174654 - Click logon (you dont need a password) and the browser says it does not know Verisign

Status: VERIFIED DUPLICATE of bug 141612

(Core Graveyard :: Security: UI, defect, P3)

Description

[blinklys]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.0.1) Gecko/20020826
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.0.1) Gecko/20020826

The browser does not like the certificate - It says it is from an unknown authority.

It originated at Verisign and works ok on IE 5.5 - I don't know how they have it
installed.

Reproducible: Always

Steps to Reproduce:
1.http://www.icelandair.com
2.Click logon (pw doen't matter for this)
3.Verisign Certificate is rejected

Actual Results:  
I can accept the "flawed" certificate and log in. 

Expected Results:  
Unless the certificate is actually flawed it seems the browser should be able to
re-check DNS etc for an authoritative zone somewhere.



They are operating out of Iceland, maybe that has something to do with it.
 20   190 ms   171 ms   180 ms  fe01.access01.islandssimi.is [213.176.138.71]
 21   191 ms   180 ms   180 ms  ISnet-gw.icelandair.is [193.4.56.70]
 22   170 ms   170 ms   180 ms  www.icelandair.com [193.4.27.102]

Comment 1

[Boris Zbarsky [:bzbarsky]]

To PSM.  I see this on Linux too.

Comment 2

[John Unruh]

Dupe of bug 141612. This is due to the webmaster not installing the full
certificate chain.

*** This bug has been marked as a duplicate of 141612 ***

Comment 3

[John Unruh]

Verified.