72405 - Mozilla PSM won't accept new certificates

Status: VERIFIED FIXED

(Core Graveyard :: Security: UI, defect, P3)

Description

[dylang]

Webmail on thock.com is secured via SSL.  Since the SSL is used only for
encryption (and not encryption and trust-metric stuff), it's a self-signed
certificate.  Mozilla pops up a nice "this is a new cerificate" dialog when I
head to the site, but I am never able to get past the second step without a hang
within the dialogs.

SSL is effectively broken for what I need it for in Mozilla build 2001031611

Comment 1

[Boris Zbarsky [:bzbarsky]]

Dylan, the hostname web.thock.com does not resolve.  Could you please check that
URL?

Comment 2

[John Unruh]

Confirming. A workaround is to accept the certificate in Nav 4.7 on Linux or 
windows, then overwrite the cert7.db and key3.db files in the .mozilla directory 
with the ones from your .netscape directory or windows profile directory. This 
probably won't get fixed for PSM 1.5 since we are working on PSM 2.0.

Comment 3

[dylang]

It resolves.  The DNS servers run on djbdns, which might not be interacting well
with your copy of bind.  Just try a second time.

Comment 4

[Tom Lofgren]

I can reproduce this in 0.8.1, but only when Javascript is not enabled.
It would be nice if accepting new certificates would work witouht enabling
Javascript, though.

Comment 5

[Boris Zbarsky [:bzbarsky]]

The javascript issue is bug 65378

Comment 6

[John Unruh]

*** Bug 72672 has been marked as a duplicate of this bug. ***

Comment 7

[John Unruh]

Marking fixed now that PSM 2.0 is included in the nightly mozilla builds.

Comment 8

[John Unruh]

Verified.