268849 - IE accepts secure certificate fine, but Firefox barks at me when visiting my site.

Status: RESOLVED DUPLICATE of bug 266013

(Core Graveyard :: Security: UI, defect)

Description

[Brock Noland]

User-Agent:       Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0

I have a personal website https://www.brocknoland.com (must use www because of 
DNS issue). I have a SSL cert from GoDaddy.com. It works fine in IE with SP2 
(have not tried SP1) but in Firefox it says it is not valid. 

Someone may know if this is related: in service pack 2 there is CA Root update 
for IE.

Reproducible: Always
Steps to Reproduce:
1. Open https://www.brocknoland.com in IE, it works.
2. Open https://www.brocknoland.com in FireFox, it does not like certificate.
3.

Actual Results:  
Firefox tells me my certificate is bad.

Expected Results:  
Not told me that my certificate was bad becuase its a valid certificate from 
GoDaddy.com.

Comment 1

[Brock Noland]

Attachment: Firefox barking at me about my certificate

Comment 2

[Brock Noland]

Attachment: IE information about certificate

Since IE does not bark at it me I cannot show you IE not barking at me. Thus I
have just included a copy of IE's information about my Certificate. For thus of
you on Linux.

Comment 3

[Oliver Klee]

Confirming on Firefox 1.0 and Mozilla 1.7.3.

Over to PSM.

Comment 4

[Brock Noland]

I have confirmed that Opera 7.54 does not have this problem. Opinion: Personally
I disagree with this being moved to Severity of Minor. If users cannot verify
certificates then what good is the site verifcation function of SSL? 

Of course there maybe more important security items to fix.

Comment 5

[Nelson Bolyard (seldom reads bugmail)]

Your server is misconfigured.  It is only sending out its own server cert.
It is not also sending out the CA cert for starfield, which is required 
by the SSL protocol.  When you have configured your server to send out the
entire certificate chain, as required by the standards, you will find that
mozilla works just fine.

*** This bug has been marked as a duplicate of 266013 ***