542715 - popup sec_error_unknown_issuer ,but the CA is verisign trust network

Status: RESOLVED WORKSFORME

(Firefox :: Security, defect)

Description

[deyun.zeng]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/3.0.195.38 Safari/532.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.9.1.7) Gecko/20091221 Firefox/3.5.7

I use selenium server1.0.1 to start firefox 3.5.7 at windows XP.
I buy a book at http://www.dangdang.com then pay for the book at http://www.tenpay.com , after the selenium to click pay button , firefox popup a warning sec_error_unknown_issuer,I check the CA is the verisign trust network.
The popup say sdc.tenpay.com:443 use an invalid certificate.

Reproducible: Always

Steps to Reproduce:
1.start selenium
2.buy a product at http://www.dangdang.com
3.pay it with http://www.tenpay.com
Actual Results:  
an popup warning sec_error_unknown_issuer

Expected Results:  
no popup warning

Comment 1

[Matthias Versen [:Matti]]

>2.buy a product at http://www.dangdang.com
How can I do that if I don-t understand the language ?

https://www.tenpay.com/ is wfm 

Please provide a https URL that triggers that error.

Comment 2

[Harry Singh]

This bug is occurring on all of our sites' login pages; we have valid security certificates from VeriSign, but Firefox reports that "The certificate is not trusted because the issuer certificate is unknown."
The pages are as follows:
https://www.rapidtax.com/Tax2009/
https://www.priortax.com/Tax2009.
https://www.taxpack.com/Tax2009/
https://www.rapidrefund.net/Tax2009/
If there is a logical reason that our security certificate isn't being verified by Firefox, please let us know so we can properly report the security information in our pages.

Comment 3

[Harry Singh]

This may be the same issue seen in this report:
https://bugzilla.mozilla.org/show_bug.cgi?id=534469
Will test and follow up.

Comment 4

[Johnathan Nightingale [:johnath]]

These sites all work for me - I assume you fixed the problem server-side?

Comment 5

[Matthias Versen [:Matti]]

Johnathan: Did you tried a new profile ?

I get the issue with a new profile and that usually means that there is a server misconfiguration.

 Harry Singh:
The webserver needs the intermediate CA's from Verisign
https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&id=AR657

Firefox will cache the intermediate certificates if you visit a page /must not be the same) with such a cert the first time.

Comment 6

[deyun.zeng]

I know the reason for this bug.
because I use selenium to start firefox and I don't use firefoxProfileTemplate options.So the firefox which start by selenium don't know the CA about Verisign.

Comment 7

[Tim (fmdeveloper)]

Deyun -> The issue is resolved?

Comment 8

[Tim (fmdeveloper)]

Closing bug as WFM - if you are still experiencing this issue or have more information to provide feel free to post back here and we can re-open the bug. You can also get assistance by visiting the Firefox help site -> http://support.mozilla.com/en-US/kb/Ask+a+question