SSL certificate: automatic selection does not work in Firefox version 70
Categories
(Core :: Security: PSM, defect)
Tracking
()
People
(Reporter: fasinfo, Unassigned)
Details
User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:70.0) Gecko/20100101 Firefox/70.0
Steps to reproduce:
We have the problem of selecting security certificates in the new version of Firefox after update to version 70
There were no problems with the choice of certificates for secure connections prior to the update. We use the monitoring systems of zabbix and Billing. They have different security certificates.
Prior to the upgrade, the required certificate was automatically selected from the list of established certificates by its signature. After an update, the browser always substitutes the first certificate, and it is naturally not always suitable for the right connection.
If you turn on the manual mode of choosing a certificate, then each time you need to read into his signature to choose the right one, then it works. But at the same time there is a "tick" about the browser remembering my choice and it is ignored. It's very uncomfortable.
And this problem is now available to everyone who has updated to version 70 (now 70.0.1)
On Google Chrome browsers, Opera has no such problems. But I'm used to working at Firefox.
Actual results:
Several certificates are installed in the browser. I had to abandon the automatic selection of the certificate, because it does not work at all. In manual mode, you have to read the contents of the certificate every time to make sure that it is intended for this resource (CN parameter). At the same time, the browser stopped remembering my choice, and each time the first certificate is selected by default. Automatic selection does not work, and does not remember manual selection.
Expected results:
The certificate should be selected automatically by CN parameter, as it was before the upgrade to version 70 (70.0.1), and remember the manual selection for each site separately. Now it has stopped working. On other browsers (Chrome, Oper) everything works with the same certificates without problems.
Description
•