Blogs

    Publish
     
      • Update on Chrome 53 Bug Affecting Symantec SSL/TLS Certificates

        Oct 20 2017, 8:31 PM

        by Unknown 1

        As mentioned on November 10, 2016, we were made aware of a bug in Chrome version 53 that affects some Symantec, GeoTrust, and Thawte SSL/TLS certificates resulting in an untrusted error displaying when visiting affected websites.  There were no issues with the certificates used on the affected websites, but rather, the issue is entirely a Google bug with specific versions of Chrome, Chromium, Chrome Custom Tabs and WebView.

        Since my initial post, we’ve gained more insight into the scope of impacted platforms and releases for this bug, and although the majority of them have been patched, there is an outstanding issue with Android apps that leverage the WebView version 53. To remedy this problem, end users of affected applications will need to update to the most recent version of WebView (currently, that's version 54) and the forthcoming Chrome version 55 (or later versions). Developers using Android Open Source Platform (AOSP) will need to review their own apps to ensure compatibility.

        Other Chrome-based applications and platforms have been patched by Google including Chrome Mac, Chrome Windows, Chrome Linux, Chrome Android, Chrome iOS, Chromium, Chromium-based browsers, and Chrome Custom Tabs. All of these will operate normally on Chrome version 54 for the time being, and are fully patched in Chrome version 55 (or later versions). We expect no adverse issues on these platforms at this time, and no action should be required by users leveraging typical update mechanisms.

        Update, February 15, 2017: Google reports that bug fixes have been made available across all platforms. However, in some locations those fixes are not automatically deployed to affected customers. Those customers must manually update their applications to take advantage of the bug fix.

        • Products
        • Google Chrome
        • TLS certificate
        • Symantec Website Security
        • SSL
        • DigiCert Code Signing
        • DigiCert SSL TLS Certificates
        • Products and Solutions
      • Chrome 53 Bug Affecting Symantec SSL/TLS Certificates

        Oct 20 2017, 8:48 PM

        by Unknown 1

        We’ve been made aware of a bug in Chrome version 53 that affects some Symantec, GeoTrust, and Thawte SSL/TLS certificates resulting in an error display when visiting affected websites.  There are no issues with the affected certificates and websites, and replacing these certificates will not help. Symantec is a strong supporter of Google Chrome and its Certificate Transparency (CT) policies. This is entirely a bug with Certificate Transparency handling that is only present in Chrome 53.  

        The recommended solution is to upgrade to Chrome 54 while Google is working on a patch to resolve this issue. Other browsers (i.e., Safari, Microsoft IE, Edge, Firefox, etc.) are unaffected by this bug.

        This blog has been updated here.

        • Products
        • TLS certificate
        • SSL
        • CT
        • chrome
        • DigiCert SSL TLS Certificates
        • Products and Solutions
      • Symantec CryptoExec for cPanel & WHMCS Makes SSL Administration Easy for Hosting Providers

        Aug 04 2015, 6:23 PM

        by Brook Chelmo 1

        Symantec would like to introduce the new CryptoExec for cPanel and WHMCS for hosting providers.  CryptoExec cPanel & WHMCS allows automating the SSL issuance process to mitigate errors and remove the manual steps in ordering and administration of SSL certificates for customers.  The intuitive and easy to use GUI helps customers buy and install SSL certificates.  Here is how it works:

        WHMCS Benefits

        The solution enables partners to utilize the popular WHMCS for billing/procurement of Symantec, GeoTrust, RapidSSL, and Thawte SSL and code-signing certificates and to provide a shopping cart experience.  The partner can also offer Trust Seals through WHMCS. 

        One other advantage of the solution is the flexibility offered for purchase through the support for either a voucher-based path or a classic SSL-based path. The voucher-based path is recommended for partners who have both cPanel and WHMCS so a customer can buy vouchers in WHMCS and redeem them in cPanel. The classic SSL path is recommended for partners who use WHMCS but not cPanel. 

        cPanel Benefits

        CryptoExec also enables cPanel, the popular control panel solution for hosting providers. Partners can utilize this solution to redeem vouchers purchased through WHMCS and automatically install all SSL certificate types without any manual intervention.

        Through cPanel, the Certificate Signing Request (CSR) generation is completely automated for partners who support both WHMCS and cPanel.  Additionally, the end customer will see live status messages on the progress of the certificate’s validation and installation.  cPanel will also provide a list of existing Symantec SSL certificates and the details related to each certificate. Through CryptoExec the complete lifecycle of an SSL certificate is covered; users can reissue, revoke and renew all SSL certificates through this solution. 

        CryptoExec cPanel and WHMCS modules also provide troubleshooting capability to hosting provider for the orders placed through WHMCS and cPanel.

        For WHMCS

        1. Download Symantec™ CryptoExec for WHMCS directly from Symantec’s Knowledge Base

        2. Add the module to your WHMCS installation

        3. In WHMCS, setup few initial product configurations and your customers are ready to start purchasing Symantec Products!

        For WHMCS and cPanel

        1. Download Symantec™ CryptoExec for WHMCS and Symantec™ CryptoExec for cPanel directly from Symantec’s Knowledge Base

        2. Add the module to your WHMCS and cPanel installations

        3. Within each system, setup your initial configurations and your customers are ready to start purchasing Symantec Products!

        • cPanel
        • SSL certificate
        • DigiCert Code Signing
        • Hosting
        • Products
        • TLS certificate
        • voucher
        • website security solutions
        • Symantec Website Security
        • CryptoExec
        • WHMCS
        • Products and Solutions
        • provider