Closed Bug 1672402 Opened 4 years ago Closed 4 years ago

"USERTrust RSA Certification Authority" is categorized as ERROR_SECURITY_BAD_CERT on Android but is not on Desktop

Categories

(Core :: Security, defect)

Unspecified
All
defect

Tracking

()

RESOLVED DUPLICATE of bug 1520297

People

(Reporter: amejia, Unassigned)

References

Details

For STP see the Fenix bug. The same issue is also reproducible on the GeckoView Sample app.

Summary: "USERTrust RSA Certification Authority" is not trusted on Android but is on Desktop → "USERTrust RSA Certification Authority" is categorized as ERROR_SECURITY_BAD_CERT Android but is not on Desktop
Summary: "USERTrust RSA Certification Authority" is categorized as ERROR_SECURITY_BAD_CERT Android but is not on Desktop → "USERTrust RSA Certification Authority" is categorized as ERROR_SECURITY_BAD_CERT on Android but is not on Desktop

The certificate chain is incomplete: https://www.ssllabs.com/ssltest/analyze.html?d=www.sheffield.gov.uk
I suspect the Intermediate CA Preloading we do on Firefox for Desktop works around this problem. Maybe that doesn't work on mobile?

Ah, that's interesting, thanks Tom, never thought to check the site like that. Mostly because Firefox Desktop works fine with no errors, as do other browsers. Sounds like this is one of those "Well it works in other browsers" type of problems but where only Firefox on Android is revealing the problem

Preloading is disabled in Firefox for Android. Tried setting the pref to true and restarting the browser. Still get an error on page load. Maybe we are not using the new cert storage? Not sure if the crypto team already has work tracking this. Dana does the team have bugs tracking Android work yet?

pref("security.remote_settings.intermediates.enabled", true);
Flags: needinfo?(dkeeler)

Ah found it.

Depends on: 1520297
Flags: needinfo?(dkeeler)
Component: Tracking Protection → General
Component: General → Security
Product: GeckoView → Core
Status: NEW → RESOLVED
Closed: 4 years ago
No longer depends on: 1520297
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.