1513868 - The old UI of SEC_ERROR_OCSP_FUTURE_RESPONSE error is displayed even though the new certificate error pages are enabled

Status: RESOLVED DUPLICATE of bug 1491498

(Firefox :: Security, defect)

Description

[Carmen Fat [:cfat] - Ecosystem QA]

Attachment: old future error.gif

[Affected versions]:
- Firefox Release 64 and above

[Affected Platforms]:	 	
- All Windows
- All Mac
- All Linux

[Prerequisites]:
- Have  "browser.security.newcerterrorpage.enabled"  pref set to "true" in "about:config" page.
- Set the system date and time in the past (e.g. year of 2015).

[Steps to reproduce]:
1. Open the browser with the profile from prerequisites.
2. Navigate to www.wikipedia.org website.
3. Observe the SEC_ERROR_OCSP_FUTURE_RESPONSE error page.

[Expected result]:
- The new version of the error page is displayed: https://mozilla.invisionapp.com/share/57NZ8GWJCEZ#/screens/319133078

[Actual result]:
- The older version of the error page is displayed.

[Notes]:
- If the date is set even further in the past (e.g. the year of 1990), the following error page is displayed: MOZILLA_PKIX_ERROR_NOT_YET_VALID_CERTIFICATE
- Please see the attachment.

Comment 1

[Liz Henry (:lizzard) (relman/hg->git project)]

If we want to make this a priority in particular languages for translation I think that will take some discussion. Tony, what are your thoughts here?

Comment 2

[Tony Cinotto [:tcinotto] (UTC-8)]

(In reply to Liz Henry (:lizzard) (needinfo? me) from comment #1)
> If we want to make this a priority in particular languages for translation I
> think that will take some discussion. Tony, what are your thoughts here?

Thanks Liz we spoke with Flod in the #certs-error slack channel and it seems like he has a strong confidence that for actual release in 66 we have enough time for translators to make progress. For this shield study on Jan 7th we are discussing about just targeting certain locales where the translations are already completed. romain is out until the new year, where we will discuss with him.

Comment 3

[Johann Hofmann [:johannh]]

This is essentially a dupe of bug 1491498. We are currently not able to make OCSP (revocation) error pages display the same information as other cert error pages (which is bug 1486551 which I'm trying to solve in a timely manner). Thus, they also don't show the clock skew warning.