[Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
** Changed in: firefox Status: Confirmed => Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/332176 Title: firefox doesn't warn the user if SSL certificates do not include OCSP extension To manage notifications about this bug go to: https://bugs.launchpad.net/firefox/+bug/332176/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
** Changed in: firefox Importance: Unknown => Wishlist -- firefox doesn't warn the user if SSL certificates do not include OCSP extension https://bugs.launchpad.net/bugs/332176 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
** Project changed: bugzilla => firefox -- firefox doesn't warn the user if SSL certificates do not include OCSP extension https://bugs.launchpad.net/bugs/332176 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
** Changed in: bugzilla Status: New => Confirmed -- firefox doesn't warn the user if SSL certificates do not include OCSP extension https://bugs.launchpad.net/bugs/332176 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
confirmed the upstream bug now. (not that it matters). -- firefox doesn't warn the user if SSL certificates do not include OCSP extension https://bugs.launchpad.net/bugs/332176 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
bug is handled upstream. ** Changed in: firefox-3.0 (Ubuntu) Importance: Undecided => Medium ** Changed in: firefox-3.0 (Ubuntu) Status: Incomplete => Triaged ** Changed in: firefox-3.0 (Ubuntu) Assignee: Alexander Sack (asac) => (unassigned) -- firefox doesn't warn the user if SSL certificates do not include OCSP extension https://bugs.launchpad.net/bugs/332176 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
I have eposted the issue to mozilla bugzilla and I have added it to bug watch -- firefox doesn't warn the user if SSL certificates do not include OCSP extension https://bugs.launchpad.net/bugs/332176 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
** Changed in: bugzilla Status: Unknown => New -- firefox doesn't warn the user if SSL certificates do not include OCSP extension https://bugs.launchpad.net/bugs/332176 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
** Bug watch added: Mozilla Bugzilla #496661 https://bugzilla.mozilla.org/show_bug.cgi?id=496661 ** Also affects: bugzilla via https://bugzilla.mozilla.org/show_bug.cgi?id=496661 Importance: Unknown Status: Unknown -- firefox doesn't warn the user if SSL certificates do not include OCSP extension https://bugs.launchpad.net/bugs/332176 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
Excuse me but I'm very busy at this moment. I think I will do it not before two weeks. -- firefox doesn't warn the user if SSL certificates do not include OCSP extension https://bugs.launchpad.net/bugs/332176 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
On Tue, Apr 21, 2009 at 03:54:21PM -, marco.pallotta wrote: > Not yet Alexander. I will do it as soon as possible. > You still on this? ;). Thanks a lot for your help. - Alexander -- firefox doesn't warn the user if SSL certificates do not include OCSP extension https://bugs.launchpad.net/bugs/332176 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
Not yet Alexander. I will do it as soon as possible. -- firefox doesn't warn the user if SSL certificates do not include OCSP extension https://bugs.launchpad.net/bugs/332176 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
marco, did you search/file this in the upstream bug tracker yet? Which ID is it? -- firefox doesn't warn the user if SSL certificates do not include OCSP extension https://bugs.launchpad.net/bugs/332176 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
I was wrong. For ingdirect it's better to go to https://www.ingdirect.com press "view my account" and check the cert details double clicking on the right bottom padlock and then press "view certificate". In the "details" tab go to "secure.ingdirect.com" entry in the certificate hierarchy and the go and see the "authority information access" field under "Extensions". You will see OCSP value. -- firefox doesn't warn the user if SSL certificates do not include OCSP extension https://bugs.launchpad.net/bugs/332176 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
When i open [https://www.ingdirect.it/] after closing the pop-up error i get the cert screen if you use add an exception What did you do to open cert details? I do not see this option. for any of the above links -- firefox doesn't warn the user if SSL certificates do not include OCSP extension https://bugs.launchpad.net/bugs/332176 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
To confirm the bug is simple: 1) go to https://www.ingdirect.it and open the certificate details. Into the extensions you can see the CA access info field with the value OCSP: URI: http://ocsp.verisign.com This site correctly support OCSP (moreover you can also see CRL support even if it is an obsolete approach for certificate revocation) 2) go to https://www.poste.it open the certificate details. In the extensions you cannot see any CA access info field nor any CRL support field If you don't see any warning message from Firefox about this last issue (I say again that it's a security issue) you can mark this bug "confirmed" -- firefox doesn't warn the user if SSL certificates do not include OCSP extension https://bugs.launchpad.net/bugs/332176 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
John, to say the truth the status incomplete was set before asking for request to upstream by Alexander so I didn't know about this. I say again that marking the bug "incomplete" it's not a good idea because, for my opinion, it makes bug searching misleading (we know that incomplete bug should be marked invalid in about 6 weeks if there is no reply by the reporter to a certain question requested by the triager, but in this way there aren't the requirements for this). I think it's wrong to interpret subjectively the bug statuses as we create not homogeneous situations. Anyway, apart this, I will do what Alexander suggested. -- firefox doesn't warn the user if SSL certificates do not include OCSP extension https://bugs.launchpad.net/bugs/332176 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
Marco: For a few reasons 1. needs to be reported/looked for upstream 2. You are only person to comment on the bug so we cant mark confirmed, reverting bugs back to "new" is not a good idea it makes searching for bug harder Alexander there are alot of these bugs upstream but may slightly differ. I am tied up this week at least most of the day all week. -- firefox doesn't warn the user if SSL certificates do not include OCSP extension https://bugs.launchpad.net/bugs/332176 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
We should get upstream input on this. There are various OSCP related bugs reported upstream already. Can you check that this isn't a dupe by looking through the results you get by searching OSCP in bugzilla.mozilla.org? If its not a dupe, please file a new bug against the Core:Security UI component and drop your bug id here, so we can help you and driver discussion. Thanks a lot. -- firefox doesn't warn the user if SSL certificates do not include OCSP extension https://bugs.launchpad.net/bugs/332176 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
John, why did you set the bug status to Incomplete? I dont' find any reason to do this as no questions have been asked to me (that is to the bug reporter). See https://wiki.ubuntu.com/Bugs/Status -- firefox doesn't warn the user if SSL certificates do not include OCSP extension https://bugs.launchpad.net/bugs/332176 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
** Package changed: firefox (Ubuntu) => firefox-3.0 (Ubuntu) ** Changed in: firefox-3.0 (Ubuntu) Status: New => Incomplete -- firefox doesn't warn the user if SSL certificates do not include OCSP extension https://bugs.launchpad.net/bugs/332176 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
** This bug is no longer flagged as a security vulnerability -- firefox doesn't warn the user if SSL certificates do not include OCSP extension https://bugs.launchpad.net/bugs/332176 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 332176] Re: firefox doesn't warn the user if SSL certificates do not include OCSP extension
** Visibility changed to: Public ** Changed in: firefox (Ubuntu) Status: Incomplete => New -- firefox doesn't warn the user if SSL certificates do not include OCSP extension https://bugs.launchpad.net/bugs/332176 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
