255140 - Allow access to certificates rejected by NSS

Status: RESOLVED DUPLICATE of bug 943937

(Core Graveyard :: Security: UI, defect)

Description

[timeless]

We need to visit jpmorgan.com

Unforunately, mozilla helpfully refuses to allow such a visit saying:

Could not establish an encrypted connection because certificate presented by
mm.jpmorgan.com is invalid or corrupted. Error Code: -8101

(bug 255136)

At the very least, I should be able to click a button or widget and view the cert.

i shouldn't have to pull out my debugger, a copy of lxr, and the nss reference
in order to find out precisely how the certificate was misconfigured.

Note: IE will connect to that server, and is immediately wisked away to yet
*another* server.

Comment 1

[Kai Engert (:KaiE:)]

I suppose this is a bug at the NSS SSL level.

Comment 2

[Kai Engert (:KaiE:)]

As listed here
  http://www.mozilla.org/projects/security/pki/nss/ref/ssl/sslerr.html
-8101 means:
  SEC_ERROR_INADEQUATE_CERT_TYPE

Comment 3

[Nelson Bolyard (seldom reads bugmail)]

This bug is asking for improved UI in an error case.  NSS doesn't do UI. 

Comment 4

[timeless]

first, kaie: i was well aware of that when i filed the bug note the specific other bug referenced in it.

nelson: fair enough. are you sure that the certificate for the site is available for psm to display? and that psm can actually figure out what's wrong from what nss has told it?

Comment 5

[Kai Engert (:KaiE:)]

reassign bug owner.
mass-update-kaie-20120918