79843 - SSL: Can't Accept Unknown CA

Status: VERIFIED DUPLICATE of bug 75596

(Core Graveyard :: Security: UI, defect)

Description

[Bryan Taylor]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:0.9) Gecko/20010505
BuildID:    2001050515

When SSL finds an unknown certificate authority, it attempts to pop-up a window
to allow you to accept it. The window is too small and not resizeable, and
offers no way to hit "OK" or "CANCEL". Also, the text is rendered in a corrupt way.

Reproducible: Always
Steps to Reproduce:
1.Go to any https page with an unknown CA
2.Try an fail to confirm acceptance
3.

Actual Results:  Window with no buttons appears. Text is corrupted on pop-up.

Expected Results:  The buttons should render on the frame so they are clickable.
The frame should be a least be resizeable.

Comment 1

[Andrew Chadwick]

[Suggest change OS to All from Windows NT (hope that's right).
 Suggest changing to "NEW" from "UNCONFIRMED".
 Suggest "ui" keyword.]

This is also happening to me under i386 GNU/Linux. The
dialog on my system is completely unusable:

* Attempt to visit an SSL page for which the CA is unknown

The simplest way of reproducing this is to install apache +
mod_ssl or apache-ssl, and self-sign the server certificate.

* The acceptance dialog displays the (first) three options
and no other controls.

The dialog's text is noticably cut off on the right-hand
and bottom edges, and there are no OK or Cancel buttons.
Although my window manager allows me to resize the dialog's
frame, the contents of the dialog do not resize.
Keyboard navigation does not work, and closing the
dialog acts as a cancel, so the site cannot be visited.

Could the bad layout depend on an individual user's screen
resolution?

(Anyway, yadda. My Mozilla version is: "Mozilla 0.9 [Mozilla/5.0
(X11; U; Linux 2.4.2 i686; en-US; rv:0.9; Debian GNU)
Gecko/20010509]", as grabbed from
http://pandora.debian.org/~kitame/mozilla/)

This bug can still be confirmed using the URL supplied (remove the
"http:" :)

Comment 2

[John Unruh]

PSM

Comment 3

[Steve Grecni]

This is still happening as of build 2001051708 for linux.  When hitting the page
https://secure.masq.steem.com/ I'm getting a bug which seems to be related to
this.  This above machine is using a CA signed key, but for the wrong domain. 
(The key is actually for secure.steem.com)  I'm seeing an incomplete dialogue,
which can be resized through windowmaker using left ALT left drag, but I cannot
see anymore of the dialogue box.  When I close the window, mozilla eats up 100%
cpu for a bit then seg faults.

Mozilla does not seg fault on .9.  With .9 I see the dialoge, close it using the
wmakers widget, I get an idental widget, close that and it goes away.

Comment 4

[Andrew Chadwick]

This bug is a duplicate of bug 75596 and bug 75615, and is dependent upon bug
75610 and bug 75595.

Comment 5

[Ken Snider]

This is a dupe of 75596, which is included in the meta tracking bug 75615.

*** This bug has been marked as a duplicate of 75596 ***

Comment 6

[John Unruh]

Verified dupe.