449099 - Add UI to override SSL certificates without error pages

Status: RESOLVED DUPLICATE of bug 404486

(Core Graveyard :: Security: UI, enhancement)

Description

[Kevin Onken]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1

Per Bug 399275, we have per-site override for SSL certificates.

If a user has error pages disabled, the error page UI for adding certificate exceptions is not available. A prompt with only the error code/description is used instead. 

The user is then left with the (more) manual method of opening the Certificate Manager, clicking Add Exception, copying and pasting the URL, getting the cert, and adding the exception.

It would be better if the prompt were changed to allow adding an exception, if browser.xul.error_pages.expert_bad_cert is set to true. This provides an easier path to add cert exceptions with error pages disabled. 

I propose the following example prompt/confirm change, in pseudo-code:

if (browser.xul.error_pages.enabled == false)
{
	if (browser.xul.error_pages.expert_bad_cert == true)
	{
		confirm('server.tld uses an invalid security certificate. Add an exception for this certificate?' + whateverElse);
	}
	else
	{
		prompt('server.tld uses an invalid security certificate.' + whateverElse);
	}
}

Reproducible: Always

Steps to Reproduce:
1. Set browser.xul.error_pages.enabled = false.
2. Open https://webmail.cdis-ts.ch/login.php
3. Marvel at the error prompt.
Actual Results:  
User is displayed an error.

Expected Results:  
User is displayed an error and prompted to add a cert exception.

Comment 1

[Jesse Ruderman]

This is a dup of bug 404486.  Don't expect the override to be a single click, though.