Opened 4 years ago

Last modified 2 years ago

#15030 new defect

Tor Browser 4.5a4 does not cope with certain self signed certificate setups.

Reported by: yawning Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-usability-website
Cc: mcs Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

On certain affected sites, "Add Exception" does nothing useful, except display the same error page, and disable the "Add Exception" button.

Per GeKo on IRC: "seems Tor Browser can't cope with two self-signed certs in a row. this is a bug"

Test URL: https://hkps.pool.sks-keyservers.net/pks/lookup?op=vindex&search=8A6EC81A

Child Tickets

Change History (4)

comment:1 Changed 4 years ago by mcs

Cc: mcs added

comment:2 Changed 4 years ago by gk

Keywords: tbb-usability-website added; tbb-4.5-alpha removed
Version: Tor Browser alpha

This URL works for me now but it failed yesterday. I guess only some of the server setups "behind" this URL are affected.

comment:3 Changed 3 years ago by vynX

Confirmed, I get asked about the certificate twice. The second time I cannot confirm an exception.

comment:4 in reply to:  description Changed 2 years ago by bugzilla

Severity: Normal

Replying to yawning:

On certain affected sites, "Add Exception" does nothing useful, except display the same error page, and disable the "Add Exception" button.

Looks like incompatibility of about:certerror with NoScript. Not reproducible on ESR45.

Per GeKo on IRC: "seems Tor Browser can't cope with two self-signed certs in a row. this is a bug"

OK, with 10 in a row.

Test URL: https://hkps.pool.sks-keyservers.net/pks/lookup?op=vindex&search=8A6EC81A

Note that it gives a new cert even after Ctrl+F5!

Note: See TracTickets for help on using tickets.