Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

AdGuard fails at pinning test on badssl.com #1526

Closed
DBotThePony opened this issue Oct 2, 2021 · 2 comments
Closed

AdGuard fails at pinning test on badssl.com #1526

DBotThePony opened this issue Oct 2, 2021 · 2 comments

Comments

@DBotThePony
Copy link

Can not be open in any modern browser: https://pinning-test.badssl.com/

But Adguard accept the certificate on Windows and Android platforms.

Expected:

browser_yzoZDyUzE1

firefox_A5PtrRGPvF

Got:

27lJ1haUDq

browser_vBuXe3ajfP

@DBotThePony DBotThePony changed the title AdGuard fails pinning test on badssl.com AdGuard fails at pinning test on badssl.com Oct 2, 2021
@ameshkov
Copy link
Member

ameshkov commented Oct 3, 2021

What's really interesting here is why this website cannot be opened in Chrome and Chromium-based browsers.

You see, it tests HPKP support that has been removed from Chromium quite some time ago: https://www.chromestatus.com/feature/5903385005916160

@sfionov do they have some pins hardcoded?

@DBotThePony
Copy link
Author

Can confirm, that in latest chromium it is indeed can be opened normally, but not in derivatives, such as Opera or Vivaldi.

Screenshots

opera_fNaBlo3RJc
vivaldi_0RnCUqoKi7
chrome_cOiwWHxlpK

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants