Open Bug 1121695 Opened 9 years ago Updated 2 years ago

Incorrect SSL error message when DNS name entry is equal to an IP address

Categories

(Core :: Security: PSM, defect, P3)

Product:
Core
Component:
Security: PSM
Version:
36 Branch
Type:
defect

Tracking

()

People

(Reporter: mwobensmith, Unassigned)

References

(Depends on 1 open bug)

Details

(Whiteboard: [psm-backlog]) 

In Fx36:

https://162.13.98.182/

 162.13.98.182 uses an invalid security certificate.
 The certificate is only valid for 162.13.98.182
 (Error code: ssl_error_bad_cert_domain)

According to David Keeler, this is expected behavior, as the subject alt names extension has the (invalid) sole entry of "DNS Name: 162.13.98.182" instead of "IP Address". However, the error reporting code does not take the IP address case into account and could be improved.
Depends on: 1024781
See Also: → 1024781
Whiteboard: [psm-backlog]
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.