1432394 - SSL Certificate Issue from version 57.0

Status: RESOLVED INVALID

(Core :: Security: PSM, defect)

Description

[Amogh P Bharadwaj]

Attachment: yaraio.crt

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0
Build ID: 20180103231032
Firefox for Android

Steps to reproduce:

1. Navigated to domains:-
a. yara.events
b. yara.io


Actual results:

1. Page error displayed as Your connection is not secure
2. "The owner of www.yara.io has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website." error was displayed.
3. Also displayed error was "www.yara.io uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported. Error code: SEC_ERROR_UNKNOWN_ISSUER"


Expected results:

1. The domains and pages under them should have worked fine.
2. Users could easily use the application, without any hassle, as in other browsers.
3. SSL Certificate issued by COMODO CA Limited. Hence, there shouldn't be any error launching the website.

Comment 1

[YF (Yang)]

Works for me in Fx58.0 on Win10.

Comment 2

[Dana Keeler (she/her) [:keeler]]

Your server isn't sending the "COMODO RSA Extended Validation Secure Server CA" intermediate certificate.
Marking "invalid", which is bugzilla's un-friendly way of saying "not a bug in Firefox".

Comment 3

[Amogh P Bharadwaj]

Thank you very much. Will verify and update it soon.