升级了 chrome 57, https 挂了，是沃通的锅吗

[FingerLiu]

如图： http://ac-HSNl7zbI.clouddn.com/TlHbnnuTUbgTJpC3zcvhBXlnCT1VH1ca18Tm8XEq.jpg

沃通又被拉黑名单了吗？怎么破 正好证书快到期了，如果是沃通的锅，果断换。

[FingerLiu]

原来是个老老老新闻了啊
http://ac-HSNl7zbI.clouddn.com/MQveGR9yviNNwrQuUNqbPj6qAhvesQzDB8VKyFjm.jpg

[honeycomb]

wosign 的证书不是早就被拉黑了吗?

即时策略是立即停止 wosign 免费证书的信任，然后再主键停止信任所有 wosign 颁发证书。

5 个月前的原话
https://security.googleblog.com/2016/10/distrusting-wosign-and-startcom.html

"Beginning with Chrome 56, certificates issued by WoSign and StartCom after October 21, 2016 00:00:00 UTC will not be trusted. Certificates issued before this date may continue to be trusted, for a time, if they comply with the Certificate Transparency in Chrome policy or are issued to a limited set of domains known to be customers of WoSign and StartCom."

苹果则是在去年年底完全解除了 wosign 的信任
https://support.apple.com/zh-cn/HT204873

[coosir]

他们自己的很多子站都打不开了，不过已同意更换证书。

[dremy]

自己的博客 CDN 还用的是 WoSign ，强制刷新了一下静态资源就全挂了，果然是 Chrome 不再认了。
感谢楼主提醒，补证书去了。。。