crlite false-negative on bugs.kali.org
Categories
(Core :: Security: PSM, defect)
Tracking
()
People
(Reporter: earthlng, Unassigned)
Details
User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Firefox/78.0
Steps to reproduce:
Set security.pki.crlite_mode = 2 and load https://bugs.kali.org/
You also need to have security.remote_settings.crlite_filters.enabled=true and let Firefox run for a while to download the CRLite data
Actual results:
Secure Connection Failed due to a SEC_ERROR_REVOKED_CERTIFICATE
Expected results:
Site should've loaded.
When I disable the crlite_mode pref and let Firefox check the OCSP instead (even in hard-mode ie security.OCSP.require=true), the cert doesn't seem to be revoked
|
||
Comment 1•4 years ago
|
||
The Bugbug bot thinks this bug should belong to the 'Core::Security: PSM' component, and is moving the bug to that component. Please revert this change in case you think the bot is wrong.
|
||
Comment 2•4 years ago
|
||
This is a known infrastructure issue. CRLite has been set to telemetry-only by default on all branches while that issue is addressed.
Description
•