Closed Bug 1133101 Opened 11 years ago Closed 11 years ago

SSLv3 warning is incorrect if SSLv3 is not the minimum version

Categories

(Core Graveyard :: Security: UI, defect)

defect
Not set
normal

Tracking

(Not tracked)

RESOLVED DUPLICATE of bug 1127339

People

(Reporter: rbarnes, Unassigned)

Details

STR: 1. security.tls.version.min = 3 2. openssl s_server -no_ssl3 -accept 8080 -key $KEY -cert $CERT 3. https://localhost:8080/ Behavior: "Nightly cannot guarantee the safety of your data on example.com because it uses SSLv3, a broken security protocol." Should be: A more general message that says that the version the protocol supports is not up the the configured minimum. We should probably keep the message as it is for now, but use a different message when the pref has been changed.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → DUPLICATE
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.