[tor-bugs] #15030 [Applications/Tor Browser]: Tor Browser 4.5a4 does not cope with certain self signed certificate setups.

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Oct 27 13:10:29 UTC 2016


#15030: Tor Browser 4.5a4 does not cope with certain self signed certificate
setups.
--------------------------------------+--------------------------
 Reporter:  yawning                   |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  tbb-usability-website     |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------
Changes (by bugzilla):

 * severity:   => Normal


Comment:

 Replying to [ticket:15030 yawning]:
 > On certain affected sites, "Add Exception" does nothing useful, except
 display the same error page, and disable the "Add Exception" button.
 Looks like incompatibility of `about:certerror` with NoScript. Not
 reproducible on ESR45.
 > Per GeKo on IRC: "seems Tor Browser can't cope with two self-signed
 certs in a row. this is a bug"
 OK, with 10 in a row.
 > Test URL: https://hkps.pool.sks-
 keyservers.net/pks/lookup?op=vindex&search=8A6EC81A
 Note that it gives a new cert even after Ctrl+F5!

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15030#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list