1853167 - Can't view website certificate if using a web proxy with authentication

Status: UNCONFIRMED

(Core :: Networking: Proxy, defect, P2)

Description

[Heiko]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 Edg/116.0.1938.76

Steps to reproduce:

1. Configure a proxy that requires authentication.
2. Open https://google.de

Actual results:

I can view the certificate like when the proxy don't requires authentication or is not used.

Expected results:

I can't view the certificate of the page and the locker symbol is missing.

Comment 1

[Heiko]

Additional notes:

• This is reported from an Edge browser window. The User Agent string is wrong.
• The Firefox version where I see the problem is FF ESR 115.2.0
• Our proxy supports http and https. The authentication uses NTLM.

Comment 2

[Heiko]

Attachment: google_zertinfo_NoProxyAuth.png

Comment 3

[Heiko]

Attachment: google_zertinfo_ProxyAuth.png

Comment 4

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Core::Security: PSM' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 5

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Are you connecting to the proxy over https or http?

Comment 6

[Heiko]

(In reply to Dana Keeler (she/her) (use needinfo) (:keeler for reviews) from comment #5)

Are you connecting to the proxy over https or http?

Where can I see this?

Comment 7

[Dana Keeler (she/her) (use needinfo) [:keeler]]

It would depend on the proxy configuration, I guess.

Comment 8

[Heiko]

(In reply to Dana Keeler (she/her) (use needinfo) (:keeler for reviews) from comment #5)

Are you connecting to the proxy over https or http?

We are using https connection to the proxy for https sites and http for http sites.

In the proxy settings we have set "use system proxy". But I have the same behavior when setting the proxy manually and checking the box "use this proxy for https too".

Comment 9

[Valentin Gosu [:valentin] (he/him)]

I assume this has a similar cause to bug 1853171 and there's a confusion between the proxy end-server cert?.
I thought Dragana fixed a similar issue last year, but I can't find the bug right now.

Comment 10

[BMO Automation]

Moving bug to Core/Networking: Proxy.

Comment 12

[Heiko]

Hi Kershaw,
what Info is required?

Comment 13

[Heiko]

I can confirm that this still happens in Firefox 115.10.0esr (64-Bit). All https websites that are accessed through the proxy with authentication say "The websites does not provide a certificate". (But they are marked as secure.)