Dialog to trust CA chain does not pop up while configuring CA on Firefox.
Version-Release number of selected component (if applicable): RHEL 5.10 i386 pki-ca-8.1.6-1.el5pki firefox-24.2.0-1.el5_10 nss-3.15.3-3.el5_10 nspr-4.10.2-2.el5_10
How reproducible:
Steps to Reproduce: 1. Install pki-ca packages, pkicreate a CA instance and configure on firefox.
Actual results: In Import CA's certificate chain panel dialog to trust CA chain does not pop up.
Expected results: Dialog to trust CA chain should pop up.
Tested with old firefox build firefox-10.0.11-1.el5_8 and the latest nss-3.15.3-3.el5_10 dialog to trust CA chain shows up and configuration is successful.
When machine is upgraded to firefox-24.2.0-1.el5_10, trust CA chain dialog does not show up; javascript console shows this error:
Blocked loading mixed active content "http://<url>:9180/ca/ee/ca/getCAChain?op=download&mimeType=application/x-x509-ca-cert" @ https://<url>:9445/ca/admin/console/config/wizard:210
Looks like the latest firefox build is preventing HTTPS page including HTTP content.
Note that it is possible to work around this when it happens. A shield icon will be at the left of the url field. Clicking on this will allow the content to run in this instance.
Also this could be fixed in the wizard by accessing the https port. Although this may cause the security exception wizard to launch in case that we have not already trusted this ca cert.
This is being resolved as 'wontfix' since this is controlled via Firefox and it is believed that they may well discontinue the workaround in the future. (per CS Meeting of 09/17/2014)
Metadata Update from @nkinder: - Issue set to the milestone: 10.2.2
Metadata Update from @mharmsen: - Custom field feature adjusted to '' - Custom field proposedmilestone adjusted to '' - Custom field proposedpriority adjusted to '' - Custom field reviewer adjusted to '' - Custom field version adjusted to '' - Issue close_status updated to: wontfix (was: Invalid)
Dogtag PKI is moving from Pagure issues to GitHub issues. This means that existing or new issues will be reported and tracked through Dogtag PKI's GitHub Issue tracker.
This issue has been cloned to GitHub and is available here: https://github.com/dogtagpki/pki/issues/1397
If you want to receive further updates on the issue, please navigate to the GitHub issue and click on Subscribe button.
Subscribe
Thank you for understanding, and we apologize for any inconvenience.
Login to comment on this ticket.