Closed Bug 696597 Opened 10 years ago Closed 8 years ago
Certificate Manager UI latches on trusted state
In the Firefox Certificate Manager, the servers on the Servers tab are marked as untrusted by default, but the ratio button latches. You can mark a certificate as trusted, but you cannot change it back to untrusted. 1. In Firefox 7.0.1, Tools > Options > Advanced > Encryption > View Certificates > Servers 2. Select a certificate 3. Edit trust 4. Press "Trust the authenticity of this certificate". Press "OK". 5. Press "Edit trust" again, and select "Do no trust the authenticity of this certificate. Press "OK". 6. Open the "Edit trust" dialog a third time. Results You cannot undo the change. The certificate still appears to be trusted. Other information Verified on Windows XP. I did not observe it on Linux, but there is a report that it also applies to Ubuntu Lucid and Natty. http://forums.mozillazine.org/viewtopic.php?p=11383991#p11383991
I see this in Firefox 7, 8, 9, and 10 on Windows 7.
OK, let's try this again. I can't determine the exact component for sure. I rather wish someone would respond. When you take the trouble to report a security bug, silence can be deafening. Also, from what Wes, says, it appears to be on trunk.
Component: Security: UI → Security
Product: Core → Firefox
QA Contact: ui → firefox
The Edit Trust button in the Servers tab of the Certificate Manager in current nightly Firefox is gone. Please notice the screen shot. Formerly there must have been such a button as described in http://www.mozilla.org/projects/security/pki/psm/help_21/certs_help.html In the Authorities tab the Edit Trust button works. It opens an "Edit CA certificate trust settings" dialog box with three check boxes. Changes to this settings survive the restart of the browser. So please review the situation with a current browser version.
Looks like this was the same as bug 825583. See also bug 910986.
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 825583
You need to log in before you can comment on or make changes to this bug.