1700040 - [Bug] Certificate error in Firefox Nightly for Android but not in Firefox Stable for Android

Status: RESOLVED DUPLICATE of bug 1520297

(Core :: Security: PSM, defect)

Description

[Petru-Mugurel Lingurar [:petru]]

From github: https://github.com/mozilla-mobile/fenix/issues/18561.

Steps to reproduce

Open:
https://servicos.min-saude.pt/utente/
Or:
https://www.autenticacao.gov.pt

Expected behavior

The page should load (at least thats what happens in Firefox Stable for Android (86.1.1 (Build #2015794883))

Actual behavior

Firefox Nightly shows a certificate error

Device information

• Device vendor / model and Android version: Umidigi A5 Pro - Android 9
• Firefox for Android version: ?
  Nightly 210317 17:01 (Build #2015799243)
  AC: 74.0.20210316143123, eeaa43b5a
  GV: 88.0a1-20210313094300
  AS: 73.0.1

Change performed by the Move to Bugzilla add-on.

Comment 1

[Petru-Mugurel Lingurar [:petru]]

The same is happening in latest GVE.
Not sure if this is a bug or new more stricter checks are used now.

Comment 2

[Dana Keeler (she/her) (use needinfo) [:keeler]]

https://servicos.min-saude.pt/utente/
I don't see anything wrong with the certificates this server is sending, and I can't reproduce a failure with a clean profile, so perhaps this has been fixed.

https://www.autenticacao.gov.pt
This website uses a certificate that chains up to the Global Chambersign Root - 2008, which was distrusted in bug 1692094 because the certificate authority that operates it was found to be untrustworthy. It will probably have to get a new certificate or send different intermediates. Presumably it works in an older profile because of a cached intermediate.