793718 - Unparsed link in security exception message

Status: RESOLVED DUPLICATE of bug 1002523

(Core Graveyard :: Security: UI, defect)

Description

[nick1presta]

Attachment: Error message.

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:18.0) Gecko/18.0 Firefox/18.0
Build ID: 20120918030553

Steps to reproduce:

Install a webapp for a domain that includes an invalid/self-signed certificate.

Generated cert via:
openssl genrsa 1024 > tunnel.key
openssl req -new -x509 -nodes -sha1 -days 365 -key tunnel.key > tunnel.cert
cat tunnel.key tunnel.cert > tunnel.pem

Ran stunnel on my local site:
pid=

cert = /home/vagrant/tunnel.pem
sslVersion = SSLv3
foreground = yes
output = stunnel.log

[https]
accept=443
connect=8000
TIMEOUTclose=1


Actual results:

I get the message:

test.mysite.com uses an invalid security certificate.

The certificate is not trusted because it is self-signed.
The certificate is only valid for <a id="cert_domain_link" title="Nick Presta">Nick Presta</a>

(Error code: sec_error_untrusted_issuer)


Expected results:

The link inside the message should be parsed to include a link to the domain, or to a page with more information.

Comment 1

[:Cykesiopka]

Forward duping since Bug 1002523 already has some information on why the issue occurs.