Let's Encrypt Client Development" group.
To unsubscribe from this group and stop receiving emails from it, send an email to client-dev+unsubscribe@xxxxxxxxxxxxxxx.
To post to this group, send email to client-dev@xxxxxxxxxxxxxxx.
To view this discussion on the web visit https://groups.google.com/a/letsencrypt.org/d/msgid/client-dev/CAB1D4h8OJ97nCjmn0QwXJkfOejjL3Z8VrqNRS0_1k5HKGVwOng%40mail.gmail.com.
Why ads?