176615 - Citizensbankonline reports security error

Status: VERIFIED DUPLICATE of bug 171331

(Core Graveyard :: Security: UI, defect, P3)

Description

[Daniel Nilsson]

I've build mozilla from CVS trunk as of today (10/24/02) on Linux 2.4.16 (SMP).
I can login fine to the online bank at
https://www.citizensbankonline.com/index.htm.   However any of the links after
the login page are giving me security errors, the site reports :  "Security
Error, Error #1004 - You were automatically logged off, please login again."

I'm not sure this is a PSM problem or not, please move this bug if it doesn't
seem likely it's a PSM bug

I can access the same online banking system using mozilla 1.1 (built and run on
the same Linux machine). It also works fine under NS 4.78. I have had the same
problems in the past with Alpha and Beta builds, seems like the releases works
fine though (I believe 1.0 works fine as well). Is this just a coincidence ?

Comment 1

[John Unruh]

Reporter, can you reinstall in a new directory if you overwrote an older build?
If that doesn't work, can you try a new profile in case your profile is corrupted?

Comment 2

[Daniel Nilsson]

I'm running mozilla from the dist/bin directory of the source tree, so it's a
fresh install. I did try to run it as a different user that had never run
mozilla before and then the citizensbank online service works fine with the
latest CVS code. Going back to my own profile (which I have used since probably
1.0) I get the same security error again. So it seems that something goes wrong
when I use my profile (which contains e-mail certificates for signing mail
messages but I assume that is unrelated to this problem).

I'm not sure if that closes this bug or if mozilla supports upgrading without
requiring the user to start all over configuring everything again. I would hope
I could upgrade and keep my settings.

Comment 3

[Kai Engert (:KaiE:)]

Daniel,

do you say, when you always use the same profile, and switch back and forth
between an old build and a newer build: The older build works, the newer build
fails?

If you confirm, this bug might be a duplicate of bug 171331.

Comment 4

[Daniel Nilsson]

Yes, I can use my standard profile and start mozilla 1.1 and not have any
problems accessing citizensbankonline.com. Then I exit mozilla 1.1 and start
mozilla 1.2b using the same profile and I get the problem stated above. If I
however start 1.2b with a clean profile, 1.2b works fine with citizensbankonline.com

Comment 5

[John Unruh]

Hopefully this will fix your old profile with the new build. 
Edit>Prefs>Privacy>Certificates>Certificate manager> Authorities tab. Find the 
RSA certficate authorities, edit them and trust them.

Comment 6

[Daniel Nilsson]

Indeed, editing the certificates as suggested makes the latest CVS code work
with citizensbank again. Though the certificate was already trusted, the only
thing missing was for "software maker" usage. I turned that on as well and now
everything works fine. I tried switching if off again but things still work
fine... Now I seem unable to get back to the state where things were failing.

Any chance this is just an issue of 1.2 reading preferences saved by 1.1 or
earlier ?

Comment 7

[Kai Engert (:KaiE:)]

I hope your problem is the same bug as bug 171331.

*** This bug has been marked as a duplicate of 171331 ***

Comment 8

[John Unruh]

Verified dupe.