856529 - [Buri][Shira-48095]Browser does not provide a mechanism to see SSL certificate details

Status: RESOLVED DUPLICATE of bug 1015224

(Firefox OS Graveyard :: Gaia::Browser, defect, P1)

Description

[sync-1]

AU_LINUX_GECKO_ICS_STRAWBERRY_V1.01.00.01.19.044
  Firefox os  v1.0.1
  Mozilla build ID: 20130319070203
 
 +++ This bug was initially created as a clone of Bug #431463 +++
 
 DEFECT DESCRIPTION:
 [TMO-48095]Browser does not provide a mechanism to see SSL certificate details
 
 REPRODUCING PROCEDURES:
 1.connect to VAL-TEST or enable data connection of 2G china mobile sim card.
 2.goto http://wapmail.tcl-ta.com/http/wa503.php
 3.click New TLS Session、Server Certificate、Server Certificate Expired、Client Certificate one by one, the browser shows "The address isn't valid"---KO
 4.On refernce phone Telsa orange, can view SSL certificate successfully, refer to screenshot1.
 
 EXPECTED BEHAVIOUR:
 The browser provide a mechanism to see SSL certificate details,in addtion, the browser provide a list of on the device installed certificates.
 
 
 
 ASSOCIATE SPECIFICATION:
 DT's description:
    There is no possibility to view SSL certificate details like fingerprint , CA and more... so the user cannot check whether the correct and according certificate is used or not. Simply a lock symbol is not enough given the fact that SSL certificate might get compromitted as well (remember DigiNotar's certificates). 
    In addition, the browser does not provide a list of on the device installed certificates (ideally these can be uninstalled by the user).
 
 TEST PLAN REFERENCE:
 
 TOOLS AND PLATFORMS USED:
 
 USER IMPACT:
 
 REPRODUCING RATE:5/5
 
 For FT PR, Please list reference mobile's behavior:
 
 ++++++++++ end of initial bug #431463 description ++++++++++
 
 
 
 CONTACT INFO (Name,Phone number):
 
  DEFECT DESCRIPTION:
 
  REPRODUCING PROCEDURES:
 
  EXPECTED BEHAVIOUR:
 
  ASSOCIATE SPECIFICATION:
 
  TEST PLAN REFERENCE:
 
  TOOLS AND PLATFORMS USED:
 
  USER IMPACT:
 
  REPRODUCING RATE:
 
  For FT PR, Please list reference mobile's behavior:

Comment 1

[Ben Francis [:benfrancis]]

This looks like a feature request. NEEDINFO on product to confirm this feature isn't scheduled for v1.0.1 or v1.1.0

Comment 2

[Peter Dolanjski [:pdol]]

Lucas, your input here would be valuable.

Comment 4

[Daniel Coloma:dcoloma]

the duplicated I have marked above is in scope for 1.1. See also bug 825092.

Based on that I would assume this is tef-, but I'll prefer firefox OS team to make the final call here.

Comment 5

[Jason Smith [:jsmith]]

(In reply to Daniel Coloma:dcoloma from comment #4)
> the duplicated I have marked above is in scope for 1.1. See also bug 825092.
> 
> Based on that I would assume this is tef-, but I'll prefer firefox OS team
> to make the final call here.

Yes, this is OOS for v1.01 - sicking made this decision long ago on that bug with a rationale. It's already landed for v1.1, so we are actively working on making this shippable for that release.

Comment 6

[Ben Francis [:benfrancis]]

Is this definitely a duplicate? bug 769178 is about invalid certificate errors, what about valid certificates?

Comment 7

[Jason Smith [:jsmith]]

(In reply to Ben Francis [:benfrancis] from comment #6)
> Is this definitely a duplicate? bug 769178 is about invalid certificate
> errors, what about valid certificates?

The original KO cited above sounds like it's talking about the invalid cert case.

For valid certs, we might want to file a different bug for that.

Comment 9

[Joe Cheng [:jcheng] (please needinfo)]

undupe the bug since this bug is really asking for something different.
1.3? to consider this feature in the future release

Comment 10

[Joe Cheng [:jcheng] (please needinfo)]

ni? Karen so it gets in Karen's radar

Comment 11

[Karen Rudnitski [:kar]]

It is on Peter's radar for prioritization post 1.3.

Comment 12

[Peter Dolanjski [:pdol]]

Adding to Browser backlog for future implementation.

Comment 14

[Jason Smith [:jsmith]]

Feature request, not a blocker.

Comment 15

[buri.blff]

Which version plan to support this feature

Comment 16

[Jack Liu]

Dears, 

Please add this feature in 1.4, thanks!

Comment 17

[Jason Smith [:jsmith]]

We aren't supporting this for 1.4 - it's not part of the 1.4 QC FC requirements & DSDS requirements.

Comment 18

[Jack Liu]

Dears,

Set 1.3? per customer requirement, it's blocking issue.

Comment 19

[Gregor Wagner [:gwagner]]

(In reply to Jack Liu from comment #18)
> Dears,
> 
> Set 1.3? per customer requirement, it's blocking issue.

We can't add new features to 1.3 or 1.4.

Comment 20

[Jason Smith [:jsmith]]

(In reply to Jack Liu from comment #18)
> Dears,
> 
> Set 1.3? per customer requirement, it's blocking issue.

Per comment 19, not a blocker.

Comment 21

[Jason Smith [:jsmith]]

Same comment as above - feature request, not a blocking issue.