Skip to content

Cannot handle incomplete certificate chains #78

@kring

Description

@kring

Some servers (www.cmar.csiro.au and programs.communications.gov.au are two examples as of this writing) return an incomplete TLS certificate chain. That is, they only include the leaf certificate, not the intermediate certificate between the leaf and the trusted CA. Technically this is a misconfiguration of the servers, but no one cares because pretty much all browsers can deal with it these days by automatically downloading the intermediate certificate. Unfortunately, node/request don't handle this automatically like browsers do. So we need to work around it in terriajs-server.

There's some discussion from the node.js perspective and the start of a workaround in nodejs/node#16336.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions