Closed Bug 1585285 Opened 6 years ago Closed 6 years ago

Enterprise CA Root certificate not loaded before startup page fast enough.

Categories

(Core :: Security: PSM, defect)

Product:
Core
Component:
Security: PSM
Version:
68 Branch
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1578882

People

(Reporter: oliwer.olup, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36

Steps to reproduce:

Setting startup-homepage to local intranet site that uses Enterprise Root CA's.
Enableing security.enterprise_roots.enabled = TRUE.
Starting FireFox.

Actual results:

When setting local intranet homepage in FireFox to startup page, that uses Enterprise Root CA certificates, the page loads before FireFox starts to use Enterprise CA certificates. Because of that, I get a warning that this pages is not trusted.

After hitting refresh or homepage button the page loads normally. If not setting startup page and waiting few seconds, the page loads normally.

Expected results:

After opening FireFox, the CA certificates should load before the homepage is started.

Bugbug thinks this bug should belong to this component, but please revert this change in case of error.

Component: Untriaged → Security: PSM
Product: Firefox → Core

Does it work as expected in Firefox 70 or ESR 68?

Flags: needinfo?(oliwer)

Haven't tested yet on FireFox 70, but will.

FireFox 69 didnt work.
FireFox 68 ESR didnt work.

Some info:

  1. Tested on Windows Server 2016 and 2019.
  2. Internet is disconnected only local intranet.
Flags: needinfo?(oliwer)

Update:

Just tested FireFox 70.0.b11 and first impression is that it works much better.
Startup page loads now as it should. No certificate warnings.

I will widen the testing base and involve more users, but it looks like the problem is not appearing in FireFox 70.0b11.

Tested with fresh install onto the server and tested with Refresh Firefox, where old version was uninstalled first and new version installed after reboot.

Flags: needinfo?(dkeeler)

Thanks! What version of ESR 68 did you use? It should work in 68.2.0 if this is bug 1578882.

Flags: needinfo?(dkeeler) → needinfo?(oliwer)

Thank you! I used the latest versions that are availabel. FireFox 68.1.0ESR and 69.0. Can't find 68.2.0ESR just yet.
Yes, it's is the same bug 1578882. Wierd was searching similar on bugzilla, but quess my search words where bit different.

Flags: needinfo?(oliwer)

Thanks!

Status: UNCONFIRMED → RESOLVED
Closed: 6 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.