Bug 64235
| Summary: | Continue on cert rejection message doesn't continue | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | cnep5ll3 <norm> |
| Component: | Page Loading | Assignee: | Nobody <webkit-unassigned> |
| Status: | UNCONFIRMED | ||
| Severity: | Minor | CC: | ap, beidson, jberlin |
| Priority: | P2 | ||
| Version: | 528+ (Nightly build) | ||
| Hardware: | Mac (Intel) | ||
| OS: | Unspecified | ||
cnep5ll3
I have chosen not to trust:
Go Daddy Class 2 Certificate Authority
I go to https://www.online-billpay.com/ which uses a cert signed by a cert signed by the above.
I get the (correct) message that ‘Safari can’t verify … ’.
One option is ‘Continue’.
That leads to a seemingly infinite loop of such messages.
Ditto Safari 5.05
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
cnep5ll3
Here is probably the same bug acting more bizarrely.
I have chosen not to trust Equifax Secure Certificate Authority
SN 903804111
I launch Webkit. I empty the cache.
I enter the following into the address bar:
http://en.wikipedia.org/wiki/Canvas_(HTML_element)
and click on the 2nd link of the ‘References’ whose URL is:
https://developer.mozilla.org/en/DOM/HTMLCanvasElement
I get a dialog box saying "Safari can’t verify the identity of the website “developer.mozilla.org”."
The cert is signed by Equifax and so this is expected.
I click "Continue".
At this point I get two new items on the screen, both inappropriate:
First a new dialog box "Type your password to make changes to your Certificate Trust Settings." but I have made no changes and do not plan to.
Second the standard "Keyboard Viewer" which is active and shows characters as I type.
Version 535.1+
2.4 GHz Intel Core 2 Duo
OS X 10.6.8
This is reproducible.
There are no Console messages unless I cancel the password dialog box which produces:
11/7/15 22:54:00 Safari[18911] SecTrustSettingsSetTrustSettings returned -60006