1089866 - https://tools.usps.com/triggers cert-error page, with valid cert for *.usps.com

Status: RESOLVED DUPLICATE of bug 1089527

(Core :: Security, defect)

Description

[Daniel Holbert [:dholbert]]

STR:
 1. Visit https://tools.usps.com/

ACTUAL RESULTS:
> This Connection is Untrusted
> [...]
> Technical details
>   tools.usps.com uses an invalid security certificate.
>   The certificate is only valid for *.usps.com
>   (Error code: ssl_error_bad_cert_domain)

EXPECTED RESULTS:
No cert error. "tools.usps.com" should be recognized as matching the wildcard "*.usps.com".

I'm using Nightly 36.0a1 (2014-10-27) on 64-bit Ubuntu 14.10.

Page loads correctly in Firefox Release (33); hence, marking as regression.

Comment 2

[Daniel Holbert [:dholbert]]

mozregression gave this range:
https://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=88adcf8fef83&tochange=d6abb9bf43be

in which bug 1063281 looks like the obvious cause. That already has bug 1089527 filed as a dependent bug, and it looks like this should be a dupe of that bug. Hence, marked as dupe.