Skip to content

Cannot handle incomplete certificate chains #78

Description

@kring

Some servers (www.cmar.csiro.au and programs.communications.gov.au are two examples as of this writing) return an incomplete TLS certificate chain. That is, they only include the leaf certificate, not the intermediate certificate between the leaf and the trusted CA. Technically this is a misconfiguration of the servers, but no one cares because pretty much all browsers can deal with it these days by automatically downloading the intermediate certificate. Unfortunately, node/request don't handle this automatically like browsers do. So we need to work around it in terriajs-server.

There's some discussion from the node.js perspective and the start of a workaround in nodejs/node#16336.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions