499700 - Add exception dialog blocked by modal invalid certificate error dialog

Status: RESOLVED WORKSFORME

(Core Graveyard :: Security: UI, defect)

Description

[Keith Tyler]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11

Cannot add a security exception for an intranet site with a self-signed certificate because the Get Certificate is blocked by the same "site has invalid certificate" failure that prevents viewing of the site.

The Get Certificate routine should be exempt from the certificate security checking. That is after all the whole point.

The intranet site uses a nonstandard internal TLD, if that makes a difference.

I also get the "certificate is not trusted" popup when I click the Add Exception button on the Secure Connection Failed error page.



Reproducible: Always

Steps to Reproduce:
1. Access intranet site with self signed cert : Get SCF page
2. Click Add Exception : get "invalid security certificate" alert, then the expected "Add Security Exception" dialog
3. Click Get Certificate : again get the "invalid security certificate" alert, and certificate status box just says "No information available"
Can't get beyond that point; can't add the exception.


Expected Results:  
The Get Certificate should not fail because the certificate is invalid, since the whole point of the Get Certificate button is, typically, to *get* an invalid certificate for personal review and acceptance. FF should allow the end user to make the decision whether or not to accept any certificate.

Comment 1

[Keith Tyler]

I tried the same site in v3.0.10 of FF for Linux and I did not run into this problem.

Comment 2

[David Delony]

This happened to me when I was running Litmus. 

Build info: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.2a1pre) Gecko/20090709 Minefield/3.6a1pre

Comment 3

[Johnathan Nightingale [:johnath]]

Hmm.  The Add Exception dialog box should not cause that invalid cert dialog to popup, but there might be a race with the original page.  We had this problem once historically with favicons, where they would be fetched by a separate process and cause the dialog to appear, but we fixed that one. I'm not aware of another load that should be happening here, but I'll mark it as confirmed and shuffle it to PSM for future investigations.  Changing the summary a bit, too.

Comment 4

[Evgeny]

I'm experiencing this as well on Firefox 3.5.2, running on XP x64 SP2. I CANNOT view pages with invalid certificates at all, because it won't let me add an exception.

Comment 5

[Julien Wajsberg [:julienw]]

I believe this was fixed someday, I can't reproduce this.

Comment 6

[Kai Engert (:KaiE:)]

reassign bug owner.
mass-update-kaie-20120918