1180151 - Hosted WebApps with self-signed https certificate are unusable

Status: RESOLVED DUPLICATE of bug 433422

(Firefox :: Security, defect)

Description

[n00000000ne]

Attachment: Screenshot-Firefox-WebApp-Invalid-Cert.png

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Firefox/38.0
Build ID: 20150602115007

Steps to reproduce:

1. Visit a site with a self-signed certificate which hosts a webapp.
2. Permanently accept the self-signed certificate.
3. Install the WebApp (using JavaScript API)
4. Open the installed WebApp


Actual results:

An alert box saying "localhost:8080 uses an invalid security certificate." shows up (see screenshot).

The app is unusable because the page stays blank.


Expected results:

Instead of the alert box it would be better to show the same warning as in "normal" Firefox tabs. This gives the user to option to accept the cert.

Optionally: Auto-Accept the cert because the user has already accepted it in the browser.

Comment 1

[Abe - QA (:Abe_LV)]

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0
Nightly 45.0a1 Build ID:20151208030226
and Firefox 42.0

Thank you for your comment. Are you still  getting the same issue in the latest version ?

Comment 2

[n00000000ne]

Yes. The error code changed to "Error code: <a id="errorCode" title="SEC_ERROR_UNKNOWN_ISSUER">SEC_ERROR_UNKNOWN_ISSUER</a>" but the behavior is the same.