1165568 - SSL Error after updating a password when multiple entries are listed in password manager for same account

Status: RESOLVED INCOMPLETE

(Toolkit :: Password Manager, defect)

Description

[nicholasmarkamos]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:41.0) Gecko/20100101 Firefox/41.0
Build ID: 20150515084717

Steps to reproduce:

Followed steps listed at https://oneanddone.mozilla.org/en-US/tasks/117/

(
    Open the Nightly browser that you've just downloaded and installed
    Visit and login to any website that you frequently use (Examples: Facebook, Twitter, etc..)
    Save the password by selecting "Remember Password" from the "Password Doorhanger" and logout from the website
    Check to make sure your password has been saved via "Hamburger Menu -> Options/Preferences -> Security -> Saved Passwords"
    Visit the same website as before and insert your username, the password field should automatically be filled in with your saved password
    Once you're logged in, change your accounts passwords and logout
    Login into the same website using the new password and select "Update Password" under the "Password Doorhanger"
    Ensure that your new password is being displayed under the "Hamburger Menu -> Options/Preferences -> Security -> Saved Passwords" (use "Show Password"))

*Using Nightly 41.


Actual results:

Once logged in to account on the website I was testing with the updated password (password manager successfully updated the password) I got the ol' SSL failure:

(Secure Connection Failed

The connection to the server was reset while the page was loading.

    The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
    Please contact the website owners to inform them of this problem.)

I think this is because there are two entries listed in password manager for the same account, created on different pages under the same domain. One created on runescape.com/community and the other created on runescape.com/account --- only the community one updated as that's the homepage, but once signed in, clicking on the 'account' tab causes the error. I'm assuming this is because the password runescape.com says the account should have doesn't match what firefox has stored for that URL.


Expected results:

When offering to update password, password should be updated for every listing of a particular username for the domain you're currently browsing. I don't think there would ever be a case where someone would need different passwords against the same username for a domain. 

*I'm going to either manually update the password, or delete it, and see if that makes everything work properly.

Comment 1

[Kamil Jozwiak [:kjozwiak]]

Thanks Nicholas! I've created bug # 1166440 for the issue of duplicate entries appearing in the password manager. I'm still trying to reproduce the SSL issue after I've changed the password.