[tor-bugs] #30107 [Applications/Tor Browser]: Self-sign .onion certificate (not CA) does not have padlock icon

Wed Apr 10 03:06:24 UTC 2019

#30107: Self-sign .onion certificate (not CA) does not have padlock icon
-------------------------+------------------------------------------
 Reporter:  cypherpunks  |          Owner:  tbb-team
     Type:  task         |         Status:  new
 Priority:  Medium       |      Component:  Applications/Tor Browser
  Version:               |       Severity:  Normal
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
 Reviewer:               |        Sponsor:
-------------------------+------------------------------------------
 1. Create self-sign certificate.
 Signed for '*.v3onionnamehere.onion' by '*.v3onionnamehere.onion'

 2. Configure server to use the certificate, with "https http2".

 3. Connect to https://hello.v3onionnamehere.onion

 4. "The certificate is not trusted because it is self-signed." > Add
 exception and continue.

 Expected result:
 URL bar shows Onion icon with small padlock icon.

 Actual result:
 URL bar shows only green Onion icon. Small padlock icon not displayed, but
 the connection itself is using https tls1.2.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30107>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online