1054387 - SSL cert exception doesn't take with Start TLS - but does with SSL/TLS

Status: RESOLVED INCOMPLETE

(Thunderbird :: Security, defect)

Description

[Rich Rauenzahn]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0 (Beta/Release)
Build ID: 20140716183446

Steps to reproduce:

We've switched to Exchange in our office and Exchange uses self signed certificates.  

I've added a permament exception for the cert for the exchange imap server and I still get prompted periodically (often!) to confirm the exception.  I suspect it is when each IMAP connection reconnects, as it seems to happen with I switch folders or if I was away from TB for a while.

What is really odd is that on a whim I decided to change my security settings from STARTTLS+normal password to just SSL/TLS+Normal Password and the problem has gone away!

I wanted to report this as I've seen lots of TB bugs about invalid certs not being accepted even though an exception was created, but I've never noticed anyone mentioning a behavior difference between STARTTLS and SSL/TLS.





Expected results:

If I've specified an SSL exception, I shouldn't get prompted for it repeatedly.

Comment 1

[Wayne Mery (:wsmwk)]

Do you still see this with version 31 or 38?

Comment 2

[Rich Rauenzahn]

No longer have the environment in which to reproduce.

Comment 3

[Phoenix]

Resolved per whiteboard