471203 - certificate invalid

Status: RESOLVED INVALID

(Firefox :: General, defect)

Description

[Fred Hamad]

User-Agent:       Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB5; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Center PC 4.0)
Build Identifier: Mozilla Firefox

recoverydatabase.net:443 uses an invalid security certificate.

The certificate is only valid for <a id="cert_domain_link" title="WWW.RECOVERYDATABASE.NET">WWW.RECOVERYDATABASE.NET</a>

(Error code: ssl_error_bad_cert_domain)


Reproducible: Always

Steps to Reproduce:
1.Click on icon
2.site comes on
3.alert comes on screen
Actual Results:  
Get the alert

Expected Results:  
Should not have gotten alert

It can be removed from the screen by clicking the x in right hand upper corner.  Sometimes it takes more than just once.

Comment 1

[Daniel Veditz [:dveditz]]

Click on what icon? Your steps are unclear, or rather seem to start around step 3 -- what was the starting point?

If I go to https://recoverydatabase.net/ I do indeed get the above error, which is correct because the site is using a certificate for a different address, www.recoverydatabase.net. There are other bugs discussing whether we should special-case a "www" subdomain, if that's your complaint then this is a duplicate. But I get essentially the same error in IE7 (which you appear to be using) so you must mean something else.

There's a bug on the HTML spew leaking into the dialog, too, but again I don't think that's what you're trying to say.

Comment 2

[Jesse Ruderman]

Loading https://recoverydatabase.net/ should show an error page, but it's a bug if it also shows an alert...

Comment 3

[Matthias Versen [:Matti]]

I get only an error page as expected (Domain mismatch) in FF3.0.5 and SM trunk on win32 and no error dialog.

Comment 4

[timeless]

we have a number of bugs about the extra alert (fwiw, i hit that alert w/ a recent trunk build -- haven't figured out how)

this bug is invalid.

reporter: in the future, please fill in bug fields (e.g. URL).

the server recoverydatabase.net does run a service on 443 and it serves a certificate for <www.recoverydatabase.net> this is not a valid match which is what the error page tries to explain.

Now, in various cases (e.g. fetching a favicon in a version of the browser - you didn't specify what browser version you used) we will also show an alert dialog with the same information (as mentioned, we have bugs for this), however you're reporting a problem about a site which is misconfigured (you should report this to them), and we already know about the dialogs (the average case for the average release should be fixed in some newer release)