430512 - Self-signed cert approval balks on exception (ssl_bar_cert_domain rejection)

Status: RESOLVED INCOMPLETE

Description

[David]

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.4; en-US; rv:1.9b5) Gecko/2008032619 Firefox/3.0b5
Build Identifier: thunderbird-3.0a1pre.en-US.mac

Despite manually approving an exception for a self-signed cert; TBird still refuses to proceed. You get a "ssl_bar_cert_domain" rejection.

Reproducible: Always

Steps to Reproduce:
1. Went to cert manager. Entered <mail.8es.com> in pop-up, & confirm
security exception. Checked.

2.Now have: 
Unknown 
        not stored  mail.8es.com 
entry in place in cert manager.

NOTE: Older, working mozilla cert mgr has names in place for both "unknown" & not stored above.

3.Still get "ssl_bar_cert_domain" rejection when trying to check mail.


Actual Results:  
"ssl_bar_cert_domain" rejection when checking mail.

Expected Results:  
exception approved & works.

This is Bug 408225 in Penelope, but appears to be based here. [Not sure a "dup" applies cross-product....

Comment 1

[David]

Created attachment 317332 [details]
screen grab of cert manager

Comment 3

[Chris Andrichak]

Having this problem with Shredder nightlies.  bug 429187 for Seamonkey is also similar.

How does one add an exception in the prefs panel for IMAPS? The panel in the prefs to add an exception seems to be HTTPS specific -it checks port 443 of the hostname entered, and logs that hostname:port in to the cert db as the exception. For IMAPS, the port can vary.

Comment 4

[Bob Lord]

Is this still an issue with TB3?

Comment 5

[Chris Andrichak]

I'm not having the problem, but I'm not sure I'm in the same situation anymore. THe server cert I'm getting is no longer self-signed.

Comment 6

[Wayne Mery (:wsmwk)]

David, if you still use thunderbird your comment would be useful