Bug 411121 - doesn't "remember" that I no longer trust a CA
doesn't "remember" that I no longer trust a CA
Product: Fedora
Classification: Fedora
Component: firefox (Show other bugs)
All Linux
low Severity low
: ---
: ---
Assigned To: Kai Engert (:kaie)
Fedora Extras Quality Assurance
Depends On:
  Show dependency treegraph
Reported: 2007-12-04 16:51 EST by Nalin Dahyabhai
Modified: 2007-12-05 08:34 EST (History)
1 user (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2007-12-05 08:34:00 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

External Trackers
Tracker ID Priority Status Summary Last Updated
Mozilla Foundation 402710 None None None Never

  None (edit)
Description Nalin Dahyabhai 2007-12-04 16:51:27 EST
Description of problem:
If I visit a site whose SSL certificate is signed by a CA, and then remove that
CA from my list of trusted CAs, I can reload the page without being prompted
about what is now an untrustworthy certificate.  I have to restart the browser
for the CA's removal to take effect.  This isn't what I'd expect.

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
1. Import our IS department's CA certificate, marking it trusted for use in
verifying web sites.
2. Visit internal site https://calendar.redhat.com/
3. From Edit/Preference's Advanced/Encryption tab, open the View Certificates
dialog, and from the Authorities tab, delete the certificate.
4. Attempt to reload the page.
Actual results:
No warnings.

Expected results:
The usual "certificate not signed by trusted authority" dialog.
Comment 2 Christopher Aillon 2007-12-05 07:09:54 EST
This is kai's domain...
Comment 3 Kai Engert (:kaie) 2007-12-05 08:34:00 EST
Yes, this is an upstream behavior, not something we introduce in the Red Hat or
Fedora packages.

I would dupe this to https://bugzilla.mozilla.org/show_bug.cgi?id=402710

Note You need to log in before you can comment on or make changes to this bug.