This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.

Bug 176266

Summary: IE Security Alert when logging in
Product: www Reporter: matthies <matthies>
Component: AdminAssignee: leawang
Status: VERIFIED FIXED    
Severity: normal    
Priority: P3    
Version: 6.x   
Hardware: PC   
OS: Windows XP   
Issue Type: DEFECT Exception Reporter:
Attachments: Screenshot of security alert dialog.

Description matthies 2009-11-09 09:06:45 UTC
Created attachment 90622 [details]
Screenshot of security alert dialog.

When logging in, I'm getting multiple security alerts with IE, complaining about the name of the security certificate. See the attached screenshot.
Comment 1 Petr Blaha 2009-11-11 07:55:55 UTC
On which URL did you see this alerts? Thanks, Petr
Comment 2 matthies 2009-11-11 09:25:24 UTC
It seems to happen when transitioning from HTTP to HTTPS. For example when clicking the "Log in" link on http://netbeans.org/community/issues.html, the alert comes multiple times. It is probably caused by stylesheet and script links to netbeans2.org. The certificate only contains these domain names:

DNS Name=netbeans.org
DNS Name=www.netbeans.org
DNS Name=svn.netbeans.org
DNS Name=hg.netbeans.org
DNS Name=website.netbeans.org

It doesn't contain netbeans2.org.

The login page also contains this script:

    <script type="text/javascript">
      var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
      document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
    </script>

The "https://ssl." might not work either with the given certificate.
Comment 3 Petr Blaha 2009-11-12 01:46:12 UTC
Hi matthies, thanks for comment. The issue with netbeans2.org certificate is tracked in bug 176194 and in bug 176106 as P1s. These two issues are realated to mismatch in configs in one zone. Probably, we can close this issue as duplicate of one mentioned above.
Comment 4 leawang 2009-12-02 22:54:54 UTC
The netbeans2.org issue (http://kenai.com/jira/browse/KENAI-1591) was corrected in last deployment to production on 11/25.

Please verify.  Thanks.
Comment 5 matthies 2009-12-03 09:47:21 UTC
Verified.