496121 - Improve the PKI error page when no valuable certs can be found for this website

Status: RESOLVED DUPLICATE of bug 465330

(Core Graveyard :: Security: UI, defect)

Description

[Henrik Skupin [:whimboo][⌚️UTC+1]]

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.2a1pre) Gecko/20090602 Minefield/3.6a1pre ID:20090602050429

The current error page users will see when trying to access a website which requires a PKI isn't helpful. We don't give any guidance so the user will not know why the page load was not successful. Right now we show up the following error:

Secure Connection Failed
An error occurred during a connection to www.startssl.com.

SSL peer was unable to negotiate an acceptable set of security parameters.
(Error code: ssl_error_handshake_failure_alert)
    *   The page you are trying to view can not be shown because the authenticity of the received data could not be verified.
    *   Please contact the web site owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.

To help users in installing and choosing a PKI we should improve the error page and add a link to the PKI config dialog or even something similar we have for the self-signed certs error page. We could prompt for a PKI cert if none can be found before throwing this error.