1257752 - Firefox says insecure connection while browsing being in proxy network

Status: RESOLVED INVALID

(Core :: Security: PSM, defect)

Description

[npatro7m]

Attachment: Screen Shot 2016-03-18 at 10.44.49 AM.png

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.87 Safari/537.36

Steps to reproduce:

Version 45.0
Browser google.com or any other website being in no proxy network, browser abel to load all pages.
Browse same websites being in proxy network, firefox says insecure connection


Actual results:

Firefox says insecure connection with error code SEC_ERROR_UNKNOWN_ISSUER.
able to load the website after exercising Add Exception option.

then I went to settings for looking into proxy settings of browser, and saw the option "use system proxy settings" is enabled which seems to be correct.

I uninstalled Firefox, deleted the folder inside Library/Application support/Firefox on Mac(10.10.5) and re-installed but same issue.

I tried with importing all the setting from safari or Chrome while launching Firefox for first time but no luck.


Expected results:

Like Chrome it should auto detect system proxy and should connect with all the websites out of box.

Its annoying if I have to do some proxy config to make it work after installing.

Comment 1

[YF (Yang)]

What is your system proxy settings, and the browsing will works after what settings?

Comment 2

[npatro7m]

Able to load the website after exercising Add Exception option.
But firefox says insecure for each and every website, you need keep on confirming certificate through Add Exception option to browse that page.

But Firefox does not say insecure connection while connected to no proxy network. I am clueless why its saying insecure connection while connected to proxy network.

Comment 3

[YF (Yang)]

(In reply to npatro7m from comment #2)
> Able to load the website after exercising Add Exception option.
> But firefox says insecure for each and every website, you need keep on
> confirming certificate through Add Exception option to browse that page.
> 
> But Firefox does not say insecure connection while connected to no proxy
> network. I am clueless why its saying insecure connection while connected to
> proxy network.

The proxy network may have a middleman hijacking, check the issuer of certificates.

You can copy and post the technical information after clicked the blue link (error code).

Comment 4

[Patrick McManus [:mcmanus]]

not a bug.. you need to add the proxy cert to the root trust store if you want to be MITM'd

Comment 5

[npatro7m]

I feel it's bug because my safari and chrome browser automatically consider system proxy but Firefox fails to do same

I have checked the proxy settings of firefox browser , the option "use system proxy settings" is enabled which seems to be correct so expected firefox should take system proxy automatically.

Comment 6

[YF (Yang)]

Firefox uses a separate certificate store, the proxy publisher may not support importing the issuer certificate to Firefox, please do it manually if you trust it.

https://support.mozilla.org/questions/1083592
https://support.mozilla.org/questions/995117