498376 - "site not encrypted" when i access my ssl / client certificate secured websites rss feed that has a <link> tag

Status: VERIFIED DUPLICATE of bug 337897

(Firefox Graveyard :: RSS Discovery and Preview, defect)

Description

[[e-mail]]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.0; de; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11 (.NET CLR 3.5.30729) Creative ZENcast v2.00.07
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.0; de; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11 (.NET CLR 3.5.30729) Creative ZENcast v2.00.07

Hello,

i have a SSL secured website where the clients use client certificates for authentication. I have a rss 2.0 feed on that site. When i access it ff tells me the site is not encrypted. This is false, it is encrypted.
I found out that ff only says the site is not encrypted when i have a link tag with a valid url, which is required for an rss feed.
When i have this link tag with a valid uri like <link>http://google.de</link> then i found in the error console of ff the following:

Fehler: malformed URI sequence
Quelldatei: file:///C:/Program%20Files%20(x86)/Mozilla%20Firefox3/components/FeedWriter.js
Zeile: 519

and

Fehler: uncaught exception: [Exception... "'[JavaScript Error: "malformed URI sequence" {file: "file:///C:/Program%20Files%20(x86)/Mozilla%20Firefox3/components/FeedWriter.js" line: 519}]' when calling method: [nsIFeedWriter::writeContent]"  nsresult: "0x80570021 (NS_ERROR_XPC_JAVASCRIPT_ERROR_WITH_DETAILS)"  location: "JS frame :: chrome://browser/content/feeds/subscribe.js :: SH_writeContent :: line 51"  data: yes]

If i have a link tag without a valid uri like <link>hello</link> then everything works fine and ff says the website is encrypted. But then the rss feed is not rendered by the rss feed rendering engine (dont know what its called), but it is rendered as a normal html page.

So i think the problem is malformed URI sequence error. It causes ff to say the site is not encrypted.
But why is http://google.de a malformed URI sequence?

I checked my rss feed with the ie and opera and both say the rss feed is encrypted.

Reproducible: Always

Steps to Reproduce:
1. have a ssl site with client certificates
2. have a rss feed like this:
<?xml version=\"1.0\"?>
<rss version="2.0">
<channel>
<title>title</title>
<link>https://google.de</link>
<description>description</description>
</channel>
</rss>
3. visit the rss feed
Actual Results:  
ff says the site is not encrypted and i get the two errors mentioned above.

Expected Results:  
ff should say the site is encrypted and it should not throw those two errors.

Comment 1

[[e-mail]]

I found out that the two errors from the error console are not related to the 'not encrypted' problem. It was a problem with the actual rss feeds content.
Now i dont see any errors at all, but ff keeps telling me the page is not encrypted.

Comment 2

[[e-mail]]

I looked at the ff console and found the following:


