527318 - Secure login pages display "broken padlock", after page reload changes to "secure padlock"

Status: RESOLVED WORKSFORME

(Core :: Security: PSM, defect)

Description

[Edward]

User-Agent:       Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.9.1.4) Gecko/20091017 SeaMonkey/2.0
Build Identifier: Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.9.1.4) Gecko/20091017 SeaMonkey/2.0

On many encrypted login pages such as AOL, Yahoo or online banking sites, SM 2.0 for Linux will sometimes display a red lock indicating that some of the items on the page are not secure.  When selecting Reload, the same page loads in, but the lock then changes to yellow, indicating a fully-secure page.  This has occurred at multiple web sites such as Yahoo, AOL Mail and online banking sites.  

Reproducible: Sometimes

Steps to Reproduce:
1.Go to a secure web site to login.
2.SM will sometimes display a red lock.
3.Reloading the same page changes the lock to yellow.
Actual Results:  
If all of the items on the page did in fact come from a secure site, then the lock should display yellow, not red.


My belief is that this is a browser problem and not a web site problem, since this issue occurs at multiple web sites, not just any one in particular.

Comment 1

[Matthias Versen [:Matti]]

What is the reason for the red lock (click on it and look under technical details) ?
Do get a mixed content warning with the red lock ?

Comment 2

[Edward]

There is a window that also appears in the middle of the screen, with a mixed content warning.

Comment 3

[Matthias Versen [:Matti]]

could be a dupe of bug 477118 but that should be already fixed in SM2

Comment 4

[Edward]

I've also seen references to bugs 506008 and 550580 as being similar.  

The mixed content warning does appear with a red lock at the lower right corner of the window.  

I am trying SeaMonkey 2.0.5 for Linux on another machine and have yet to see this occur -so far-.

Comment 5

[Edward]

This has now occurred on SeaMonkey 2.0.5 on 64-bit Linux, haven't yet seen this on 32-bit Linux with 2.0.5.

Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.10) Gecko/20100504 SeaMonkey/2.0.5

Comment 6

[Edward]

This has also occurred with SM 2.0.6 through 2.0.8.  There have been many occasions when this occurs, clicking Reload will cause the same message with red lock, while other times it will then correctly display with the yellow lock.

Comment 7

[Edward]

To update this, it also has occurred with SM 2.0.9 through 2.0.11.  On some occasions when refreshing the page when this occurs, the lock will correctly turn yellow.

Comment 8

[Tanvi Vyas[:tanvi]]

This might have been fixed in Firefox 39 with bug 947079.

Comment 9

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Is this still an issue?

Comment 10

[Edward]

No longer an issue.

Comment 11

[Dana Keeler (she/her) (use needinfo) [:keeler]]

Great - thanks.