Uploaded image for project: 'RESTEasy'
  1. RESTEasy
  2. RESTEASY-2236

ERR_INVALID_SIGNED_EXCHANGE localhost Chrome

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Blocker Blocker
    • 3.7.0.Final
    • 3.1.4.Final, 3.6.3.Final
    • None
    • None
    • Hide

      Attached is a war file demonstrating the problem in Chrome when run on Tomcat 8 and 9.
      Visit URL http://localhost:8080/ChromeTest2_war/hello

      In more detail:
      1. Follow these steps: https://medium.com/@nicolaifsf78/intellij-idea-maven-resteasy-tomcat-f95bb41e6362
      2. Visit the localhost url /hello
      3. Chrome fails with ERR_INVALID_SIGNED_EXCHANGE but Edge and Firefox succeed.

      Show
      Attached is a war file demonstrating the problem in Chrome when run on Tomcat 8 and 9. Visit URL http://localhost:8080/ChromeTest2_war/hello In more detail: 1. Follow these steps: https://medium.com/@nicolaifsf78/intellij-idea-maven-resteasy-tomcat-f95bb41e6362 2. Visit the localhost url /hello 3. Chrome fails with ERR_INVALID_SIGNED_EXCHANGE but Edge and Firefox succeed.

      The page should display the text "hello"
      Instead: The server returns an invalid signed exchange response with Chrome leading to the following message: ERR_INVALID_SIGNED_EXCHANGE. This happens in Windows.

      Tomcat 9 console reads:
      "Signed exchange response without "X-Content-Type-Options: nosniff" header is not supported.
      Wrong magic string"

      The problem doesn't show up in Firefox or Edge.
      Chromium devs believe it's not a Chrome bug, and that Chrome is functioning correctly in this case.

        1. chrome-net-export-log.json
          379 kB
        2. ChromeVsFirefox.png
          ChromeVsFirefox.png
          37 kB
        3. com.chrometest2-1.0-SNAPSHOT.war
          2.36 MB
        4. request.png
          request.png
          398 kB
        5. response.png
          response.png
          331 kB
        6. Test2198.java
          2 kB

              rsigal@redhat.com Ronald Sigal
              lwatkissveal_jira Lawrence Watkiss-Veal (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: