This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.

Bug 221509 - Certificate validation window does not provide certificate hashes required to verify the certificate
Summary: Certificate validation window does not provide certificate hashes required to...
Status: RESOLVED FIXED
Alias: None
Product: xml
Classification: Unclassified
Component: Retriever (show other bugs)
Version: 7.2.1
Hardware: PC Mac OS X
: P3 normal (vote)
Assignee: Svata Dedic
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-11-05 17:53 UTC by djvanenckevort
Modified: 2012-11-17 02:44 UTC (History)
0 users

See Also:
Issue Type: DEFECT
Exception Reporter:

Attachments
Netbeans certificate validation dialog (55.82 KB, image/png)
2012-11-05 17:53 UTC, djvanenckevort 		Details
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description djvanenckevort 2012-11-05 17:53:49 UTC 
Created attachment 127176 [details]
Netbeans certificate validation dialog

When Netbeans tries to access a https secured site for which the certificate is self signed or the CA certificate is not present in the Java keychain it will present a dialog to ask you to verify and accept the certificate. However this dialog does not show the key hashes that you would need to verify the certificate.

Steps to reproduce:
1. Create a XML file with the following for example following content:
<?xml version="1.0" encoding="UTF-8"?>
<phpunit xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:noNamespaceSchemaLocation="https://raw.github.com/sebastianbergmann/phpunit/master/phpunit.xsd">
</phpunit>

2. Try to add a new child element, e.g. <php>. Netbeans will try to download the schema and pop up a Certificate validation dialog like the one in the attachment.

Suggested solution:
Add the hashes from the certificates to the dialog.
Comment 1 Marian Mirilovic 2012-11-07 08:09:23 UTC 
Feel free to reassign, I have no clue where this belongs to ...
Comment 2 Tomas Mysik 2012-11-07 08:51:06 UTC 
Could anyone please have a look whether the dialog is present in XML modules? Feel free to reassign, thanks.
Comment 3 Svata Dedic 2012-11-15 12:36:46 UTC 
Will add subject public key's fingerprint.
Comment 4 Svata Dedic 2012-11-15 12:40:09 UTC 
oops, rather the certificate fingerprint, this is more common I think.
Comment 5 Svata Dedic 2012-11-15 13:13:13 UTC 
Changeset: bd5a451a93b6
Author:    Svata Dedic <sdedic@netbeans.org>
Date:      2012-11-15 14:13
Message:   Added certificate SHA-1 fingerprint.
Comment 6 Quality Engineering 2012-11-17 02:44:39 UTC 
Integrated into 'main-golden', will be available in build *201211170002* on http://bits.netbeans.org/dev/nightly/ (upload may still be in progress)
Changeset: http://hg.netbeans.org/main-golden/rev/bd5a451a93b6
User: Svata Dedic <sdedic@netbeans.org>
Log: Issue #221509 - Certificate validation window does not provide certificate hashes required to verify the certificate: fixed
Added certificate SHA-1 fingerprint.