Braintree-web: SSL certificate issue in Chrome

[fazpu]

General information

• SDK version: 3.26.0
• Environment:Sandbox
• Browser and OS: Chrome 63.0.3239.108 / Ubuntu 17.10

Issue description

While working in Chrome on the sandbox integration, this warning appears:

The SSL certificate used to load resources from https://api.sandbox.braintreegateway.com will be distrusted in M70. Once distrusted, users will be prevented from loading these resources. See https://g.co/chrome/symantecpkicerts for more information.

Please, are there plans to handle this issue?

Thank you!

[crookedneighbor]

We are aware of the issue and taking steps to mitigate it before the deadline.

[neginbasiri]

+1
I have the same issue

[carlosds730]

Any news regarding this?

[crookedneighbor]

It's on our security team's roadmap to take care of this well before the deadline (March 2018). There will be no disruption of service. We'll close this issue when the certificates have been rotated out for new certs.

[crookedneighbor]

I have a small update on this, I checked with our infrastructure team and our certs were issued in 2017, so the actual deadline is around October 2018 when Chrome 70 is released. We plan on having this all rolled out before then. There will be no interruption of service.

[vittorioe]

+1 Very uncool.

[nupejosh]

This is breaking for me on production.

The SSL certificate used to load resources from https://api.braintreegateway.com will be distrusted in M70. Once distrusted, users will be prevented from loading these resources. See https://g.co/chrome/symantecpkicerts for more information.

I just updated to the latest 3.31.0 version, but still not working. :/

When my hosted-fields render on the screen, they're all un-clickable. My checkout page is essentially completely unusable ATM.

[crookedneighbor]

@nupejosh I am unable to reproduce the fields being unclickable in Chrome or Chrome Canary. I believe whatever issue you're having is unrelated to this issue. Please contact our support team so we can dig into the precise issue.

If you could provide a staging site and exact steps to reproduce, that would be great.

[elliottohara]

What is the status on this? I'm getting the warning on my production systems.

[crookedneighbor]

Same as before. Our infrastructure team is working on it and ensuring that it'll be fixed before M70 rolls out. There will be no code changes needed on y'all's side.

[bluk]

An update on the status. The infrastructure team deployed a new certificate for the sandbox environment which resolves this warning in sandbox. The production environment will be resolved before M70 is available.

[mdbootstrap]

Dear Team - this is already breaking our production environment for Chrome users. Please provide the fix ASAP.

[crookedneighbor]

@mdbootstrap Please provide a link to your site that reproduces the issue. I am able to run Hosted Fields just fine.

If you are unwilling to post a link to your site here, you can contact our support team https://articles.braintreepayments.com/forms/contact

[NikitaKrivov]

It seems our clients faced that issue. Otherwise I have no other ideas.
Client see form stub spinner that should be hidden on drop-in initialization callback.
So a while after there is no spinner and no form.
Can't provide more information as I cannot reproduce that behaviour on my side.

[Solidjeuh]

I see the same at my website, any news please?

The SSL certificate used to load resources from https://chimpstatic.com will be distrusted in M70. Once distrusted, users will be prevented from loading these resources. See https://g.co/chrome/symantecpkicerts for more information.

[NikitaKrivov]

update on my comment: looks like the issue was with token from our server

[crookedneighbor]

@Solidjeuh The state of this is the same. It's been resolved for sandbox environments and will be resolved for production environments before M70 is released. We're taking this slow and carefully to ensure there is no interruption of service in our production environment.

@NikitaKrivov Thank you for the confirmation that it was unrelated to this issue.

[Solidjeuh]

Great, Thanks! @crookedneighbor

[mkarnicki]

Just to remind, we're ~40 days from the deadline, July 20th. Thanks.

[dirkgr]

25 days today! 🕐

[msphair]

6 days...any updates?

Er, I should have read the thread before posting. For visibility:

I have a small update on this, I checked with our infrastructure team and our certs were issued in 2017, so the actual deadline is around October 2018 when Chrome 70 is released. We plan on having this all rolled out before then. There will be no interruption of service.

So there's still a few months remaining.

[elliottohara]

Would you care to define “well before the deadline?”

[crookedneighbor]

To be clear, the canary release of Chrome M70 comes out on July 20th, but the beta release comes out in September and the stable release does not come out until October.

We intend to have the certs rotated before the beta release comes out in September.

[deepakgit90]

@crookedneighbor was not able to do transaction in production environment of braintree, as it is showing chrome m70 issue

[crookedneighbor]

The new certs are rolled out.

Note: if you're using PayPal with checkout.js, you will still see the warning. Looks like they are targeting August 6th to rotate the certs https://github.com/paypal/paypal-checkout/issues/691#issuecomment-405604183

[tituscrow82]

Still not fixed

[crookedneighbor]

@tituscrow82 This should not be a problem on the Braintree side of things. PayPal and Checkout.js still do not have the checkout.js cert rotated, I've asked them for an update.

If you believe you are still seeing issues related to this on the Braintree side, please reach out to Braintree support at https://articles.braintreepayments.com/forms/contact