915020 - [Buri][T-mobile 51629][Browser ]The Browser doesn't support Certifcate chains

Status: RESOLVED INVALID

(Firefox OS Graveyard :: Gaia::Browser, defect, P1)

Description

[sync-1]

DEFECT DESCRIPTION:
  The Browser doesn't support Certifcate chains
 
  REPRODUCING PROCEDURES:
  Description: 
 When interacting with a page that uses Certificate chain, this page is shown as unsecure.
 
 
 Customer Impact Statement: 
 
  EXPECTED BEHAVIOUR:
  It should support Certifcate chains
 
  ASSOCIATE SPECIFICATION:
 
  TEST PLAN REFERENCE:
 
  TOOLS AND PLATFORMS USED:
 
  USER IMPACT:
 
  REPRODUCING RATE:
 
  For FT PR, Please list reference mobile's behavior:

Comment 1

[sync-1]

Clone from brother

Comment 2

[sync-1]

Attachment: jrdlog_521615.rar

Comment 3

[sync-1]

Clone from brother

Comment 4

[sync-1]

Attachment: certificate.PNG

Comment 5

[Preeti Raghunath(:Preeti)]

Joe,

Who needs to provides these certs?

Comment 6

[Ben Francis [:benfrancis]]

This error may be caused by the date being wrong on your device, but I'm not sure.

What are certificate chains?

Comment 7

[Ben Francis [:benfrancis]]

Some steps to reproduce would also be helpful

Comment 8

[Jason Smith [:jsmith]]

(In reply to Ben Francis [:benfrancis] from comment #6)
> This error may be caused by the date being wrong on your device, but I'm not
> sure.
> 
> What are certificate chains?

Brian - Do you know?

Comment 9

[Brian Smith (:briansmith, :bsmith, use NEEDINFO?)]

(In reply to Jason Smith [:jsmith] from comment #8)
> (In reply to Ben Francis [:benfrancis] from comment #6)
> > This error may be caused by the date being wrong on your device, but I'm not
> > sure.

The sec_error_expired_certificate error means that the certificate expired 2011-07-08 and today's date is 2013-09-11. Please provide a link to the server. Also, please use https://ssllabs.com ("Test Your SSL Server Now!" at the bottom) to verify that the server is configured correctly.

> > What are certificate chains?
>
> Brian - Do you know?

When an HTTPS server uses a certificate, that certificate is signed by another certificate, which is signed by another cert, etc., until we get to a cert that is in our built-in list of trusted root certificates. This series of certificates signing each other is commonly referred to as a "certificate chain."

Comment 10

[Viga]

per  Comment 9  remove Ni

Comment 11

[Jason Smith [:jsmith]]

The server being used here is - https://summitbook.mozilla.org/. That happens a test server I stood up with IT for doing testing of an expired SSL website. Getting the SSL error is expected here as such. So this is invalid.