500312 - ssl_error_bad_cert_domain when using SSL to check IMAP mail on Seamonkey 2.0b1 nightly

Status: UNCONFIRMED

(Core :: Security, defect)

Description

[TT]

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_7; en-us) AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Safari/530.17
Build Identifier: Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.5; en-US; rv:1.9.1pre) Gecko/20090624 SeaMonkey/2.0b1pre

Using today's nightly build of Seamonkey 2.0b1 for the Mac, I cannot use SSL to check my IMAP mail.  When I do, I get this dialog box.

a1.balanced.looney.mail.dreamhost.com:993 uses an invalid security certificate.

"The certificate is only valid for *.mail.dreamhost.com

(Error code: ssl_error_bad_cert_domain)

This could be a problem with the server's configuration or it could be someone trying to impersonate the server.
If you have connected to this server successfully in the past the error may be temporary and you can try again later."

Then I have a choice of two buttons: View Certificate and Cancel.  If I press View Certificate, I see the certificate data.  If I close that window, it shows me the above error message again.

If I press Cancel, the error message is dismissed and then reappears.  There is no way for me to continue.

This problem does not happen on 2.0a3.

Reproducible: Always

Comment 1

[lenochod]

Attachment: Button "Confirm Security Exception"

> If I press Cancel, the error message is dismissed and then reappears.  There is
> no way for me to continue.

There is button "Confirm Security Exception" for save Certificate. 
See images in Attachment.

Comment 2

[TT]

You posted a screen shot from the Windows version.  I am using a Mac.  I'm attaching three PNG screen shots of what the windows look on my system.  As you can see, I don't have a "Confirm Security Exception" button.

Comment 3

[TT]

Attachment: Screen shot of ssl_error_bad_cert_domain dialog box

Comment 4

[TT]

Attachment: Screen shot of certificate information dialog box, General page

Comment 5

[TT]

Attachment: Screen shot of certificate information dialog box, Details page

Comment 6

[Constantine Dokolas]

I have a very similar problem accessing an s3 (amazon web services) bucket through https with Firefox (3.5.2 on Windows XP). Since the certificate is valid for *.s3.amazonaws.com, shouldn't it validate e.g. xyz653.s3.amazonaws.com? (a domain to access the xyz653bucket) Why should this be specified as an exception?

I tried the same https URL with Firefox 3.0.13 on an Ubuntu 9.04 installation and had no problem. Weird!?

Comment 7

[TT]

I think I know what the problem.  I have Seamonkey configured only to launch the browser, not the "Mail and Newsgroups" program.  Without the mail program running, the dialog box that allows me to add the exception will not display.  I have to manually open the mail program, and voila, the exception dialog appears.