1479074 - Expired certificates reported as "Secure Connection Failure" instead of "The Connection is Untrusted"

Status: RESOLVED WORKSFORME

(GeckoView :: General, defect, P1)

Description

[Manuel Martin]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.75 Safari/537.36

Steps to reproduce:

Open https://expired.badssl.com


Actual results:

It is reported as a secure connection failure.


Expected results:

Firefox Android reports it as an Untrusted connection.

Comment 1

[Chris Peterson [:cpeterson]]

I think this problem will be fixed by bug 1451476.

Comment 2

[Manuel Martin]

See my comment on: https://bugzilla.mozilla.org/show_bug.cgi?id=1479064#c2

Comment 3

[Chris Peterson [:cpeterson]]

Resetting bug priority so it will be re-triaged.

Comment 4

[Sorina Florean [:sflorean]]

Thanks for the report!

I was able to reproduce this issues with Nokia 6(Android 7.1.1) on Release 61.0 and latest Nightly build 63.0a1 following the steps from the description. Marking the bug as NEW.

Comment 5

[Chris Peterson [:cpeterson]]

Focus and Fennec have their own network error pages, so the wording may be different. We'd like to consolidate the error pages, but that hasn't happened yet. In Focus 4.2 (WebView), I get the "Secure Connection Failure" message. In Fennec 62 Nightly, I get "The Connection is Untrusted".

In Focus Nightly with GeckoView, however, the page either never finishes loading or I get an "Invalid address" error message. This seems to be the case for all the expected failure pages on badssl.com in Focus Nightly with GeckoView. Definitely a worse user experience that we should fix, but at least we're not connecting to a page with an expired certificate.

Comment 6

[David Bolter [:davidb] (NeedInfo me for attention)]

Thanks for filing this bug. I think this fixed via https://bugzilla.mozilla.org/show_bug.cgi?id=1451476#c25 please reopen if you disagree.