211055 - Invalid certificate dialog box appears

Status: RESOLVED WORKSFORME

(Toolkit :: Downloads API, defect)

Description

[Joseph Wang]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4b) Gecko/20030313
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4b) Gecko/20030527 Mozilla Firebird/0.6

Look at https://www.gnacademy.org/

Then look at https://www.gnacademy.org:10000/

I get an error message saying that it can't proceed because it has a certificate
with the same issuer name and certificate number as another certificate.  

I have a self signed certificate on a personal web site to keep
script kiddies out.  firebird should respond with an advisory
error and should have a way to load in the web page

Reproducible: Always

Steps to Reproduce:
1. https://www.gnacademy.org/ - accept permanently
2. https://www.gnacademy.org:10000/
3.

Actual Results:  
You have received an invalid certificate.  Cannot load in the page.

Expected Results:  
The dialog should allow you to load the page.

Comment 1

[Philip White]

I am not quite sure I understand your problem.  It's either that (1) Firebird
refuses to quietly load the second link even after accepting the first link's
certificate, or (2) that Firebird completely refuses to load the second link
after accepting the first link's certificate.

#1:
This is not a bug because port 80 and port 10000 have different security
certificates.  If you view the details of the first one, it was issued by
"Globewide Network Academy".  The second one, though, was issued by "Webmin
Webserver on confucius.gnacademy.org".  Furthermore, the checksums of the
certificates are different.
So, accepting the first certificate is not supposed to grant you access to the
second page.  Firebird is doing everything correctly.

#2:
WFM, version 0.6 on Linux.
Now, the question is how do I remove your certificate from my list of trusted
organizations.  Firebird's options/preferences don't yield this functionality.  Heh.

Comment 2

[Erik]

Josepg, performing the steps given in the bug report has the following effect:

- after step 1 I get a message box {Website certified by an unknown authority}
=> accept permanently

- after step 2 I get another message box {Website certified by an unknown
authority} => accept permanently => the page gets loaded fine

So if I get you correct you#re saying that you have an additional (third)
certificate already loaded which probably hinders the second certificate to get
accepted?

@Philip: in latest nightlies you've got the possibility to remove accepted
certificates in Tools -> Options -> Advanced -> Certificates -> Manage certificates

Comment 3

[Simon Paquet [:sipaq]]

No response from reporter.
-> WFM

Comment 4

[René Nieuwburg]

I checked the latest Firefox (Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US;
rv:1.8b2) Gecko/20050408 Firefox/1.0+) and can confirm this error. When I try to
access on the LAN my router I get: 

"You have received an invalid certificate. Please contact the server
administrator or email correspondent and give them the following information:

Your certificate contains the same serial number as another certificate issued
by the certificate authority. Please get a new certificate containing a unique
serial number."

and the OK button. There is no other option then to fall back on IE. 

When I check the same page with Mozilla (Mozilla/5.0 (Windows; U; Windows NT
5.0; en-US; rv:1.8b2) Gecko/20050314, I get a different dialogue, with a button
to examine the certificate and to either accept the certificate
permanently/temporary or reject it. 

Please restore this Mozilla code so I don't need to switch back and forth browser.