1515608 - consider allowing end-entities to be their own trust anchors (basically revert bug 1294580)

Status: RESOLVED FIXED

(Core :: Security: PSM, defect, P1)

Description

[249.shashi]

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36

Steps to reproduce:

1. Installed localhost certificated and added to trusted list and availabled in Keychains.
2. Tested in Chrome and Safari browsers and these browsers accepting that localhost trusted certificate but it is failing with Mozilla.
3. For this followed about:config and enabled security.enterprise_roots.enabled boolean value to true but this is not working Mac mozilla browser, where as same process working in windows mozilla browser 

Tested this with Mozilla 63 and latest version 64 also.



Actual results:

Mozilla browser detecting them as untrusted site. Even though Safari and chrome browsers are accepting that as trusted.


Expected results:

Localhost trusted certificates available in Mac OS keychains should be accepted by Mozilla browser. And it should not show the site as untrusted.

Comment 2

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Attachment: bug 1515608 - allow end-entity certificates to be trust anchors for compatibility r?jcj

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/143fe24df3a9
allow end-entity certificates to be trust anchors for compatibility r=jcj

Comment 4

[Daniel Varga [:dvarga]]

https://hg.mozilla.org/mozilla-central/rev/143fe24df3a9