1631667 - Wildcard SSL Security Warning False Positive

Status: RESOLVED DUPLICATE of bug 1184059

(Core :: Security: PSM, defect)

Description

[Mike]

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36

Steps to reproduce:

Browse to https://smith-marion--co-.axomo.com/

Actual results:

There is an SSL warning that the certificate ins't valid

Expected results:

The certificate is valid it should browse to the site without the warning

See these websites using the same SSL
https://sea-elephant.axomo.com/
https://workfront.axomo.com/
https://purple.axomo.com/
https://namify.axomo.com/

I expect it is because the person who created this site put multiple dashes in a row

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

Bugbug thinks this bug should belong to this component, but please revert this change in case of error.

Comment 2

[Johann Hofmann [:johannh]]

Could be that we're not parsing this correctly?

Comment 3

[Dana Keeler (she/her) [:keeler]]

Labels must not end with a hyphen: https://searchfox.org/mozilla-central/rev/d2cec90777d573585f8477d5170892e5dcdfb0ab/security/nss/lib/mozpkix/lib/pkixnames.cpp#2013