Implement API for querying SSL status and certificate information and signalling SSL errors to the embedder

Bug #1214034 reported by Chris Coulson on 2013-08-19
54
This bug affects 6 people
Affects Status Importance Assigned to Milestone
Oxide
High
Chris Coulson
webbrowser-app
Fix Released
High
Michael Sheldon
webbrowser-app (Ubuntu)
High
Unassigned

Bug Description

The webview should expose an API for querying SSL status and certificate information and signalling SSL errors to the embedder. This is required in order to present something other than a blank page when we encounter verification issues

Related branches

Changed in oxide:
importance: Undecided → High
status: New → Triaged
Changed in oxide:
assignee: nobody → Chris Coulson (chrisccoulson)
David Barth (dbarth) on 2014-01-27
tags: added: desktop webapp-container
Jamie Strandboge (jdstrand) wrote :

With the change to apparmor-easyprof-ubuntu for bug 1260048, you'll need to fix that along with this for confined apps to take advantage of this feature.

summary: - Implement API for querying SSL status and certificate information
+ Implement API for querying SSL status and certificate information and
+ signalling SSL errors to the embedder
description: updated
Changed in webbrowser-app:
assignee: nobody → Olivier Tilloy (osomon)
status: New → Triaged
Bill Filler (bfiller) on 2014-05-28
Changed in webbrowser-app:
importance: Undecided → Medium
tags: added: rtm14
Changed in oxide:
milestone: none → branch-1.2
Bill Filler (bfiller) on 2014-07-31
Changed in webbrowser-app (Ubuntu):
status: New → Triaged
importance: Undecided → Medium
assignee: nobody → Olivier Tilloy (osomon)
Jean-Baptiste Lallement (jibel) wrote :

This is critical for major wabsites like youtube where the default is https, then you cannot play video because the content is insecure, for example:

TEST CASE:
1. Launch the browser
2. Go to google.com
3. Type youtube
4. The 1rst link on the page should be 'https://m.youtube.com/'
5. Follow this link to youtube and try to play a video

ACTUAL RESULT
It doesn't play because it contains http and https contents.

Olivier Tilloy (osomon) on 2014-08-14
Changed in webbrowser-app:
importance: Medium → High
Changed in oxide:
status: Triaged → Fix Released
Bill Filler (bfiller) on 2014-09-02
Changed in webbrowser-app:
assignee: Olivier Tilloy (osomon) → Michael Sheldon (michael-sheldon)
tags: added: touch-2014-09-11
Bill Filler (bfiller) on 2014-09-09
Changed in webbrowser-app (Ubuntu):
importance: Medium → High
Bill Filler (bfiller) on 2014-09-10
tags: added: touch-2014-09-25
removed: touch-2014-09-11
David Planella (dpm) wrote :

Somehow related, track previews on 7digital's mobile site cannot be played -admittedly, that's a bug on their side.

The browser's logs say: "[blocked] The page at 'https://m.7digital.com/GB/releases/3763648?lang=en&partner=983' was loaded over HTTPS, but displayed insecure content from 'http://previews.7digital.com/clip/[…]': this content should also be loaded over HTTPS."

Changed in webbrowser-app:
status: Triaged → In Progress
Olivier Tilloy (osomon) on 2014-09-25
Changed in webbrowser-app (Ubuntu):
status: Triaged → In Progress
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package webbrowser-app - 0.23+14.10.20140922-0ubuntu1

---------------
webbrowser-app (0.23+14.10.20140922-0ubuntu1) utopic; urgency=low

  [ Michael Sheldon ]
  * Display padlock when viewing pages over HTTPS. Provide certificate
    details when padlock is clicked. Display error pages when invalid
    SSL certificates are presented and allow users to override these
    warnings. . Display warning symbol when insecure content is loaded
    over HTTPS (currently incorrect icon, should be updated when dialog-
    warning-symbol lands in ubuntu-theme). (LP: #1214034)
 -- Ubuntu daily release <email address hidden> Mon, 22 Sep 2014 21:13:10 +0000

Changed in webbrowser-app (Ubuntu):
status: In Progress → Fix Released
Olivier Tilloy (osomon) on 2014-09-26
Changed in webbrowser-app:
status: In Progress → Fix Released
Changed in webbrowser-app (Ubuntu):
assignee: Olivier Tilloy (osomon) → nobody
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers