Ticket #35740

Cert Error on update dialog

Open Date: 2015-11-15 18:44 Last Update: 2015-11-18 21:04

Reporter:
Owner:
Type:
Status:
Open [Owner assigned]
Component:
MileStone:
(None)
Priority:
7
Severity:
5 - Medium
Resolution:
Fixed
File:
None

Details

Tenfourbird 38.3.0 sometimes show the following error message on update dialog.

Update Failed
Something is trying to trick Tenfourbird into accepting an insecure update. Please contact your network provider and seek help.

Update log (pref app.update.log= true) is the following:

UTM:SVC TimerManager:notify - notified @mozilla.org/browser/search-service;1

AUS:SVC Checker:getUpdateURL - update URL: https://tenfourbird.osdn.jp/update/1/check.php?name=TenfourbirdG5&version=38.4.0

AUS:SVC Checker: checkForUpdates, force: false

AUS:SVC Checker:getUpdateURL - update URL: https://tenfourbird.osdn.jp/update/1/check.php?name=TenfourbirdG5&version=38.4.0

AUS:SVC Checker:checkForUpdates - sending request to: https://tenfourbird.osdn.jp/update/1/check.php?name=TenfourbirdG5&version=38.4.0

UTM:SVC TimerManager:notify - notified @mozilla.org/updates/update-service;1

AUS:SVC Checker:onLoad - request completed downloading document

AUS:SVC Checker:getUpdateURL - update URL: https://tenfourbird.osdn.jp/update/1/check.php?name=TenfourbirdG5&version=38.4.0

AUS:SVC Checker:getUpdateURL - update URL: https://tenfourbird.osdn.jp/update/1/check.php?name=TenfourbirdG5&version=38.4.0

AUS:SVC Checker:onLoad - number of updates available: 1

Timestamp: 11/15/15 5:51:10 PM
Error: Expected certificate attribute 'issuerName' value incorrect, expected: 'CN=DigiCert Secure Server CA,O=DigiCert Inc,C=US', got: 'CN=RapidSSL SHA256 CA - G3,O=GeoTrust Inc.,C=US'.
Source File: self-hosted
Line: 206

Timestamp: 11/15/15 5:51:10 PM
Error: Expected certificate attribute 'issuerName' value incorrect, expected: 'CN=Thawte SSL CA,O="Thawte, Inc.",C=US', got: 'CN=RapidSSL SHA256 CA - G3,O=GeoTrust Inc.,C=US'.
Source File: self-hosted
Line: 206

Timestamp: 11/15/15 5:51:10 PM
Error: Certificate checks failed. See previous errors for details.
Source File: resource://gre/modules/CertUtils.jsm
Line: 109

AUS:SVC Checker:onLoad - there was a problem checking for updates. Exception: [Exception... "Certificate checks failed. See previous errors for details."  nsresult: "0x80070057 (NS_ERROR_ILLEGAL_VALUE)"  location: "JS frame :: resource://gre/modules/CertUtils.jsm :: validateCert :: line 110"  data: no]

AUS:SVC Checker:onLoad - request.status: 200

AUS:SVC getStatusTextFromCode - transfer error: Update XML file malformed (200), code: 200

AUS:SVC UpdateService:onError - error during background update. error code: 101, status text: Update XML file malformed (200)

AUS:UI gUpdates:onLoad - setting current page to startpage errorextra

Ticket History (3/3 Histories)

2015-11-15 18:44 Updated by: t_mrc-ct
  • New Ticket "Cert Error on update dialog" created
2015-11-15 18:59 Updated by: t_mrc-ct
Comment

Tenfourbird uses the following servers on update process.

*.osdn.jp's cert issureName is:

CN=RapidSSL SHA256 CA - G3,O=GeoTrust Inc.,C=US

So I must add the following preference.

app.update.certs.3.issuerName CN=RapidSSL SHA256 CA - G3,O=GeoTrust Inc.,C=US

This bug may fix on next release. (v38.4.0)

2015-11-18 21:04 Updated by: t_mrc-ct
  • Resolution Update from None to Fixed
Comment

The following prefs are added:

app.update.certs.3.commonName *.osdn.jp
app.update.certs.3.issuerName CN=RapidSSL SHA256 CA - G3,O=GeoTrust Inc.,C=US

and getting the following logs:

AUS:SVC Creating UpdateService

AUS:SVC gCanCheckForUpdates - able to check for updates

UTM:SVC TimerManager:notify - notified @mozilla.org/browser/search-service;1

AUS:SVC Checker:getUpdateURL - update URL: https://tenfourbird.osdn.jp/update/1/check.php?name=TenfourbirdG5&version=38.4.0

AUS:SVC Checker: checkForUpdates, force: false

AUS:SVC Checker:getUpdateURL - update URL: https://tenfourbird.osdn.jp/update/1/check.php?name=TenfourbirdG5&version=38.4.0

AUS:SVC Checker:checkForUpdates - sending request to: https://tenfourbird.osdn.jp/update/1/check.php?name=TenfourbirdG5&version=38.4.0

UTM:SVC TimerManager:notify - notified @mozilla.org/updates/update-service;1

AUS:SVC Checker:onLoad - request completed downloading document

AUS:SVC Checker:getUpdateURL - update URL: https://tenfourbird.osdn.jp/update/1/check.php?name=TenfourbirdG5&version=38.4.0

AUS:SVC Checker:getUpdateURL - update URL: https://tenfourbird.osdn.jp/update/1/check.php?name=TenfourbirdG5&version=38.4.0

AUS:SVC Checker:onLoad - number of updates available: 1

AUS:SVC UpdateManager:_loadXMLFileIntoArray: XML file does not exist

AUS:SVC UpdateService:selectUpdate - skipping update because the update's application version is less than the current application version

OK!

Attachment File List

No attachments

Edit

You are not logged in. I you are not logged in, your comment will be treated as an anonymous post. » Login