This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.

Bug 176266 - IE Security Alert when logging in
Summary: IE Security Alert when logging in
Status: VERIFIED FIXED
Alias: None
Product: www
Classification: Unclassified
Component: Admin (show other bugs)
Version: 6.x
Hardware: PC Windows XP
: P3 normal (vote)
Assignee: leawang
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-11-09 09:06 UTC by matthies
Modified: 2009-12-03 09:47 UTC (History)
0 users

See Also:
Issue Type: DEFECT
Exception Reporter:

Attachments
Screenshot of security alert dialog. (9.06 KB, image/png)
2009-11-09 09:06 UTC, matthies 		Details
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description matthies 2009-11-09 09:06:45 UTC 
Created attachment 90622 [details]
Screenshot of security alert dialog.

When logging in, I'm getting multiple security alerts with IE, complaining about the name of the security certificate. See the attached screenshot.
Comment 1 Petr Blaha 2009-11-11 07:55:55 UTC 
On which URL did you see this alerts? Thanks, Petr
Comment 2 matthies 2009-11-11 09:25:24 UTC 
It seems to happen when transitioning from HTTP to HTTPS. For example when clicking the "Log in" link on http://netbeans.org/community/issues.html, the alert comes multiple times. It is probably caused by stylesheet and script links to netbeans2.org. The certificate only contains these domain names:

DNS Name=netbeans.org
DNS Name=www.netbeans.org
DNS Name=svn.netbeans.org
DNS Name=hg.netbeans.org
DNS Name=website.netbeans.org

It doesn't contain netbeans2.org.

The login page also contains this script:

    <script type="text/javascript">
      var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
      document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
    </script>

The "https://ssl." might not work either with the given certificate.
Comment 3 Petr Blaha 2009-11-12 01:46:12 UTC 
Hi matthies, thanks for comment. The issue with netbeans2.org certificate is tracked in bug 176194 and in bug 176106 as P1s. These two issues are realated to mismatch in configs in one zone. Probably, we can close this issue as duplicate of one mentioned above.
Comment 4 leawang 2009-12-02 22:54:54 UTC 
The netbeans2.org issue (http://kenai.com/jira/browse/KENAI-1591) was corrected in last deployment to production on 11/25.

Please verify.  Thanks.
Comment 5 matthies 2009-12-03 09:47:21 UTC 
Verified.