Hi,
Good news.
I actually didn't notice you giving me location of the certs earlier. I compared it now and found the fault.
The issue was in permissions. I had
ls -lah /home/username/ | grep pki
drw-r--r-- 3 username username 4.0K Apr 27 2017 .pki
I did
chmod -R 700 /home/username/.pki/
ls -lah /home/username/ | grep pki
drwx------ 3 username username 4.0K Apr 27 2017 .pki
Which fixed the issue.
Thank you for thorough investigation.
@Gwen-Dragon
its working now, the browser accepts saving a login-password again
0_1550216127584_4cee789d-01bd-432f-98b0-251feb422898-image.png
the last thing about the obsolete cipher suite will hopefully be away, when the server was migrated from Server2008R2 to Server2016; unfortunately Server2008R2/IIS has no support fΓΌr SHA-2
but it's green in the browser and working
Thanks everyone! I will check with the company IT department regarding the certificate issues.
I am still puzzle though over why it works on 2.2.1350.4, but i guess it has to do with this upgrade:
Upgraded Chromium to 71.0.3578.27
Thanks!
Regards,
Collin
@patrik_halfar manual addition of entries was supported via vivaldi://net-internals/ until the option was removed by the according Chromium update.
HTTP headers are only the most common way of distribution.
The cert (or CA for that matter) is not in the loop for PKP. If the server does not have the matching private key for the requested domain (or the trust period expired), the client will throw an error.
If website operators are not up to the task to renew entries in time, there are deadlocks. This happening regularly unfortunately lead to Google pulling the plug (public reason) without (as you mentioned) an adequate replacement.
The difference in the suggested feature is to use a cert hash with expiration bound to cert lifetime instead of a public key hash with expiration supplied by the user (or server).
Subdomain inclusion is covered in PKP as well.
Vivaldi has a real opportunity here to innovate in a big way with such a simple design change.
For example. Something like this would not work anymore?
https://twitter.com/musalbas/status/1038919152826757122
Why? Because the full domain would be shown instead of the full URL. This is exactly the sort of thing the URL address bar can prevent with this. Vivaldi can then advertise as a feature the new anti phishing address bar.
You can close this topic unless someone else is interested in it. I installed Windows 7 again because I was fed up with this and other issues/bugs in Windows 10. On Windows 7 Vivaldi/Chromium is working fine as it should be.