1438802 - Can't add an exception to a certificate that's already an exception for another site

Status: RESOLVED INVALID

(Firefox :: Security, enhancement)

Description

[Julien Wajsberg [:julienw]]

STR:
1. Configure the same self-signed certificate on 2 different domains.
2. Visit the first domain.
=> There's an error. [OK]
3. Add an exception for this domain.
4. Visit the second domain.
=> There's an error too. [OK?]
=> I can't add an exception because there's no button for this. [KO]

Note: when visiting the second domain in a private window, I have the button to add this exception. I don't know if this makes sense.

I got the issue while testing locally, as I set-up some fake domains for localhost to test different set-ups. I believe this will happen more than often now that we encourage TLS adoption.

Comment 1

[Dana Keeler (she/her) [:keeler] (out until 16 June)]

When you visit the second domain, does the error page say anything about "HTTP Strict Transport Security"?

Comment 2

[Julien Wajsberg [:julienw]]

David, yes it actually does!

Comment 3

[Julien Wajsberg [:julienw]]

So I just realized that the second subdomain I used is for a domain that actually use HSTS with includeSubDomains. This was necessary for my tests as I especially wanted to test locally some behavior around subdomain usage for that domain (checking that a RewriteRule was working as expected). But now I understand my initial diagnostic was wrong.

Comment 4

[Dana Keeler (she/her) [:keeler] (out until 16 June)]

I'll close this, then, unless there's another issue I'm missing.