1133535 - Firefox 35.0.1 Will Not Accept Security Exception

Status: RESOLVED WORKSFORME

(Core :: Security, defect)

Description

[KitchM]

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:35.0) Gecko/20100101 Firefox/35.0
Build ID: 20150125222326

Steps to reproduce:

I attempted to visit a site with a security certificate.  Firefox states that it is untrusted and I selected to accept the exception.  I also attempted an insecure site, but got same problem.


Actual results:

The exception popup will not go away when selecting it.


Expected results:

It shouldn't have thought it was an issue to begin with, and it should accept any exception I desire.

Comment 1

[Virtual_ManPL [:Virtual] 🇵🇱 - (please needinfo? me - so I will see your comment/message/reply/question/etc.)]

Please post an example URL of the affected website.

Comment 2

[KitchM]

https://sierraclubswmg.org/

Comment 3

[Dana Keeler (she/her) [:keeler]]

Looks like that site isn't sending the appropriate intermediate certificates, which is why you're seeing the untrusted certificate page. However, adding an exception worked for me. If you disable addons, does it work as expected?

Comment 4

[KitchM]

Adding the exception would not take.  It would not even react when selecting the button to accept it.

Worse, there should be no reason to have an intermediate certificate.  It worked fine a week ago and Firefox was not upgraded at all.

Comment 5

[Matthias Versen [:Matti]]

>Adding the exception would not take.  It would not even react when selecting the button to accept it.
Please try it again in the Firefox safemode
- https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-using-safe-mode

>Worse, there should be no reason to have an intermediate certificate.
That is a server misconfiguration

Comment 6

[KitchM]

I restarted in safemode.  I then accessed that site again.  It worked okay.

However, I tried another login site used for server maintenance and it would not work.  It did the same thing as before.

Could you please explain what you meant by "server misconfiguration"?

Thank you.

Comment 7

[:Cykesiopka]

(In reply to KitchM from comment #6)
> Could you please explain what you meant by "server misconfiguration"?

Servers using public CA issued certificates are supposed to send the following things:
 - The end-entity certificate identifying the site itself.
 - Intermediate certificates that allow browsers etc to check that the end-entity certificate sent is actually trusted.

Hence, https://sierraclubswmg.org is/was misconfigured because it failed to send the necessary intermediate certificates.

Comment 8

[Wayne Mery (:wsmwk)]

combo of WFM and Invalid - so closing