516191 - FIPS mode prevents certificate exceptions until master pw entered elsewhere, doesn't prompt

Status: RESOLVED WORKSFORME

(Core :: Security: PSM, defect)

Description

[joshua preble]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)

i found that it was caused because i have fips enabled and it doesn't give me the prompt to enter my password when adding an exception. If i bring up a trusted secure page first so i can enter my master password then go back to add the certificate exception it will work.

Reproducible: Always

Steps to Reproduce:
1. have fips enabled
2. go to a website with an untrusted certificate before entering your master password for anything else
3. attempt to add exception
Actual Results:  
will not add exception

Expected Results:  
it will confirm the exception and continue

Comment 1

[Johnathan Nightingale [:johnath]]

-> PSM, and updating summary to reflect report.

Comment 2

[Bob Lord]

I am unable to reproduce this problem. Here's what I did:
-Set my master password
-Enabled FIPS mode
-Quit
-Restarted
-Visited http://ecc.fedora.redhat.com/
-Selected a ciphersuite. 
-Was prompted for my Master Password, which I supplied.
-Got the error page (untrusted CA)
-Set an exception for the web site
-Verified the exception was present in the Cert Manager

What might have been different about your steps?

Comment 3

[Bob Lord]

Hm, seems similar to Bug 225849, which is ancient...

Comment 4

[joshua preble]

Hi, i can no longer seem to reproduce it either, so it could have possibly been a non firefox issue.

Comment 5

[Kai Engert [:KaiE:]]

worksforme based on reporter's update