1695723 - [Bug] Visiting https://browserbench.org/ shows a "Secure Connection Failed" error

Status: RESOLVED INVALID

(Core :: Security: PSM, defect)

Description

[Kevin Brosnan [Ex-Mozilla]]

From github: https://github.com/mozilla-mobile/fenix/issues/18214.

Steps to reproduce

Attempt to visit https://browserbench.org/.

Expected behavior

The site loads in the browser tab.

Actual behavior

Fenix shows a "Secure Connection Failed" error. However, if I go to Advanced > Accept the Risk and Continue, I am able to visit the site -- clicking on the padlock icon in the address bar does not show any errors/warnings about the site's certificate.

This does not seem like an issue with the site itself, since I was able to visit the site with Google Chrome (with no issues).

"Secure Connection Failed" error:

After going to Advanced > Accept the Risk and Continue and clicking on the padlock icon in the address bar (which shows there is a Secure Connection, despite what the previous warning showed):

Device information

• Device vendor / model and Android version: Oppo Reno 2 (Android 10)
• Firefox for Android version: Firefox Nightly 210227 17:01 (Build #2015795787), Firefox Beta 86.0.0-beta.5 (Build #2015793427)

Change performed by the Move to Bugzilla add-on.

Comment 1

[Kevin Brosnan [Ex-Mozilla]]

GV reports

Boom! Something bad happened.
ERROR_CATEGORY_URI: ERROR_UNKNOWN_HOST

Comment 2

[Kershaw Chang [:kershaw]]

This feels like a PSM bug. Please correct me if I am wrong. Thanks.

Comment 3

[Dana Keeler (she/her) [:keeler]]

This is expected. The root that issued that certificate is no longer trusted. See bug 1670769.

Comment 4

[Dana Keeler (she/her) [:keeler]]

It looks like the operators of that site could replace the intermediate they're using with one that doesn't chain to a distrusted root (e.g. "Baltimore CyberTrust Root").