253157 - certificate handling when a certificate exists multiple times in certificate chain

Status: RESOLVED DUPLICATE of bug 171277

(Core Graveyard :: Security: UI, defect)

Description

[christian boesgaard]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040626 Firefox/0.9.1
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040626 Firefox/0.9.1

On http://www.bibliotek.kk.dk/ when "lånerstatus/forny lån" (in left menu) is
clicked i get a box with the following content: "your certificate contains the
same serial number as another certificate issued by the certificate authority.
[...]".

I tried with IE, Safari and Konquroer, and they do not report a problem.

When I look at the certificate chain I can see that the same certificate is at
level 0 and 1. But I fail to understand why firefox treats them as different
certificates.

Reproducible: Always
Steps to Reproduce:
1.
2.
3.

Comment 1

[Josh Birnbaum]

->PSM

Comment 2

[Nelson Bolyard (seldom reads bugmail)]

The problem here is due to the use of improper self-signed server certs,
all of which have the same issuer name and serial number (primarily 
because the number zero gets reused).  


*** This bug has been marked as a duplicate of 171277 ***