704979 - Firefox erroneously reports "Wrong Site" for valid wildcard SSL certificate

Status: RESOLVED INVALID

(Core :: Networking: HTTP, defect)

Description

[SineSwiper]

Attachment: Screenshot of SSL error with correct Cert

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:8.0) Gecko/20100101 Firefox/8.0
Build ID: 20111104165243

Steps to reproduce:

Went to https://ll.www.utorrent.com/login.php


Actual results:

Got a SSL Exception message.  When investigating the issue, it reports the problem as "Wrong Site", despite the certificate being a perfectly valid wildcard cert of "*.utorrent.com".


Expected results:

No exception message, just normal acceptance of the SSL cert and continued browsing.

Comment 1

[Patrick McManus [:mcmanus]]

is rfc 2818 applicable?

Matching is performed using the matching rules specified by
   [RFC2459].  If more than one identity of a given type is present in
   the certificate (e.g., more than one dNSName name, a match in any one
   of the set is considered acceptable.) Names may contain the wildcard
   character * which is considered to match any single domain name
   component or component fragment. E.g., *.a.com matches foo.a.com but
   not bar.foo.a.com. f*.com matches foo.com but not bar.com.

Comment 2

[Matthias Versen [:Matti]]

"*.utorrent.com" doesn't match "ll.www.utorrent.com".
see bug 159483 for more information