## mpc_extractStreamOnDoc (https://bla.bla/rss.php)
## mpc_extractStreamInternal2 (undefined, [object XPCNativeWrapper [object HTMLDocument]])
## ##  mpc_extractStreamInternal2 0ms
## mpc_extractStreamInternal (https://bla.bla/rss.php, [object XPCNativeWrapper [object Window]])
## mpc_extractStreamInternal2 (undefined, [object XPCNativeWrapper [object HTMLDocument]])
## ##  mpc_extractStreamInternal2 0ms
## mpc_extractStreamInternal (data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAASElEQVQ4jWNgGAUM/xkY/uPCJJmDphGG8VqAYQkuCTSDcarDagi6ZlxieMMF
m2a8BuCzhSjNRCgkbDO20CY2ev/jwIRtH5oAAKazfoKPSPbRAAAAAElFTkSuQmCC, [object XPCNativeWrapper [object Window]])
## mpc_extractStreamInternal2 (undefined, [object XPCNativeWrapper [object HTMLDocument]])
## ##  mpc_extractStreamInternal2 0ms
## mpc_extractStreamInternal (data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAADRUlEQVQ4jSXT60/VdQDH8c/vd7AlI4EHtjW0WCs1i7U2i8u54GWxYDVtpkab
umX5JLs86oLYEgRDQjAIBbsYayTmCjDQMwsrtcgxUBdWkNyyJDkCB9jRw+/8vu8e8OD9D7y2tyTJiUFX/wipWxuJe/pzSo9fwiVGNDzB2ewsei0xa9u4Eq5sIpYYl5AkxRwwwLriU2hTEHtbFwte/I6//p0CEyPy
Wy/XE+JxJYzlwbVExBIhxTFkCwE4jsMDO9rRtk60vQfl/0jxN5fBgInBUE4OUVnEPCJqWUzKw5glBiVkXCAG3sIO7M0/Y2/vxH7hHJv2dwMOAFfXr2NGcWAJVx6mLfGPRJ/tQeACLkVNl9H6IHEvXcB+/nvyqzpx
MXAbfnloGT/dcwctS5JpT02mK2kew7botYT6h29igNFwhGU72tBzp1mwOUiw5xoGqGs5zOI3UtFH6Xhq/ajay/yyJ8h6OY19DyeipVs+43jHFXANE1NRjpwZoG/kJi6GklN1qOgRPPVePIeyUG06qs3EOpCFqrOx
9q5GCzceJWntx6x+vZE9DR1zajic6fsV+6370OHHUV06qk/HqvFh1fhQZQZWuR9rbwAtzW9g0YYvuDPvU5KfOsTgaBhjDMOhayypfxbVpGEfzMQ+6EU1GdgferEq/djlflSWge7P3U/Glk/Y+G4rr1X9QE/fOC4G
g8vY1Bg5R1/BqkhDtT5U7Z2r0o/2+dEeP2o8fZGxcRcDzE72Mnq1mYGeWm5N3wBgNuaQ2/gqVsVyVJ2BqrzY5ZnofR8q8SFcmP7vIt3NGQw2x/N3mxj52uZK03LCoT/BxPh9dIi7SrNRVSaeD3zYZX5UEkC7A+i2
M0NXYzoT3wpz3sY5G0+kYz43jon+5jyMMZgYPHhgAypbgSq8qNTPvN1rsHYF0FRogD8aUrgVTCIcTGCqLZHJ1kRmTqRw/atHITpNxDEsLslDpZnYJatQqQ/7vZVopx85McPgya2EvkxgsuVuwq0LmTmRQvjYvYyf
K8QATRdO4nnzMaxiL56ibLQrgAoC6J01c0c6MyHGzhcy0b6WcMuTTLQ/Q6S7mqgT4dLwAIvezkUFK7ALs1HhSrTThwpWIUn/A1g/hnpCRmiJAAAAAElFTkSuQmCC, [object XPCNativeWrapper [object W
indow]])
## mpc_extractStreamInternal2 (undefined, [object XPCNativeWrapper [object HTMLDocument]])
## ##  mpc_extractStreamInternal2 0ms
## mpc_extractStreamInternal (data:image/bmp;base64,Qk04AwAAAAAAADYAAAAoAAAAEAAAABAAAAABABgAAAAAAAIDAAASCwAAEgsAAAAAAAAAAAAA////kXASkXETknEUknIVknIWknIWknIWknEV
kXAUkXATkXATkXARkW8QkG8P////kXATkXEUw5cdw5gfw5kgxJohxJkgxJkgxJkgw5kfw5gew5ccwZYawZUYkXAQkG8PkXEWw5kfx58s////////////////////////////3cWBw5gfw5gdwpcawpUYkXAQk3MX
xJsixZsk7uLA9/Hg////////7uLA9/Hg////////3cWBxJkgw5gdwpYbkXASk3QaxZwmxp0pxp4r0bBS////////x6AuxJoj7uLA////////xJojxJkgwpcdkXATlHUcxp0px58sx6Au0bBS////////yKIxyKEw
3cWB////////xZwmxZoixJkfkXEVlHYex54syKAvyaEy0bBS////////yqM1wJMT5tSh////////xp0oxZwlxJkhkXIWlHYfyKAvyaIyyaI10bBS////////7uLA8unQ////////zalCxp4qxZ0nxJojknIXlXch
yKAwyaI0yqQ30bBS////////////////////1bdiyKAwx58txp0oxZskknMXlnciyKExyqQ1y6Q50bBS////////zKc/zalC////////0bBSyJ8txp0pxZslknMYlXgiyaEyyqQ2y6U50bBS////////zKhAy6c9
7uLA////3cWBx58uxp4pxZslk3MZlngiyKIxyqM1yqU50bBS////////zKg/xJoj9/Hg////3cWBx6Atxp0pxZslk3MZlXchyKEwyqQ27uLA+fXo////////7uLA9/Hg////////yKEyx58sxZwoxZskk3MYlHYg
yKAuyqQ2////////////////////////////1bdiyJ8ux54qxZwmxJsjknMXlHYelHchyKAvyaIyyaI0yqM1yaQ2yaM2yaI0yaIyyKEvx54sxp0oxZwlk3MZknIW////lHYflXchlXgilnkkl3kllnkllnkllnkk
lXcjlXchlHYflHUck3QaknMX////AAA=, [object XPCNativeWrapper [object Window]])


So maybe this is related to https://bugzilla.mozilla.org/show_bug.cgi?id=477118 ?

Comment 3

[Eddy Nigg (StartCom)]

What is the sites URL?

Comment 4

[Phil Ringnalda (:philor)]

I doubt it's related to bug 477118, since that was a regression from 3.0.x. If what you're now saying is "the preview page for feeds served over https doesn't show https indications like statusbar locks and color in the location bar" then it's a duplicate of bug 337897.

Comment 5

[Honza Bambas (:mayhemer)]

(In reply to comment #4)
> I doubt it's related to bug 477118, since that was a regression from 3.0.x. If
> what you're now saying is "the preview page for feeds served over https doesn't
> show https indications like statusbar locks and color in the location bar" then
> it's a duplicate of bug 337897.

Agree. philli, if you have doubts or more info, please provide it.

Comment 6

[Tanner M. Young [:tmyoung]]

Verified Duplicate.