1138702 - Not using imported CA cert

Status: RESOLVED DUPLICATE of bug 1076329

(Core :: Security: PSM, defect)

Description

[Michael Monreal [:micmon]]

I use my own CA to sign SSL certs so I have to import it into Firefox. This works great on desktop Firefox, however it does not work correctly on Android. I set up a test for this:

1.) go to https://test.micmon.com/
=> Firefox will (correctly) show
---
test.micmon.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. (Error code: sec_error_unknown_issuer)
---

2.) go to http://ca.micmon.com/ and click the link, check "Trust this CA to identify websites." and confirm

3.) go to https://test.micmon.com/
=> on desktop Firefox, the page now loads as expected
=> on Android, I still get the "sec_error_unknown_issuer" error.
=> when repeating 2.), Firefox on Android tells me the CA is already imported
=> using a manual override the page loads fine on Android, but it should work without

Comment 1

[Dana Keeler (she/her) [:keeler]]

This looks a lot like bug 1076329. If you use Nightly, does it work as intended?

Comment 2

[Michael Monreal [:micmon]]

I tested with Nightly v39 and still run into the same problem.

Comment 3

[Michael Monreal [:micmon]]

And just to make sure I just tested again today and now it works with latest v39 nightly :/

Comment 4

[Michael Monreal [:micmon]]

So I guess this was a dupe after all. Thanks!