Closed Bug 205183 Opened 18 years ago Closed 18 years ago

Security Module fails for HTTPS site without prompting for FIPS password.


(Core Graveyard :: Security: UI, defect)

1.0 Branch
Windows XP
Not set


(Not tracked)



(Reporter: auto102767, Assigned: ssaux)


User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.3) Gecko/20030312
Build Identifier: mozilla-win32-1.4b-installer-sea.exe (12,155,600 bytes), dated 07 May 2003 22:59:16

I have a FIPS password set from Mozilla 1.3, with "The first time its needed"
prompting.  I'm running Windows XP Pro (not SP1) with 1.5G of RAM, no swap file
with an Ethernet/ADSL512 Internet connection.

When I ran Mozilla 1.4b and entered an HTTPS address (any works), a dialog
appeared saying that the security module had failed, no FIPS prompt or anything
else.  IMHO this is a serious fault because I use SLL for purchasing and email,
so I had to downgrade back to Mozilla 1.3 and live with the following fault:

Mozilla 1.3 also had FIPS issues e.g. reliably
crashes Mozilla (if the 1st SSL site visited) because the central frame links to
a CSS file on the HTTPS server and the FIPS passwork prompt causes a deadlock
and crash.  Mozilla 1.4a did not fix this issue, so I downgraded from that too.

Reproducible: Always

Steps to Reproduce:
1. Goto any SSL site.

Actual Results:  
For the SSL site, a dialog appeared saying the security module had failed, it
didn't even ask me for my FIPS passwork.

The security preferences don't allow me to use any useful security functionality
because I hadn't been prompted for my FIPS password.  I don't consider reseting
the password as useful because I would loose all my data, probably for nothing.

Expected Results:  
Prompt me for my FIPS password for the 1st SSL site.

Allow me to use the security preferences.
did you uninstall Moz 1.3 before installing 1.4b ?
SSL-related issues are PSM, not browser.
Assignee: mstoltz → ssaux
Component: Security: General → Client Library
Product: Browser → PSM
QA Contact: carosendahl → bmartin
Version: Trunk → 2.4
No I didn't, at first (IMHO I shouldn't have, any uninstall should be automatic,
if required).

Next try I uninstalled Mozilla and tried again, it still failed.

I had enough and reinstalled Mozilla 1.3 and it got confused a few times before
it rediscovered my profile, so I could see my bookmarks again, scary as I
thought I had lost all my bookmarks initially.

*** This bug has been marked as a duplicate of 200775 ***
Closed: 18 years ago
Resolution: --- → DUPLICATE
Product: PSM → Core
Version: psm2.4 → 1.0 Branch
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.