3 ms·
For me, GlobalSign lack of / failing to get GlobalSign intermediate certs pops up surprisingly often.
by emmelaich 7y ago
For me, GlobalSign lack of / failing to get GlobalSign intermediate certs pops up surprisingly often.
- jiggawatts 7y agoThat's typically a proxy problem. The intermediate certificates are automatically downloaded by all decent X.509 clients such as Windows, Firefox, or Chrome. However, if the proxy is occasionally dropping requests or replacing them with one of those stupid "log on to the proxy here" pages, then the chain discovery will fail randomly and you'll get these issues. It's also common in environments where the security trolls have blocked HTTP (as in, TCP port 80) because they think it's "insecure", but this just causes X.509 issues like this because it uses only HTTP and never HTTPS for CRLs, OCSP, and intermediate CA certificate downloads.
- emmelaich 7y agoThanks, that's great info.