1663302 - Conflicting error messages on self-signed cert

Status: RESOLVED DUPLICATE of bug 1524323

(Core :: Security: PSM, defect)

Description

[bfox200012]

Attachment: Screenshot of the issue

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.83 Safari/537.36 Edg/85.0.564.44

Steps to reproduce:

Visit https://melonds.kuribo64.net/comments.php?id=124, which uses an expired self-signed cert.

Actual results:

The visible error message displays:

Websites prove their identity via certificates, which are valid for a set time period. The certificate for melonds.kuribo64.net expired on 6/11/2019.

However, the error code correctly specifies:
Error code: MOZILLA_PKIX_ERROR_SELF_SIGNED_CERT

Expected results:

Self-signed cert errors should take priority over expired cert errors, as users are much more likely to dismiss an expired cert warning than a self-signed cert error

Comment 1

[bfox200012]

I should note, this priority issue also applies to websites that throw SEC_ERROR_UNKNOWN_ISSUER as illustrated with https://preact-cli.badssl.com. I wouldn't be surprised if the same priority issue occurs with expired certs with other issues.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Bugbug thinks this bug should belong to this component, but please revert this change in case of error.