Task
Internal site with self-certified site cannot be loaded in later browser versions. Need to add an exclusions.
Troubleshooting:
- Terminal and Curl show that sites are loading outside browser
- Vender appliance uses factor cert that is either expired, or cannot improperly allows TLS negotiation when it should not, and vendor still hasn't patched years later, sigh
Example:
- myserver.mindwatering.local ports 80/443/8000
- 192.168.55.116 ports 80/443/8000
- nc utility:
$ nc -vz myserver.mindwatering.local 80
Connection to myserver.mindwatering.local port 80 [tcp/*] succeeded!
$ nc -vz myserver.mindwatering.local 443
Connection to myserver.mindwatering.local port 443 [tcp/*] succeeded!
$ nc -vz 192.168.55.16 80
Connection to 192.168.55.16 port 80 [tcp/*] succeeded!
$ nc -vz 192.168.55.16 443
Connection to 192.168.55.16 port 443 [tcp/*] succeeded!
$ nc -vz 192.168.55.16 8000
Connection to 192.168.55.16 port 8000 [tcp/*] succeeded!
Note:
- This is different than the ERR_ADDRESS_UNREACHABLE issue with LAN servers on Brave version 1.92.140/macOS 26.5
- The difference is that with this bogus error, the certificate is not expired, and is either using a trusted root, or has the root imported.
- See below for that tangent
Steps to Add an Insecure Site:
1. Open settings to page:
- Brave web browser --> Settings (top right icon) --> Privacy and security (left menu) --> Site and Shield Settings --> Under Content (heading) --> Additional content settings (twistie) --> Insecure Content
- On the Insecure content page, beside "Allowed to show insecure content", click Add (button)
- In the pop-up, enter the IP or FQDN of the internal server, click Add (button)
2. Open the internal server:
Brave web browser --> myserver.mindwatering.local
<page loads>
LAN Internal Sites May Not Open:
Symptoms:
- Occurs on MS Windows and MacOS.
- Sites successfully load with Safari, Firefox, and curl (Terminal). Brave will not open site if opened from Dock or from Applications folder.
1. Confirm this issue:
- Use curl and confirm loads:
MacOS --> Applications --> Utilities --> Terminal -->
$ curl <enter IP or FQDN of internal server>
<view page content>
- Use Safari and confirm loads:
MacOS --> Applications --> Safari --> Enter IP or FQDN of internal server into location field
<view page content>
2. If confirmed, workaround:
a. Open via Terminal directly using package launch:
MacOS --> Applications --> Utilities --> Terminal -->
-bash-3.2$ /Applications/Brave\ Browser.app/Contents/MacOS/Brave\ Browser
[2714:48783598:0721/125232.356672:ERROR:base/process/process_mac.cc:98] task_policy_set TASK_SUPPRESSION_POLICY: (os/kern) invalid argument (4)
[2714:48783598:0721/125239.458246:ERROR:base/process/process_mac.cc:53] task_policy_set TASK_CATEGORY_POLICY: (os/kern) invalid argument (4)
[2714:48783598:0721/125239.458279:ERROR:base/process/process_mac.cc:98] task_policy_set TASK_SUPPRESSION_POLICY: (os/kern) invalid argument (4)
<app will open like normal, terminal will "hang" which is okay, because Terminal is waiting for us to close the browser. Leave Terminal like this.>
b. Open the internal server:
Brave web browser --> myserver.mindwatering.local
<page loads>
c. When done working on internal server, close Brave window (to release Terminal)
d. Close Terminal
previous page
|