Open Bug 1121695 Opened 11 years ago Updated 3 years ago

Incorrect SSL error message when DNS name entry is equal to an IP address

Categories

(Core :: Security: PSM, defect, P3)

Product:
Core
Component:
Security: PSM
Version:
36 Branch
Type:
defect

Tracking

()

People

(Reporter: mwobensmith, Unassigned)

References

(Depends on 1 open bug)

Details

(Whiteboard: [psm-backlog])

In Fx36: https://162.13.98.182/ 162.13.98.182 uses an invalid security certificate. The certificate is only valid for 162.13.98.182 (Error code: ssl_error_bad_cert_domain) According to David Keeler, this is expected behavior, as the subject alt names extension has the (invalid) sole entry of "DNS Name: 162.13.98.182" instead of "IP Address". However, the error reporting code does not take the IP address case into account and could be improved.
Depends on: 1024781
See Also: → 1024781
Whiteboard: [psm-backlog]
Priority: -- → P3
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.