bug#31946: 27.0.50; The NSM should warn about more TLS problems

[Lars Ingebrigtsen]

Let's see.  Here's the issuer/subjects from the three certificates in
the chain on that site when I use _dn3:

(("CN=Symantec Class 3 Secure Server CA - G4,OU=Symantec Trust 
Network,O=Symantec Corporation,C=US" . "CN=*.usps.com,OU=Telecommunications 
Services,O=United States Postal Service,L=Raleigh,ST=North Carolina,C=US")
 ("CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=(c) 2006 
VeriSign\\, Inc. - For authorized use only,OU=VeriSign Trust 
Network,O=VeriSign\\, Inc.,C=US" . "CN=Symantec Class 3 Secure Server CA - 
G4,OU=Symantec Trust Network,O=Symantec Corporation,C=US")
 ("OU=Class 3 Public Primary Certification Authority,O=VeriSign\\, Inc.,C=US" . 
"CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=(c) 2006 
VeriSign\\, Inc. - For authorized use only,OU=VeriSign Trust 
Network,O=VeriSign\\, Inc.,C=US"))

And here's when I use _dn:

(("C=US,O=Symantec Corporation,OU=Symantec Trust Network,CN=Symantec Class 3 
Secure Server CA - G4" . "C=US,ST=North Carolina,L=Raleigh,O=United States 
Postal Service,OU=Telecommunications Services,CN=*.usps.com")
 ("C=US,O=VeriSign\\, Inc.,OU=VeriSign Trust Network,OU=(c) 2006 VeriSign\\, 
Inc. - For authorized use only,CN=VeriSign Class 3 Public Primary Certification 
Authority - G5" . "C=US,O=Symantec Corporation,OU=Symantec Trust 
Network,CN=Symantec Class 3 Secure Server CA - G4")
 ("C=US,O=VeriSign\\, Inc.,OU=Class 3 Public Primary Certification Authority" . 
"C=US,O=VeriSign\\, Inc.,OU=VeriSign Trust Network,OU=(c) 2006 VeriSign\\, Inc. 
- For authorized use only,CN=VeriSign Class 3 Public Primary Certification 
Authority - G5"))

OK, and this is Firefox:

    CN = VeriSign Class 3 Public Primary Certification Authority - G5
    OU = "(c) 2006 VeriSign, Inc. - For authorized use only"
    OU = VeriSign Trust Network
    O = "VeriSign, Inc."
    C = US

Hm.  Actually, aren't these all the same?  Just in different order?  The
_dn3 data seems to be the same as the _dn data, only rejuggled...

Or am I totally misreading?  That's quite likely.  :-)

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no