Ubuntu
epiphany-browser package

No sane error message when downloading from invalid certificate SSL connection

Bug #118974 reported by Jelmer Vernooij
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Epiphany Browser
Won't Fix
Medium
epiphany-browser (Ubuntu)
Triaged
Low
Ubuntu Desktop Bugs

Bug Description

  affects /ubuntu/epiphany

Epiphany lists a download as "failed" in the downloads window without
any further indication why the download fails in the following
situation:

Downloading a file over a HTTPS connection, where the server does not
have a certificate that is signed by a CA trusted by the user.

Example : https://bioinformatics.chem.uu.nl/

Jelmer Vernooij <email address hidden> - http://samba.org/~jelmer/

See original description
Revision history for this message
Jérôme Guelfucci (jerome-guelfucci-deactivatedaccount) wrote :

Thank you for your bug report. Could you give an example of such a website so I can confirm this bug ?

Changed in epiphany:
importance: Undecided → Low
status: Unconfirmed → Needs Info
Revision history for this message
Jérôme Guelfucci (jerome-guelfucci-deactivatedaccount) wrote :

I can confirm that.

Changed in epiphany-browser:
status: Needs Info → Confirmed
description: updated
Jérôme Guelfucci (jerome-guelfucci-deactivatedaccount)
Changed in epiphany-browser:
assignee: nobody → desktop-bugs
Bug Watch Updater (bug-watch-updater)
Changed in epiphany-browser:
status: Unknown → Unconfirmed
Bug Watch Updater (bug-watch-updater)
Changed in epiphany-browser:
status: Unconfirmed → Confirmed
Sebastien Bacher (seb128)
Changed in epiphany-browser:
status: Confirmed → Triaged
Revision history for this message
Miek Gieben (miek) wrote :

The bug is bigger than this. Going to any page with a self signed certificate fails. This is on Hardy with an AMD64 processer.

When doing the same in firefox (3), it asks if you want to create an exception for the self-signed certificate for this site. Epiphany otoh does no such
thing and just refuses to load the page.

Seems like a sane security measure, but it would be handy if epiphany would allow you to also add such certs to a list of trusted one. OR at least
would give a sane warning.

Bug Watch Updater (bug-watch-updater)
Changed in epiphany-browser:
importance: Unknown → Medium
Bug Watch Updater (bug-watch-updater)
Changed in epiphany-browser:
status: Confirmed → Won't Fix
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.