Closed Bug 691260 Opened 13 years ago Closed 8 years ago

3rd Party SSL error creates a new (huge) certificate warning window

Categories

(Core Graveyard :: Security: UI, defect)

Product:
Core Graveyard
Component:
Security: UI
Version:
7 Branch
Platform:
x86_64
Windows 7
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED WONTFIX

People

(Reporter: lech, Unassigned)

Details

Attachments

(2 files)

cert01.png
96.32 KB, image/png
Details
The full content of the certificate with buttons visible
111.44 KB, image/png
Details
Attached image cert01.png — 
User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:7.0.1) Gecko/20100101 Firefox/7.0.1
Build ID: 20110928134238

Steps to reproduce:

Visited a site.


Actual results:

Fairly certain this had something to do with content from https://csi.gstatic.com (probably Google Plus +1 button stuff) which broke down momentarily. However upon hitting the site Firefox popped up a new dialog window informing me of a security issue. Unfortunately this window was mostly useless as the certificate encompassed so many Google domains it overflowed off the screen and then some.


Expected results:

While I was able to select the window and select maximize to view the entire content of the certificate, there was no native window option to do so.

It would have been nice if instead of a pop-up this appeared in an overlay or with the content being scrollable at least.
The certificate fetched from https://csi.gstatic.com/

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Component: General → Security: UI
Product: Firefox → Core
QA Contact: general → ui
(An aside: this is a legitimate Google certificate which was accidentally served for some gstatic domains to a tiny fraction of users for a brief period. We apologise for the inconvenience of the certificate mismatch errors.)
(In reply to Adam Langley from comment #2)
> (An aside: this is a legitimate Google certificate which was accidentally
> served for some gstatic domains to a tiny fraction of users for a brief
> period. We apologise for the inconvenience of the certificate mismatch
> errors.)

The Google certificate error was only slightly distressing, however it did highlight an issue with the way security warnings are currently displayed within Firefox. Hopefully that can be corrected soon as anyone seeing something similar may find themselves slightly annoyed when they can't reach the view certificate button.
The error pop up shown here is no longer shown by default, since "browser.xul.error_pages.enabled" is now by default true.

However, if it is set to false, this issue still occurs => confirming.
Status: UNCONFIRMED → NEW
Ever confirmed: true
WONTFIX as per comment 4.
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → WONTFIX
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: