> So this could be re-written:  Is there something we can do for browsers
> to show something more enlightening than
> "ssl_error_handshake_failure_alert" when seeing this common error?
>

Yes.  The bad news is that the "something we can do" is very browser
specific.

In the case of Mozilla Firefox, you can write a Firefox extension that
converts SSL Alert error codes into some more meaningful error
description.  Firefox extensions can implement the notifySSLError()
method in the nsISSLErrorListener interface, examine the SSL error
code, stop the current request, and display useful infromation to the
user through an XUL overlay.

Doing this in an extension is a little intrusive because you have to
intercept every HTTP request (using the "http-on-modify-request"
event) and attach your nsISSLErrorListener to the request.  This might
have some performance implications, but they may be slight.

This solution is Firefox-specific.  I am not familiar with other Web
browsers and I can't really say how you can achieve what you want on
them.

Best Regards,
Peter Djalaliev
-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to