Formatting errors in alert for invalid security certificate

[era]

Binary package hint: firefox

When I right-click on a link and select "Open Link in New Tab" from the menu, an alert is displayed if the page in the new tab has an invalid SSL certificate.

However, the alert box is malformed; the text contains bare HTML tags and a literal (null) where I imagine the author expected to see a live link and some text.

The following is as faithful as I can make it. For company policy reasons, I cannot provide a screen shot, as it would reveal internal server names etc.

   Alert [X]

  host.example.com:443 uses an invalid security certificate.

  The certificate is not trusted because the issuer certificate is unknown.
  The certificate is only valid for <a id="cert_domain_link" title="secure.example.com">(null)
  </a>

  (Error code: sec_error_unknown_issuer)
                                                                                                 [OK]

The page which is displayed in the new tab also has the (null) string in the text "The certificate is only valid for (null)".

Hardy amd64; I have the feeling a recent Firefox 3 upgrade (RC1) might have introduced this error.

vnix$ lsb_release -rd
Description: Ubuntu 8.04
Release: 8.04

vnix$ apt-cache policy firefox
firefox:
  Installed: 3.0~rc1+nobinonly-0ubuntu0.8.04.1
  Candidate: 3.0~rc1+nobinonly-0ubuntu0.8.04.1
  Version table:
 *** 3.0~rc1+nobinonly-0ubuntu0.8.04.1 0
        500 http://fi.archive.ubuntu.com hardy-proposed/main Packages
        100 /var/lib/dpkg/status
     3.0~b5+nobinonly-0ubuntu3 0
        500 http://fi.archive.ubuntu.com hardy/main Packages

[Alexander Sack (asac)]

On Wed, Jun 04, 2008 at 06:00:19AM -0000, era wrote:
> Public bug reported:
>
> Binary package hint: firefox
>
> When I right-click on a link and select "Open Link in New Tab" from the
> menu, an alert is displayed if the page in the new tab has an invalid
> SSL certificate.
>
> However, the alert box is malformed; the text contains bare HTML tags
> and a literal (null) where I imagine the author expected to see a live
> link and some text.
>
> The following is as faithful as I can make it. For company policy
> reasons, I cannot provide a screen shot, as it would reveal internal
> server names etc.
>
> Alert
> [X]
>
> host.example.com:443 uses an invalid security certificate.
>
> The certificate is not trusted because the issuer certificate is unknown.
> The certificate is only valid for <a id="cert_domain_link" title="secure.example.com">(null)
> </a>
>
> (Error code: sec_error_unknown_issuer)
> [OK]
>
> The page which is displayed in the new tab also has the (null) string in
> the text "The certificate is only valid for (null)".
>
> Hardy amd64; I have the feeling a recent Firefox 3 upgrade (RC1) might
> have introduced this error.

Please ensure that you have firefox properly restarted. to be sure
re-login at best.

 status incomplete

 - Alexander

[era (era)]

Dunno when I can reboot this box, but I observe that the <a href=""> issue is shared by a Windows user who is also using Firefox 3. The server name is not (null) for what I recall would be the same server as I was connecting to.

[Jayson Rowe (jayson.rowe)]

We are closing this bug report because it lacks the information we need to investigate the problem, as described in the previous comments. Please reopen it if you can give us the missing information, and don't hesitate to submit bug reports in the future. To reopen the bug report you can click on the current status, under the Status column, and change the Status back to "New". Thanks again!