1059566 - untrusted connection

Status: RESOLVED INCOMPLETE

(Core :: Security: PSM, defect)

Description

[jack ping hua zhan]

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0 (Beta/Release)
Build ID: 20140715214327

Steps to reproduce:

With Firefox 31.0, visit a web site such as
https://wiki.mozilla.org/Incomplete_Certificate_Chain



Actual results:

It says:

An error occurred during a connection to wiki.mozilla.org. Peer's certificate has been marked as not trusted by the user. (Error code: sec_error_untrusted_cert) 



Expected results:

The Firefox should allow me to check the certificate, and what kind of trust I have assigned to it or its issuer's certificate.

Comment 1

[jack ping hua zhan]

Attachment: Screenshot from 2014-08-27 17:32:42.png

Comment 2

[jack ping hua zhan]

Attachment: Screenshot from 2014-08-27 17:49:54.png

This one, it seems allow me to add exception, but when I proceeded, it can not get the certificate information.

Comment 3

[jack ping hua zhan]

Attachment: Screenshot from 2014-08-27 17:50:18.png

Comment 4

[Loic]

Did you try to remove the file cert8.db from your profile (keep a backup copy)?
And with a clean profile? (https://support.mozilla.org/en-US/kb/profile-manager-create-and-remove-firefox-profiles)

Comment 5

[jack ping hua zhan]

(In reply to Loic from comment #4)
> Did you try to remove the file cert8.db from your profile (keep a backup
> copy)? And with a clean profile?

With a clean profile, it is OK. 

Can we figure out what went wrong? For the case with 1st attachment, it says "Peer's certificate has been marked as not trusted by the user". I guess "the user" must be me. Then I would hope Firefox can let me see which certificate, and what kind of value I have assigned to it.

For the case with the 2nd attachment, it can allow me to add exception, but after I clicked it, and it can not get the certificate. What went wrong?

Comment 6

[Dana Keeler (she/her) [:keeler]]

Is this still an issue? If so, it may be a result of an add-on changing the trust settings of your certificates. The error "sec_error_untrusted_cert" should only be encountered when a certificate has been explicitly *distrusted*, which won't happen under normal circumstances.