Ungoogled-chromium: SSL issues NET::ERR_CERTIFICATE_TRANSPARENCY_REQUIRED

[ipetepete]

Related to this: https://sslmate.com/blog/post/ct_redaction_in_chrome_53

Some sites just don't work, Amazon, is a prime example (pun intended :), several resources do not load due to the SSL cert...see attached

[hook321]

I'm having the same issue. When I try to go to https://www.greatagain.gov/ it comes up with the "Your connection is not private" page.

[Eloston]

A lot of websites are having this now. In #116, I mentioned that I will upgrade to 54 to fix this problem, so hang tight.

[ipetepete]

@hook54321a LOL, oh the irony

[biergaizi]

@ipetepete @hook54321a

https://www.nsa.gov is affected by the same issue.

[VittGam]

You can workaround this bug by disabling the same FieldTrial flag that was disabled on-the-fly by Google on Google Chrome 53 using their Finch remote hijacking ehm, _Field Trial Testing_ server. You can use this command-line switch to do this:

--force-fieldtrials=*EnforceCTForProblematicRoots/Disabled/

Enjoy! :)

[Eloston]

@VittGam Thanks for the tip! Do you have some documentation on field trials? I don't know about it.

[VittGam]

@Eloston No, unfortunately they're scattered all around the code, and there is no place where they're defined... It's just a key-value store that's checked when needed.

This particular one is checked here: https://chromium.googlesource.com/chromium/src/+/53.0.2785.116/net/http/transport_security_state.cc#753

While the --force-fieldtrials option is described here:

https://chromium.googlesource.com/chromium/src/+/53.0.2785.116/base/base_switches.cc#36

[Eloston]

@VittGam Alright, thanks.

[think3t]

@VittGam Thanks for the tip! It works!

[Eloston]

Going to close this since the new release is out. Builds for the platforms will roll out over time as they are built and bugs are worked out.

[xaviervalarino]

@VittGam Sorry to resurrect this year old topic, but how would I go about enabling --force-fieldtrials option from the command-line in OSX?

Running chromium --force-fieldtrials=*EnforceCTForProblematicRoots/Disabled/ from term returns unrecognized option and then the usage text.