tags 400947 confirmed
thanks

Version: 2.0.0.1+dfsg-1

* Siddhesh Poyarekar ([EMAIL PROTECTED]) wrote:
> Package: iceweasel
> Version: 2.0+dfsg-1
> Severity: normal
> 
> Iceweasel fails to load https://www.ultimatix.net saying:
> 
> "Could not establish encrypted connection because certificate presented by
> www.ultimatix.net is either invalid or corrupted. Error Code: -8102".
> 
> The above site opens fine in Konqueror as well as in Internet Explorer.
> 
> Here's a snippet of the certificate to confirm that the certificate
> supports web server
> authentication:
> 
> X509v3 Key Usage:
>    Digital Signature, Non Repudiation
> X509v3 Extended Key Usage:
>    E-mail Protection, TLS Web Server Authentication, Microsoft Server
> Gated Crypto,
>    Netscape Server Gated Crypto
> Netscape Cert Type:
>    SSL Client, SSL Server
> 
> 
> The only difference between this certificate and another valid
> certificate is that the
> "Extended Key Usage" section comes before the "Key Usage" section in
> the valid certificate.
> Does konqueror validate this certificate erroneously or should firefox
> be accepting this
> certificate as well?

Pretty strange. Would you mind filing a bug at bugzilla.mozilla.org
and linking it to this one? 

-- 
Eric Dorland <[EMAIL PROTECTED]>
ICQ: #61138586, Jabber: [EMAIL PROTECTED]
1024D/16D970C6 097C 4861 9934 27A0 8E1C  2B0A 61E9 8ECF 16D9 70C6

Attachment: signature.asc
Description: Digital signature

Reply via email to